last executing test programs: 7m25.040357183s ago: executing program 3 (id=142): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) mkdir(0x0, 0x0) chroot(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m23.518607138s ago: executing program 3 (id=146): socket(0x840000000002, 0x3, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd26, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 7m22.976366955s ago: executing program 3 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) shutdown(r3, 0x1) 7m19.894868188s ago: executing program 3 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 7m18.86427748s ago: executing program 3 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 7m17.232666952s ago: executing program 3 (id=161): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x177) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = eventfd(0x0) read$eventfd(r1, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d", 0x3}, {0x0}], 0x2) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x324) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m16.895138435s ago: executing program 32 (id=161): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x177) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = eventfd(0x0) read$eventfd(r1, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d", 0x3}, {0x0}], 0x2) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x101) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x324) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m53.468740295s ago: executing program 4 (id=373): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000206010300000000000000000000000037077a325ce1a00900020073797a3000000000050005"], 0x44}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624", 0x36}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada1", 0x2d}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m52.562402024s ago: executing program 4 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x21c000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737925ba0000000008000a40fffffffc0c"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@mcast1}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x93}]}, 0x34}}, 0x804) 5m45.052712414s ago: executing program 4 (id=395): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000206010300000000000000000000000037077a325ce1a00900020073797a3000000000050005"], 0x44}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af", 0x1b}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada1", 0x2d}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m44.366722645s ago: executing program 4 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000280) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff07) 5m43.082312968s ago: executing program 4 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5m41.605622601s ago: executing program 4 (id=403): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r0) 5m26.427142292s ago: executing program 33 (id=403): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r0) 4m2.083663102s ago: executing program 2 (id=628): socket(0x22, 0x1, 0x800000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000004) mprotect(&(0x7f0000185000/0x4000)=nil, 0x4000, 0x3000006) socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r0) r3 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x6, 0x1, 0x400, 0x7, "9ad7f18bee5970ebb85649ef55e24c", "1012e304", "6ef1fee9", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) 4m1.158282832s ago: executing program 2 (id=631): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x242700, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x0, @sint={0xafa, 0x8}}]}) r3 = gettid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kcmp(r4, r3, 0x0, r1, r5) write(0xffffffffffffffff, &(0x7f0000000300)="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", 0x246) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8921, &(0x7f0000000180)={'vlan0\x00', @ifru_map={0xc43f, 0x401, 0x7, 0x0, 0x37, 0x1}}) ioctl$sock_netdev_private(r6, 0x8954, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 4m0.786791124s ago: executing program 2 (id=633): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0xffff}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) write(r0, &(0x7f00000000c0)="4b00030000", 0x5) syz_emit_ethernet(0x200000, 0x0, 0x0) 3m58.220445228s ago: executing program 2 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) 3m57.223748899s ago: executing program 2 (id=642): socket$alg(0x26, 0x5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents(r2, &(0x7f0000000000)=""/116, 0x74) 3m55.717347764s ago: executing program 2 (id=649): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r2, r3, 0x0, 0x201f00) 3m40.420332408s ago: executing program 34 (id=649): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r2, r3, 0x0, 0x201f00) 2m57.034277414s ago: executing program 7 (id=779): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xff) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) 2m56.008567605s ago: executing program 7 (id=782): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) 2m54.401774228s ago: executing program 7 (id=784): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}, 0x3}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="a0f29e43126e0fb16c8d8fa387135b55137a9b7114bfb0b7a4f002ab0be97f4b49eed985eaac5fcf46389cc2a04a9bf2a376b3c6891c88260b", 0x39}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'ip6gre0\x00', @random="0200ac7f7f00"}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000140)='g') r3 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m48.527439922s ago: executing program 7 (id=792): r0 = fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) statx(0xffffffffffffffff, 0x0, 0x400, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 2m45.813991305s ago: executing program 7 (id=800): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000000040)) map_shadow_stack(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m45.124549813s ago: executing program 7 (id=803): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 2m44.505926057s ago: executing program 35 (id=803): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 20.355613425s ago: executing program 0 (id=1107): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc0012fb, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x3, 0x5}, {0xfff2}}}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 18.85241668s ago: executing program 5 (id=1111): syz_emit_ethernet(0xae, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 18.69447547s ago: executing program 0 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x284e83, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r7 = dup3(r6, r4, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) 17.664896466s ago: executing program 5 (id=1114): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}]}]}, 0x38}}, 0x0) 16.771052781s ago: executing program 5 (id=1117): syz_emit_vhci(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) prlimit64(0x0, 0x5, &(0x7f0000000080)={0x0, 0xd}, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe961009"], 0x0) 15.629025042s ago: executing program 8 (id=1118): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x0, 0x3}, 0x6) 14.567952126s ago: executing program 8 (id=1120): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x18, 0x1, 0x2) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, 0x0) 13.412536438s ago: executing program 8 (id=1122): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) io_uring_setup(0x72a8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x25d7, 0x0, 0x0, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000600)={0xe, {0x1, 0x6, 0x4f}}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) 13.086187562s ago: executing program 0 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000280)={0x1, "87022476e56bd7b2da6de8b0984de637807daf493da1e03bc0d34e5297cb004e"}) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x1400) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus\x00') 12.563643208s ago: executing program 5 (id=1126): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) ioperm(0x0, 0x2, 0x7e) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') 11.646157544s ago: executing program 0 (id=1127): socket$inet6_sctp(0xa, 0x4, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex_waitv(0x0, 0x0, 0x7f00, 0x0, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) listen(r3, 0x0) close(r3) 10.569089905s ago: executing program 8 (id=1130): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syslog(0x4, &(0x7f00000001c0)=""/211, 0xd3) syslog(0x3, &(0x7f0000002d00)=""/147, 0x93) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000000)=0x42c8, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4) syslog(0xa, &(0x7f0000000100)=""/116, 0x74) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000000040)) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x46, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000001500)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) 9.794215241s ago: executing program 5 (id=1131): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.625250798s ago: executing program 1 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6051192ac29000000010902240003000000000904030000ff4f9b000904b0"], 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000040) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 7.180240325s ago: executing program 6 (id=1135): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040), 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x725da000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getrule={0x14, 0x22, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8010) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x30000001}, 0x24040844) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) acct(&(0x7f00000000c0)='./bus\x00') 7.060992709s ago: executing program 5 (id=1136): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2b02, 0x0) pwritev(r3, 0x0, 0x0, 0x2000, 0x10000) syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x10802) 6.743337534s ago: executing program 8 (id=1137): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x1) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 6.512735144s ago: executing program 6 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.489551612s ago: executing program 8 (id=1139): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000900)) getresgid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 5.469110702s ago: executing program 1 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000600)=""/191, 0xbf) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x4e20, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x5b, 0x100) 5.152588134s ago: executing program 6 (id=1141): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2cc, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2b8, 0x1, [@m_ife={0xe8, 0xb, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x3, 0x9, 0x5}, 0x1}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x91, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad3660799f8b78cf33d02da7d6acb22261a61dc99ee70038b350979cbf8e56f4d7cee654dcd1431a97a46709cf0dbc14a82bf5671ba09e008e09a7901ffe209071ef86a70688c0f6abfa8f702f0b00d21384a7ea430e4f04c8939aecfdf8df7de53b09b77f410a11e18106318fb58cb28e6978e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xc8, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x99, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1573ff3fe388a502702c7e7d4eb99cd479f52be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x80, 0x9, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x25, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b380000006034293d9d0e7476f9878bc66aa46f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x84, 0xd, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="9d9b796751d7"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x4, 0xfffffffffffffffd, 0x4, 0x8001}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4054020}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fcntl$getownex(r1, 0x10, 0x0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000600000", @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) mount(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000880)=""/191, 0xbf}, 0x2ad6}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4.443425049s ago: executing program 0 (id=1142): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x7, 0x400}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r5, 0x0, 0x0, 0x40000140, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, 0x0) 4.387808049s ago: executing program 6 (id=1143): socket$vsock_stream(0x28, 0x1, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.217706823s ago: executing program 1 (id=1144): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000206, 'syz1\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x80, 0x2, 0xfe, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, @empty, [0x49fc5045ed3ae8ef, 0xff000000, 0x6675841787364651, 0xff], [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0x8000007f, 0xff], 0x202, 0x8}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r6, 0x0, &(0x7f0000000100)) 2.537132904s ago: executing program 0 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x5, 0x1, 0xe, 0x5}, 0x5, 0x3}, [{0x8000, 0x8, 0x3, 0x101, 0x9}, {0x9, 0x0, 0xa, 0xfffffff8, 0xffffffc0, 0x7}, {0x1, 0xe0, 0x4, 0x227, 0x100007, 0x7}, {0x8, 0x7e72b319, 0x2, 0x3, 0xf, 0xb}, {0x1, 0x1, 0x80, 0x8, 0x3ff, 0x6}, {0x5, 0xa, 0x800000d, 0x8, 0x2, 0x4e36}, {0x80, 0xc889, 0x5, 0x7fff, 0x8, 0xb485}, {0xc, 0x74d, 0xc6, 0x3, 0x0, 0x7ff}, {0x82a, 0x10001, 0x0, 0x7, 0x4, 0x6c3}, {0x6, 0x8, 0x8, 0x2, 0x6, 0x80000001}, {0x1, 0xd, 0x5, 0x8, 0x2, 0x6}, {0x0, 0xffffffff, 0x3, 0xa767, 0x5, 0x6709}, {0xfffffff8, 0x0, 0x5, 0x0, 0x4, 0x7f}, {0xfffeffff, 0xc, 0xfffffff1, 0x0, 0x7ff, 0x5}, {0xf8, 0x4, 0x7, 0xffffffff, 0x6, 0x9019}, {0x8000, 0x2, 0xfffffffc, 0x53da, 0xf000000, 0x3}, {0xff, 0xffffffff, 0x7, 0x1, 0x4, 0x9}, {0x5, 0x3, 0x4, 0x7, 0x4, 0x5}, {0x3, 0xe, 0xfffffff9, 0xc46, 0xe9a0, 0x101}, {0x7fff, 0x9, 0xb, 0x1, 0x3, 0x2}, {0x6, 0x6, 0x5, 0xe, 0x7, 0xffff}, {0x694, 0x700, 0x7e2daa4a, 0x9, 0xfffffff7, 0x1396000}, {0x1000, 0x8, 0x17, 0x7, 0xfffffffe, 0x79a5}, {0x3, 0x8, 0x2, 0x5, 0x0, 0x3}, {0x3, 0x4, 0x3de2, 0xfffffff7, 0xfffffffe, 0x9}, {0xd, 0xafa, 0x6, 0xe, 0x6, 0x89a}, {0xffffffff, 0x0, 0x10001, 0x2, 0x1, 0x3}, {0x400, 0x2, 0x10000, 0x7fff, 0x8}, {0x30b6, 0x6, 0x1, 0x9, 0x6, 0x6}, {0xedd, 0xda, 0x4100, 0x3, 0x7fffffff, 0x3}, {0x0, 0x1, 0x3, 0x1, 0x0, 0xbc93}, {0x9, 0x8, 0x0, 0x0, 0x40, 0x7ff}, {0x4, 0x5, 0x1, 0x6, 0x10001, 0xfffff800}, {0x1ff, 0x5, 0x6, 0x9, 0x0, 0x81}, {0x8, 0x5, 0xcad, 0x0, 0x2, 0x8}, {0x9, 0x401, 0x2, 0x44, 0xa, 0x8}, {0x1, 0x87a, 0x7, 0x800, 0x0, 0x8}, {0x0, 0x0, 0x7fffffff, 0xfa50, 0x8}, {0x3, 0x0, 0x2, 0x10001, 0x8}, {0x65, 0x3, 0x7, 0x80000000, 0x1, 0x2}, {0x8, 0x7, 0x4, 0x1, 0x7ff, 0x7}, {0x0, 0x9, 0xfffffffe, 0xc20, 0xff, 0x6}, {0x5, 0x8, 0xc7e, 0x7, 0x1, 0x6}, {0x782c, 0x8, 0x7, 0x80000001, 0x40, 0x8}, {0xd, 0x2, 0x6, 0x8, 0x1, 0x40}, {0x6, 0x3, 0x5000000, 0x8, 0xfaf, 0xbe}, {0xb, 0xf0, 0x9, 0x3, 0x9, 0x1000}, {0x5, 0x3, 0x7, 0xfff, 0x0, 0x2}, {0x80000000, 0x5, 0x9, 0x1000, 0x2, 0x4}, {0x4, 0x91, 0x7, 0x9, 0x9}, {0x6, 0xed, 0x8, 0xe, 0x0, 0x7}, {0xa5, 0x7, 0x5, 0x6f, 0x5, 0xf248}, {0x9, 0x8, 0x3, 0xe, 0x80000000, 0x4}, {0x4, 0x120000, 0x1ff, 0x5, 0x1, 0xab3d}, {0xfffffe00, 0xf46a, 0x99c, 0xa, 0x2977, 0x10001}, {0x5, 0x7f, 0xb, 0x80000001, 0x6, 0x2}, {0x9, 0x10000, 0xfffffffc, 0x650, 0xfffffffa, 0x2}, {0x8, 0x7, 0x8001, 0x7, 0x30c0, 0x3}, {0x5, 0xc, 0x9, 0x5889, 0x3, 0x6}, {0x6, 0x7fffffff, 0x7fffffff, 0x80000000, 0x6, 0x3}, {0x10001, 0x6, 0x3, 0x10000, 0x6, 0xf7}, {0x8000, 0x4, 0x964c, 0x800, 0x1ff, 0x2}, {0xfffffff8, 0xcd8e, 0x81, 0x2, 0xd4, 0x8}, {0x5, 0xce13, 0xfffffffa, 0x0, 0x6d4, 0x6}, {0x7, 0x6, 0x4000, 0x8, 0x5c, 0x9}, {0xc0000000, 0x101, 0x400, 0xfae, 0xffffffff, 0x3}, {0x6, 0x3, 0x64, 0x4, 0xf96, 0x9}, {0x5, 0x0, 0x0, 0x3, 0x9, 0x800000}, {0x8, 0x2, 0x0, 0x5, 0xa04, 0x9d9}, {0xff, 0x7a, 0x766, 0x6, 0x7, 0xdb}, {0x0, 0x9, 0x1000, 0x36a8, 0x0, 0xe}, {0x1, 0x10, 0xdb13, 0x5, 0x3, 0x7}, {0x9, 0x4, 0x0, 0x7fffffff, 0xffffffff, 0x800000}, {0x1, 0x7, 0x40, 0x8000, 0x6, 0x9}, {0x9, 0x7, 0x6, 0x0, 0x8, 0xff}, {0xb54f, 0x18951d45, 0x1, 0x80, 0x6, 0x9}, {0x100, 0x0, 0x36, 0xa, 0x2, 0x2}, {0x297f, 0x8, 0xe9d, 0xb01a, 0x6, 0x8}, {0x9, 0x8, 0x5, 0x2148, 0x5, 0x4}, {0xe2, 0x5b1811b1, 0x9, 0x4, 0x1}, {0x1000, 0x4e, 0x4, 0x7e, 0x4, 0xf7}, {0x1, 0xb0, 0x5, 0x6, 0xbcf, 0x2}, {0x2b91, 0x39d3fc76, 0x4, 0x0, 0xf40, 0x5}, {0xffffffff, 0x80000001, 0x9, 0x9, 0x5, 0x3}, {0xda60, 0xfffffffa, 0x2d5e, 0x6, 0xb3, 0xfffffffe}, {0x7, 0x1, 0x4, 0x10009, 0x0, 0xae}, {0x2, 0x8, 0xffffff34, 0x7f, 0x800, 0x3}, {0xe, 0x1, 0x827, 0x1, 0x1, 0x5}, {0x9, 0x0, 0x4, 0x7, 0x1ff, 0xc}, {0x4, 0x4, 0x5a0, 0x6, 0x9, 0x7}, {0x2, 0x10001, 0x8000, 0xfffffffe, 0x7, 0xfa29}, {0x8, 0xd, 0x80, 0x100, 0x5, 0x9}, {0x1000, 0xfffffffc, 0x8001, 0x6, 0x1, 0x6}, {0x2, 0x48ed, 0xa4b, 0x1, 0xe06f, 0x18000}, {0x6, 0x1, 0x7, 0x1, 0x400, 0x5}, {0x8, 0xfffffff0, 0x100, 0x1, 0xff, 0xfffffffd}, {0x7, 0xd61, 0x7fffffff, 0xb87, 0x4, 0x3}, {0x2, 0x9, 0x5, 0x4, 0x0, 0x1ff}, {0x9, 0x800, 0x9, 0x1, 0x8, 0x8}, {0x5, 0x2c00, 0x401, 0x4, 0x400, 0x4}, {0x9, 0x47c, 0x5, 0x5, 0x7, 0x3}, {0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x7ff}, {0x2, 0x7fff, 0x4bf, 0x860, 0x4, 0x6}, {0xa, 0x0, 0x0, 0x6, 0x0, 0x1800}, {0x5, 0x2, 0x9, 0xb, 0x3, 0x4}, {0xffffffff, 0x5, 0x6, 0x1, 0x81, 0x5}, {0x0, 0x400000, 0x8476, 0x8, 0x7fff, 0x2}, {0x6, 0x7fff, 0x6, 0x5, 0x7fffffff, 0x5}, {0x1ff, 0x5, 0xf, 0x9, 0x7, 0xc1}, {0x9, 0x0, 0xcdd, 0x7, 0x4, 0x8}, {0x1, 0x200, 0x800, 0xffff, 0x1000, 0x400}, {0x80, 0x5, 0x1, 0x7, 0x478efc2a, 0x400}, {0x6342800, 0xa2, 0xa6, 0x4, 0x9f, 0x81}, {0xbe, 0x8000, 0x3, 0x4, 0x5, 0x2}, {0x8, 0xffffffff, 0x0, 0xfffffffc, 0xc756, 0x3}, {0x5, 0x1, 0xc, 0x5, 0x10000, 0x100}, {0x7, 0x3, 0x8, 0x7, 0x7fffffff, 0x2}, {0x8, 0x8, 0xffffffff, 0x1, 0xa, 0xfffff3b0}, {0x7fffffff, 0x3, 0x5, 0x2, 0x0, 0x3}, {0xee25, 0x10, 0x7, 0x6, 0x0, 0x1}, {0x100, 0x401, 0x7, 0xb, 0xfff}, {0x7, 0x1ff, 0x1, 0x1444, 0x741, 0x8}, {0x1, 0x3, 0x40, 0x40, 0xfffff70c, 0x400}, {0x8001, 0x8, 0x9, 0x4, 0xf8000000, 0x6}, {0x72, 0x3, 0xa, 0x3, 0xf, 0x9}, {0x5, 0x80, 0x5, 0x9, 0x2, 0x3}, {0x6, 0x0, 0x3, 0xb, 0x4, 0x4000}, {0x2, 0x96a, 0x4, 0xfffffff7, 0x0, 0xcdac}], [{0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x4}, {0xf}, {0x2}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x1}, {0x2}, {0x5}, {0x4}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4}, {0xf}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.535905595s ago: executing program 6 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2.11275143s ago: executing program 1 (id=1147): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.086336112s ago: executing program 1 (id=1148): shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) 1.021999416s ago: executing program 6 (id=1149): unshare(0x20040600) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, 0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfacc", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 0s ago: executing program 1 (id=1150): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x89, &(0x7f0000002dc0), &(0x7f0000002e00)=0x4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x2}, 0x5) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRESOCT=r8, @ANYRESHEX=r4, @ANYRESHEX=r7, @ANYBLOB="3f47a55ac933a9d10dcd8c5f04c3c4091f52b1d92ae082bd118b5941deeb25e4159bfa80926b0496c6b169eeab2eba7b3be6584d201b3e218f834f1070aded49fa34057652e9077b9325255305df5819650d76804cf1933d831208a1d0f7e3c27d8ee9567fe937ab85f21875d331d33ed47849683e92029c5c86e90a7af5dc71fd31695787a5c8713da4", @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): cket permissive=1 [ 259.260687][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 259.302139][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.303410][ T29] audit: type=1400 audit(1776448762.500:396): avc: denied { bind } for pid=7922 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.382534][ T5811] Bluetooth: hci5: command tx timeout [ 259.640765][ T7919] infiniband syz2: set down [ 259.645508][ T7919] infiniband syz2: added ipvlan0 [ 259.655532][ T7919] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 259.659065][ T7919] infiniband syz2: Couldn't open port 1 [ 259.673549][ T7919] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 259.688627][ T7919] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 259.705927][ T7919] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 260.185599][ T7919] RDS/IB: syz2: added [ 260.189902][ T7919] smc: adding ib device syz2 with port count 1 [ 260.196213][ T7919] smc: ib device syz2 port 1 has no pnetid [ 260.411345][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.155293][ T29] audit: type=1400 audit(1776448764.400:397): avc: denied { getopt } for pid=7942 comm="syz.5.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 261.242173][ T29] audit: type=1400 audit(1776448764.490:398): avc: denied { mounton } for pid=7947 comm="syz.1.450" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 261.314727][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.466292][ T5811] Bluetooth: hci5: command tx timeout [ 262.116626][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.256053][ T7875] chnl_net:caif_netlink_parms(): no params data found [ 262.554132][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 262.563271][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 262.572739][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 263.110292][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.139394][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.222708][ T7875] bridge_slave_0: entered allmulticast mode [ 263.251984][ T7875] bridge_slave_0: entered promiscuous mode [ 263.286803][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.301476][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.312636][ T7875] bridge_slave_1: entered allmulticast mode [ 263.340797][ T7875] bridge_slave_1: entered promiscuous mode [ 263.542537][ T5811] Bluetooth: hci5: command tx timeout [ 263.647574][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.716091][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.144903][ T7969] syz.2.454 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 264.156993][ T7969] CPU: 1 UID: 0 PID: 7969 Comm: syz.2.454 Not tainted syzkaller #0 PREEMPT(full) [ 264.157022][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 264.157042][ T7969] Call Trace: [ 264.157049][ T7969] [ 264.157056][ T7969] dump_stack_lvl+0x100/0x190 [ 264.157101][ T7969] dump_header+0xfb/0x606 [ 264.157127][ T7969] oom_kill_process.cold+0xd/0x330 [ 264.157155][ T7969] out_of_memory+0x340/0x14f0 [ 264.157191][ T7969] ? __pfx_out_of_memory+0x10/0x10 [ 264.157229][ T7969] mem_cgroup_out_of_memory+0xc6/0x130 [ 264.157256][ T7969] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 264.157281][ T7969] ? find_held_lock+0x2b/0x80 [ 264.157320][ T7969] ? do_raw_spin_unlock+0x145/0x1e0 [ 264.157351][ T7969] ? _raw_spin_unlock+0x28/0x50 [ 264.157375][ T7969] try_charge_memcg+0x6e5/0xdf0 [ 264.157415][ T7969] ? __pfx_try_charge_memcg+0x10/0x10 [ 264.157455][ T7969] ? find_held_lock+0x2b/0x80 [ 264.157486][ T7969] ? rcu_read_unlock+0x17/0x60 [ 264.157507][ T7969] ? rcu_read_unlock+0x17/0x60 [ 264.157531][ T7969] charge_memcg+0xa6/0x280 [ 264.157565][ T7969] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 264.157594][ T7969] __swap_cache_prepare_and_add+0x842/0xa20 [ 264.157623][ T7969] ? alloc_pages_mpol+0x25a/0x540 [ 264.157669][ T7969] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 264.157697][ T7969] ? __pfx_swap_entry_swapped+0x10/0x10 [ 264.157740][ T7969] swap_cache_alloc_folio+0x1cb/0x300 [ 264.157771][ T7969] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 264.157801][ T7969] ? finish_task_switch.isra.0+0x384/0x1010 [ 264.157842][ T7969] swap_cluster_readahead+0x411/0x770 [ 264.157870][ T7969] ? __schedule+0x10fb/0x6820 [ 264.157897][ T7969] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 264.157934][ T7969] ? __lock_acquire+0x4a5/0x2630 [ 264.157970][ T7969] ? get_vma_policy+0x23d/0x3b0 [ 264.157994][ T7969] swapin_readahead+0x160/0x12c0 [ 264.158033][ T7969] ? __pfx_swapin_readahead+0x10/0x10 [ 264.158061][ T7969] ? find_held_lock+0x2b/0x80 [ 264.158092][ T7969] ? swap_table_get+0x103/0x2c0 [ 264.158125][ T7969] ? swap_table_get+0x10d/0x2c0 [ 264.158152][ T7969] ? swap_cache_get_folio+0x286/0x350 [ 264.158181][ T7969] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 264.158207][ T7969] ? __pfx_get_swap_device+0x10/0x10 [ 264.158246][ T7969] ? do_swap_page+0x931/0x6180 [ 264.158272][ T7969] do_swap_page+0x931/0x6180 [ 264.158314][ T7969] ? __pfx_do_swap_page+0x10/0x10 [ 264.158349][ T7969] ? rcu_is_watching+0x12/0xc0 [ 264.158380][ T7969] ? __pte_offset_map+0x179/0x310 [ 264.158418][ T7969] __handle_mm_fault+0x192f/0x2a00 [ 264.158453][ T7969] ? reacquire_held_locks+0xce/0x1e0 [ 264.158479][ T7969] ? __pfx___handle_mm_fault+0x10/0x10 [ 264.158511][ T7969] ? lock_vma_under_rcu+0x17c/0x590 [ 264.158558][ T7969] handle_mm_fault+0x36d/0xa20 [ 264.158591][ T7969] do_user_addr_fault+0x5a3/0x12f0 [ 264.158631][ T7969] exc_page_fault+0x6f/0xd0 [ 264.158661][ T7969] asm_exc_page_fault+0x26/0x30 [ 264.158682][ T7969] RIP: 0033:0x7f9cffd57943 [ 264.158705][ T7969] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 6e 5d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 264.158726][ T7969] RSP: 002b:00007fffa91d2d70 EFLAGS: 00010246 [ 264.158747][ T7969] RAX: 0000000000000000 RBX: 00005555910ae500 RCX: 0000000000000000 [ 264.158761][ T7969] RDX: 00007fffa91d2db0 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.158775][ T7969] RBP: 00007f9d00017da0 R08: 0000000000000000 R09: 0000000000000000 [ 264.158788][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000040953 [ 264.158801][ T7969] R13: 00007f9d0001609c R14: 000000000004068d R15: 00007f9d00016090 [ 264.158832][ T7969] [ 264.158840][ T7969] memory: usage 307200kB, limit 307200kB, failcnt 2533 [ 264.521566][ T7969] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 264.529568][ T7969] kmem: usage 306968kB, limit 9007199254740988kB, failcnt 0 [ 264.536876][ T7969] Memory cgroup stats for /syz2: [ 264.537290][ T7969] cache 217088 [ 264.545591][ T7969] rss 0 [ 264.548335][ T7969] rss_huge 0 [ 264.551616][ T7969] shmem 0 [ 264.554571][ T7969] mapped_file 217088 [ 264.558459][ T7969] dirty 217088 [ 264.561808][ T7969] writeback 0 [ 264.565098][ T7969] workingset_refault_anon 29 [ 264.569667][ T7969] workingset_refault_file 0 [ 264.574221][ T7969] swap 192512 [ 264.577489][ T7969] swapcached 331776 [ 264.581274][ T7969] pgpgin 168754 [ 264.584802][ T7969] pgpgout 169207 [ 264.588339][ T7969] pgfault 160038 [ 264.591865][ T7969] pgmajfault 22 [ 264.595333][ T7969] inactive_anon 20480 [ 264.599295][ T7969] active_anon 0 [ 264.602766][ T7969] inactive_file 217088 [ 264.606813][ T7969] active_file 0 [ 264.610255][ T7969] unevictable 0 [ 264.613714][ T7969] hierarchical_memory_limit 314572800 [ 264.619065][ T7969] hierarchical_memsw_limit 9223372036854771712 [ 264.625237][ T7969] total_cache 217088 [ 264.629120][ T7969] total_rss 0 [ 264.632439][ T7969] total_rss_huge 0 [ 264.636150][ T7969] total_shmem 0 [ 264.639682][ T7969] total_mapped_file 217088 [ 264.644112][ T7969] total_dirty 217088 [ 264.647996][ T7969] total_writeback 0 [ 264.651788][ T7969] total_workingset_refault_anon 29 [ 264.656936][ T7969] total_workingset_refault_file 0 [ 264.661945][ T7969] total_swap 192512 [ 264.665773][ T7969] total_swapcached 331776 [ 264.670080][ T7969] total_pgpgin 168754 [ 264.674081][ T7969] total_pgpgout 169207 [ 264.678129][ T7969] total_pgfault 160038 [ 264.682176][ T7969] total_pgmajfault 22 [ 264.686158][ T7969] total_inactive_anon 20480 [ 264.697531][ T29] audit: type=1400 audit(1776448767.060:399): avc: denied { write } for pid=7969 comm="syz.2.454" name="file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.760062][ T29] audit: type=1400 audit(1776448767.060:400): avc: denied { open } for pid=7969 comm="syz.2.454" path="/98/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.810105][ T7969] total_active_anon 0 [ 264.858316][ T7969] total_inactive_file 217088 [ 264.902632][ T7969] total_active_file 0 [ 264.906761][ T7969] total_unevictable 0 [ 264.929965][ T7969] anon_cost 0 [ 264.955091][ T13] bridge_slave_1: left allmulticast mode [ 264.960746][ T13] bridge_slave_1: left promiscuous mode [ 264.967898][ T7969] file_cost 0 [ 264.982140][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.000222][ T7969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.454,pid=7969,uid=0 [ 265.034313][ T13] bridge_slave_0: left allmulticast mode [ 265.056724][ T13] bridge_slave_0: left promiscuous mode [ 265.082201][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.116997][ T7969] Memory cgroup out of memory: Killed process 7969 (syz.2.454) total-vm:104408kB, anon-rss:1244kB, file-rss:23176kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 265.407045][ T13] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 265.430911][ T13] ip6gretap1 (unregistering): left allmulticast mode [ 265.861917][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 265.903908][ T13] geneve2 (unregistering): left allmulticast mode [ 266.169166][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.207158][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.227114][ T13] bond0 (unregistering): Released all slaves [ 266.638583][ T13] bond1 (unregistering): Released all slaves [ 266.695283][ T13] bond2 (unregistering): Released all slaves [ 266.821555][ T7972] lo: Caught tx_queue_len zero misconfig [ 266.845005][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.2.459'. [ 266.939875][ T7875] team0: Port device team_slave_0 added [ 266.993785][ T7875] team0: Port device team_slave_1 added [ 267.132053][ T7997] netlink: 'syz.2.461': attribute type 3 has an invalid length. [ 268.228528][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.255019][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.312440][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.337185][ T8006] kthread_run failed with err -4 [ 268.434301][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.441304][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.724388][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.487893][ T7875] hsr_slave_0: entered promiscuous mode [ 269.516660][ T7875] hsr_slave_1: entered promiscuous mode [ 269.555659][ T7875] debugfs: 'hsr0' already exists in 'hsr' [ 269.592091][ T7875] Cannot create hsr debugfs directory [ 270.085827][ T5479] 8021q: adding VLAN 0 to HW filter on device eth5 [ 270.596182][ T13] hsr_slave_0: left promiscuous mode [ 270.605450][ T13] hsr_slave_1: left promiscuous mode [ 271.042701][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.050122][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.067235][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.094479][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.146046][ T13] veth1_macvtap: left promiscuous mode [ 271.156104][ T13] veth0_macvtap: left promiscuous mode [ 271.162013][ T13] veth1_vlan: left promiscuous mode [ 271.167447][ T13] veth0_vlan: left promiscuous mode [ 272.091413][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 272.352230][ T13] team0 (unregistering): Port device team_slave_1 removed [ 272.406627][ T13] team0 (unregistering): Port device team_slave_0 removed [ 273.117088][ T8064] vlan2: entered promiscuous mode [ 273.122923][ T8064] vlan2: entered allmulticast mode [ 273.129233][ T8064] hsr_slave_1: entered allmulticast mode [ 273.197353][ T8069] bridge1: entered promiscuous mode [ 273.202678][ T8069] bridge1: entered allmulticast mode [ 273.860895][ T29] audit: type=1400 audit(1776448777.100:401): avc: denied { mount } for pid=8089 comm="syz.2.481" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 274.405581][ T8099] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 274.495936][ T5479] 8021q: adding VLAN 0 to HW filter on device eth6 [ 274.766103][ T7875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.353029][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.371481][ T7875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.399784][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.565255][ T7875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.616110][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.783298][ T7875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.362016][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.872141][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.885513][ T7875] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.900801][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.900920][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.924949][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.925041][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.720913][ T7875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.720940][ T7875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.043716][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.560937][ T5479] 8021q: adding VLAN 0 to HW filter on device eth7 [ 280.064017][ T8159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.098282][ T29] audit: type=1400 audit(1776448784.350:402): avc: denied { node_bind } for pid=8180 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 281.351145][ T8194] tipc: Enabling of bearer rejected, failed to enable media [ 281.580047][ T7875] veth0_vlan: entered promiscuous mode [ 281.591754][ T7875] veth1_vlan: entered promiscuous mode [ 281.644886][ T7875] veth0_macvtap: entered promiscuous mode [ 282.085688][ T7875] veth1_macvtap: entered promiscuous mode [ 282.125484][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.165800][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.204057][ T7313] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.226570][ T7313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.246345][ T5479] 8021q: adding VLAN 0 to HW filter on device eth8 [ 282.430803][ T1341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.451427][ T1341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.379293][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.393766][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.895718][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.913863][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.976976][ T29] audit: type=1400 audit(1776448788.230:403): avc: denied { mounton } for pid=7875 comm="syz-executor" path="/root/syzkaller.Fcz3ZN/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 285.038418][ T29] audit: type=1400 audit(1776448788.270:404): avc: denied { mounton } for pid=7875 comm="syz-executor" path="/root/syzkaller.Fcz3ZN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 285.068585][ T29] audit: type=1400 audit(1776448788.270:405): avc: denied { mounton } for pid=7875 comm="syz-executor" path="/root/syzkaller.Fcz3ZN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 285.122489][ T29] audit: type=1400 audit(1776448788.280:406): avc: denied { mounton } for pid=7875 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 285.227796][ T29] audit: type=1400 audit(1776448788.480:407): avc: denied { module_request } for pid=8238 comm="syz.0.505" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 285.745850][ T8254] trusted_key: encrypted_key: key user:syz not found [ 287.089476][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.6.508'. [ 287.407717][ T8273] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 288.490134][ T8273] bond2: entered promiscuous mode [ 288.496417][ T8273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.766195][ T8284] fuse: fd is not a fuse device [ 288.814344][ T8277] ipvlan2: entered allmulticast mode [ 289.607164][ T8277] bond2: entered allmulticast mode [ 290.049206][ T8295] capability: warning: `syz.5.513' uses 32-bit capabilities (legacy support in use) [ 290.214123][ T8273] ipvlan3: entered allmulticast mode [ 290.319273][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 290.766893][ T8277] bond2: (slave bridge2): making interface the new active one [ 290.788441][ T8277] bridge2: entered promiscuous mode [ 290.801244][ T8277] bridge2: entered allmulticast mode [ 290.813148][ T8277] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 291.210831][ T8309] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 292.372629][ T29] audit: type=1400 audit(1776448795.540:408): avc: denied { getopt } for pid=8323 comm="syz.6.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.681461][ T8320] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.703267][ T29] audit: type=1400 audit(1776448795.960:409): avc: denied { create } for pid=8327 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 293.187973][ T8320] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 293.211536][ T29] audit: type=1400 audit(1776448795.980:410): avc: denied { ioctl } for pid=8327 comm="syz.1.523" path="socket:[17611]" dev="sockfs" ino=17611 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 293.338305][ T29] audit: type=1400 audit(1776448796.590:411): avc: denied { read } for pid=8335 comm="syz.5.526" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 293.410454][ T29] audit: type=1400 audit(1776448796.590:412): avc: denied { open } for pid=8335 comm="syz.5.526" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 293.438253][ T8321] bond3: (slave gretap2): making interface the new active one [ 293.537908][ T29] audit: type=1400 audit(1776448796.660:413): avc: denied { ioctl } for pid=8335 comm="syz.5.526" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 293.564096][ T29] audit: type=1400 audit(1776448796.660:414): avc: denied { setopt } for pid=8335 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 294.040839][ T8321] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 294.083882][ T8309] macvlan3: entered promiscuous mode [ 294.100854][ T8309] macvlan3: entered allmulticast mode [ 294.112231][ T8309] bond3: entered promiscuous mode [ 294.130691][ T8309] gretap2: entered promiscuous mode [ 294.138235][ T8309] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 294.157877][ T8309] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 294.183478][ T8309] bond3: left promiscuous mode [ 294.196657][ T8309] gretap2: left promiscuous mode [ 294.225124][ T8340] netlink: 'syz.1.527': attribute type 4 has an invalid length. [ 295.127264][ T29] audit: type=1400 audit(1776448798.300:415): avc: denied { connect } for pid=8354 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.847201][ T8404] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 299.854142][ T8404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 299.865315][ T8404] vhci_hcd vhci_hcd.0: Device attached [ 299.972533][ T8406] vhci_hcd: connection closed [ 300.095415][ T29] audit: type=1400 audit(1776448803.270:416): avc: denied { create } for pid=8387 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.198911][ T12] vhci_hcd vhci_hcd.5: stop threads [ 300.265371][ T12] vhci_hcd vhci_hcd.5: release socket [ 300.273550][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 300.657604][ T29] audit: type=1400 audit(1776448803.910:417): avc: denied { bind } for pid=8426 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.700027][ T29] audit: type=1400 audit(1776448803.930:418): avc: denied { listen } for pid=8426 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.923616][ T29] audit: type=1400 audit(1776448804.180:419): avc: denied { accept } for pid=8426 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.477361][ T29] audit: type=1400 audit(1776448804.180:420): avc: denied { read } for pid=8426 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.497107][ T29] audit: type=1400 audit(1776448804.290:421): avc: denied { bind } for pid=8430 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 301.525842][ T29] audit: type=1400 audit(1776448804.700:422): avc: denied { shutdown } for pid=8426 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.068492][ T29] audit: type=1400 audit(1776448805.310:423): avc: denied { append } for pid=8441 comm="syz.5.551" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 302.440413][ T8446] F2FS-fs: Conflicting test_dummy_encryption options [ 303.229264][ T29] audit: type=1400 audit(1776448806.480:424): avc: denied { read } for pid=8457 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 306.299600][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.6.561'. [ 306.379169][ T8501] xt_nfacct: accounting object `syz1' does not exist [ 306.413273][ T8501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8501 comm=syz.6.561 [ 306.455088][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.5.562'. [ 306.522673][ T29] audit: type=1400 audit(1776448809.770:425): avc: denied { connect } for pid=8503 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.617337][ T29] audit: type=1400 audit(1776448809.820:426): avc: denied { read } for pid=8503 comm="syz.5.562" path="socket:[17123]" dev="sockfs" ino=17123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 309.265774][ T29] audit: type=1400 audit(1776448812.510:427): avc: denied { ioctl } for pid=8531 comm="syz.5.568" path="socket:[17144]" dev="sockfs" ino=17144 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 310.132292][ T29] audit: type=1400 audit(1776448813.380:428): avc: denied { read write } for pid=8537 comm="syz.1.570" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 310.419764][ T29] audit: type=1400 audit(1776448813.380:429): avc: denied { open } for pid=8537 comm="syz.1.570" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 311.660629][ T8561] --map-set only usable from mangle table [ 312.456535][ T8554] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 312.708533][ T8554] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 312.820763][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 313.132516][ T5818] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 313.304413][ T5818] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.768008][ T5818] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.778572][ T5818] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 313.788020][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 313.838131][ T5818] usb 6-1: SerialNumber: syz [ 313.984639][ T8590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.580'. [ 314.312875][ T5818] usb 6-1: 0:2 : does not exist [ 314.380837][ T5818] usb 6-1: USB disconnect, device number 7 [ 314.554243][ T6443] udevd[6443]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.682961][ T8601] lo: entered allmulticast mode [ 314.799592][ T8601] dvmrp8: entered allmulticast mode [ 315.541501][ T8600] lo: left allmulticast mode [ 315.966092][ T8614] netlink: 400 bytes leftover after parsing attributes in process `syz.1.588'. [ 316.664451][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 317.066119][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.077574][ T10] usb 2-1: config 0 has no interfaces? [ 317.084913][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 317.095166][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.629568][ T29] audit: type=1400 audit(1776448820.440:430): avc: denied { connect } for pid=8624 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 317.632916][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.709089][ T10] usb 2-1: config 0 descriptor?? [ 317.779347][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.779373][ T29] audit: type=1400 audit(1776448820.470:431): avc: denied { shutdown } for pid=8624 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 317.859872][ T29] audit: type=1400 audit(1776448821.110:432): avc: denied { setopt } for pid=8630 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.353211][ T8658] overlayfs: failed to clone lowerpath [ 322.430841][ T8659] overlayfs: missing 'lowerdir' [ 324.265677][ T29] audit: type=1400 audit(1776448827.110:433): avc: denied { create } for pid=8664 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.345338][ T29] audit: type=1400 audit(1776448827.120:434): avc: denied { listen } for pid=8664 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 326.492755][ T29] audit: type=1400 audit(1776448829.740:435): avc: denied { setopt } for pid=8719 comm="syz.6.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.686818][ T8739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.998879][ T46] usb 2-1: USB disconnect, device number 6 [ 327.022530][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.0.607'. [ 327.043235][ T29] audit: type=1400 audit(1776448829.770:436): avc: denied { bind } for pid=8720 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 327.240055][ T29] audit: type=1400 audit(1776448829.780:437): avc: denied { read append } for pid=8719 comm="syz.6.606" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 327.777988][ T29] audit: type=1400 audit(1776448829.780:438): avc: denied { open } for pid=8719 comm="syz.6.606" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 327.804173][ T29] audit: type=1400 audit(1776448830.520:439): avc: denied { watch } for pid=8744 comm="syz.2.610" path="/141/file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 328.769132][ T8760] kAFS: unable to lookup cell '(,c¾ûL' [ 328.951289][ T8764] bridge0: port 3(netdevsim0) entered disabled state [ 328.958242][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.965706][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.410305][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.481297][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.914190][ T29] audit: type=1400 audit(1776448833.000:440): avc: denied { ioctl } for pid=8765 comm="syz.6.614" path="socket:[18679]" dev="sockfs" ino=18679 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.104532][ T8764] veth1_vlan: left allmulticast mode [ 331.831718][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.876647][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.927841][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.003256][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.059888][ T8798] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.620'. [ 332.140600][ T8798] vlan3: entered allmulticast mode [ 332.153675][ T8798] bond0: entered allmulticast mode [ 332.174535][ T8798] bond_slave_0: entered allmulticast mode [ 332.196312][ T8798] bond_slave_1: entered allmulticast mode [ 332.215473][ T8798] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 332.234811][ T8801] netlink: 14 bytes leftover after parsing attributes in process `syz.1.620'. [ 332.338665][ T5818] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 332.468549][ T8805] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.476936][ T8805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.485684][ T8805] IPv6: NLM_F_CREATE should be set when creating new route [ 332.851111][ T8801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.865028][ T8801] bond_slave_0: left allmulticast mode [ 332.886238][ T8801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.900792][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 332.922006][ T5818] usb 6-1: config 0 has no interfaces? [ 332.929104][ T8801] bond_slave_1: left allmulticast mode [ 332.941786][ T5818] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 332.964968][ T8801] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 332.978996][ T5818] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 333.005109][ T8801] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 333.014504][ T5818] usb 6-1: Manufacturer: syz [ 333.034590][ T5818] usb 6-1: config 0 descriptor?? [ 333.058463][ T8801] bond0 (unregistering): Released all slaves [ 333.199727][ T8807] netlink: 'syz.2.622': attribute type 2 has an invalid length. [ 333.284506][ T8808] netlink: 'syz.2.622': attribute type 2 has an invalid length. [ 333.331779][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 333.347326][ T29] audit: type=1400 audit(1776448836.590:441): avc: denied { connect } for pid=8809 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 333.382103][ T8812] netlink: 208 bytes leftover after parsing attributes in process `syz.2.622'. [ 333.428934][ T29] audit: type=1400 audit(1776448836.590:442): avc: denied { write } for pid=8809 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 333.449445][ T29] audit: type=1400 audit(1776448836.650:443): avc: denied { write } for pid=8809 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.470578][ T29] audit: type=1400 audit(1776448836.650:444): avc: denied { read } for pid=8809 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 333.511773][ T8795] team0: Port device batadv1 added [ 333.597022][ T8807] ‚#{6c: entered promiscuous mode [ 333.625387][ T8808] ‚#{6c: left promiscuous mode [ 335.133293][ T8796] Set syz1 is full, maxelem 6117 reached [ 335.517642][ T8826] openvswitch: netlink: IP tunnel dst address not specified [ 337.478197][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 339.831584][ T10] usb 6-1: USB disconnect, device number 8 [ 339.996989][ T29] audit: type=1326 audit(1776448843.250:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 340.080049][ T29] audit: type=1326 audit(1776448843.250:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 340.170623][ T29] audit: type=1326 audit(1776448843.280:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 340.270400][ T29] audit: type=1326 audit(1776448843.280:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 340.517308][ T29] audit: type=1326 audit(1776448843.280:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 340.989359][ T29] audit: type=1326 audit(1776448843.280:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 341.086583][ T29] audit: type=1326 audit(1776448843.280:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 341.282550][ T29] audit: type=1326 audit(1776448843.280:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 341.385638][ T29] audit: type=1326 audit(1776448843.300:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 341.482853][ T29] audit: type=1326 audit(1776448843.300:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8859 comm="syz.5.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096c79c819 code=0x7ffc0000 [ 341.960560][ T8883] syzkaller0: entered promiscuous mode [ 341.975492][ T8883] syzkaller0: entered allmulticast mode [ 342.343529][ T8893] netlink: 'syz.6.646': attribute type 1 has an invalid length. [ 343.185494][ T8889] overlayfs: failed to clone upperpath [ 344.746995][ T8919] team0: Device gtp0 is up. Set it down before adding it as a team port [ 346.236128][ T8933] syz_tun: entered promiscuous mode [ 346.243775][ T8933] macvtap1: entered promiscuous mode [ 346.552123][ T8933] syz_tun: left promiscuous mode [ 347.647254][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 347.647299][ T29] audit: type=1400 audit(1776448850.850:469): avc: denied { create } for pid=8932 comm="syz.6.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 347.674248][ T29] audit: type=1400 audit(1776448850.890:470): avc: denied { ioctl } for pid=8932 comm="syz.6.660" path="socket:[18934]" dev="sockfs" ino=18934 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 351.737890][ T8974] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 352.122056][ T5818] IPVS: starting estimator thread 0... [ 352.234212][ T8975] IPVS: using max 38 ests per chain, 91200 per kthread [ 353.461945][ T29] audit: type=1400 audit(1776448856.710:471): avc: denied { setopt } for pid=8986 comm="syz.6.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 355.671361][ T29] audit: type=1400 audit(1776448858.640:472): avc: denied { unlink } for pid=8999 comm="syz.1.676" name="#1" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 356.901901][ T29] audit: type=1400 audit(1776448858.710:473): avc: denied { mount } for pid=8999 comm="syz.1.676" name="/" dev="overlay" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 358.246808][ T29] audit: type=1400 audit(1776448861.490:474): avc: denied { accept } for pid=9024 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 359.227814][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.240003][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.248247][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.321942][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.329489][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.701283][ T9030] chnl_net:caif_netlink_parms(): no params data found [ 361.043244][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.075368][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.105949][ T9030] bridge_slave_0: entered allmulticast mode [ 361.242607][ T9030] bridge_slave_0: entered promiscuous mode [ 361.266245][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.450653][ T5811] Bluetooth: hci2: command tx timeout [ 361.466036][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.284419][ T9030] bridge_slave_1: entered allmulticast mode [ 362.330886][ T9030] bridge_slave_1: entered promiscuous mode [ 362.369987][ T9030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.654289][ T9030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.839452][ T9030] team0: Port device team_slave_0 added [ 362.866256][ T9030] team0: Port device team_slave_1 added [ 363.343799][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.362871][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.436646][ T9030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.475359][ T5811] Bluetooth: hci2: command tx timeout [ 363.518176][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.610732][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.668858][ T9030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.939789][ T9030] hsr_slave_0: entered promiscuous mode [ 364.397058][ T9030] hsr_slave_1: entered promiscuous mode [ 364.403755][ T9030] debugfs: 'hsr0' already exists in 'hsr' [ 364.409555][ T9030] Cannot create hsr debugfs directory [ 365.172193][ T29] audit: type=1400 audit(1776448868.230:475): avc: denied { name_bind } for pid=9076 comm="syz.6.695" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 365.542437][ T5811] Bluetooth: hci2: command tx timeout [ 365.955914][ T9030] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 366.005073][ T9030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.034802][ T9030] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.095881][ T9030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.933503][ T9091] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 367.021581][ T9030] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 367.225439][ T9030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 367.249822][ T9030] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.385030][ T9030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 367.498580][ T29] audit: type=1400 audit(1776448870.730:476): avc: denied { bind } for pid=9096 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.801458][ T5811] Bluetooth: hci2: command tx timeout [ 367.907020][ T9099] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 367.920264][ T9099] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 368.038070][ T9102] syzkaller0: entered promiscuous mode [ 368.051372][ T9102] syzkaller0: entered allmulticast mode [ 368.897380][ T29] audit: type=1400 audit(1776448872.150:477): avc: denied { getopt } for pid=9116 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 368.902759][ T9121] netlink: 'syz.1.704': attribute type 3 has an invalid length. [ 368.928305][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 371.273105][ T9030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.290904][ T9030] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.327124][ T9030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.338269][ T9030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.366426][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.373617][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.388816][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.395994][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.716113][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.708'. [ 372.141496][ T9143] 9pnet_fd: Insufficient options for proto=fd [ 374.921285][ T9030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.253378][ T29] audit: type=1400 audit(1776448878.480:478): avc: denied { bind } for pid=9164 comm="syz.5.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 375.771944][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 375.881167][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 376.430481][ T9030] veth0_vlan: entered promiscuous mode [ 376.455144][ T9030] veth1_vlan: entered promiscuous mode [ 376.471136][ T29] audit: type=1400 audit(1776448879.720:479): avc: denied { associate } for pid=9184 comm="syz.6.720" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 376.522139][ T9030] veth0_macvtap: entered promiscuous mode [ 376.556835][ T9030] veth1_macvtap: entered promiscuous mode [ 376.626008][ T9030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.677196][ T9030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.871257][ T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.906848][ T35] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.931515][ T8702] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.984598][ T8702] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.419842][ T9199] ptrace attach of "./syz-executor exec"[5809] was attempted by " [ 377.819764][ T7004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.827741][ T7004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.901201][ T29] audit: type=1400 audit(1776448881.150:480): avc: denied { ioctl } for pid=9208 comm="syz.6.727" path="socket:[19408]" dev="sockfs" ino=19408 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.001727][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.018210][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.028908][ T29] audit: type=1400 audit(1776448881.150:481): avc: denied { bind } for pid=9208 comm="syz.6.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.081191][ T29] audit: type=1400 audit(1776448881.150:482): avc: denied { write } for pid=9208 comm="syz.6.727" path="socket:[19408]" dev="sockfs" ino=19408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.351033][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.357981][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.395295][ T29] audit: type=1400 audit(1776448881.650:483): avc: denied { ioctl } for pid=9213 comm="syz.7.681" path="socket:[20502]" dev="sockfs" ino=20502 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 378.492423][ T29] audit: type=1400 audit(1776448881.730:484): avc: denied { write } for pid=9213 comm="syz.7.681" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 379.598497][ T9225] ptrace attach of "./syz-executor exec"[7875] was attempted by "./syz-executor exec"[9225] [ 380.079999][ T9234] pimreg: entered allmulticast mode [ 380.432591][ T5811] Bluetooth: hci5: command 0x0405 tx timeout [ 380.659046][ T9236] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.666585][ T9236] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 380.703719][ T9236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.709644][ T9236] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 381.021015][ T9247] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 381.030650][ T9247] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 381.039274][ T9247] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 384.381426][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 384.422499][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 384.435356][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.444041][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.476157][ T9263] netlink: 'syz.0.738': attribute type 11 has an invalid length. [ 384.504139][ T9263] netlink: 'syz.0.738': attribute type 13 has an invalid length. [ 384.573815][ T9264] bridge0: entered allmulticast mode [ 384.686393][ T9265] bridge_slave_1: left allmulticast mode [ 384.704702][ T9265] bridge_slave_1: left promiscuous mode [ 384.720554][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 384.731635][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.891387][ T9265] bridge_slave_0: left allmulticast mode [ 384.911239][ T9265] bridge_slave_0: left promiscuous mode [ 385.112412][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.350829][ T9307] netlink: 268 bytes leftover after parsing attributes in process `syz.5.748'. [ 389.585972][ T29] audit: type=1400 audit(1776448892.820:485): avc: denied { read write } for pid=9326 comm="syz.1.753" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 390.014305][ T29] audit: type=1400 audit(1776448892.820:486): avc: denied { open } for pid=9326 comm="syz.1.753" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 390.097929][ T29] audit: type=1400 audit(1776448892.830:487): avc: denied { ioctl } for pid=9326 comm="syz.1.753" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 394.808284][ T29] audit: type=1800 audit(1776448898.050:488): pid=9355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.7.755" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 394.846873][ T9355] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 394.878536][ T9355] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 394.909064][ T9355] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 395.048777][ T9355] syz.7.755 (9355) used greatest stack depth: 18504 bytes left [ 395.482613][ T9376] gfs2: error -5 reading superblock [ 395.500782][ T9373] libceph: resolve '0..' (ret=-3): failed [ 397.438856][ T9380] sit0: Caught tx_queue_len zero misconfig [ 397.685350][ T9388] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 397.691907][ T9388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.699718][ T9388] vhci_hcd vhci_hcd.0: Device attached [ 397.758849][ T9386] kAFS: unable to lookup cell 'Þ({^ú@' [ 398.308692][ T5869] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 399.117466][ T9389] vhci_hcd: connection reset by peer [ 399.211274][ T1341] vhci_hcd vhci_hcd.7: stop threads [ 399.281877][ T1341] vhci_hcd vhci_hcd.7: release socket [ 399.324875][ T1341] vhci_hcd vhci_hcd.7: disconnect device [ 399.797220][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.774'. [ 399.831634][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.774'. [ 399.867418][ T9409] netlink: 'syz.7.774': attribute type 11 has an invalid length. [ 399.957731][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.965121][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.031840][ T9409] netlink: 'syz.7.774': attribute type 13 has an invalid length. [ 400.704446][ T29] audit: type=1326 audit(1776448903.920:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9415 comm="syz.0.776" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65e499c819 code=0x0 [ 400.781056][ T9411] bridge0: entered allmulticast mode [ 400.848517][ T9420] bridge_slave_1: left allmulticast mode [ 400.848566][ T29] audit: type=1400 audit(1776448904.030:490): avc: denied { execute } for pid=9415 comm="syz.0.776" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 400.971588][ T9420] bridge_slave_1: left promiscuous mode [ 401.014944][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.101183][ T9420] bridge_slave_0: left allmulticast mode [ 401.124697][ T9420] bridge_slave_0: left promiscuous mode [ 401.155211][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.875363][ T29] audit: type=1400 audit(1776448905.120:491): avc: denied { remount } for pid=9426 comm="syz.7.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 402.271241][ T9432] Bluetooth: MGMT ver 1.23 [ 402.323086][ T29] audit: type=1400 audit(1776448905.520:492): avc: denied { bind } for pid=9427 comm="syz.5.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 402.420148][ T9438] kAFS: unable to lookup cell 'ÿ' [ 402.429114][ T9438] kAFS: unable to lookup cell '(,c¾Ì' [ 403.933178][ T5869] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 404.376813][ T8702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.562465][ T46] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 404.755398][ T46] usb 8-1: Using ep0 maxpacket: 16 [ 404.785621][ T8702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.808976][ T46] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.839445][ T46] usb 8-1: config 0 interface 0 has no altsetting 0 [ 404.852900][ T46] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 404.872138][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.953796][ T46] usb 8-1: config 0 descriptor?? [ 405.030446][ T8702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.574124][ T8702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.739629][ T46] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 407.743571][ T29] audit: type=1800 audit(1776448910.990:493): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.786" name="file0" dev="overlay" ino=824 res=0 errno=0 [ 408.667705][ T46] usb 8-1: USB disconnect, device number 2 [ 408.699750][ T29] audit: type=1400 audit(1776448911.950:494): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 408.945339][ T9467] fido_id[9467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 409.955018][ T9473] netlink: 28 bytes leftover after parsing attributes in process `syz.6.789'. [ 410.441838][ T9473] bridge1: entered promiscuous mode [ 410.464437][ T9473] bridge1: entered allmulticast mode [ 410.483401][ T29] audit: type=1400 audit(1776448913.740:495): avc: denied { setopt } for pid=9486 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 410.613150][ T9473] team0: Port device bridge1 added [ 411.025692][ T29] audit: type=1400 audit(1776448914.280:496): avc: denied { ioctl } for pid=9497 comm="syz.1.796" path="socket:[21928]" dev="sockfs" ino=21928 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.108080][ T9501] xt_SECMARK: invalid mode: 2 [ 412.395524][ T29] audit: type=1400 audit(1776448915.650:497): avc: denied { mount } for pid=9484 comm="syz.7.792" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 412.587996][ T8702] bond2 (unregistering): (slave gretap1): Releasing active interface [ 412.639100][ T8702] bond3 (unregistering): (slave gretap2): Releasing active interface [ 412.685498][ T8702] bond1 (unregistering): (slave geneve2): Releasing active interface [ 412.703935][ T8702] geneve2 (unregistering): left allmulticast mode [ 412.720652][ T29] audit: type=1400 audit(1776448915.970:498): avc: denied { unmount } for pid=9030 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 412.791768][ T8702] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 412.802435][ T8702] bridge1 (unregistering): left promiscuous mode [ 412.838822][ T8702] bond0 (unregistering): Released all slaves [ 412.897896][ T8702] bond1 (unregistering): Released all slaves [ 412.928168][ T8702] bond2 (unregistering): Released all slaves [ 412.959452][ T8702] bond3 (unregistering): Released all slaves [ 412.988425][ T8702] bond4 (unregistering): Released all slaves [ 413.010733][ T8702] bond5 (unregistering): Released all slaves [ 413.280722][ T5479] 8021q: adding VLAN 0 to HW filter on device eth9 [ 413.545057][ T29] audit: type=1400 audit(1776448916.800:499): avc: denied { read } for pid=9541 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 414.046371][ T8702] hsr_slave_0: left promiscuous mode [ 414.074994][ T8702] hsr_slave_1: left promiscuous mode [ 414.130236][ T8702] veth1_macvtap: left promiscuous mode [ 414.148154][ T8702] veth0_macvtap: left promiscuous mode [ 414.162671][ T8702] veth1_vlan: left promiscuous mode [ 414.350695][ T8702] veth0_vlan: left promiscuous mode [ 415.380572][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.807'. [ 415.399040][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.807'. [ 415.454653][ T9562] netlink: 'syz.6.807': attribute type 11 has an invalid length. [ 415.466880][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.491619][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.501108][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.511228][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.549559][ T9562] netlink: 'syz.6.807': attribute type 13 has an invalid length. [ 415.726428][ T29] audit: type=1400 audit(1776448918.980:500): avc: denied { read } for pid=9572 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.746691][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.768835][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.778534][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.786080][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.794112][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.803987][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.947505][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 416.279422][ T29] audit: type=1400 audit(1776448919.530:501): avc: denied { create } for pid=9581 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 416.959005][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.966425][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.974525][ T9568] bridge0: entered allmulticast mode [ 416.987973][ T9571] bridge_slave_1: left allmulticast mode [ 416.994196][ T9571] bridge_slave_1: left promiscuous mode [ 417.000173][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.014636][ T9571] bridge_slave_0: left allmulticast mode [ 417.022277][ T9571] bridge_slave_0: left promiscuous mode [ 417.031544][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.316800][ T5479] 8021q: adding VLAN 0 to HW filter on device eth10 [ 417.358539][ T9574] : entered promiscuous mode [ 417.944596][ T5817] Bluetooth: hci2: command tx timeout [ 418.988406][ T29] audit: type=1400 audit(1776448922.130:502): avc: denied { unmount } for pid=6530 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 419.168638][ T29] audit: type=1400 audit(1776448922.420:503): avc: denied { mounton } for pid=9601 comm="syz.0.817" path="/186/file0" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 419.191751][ T9607] fuse: fd is not a fuse device [ 419.257536][ T8702] IPVS: stop unused estimator thread 0... [ 419.749657][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 420.022461][ T5817] Bluetooth: hci2: command tx timeout [ 420.327608][ T8702] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.539577][ T9569] chnl_net:caif_netlink_parms(): no params data found [ 420.692777][ T5479] 8021q: adding VLAN 0 to HW filter on device eth11 [ 421.211487][ T8702] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.102477][ T5817] Bluetooth: hci2: command tx timeout [ 422.154895][ T9654] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 422.238793][ T8702] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.350763][ T29] audit: type=1400 audit(1776448925.600:504): avc: denied { getopt } for pid=9660 comm="syz.6.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 422.512231][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.541542][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.010938][ T9569] bridge_slave_0: entered allmulticast mode [ 423.045119][ T9569] bridge_slave_0: entered promiscuous mode [ 423.081433][ T9652] batman_adv: batadv0: Adding interface: dummy0 [ 423.110999][ T9652] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.193141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 423.285626][ T9652] batman_adv: batadv0: Interface activated: dummy0 [ 423.481547][ T9655] batadv0: mtu less than device minimum [ 423.521388][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.533838][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.544750][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.555685][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.566723][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.577631][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.588696][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.599605][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.610719][ T9655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.652487][ T9658] gretap1: entered promiscuous mode [ 423.769286][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.925953][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.952930][ T9569] bridge_slave_1: entered allmulticast mode [ 424.222568][ T5817] Bluetooth: hci2: command tx timeout [ 424.917558][ T9569] bridge_slave_1: entered promiscuous mode [ 425.779174][ T8702] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.407269][ T9702] kAFS: unable to lookup cell '(' [ 427.659158][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.673967][ T9703] kAFS: unable to lookup cell '(,c¾ûL' [ 427.742762][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.793874][ T9706] libceph: resolve '0..' (ret=-3): failed [ 427.973164][ T9569] team0: Port device team_slave_0 added [ 428.466916][ T29] audit: type=1400 audit(1776448931.500:505): avc: denied { ioctl } for pid=9707 comm="syz.1.836" path="socket:[22237]" dev="sockfs" ino=22237 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 428.500958][ T9569] team0: Port device team_slave_1 added [ 428.537729][ T5479] 8021q: adding VLAN 0 to HW filter on device eth12 [ 428.562284][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.574655][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.666317][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.740760][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.749127][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.852218][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.924499][ T9569] hsr_slave_0: entered promiscuous mode [ 429.951153][ T9569] hsr_slave_1: entered promiscuous mode [ 430.003769][ T9569] debugfs: 'hsr0' already exists in 'hsr' [ 430.029422][ T9569] Cannot create hsr debugfs directory [ 430.321575][ T8702] pimreg: left allmulticast mode [ 430.982929][ T8702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.017348][ T8702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.041283][ T8702] bond0 (unregistering): Released all slaves [ 431.095114][ T9748] batadv_slave_1: entered promiscuous mode [ 431.160384][ T9742] batadv_slave_1: left promiscuous mode [ 432.104574][ T29] audit: type=1400 audit(1776448935.330:506): avc: denied { mount } for pid=9752 comm="syz.1.843" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 433.098102][ T5479] 8021q: adding VLAN 0 to HW filter on device eth13 [ 433.240778][ T9772] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 433.248129][ T9772] overlayfs: failed to set xattr on upper [ 433.253995][ T9772] overlayfs: ...falling back to redirect_dir=nofollow. [ 433.260880][ T9772] overlayfs: ...falling back to index=off. [ 433.266845][ T9772] overlayfs: ...falling back to uuid=null. [ 433.671502][ T29] audit: type=1400 audit(1776448936.470:507): avc: denied { mounton } for pid=9762 comm="syz.5.845" path="/file0" dev="ramfs" ino=22627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 433.822571][ T29] audit: type=1400 audit(1776448937.060:508): avc: denied { bind } for pid=9765 comm="syz.6.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 433.990704][ T8702] hsr_slave_0: left promiscuous mode [ 434.077834][ T8702] hsr_slave_1: left promiscuous mode [ 434.131743][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.193487][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.306855][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.342436][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.505325][ T8698] Bluetooth: hci3: Frame reassembly failed (-84) [ 434.564227][ T8702] veth1_macvtap: left promiscuous mode [ 434.570223][ T8702] veth0_macvtap: left promiscuous mode [ 434.613011][ T8702] veth1_vlan: left promiscuous mode [ 434.659482][ T8702] veth0_vlan: left promiscuous mode [ 436.343047][ T5817] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 437.857282][ T29] audit: type=1400 audit(1776448941.110:509): avc: denied { map } for pid=9792 comm="syz.0.850" path="socket:[22675]" dev="sockfs" ino=22675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 437.984366][ T29] audit: type=1400 audit(1776448941.110:510): avc: denied { read accept } for pid=9792 comm="syz.0.850" path="socket:[22675]" dev="sockfs" ino=22675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.040344][ T8702] team0 (unregistering): Port device team_slave_1 removed [ 438.075724][ T8702] team0 (unregistering): Port device team_slave_0 removed [ 438.291651][ T9808] Cannot find add_set index 0 as target [ 439.042745][ T9814] netlink: 'syz.0.854': attribute type 74 has an invalid length. [ 439.214482][ T9569] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 439.462564][ T29] audit: type=1400 audit(1776448942.640:511): avc: denied { mounton } for pid=9810 comm="syz.1.855" path="/proc/645/task" dev="proc" ino=23560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 440.060883][ T9814] fuse: fd is not a fuse device [ 440.078130][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.085177][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.447331][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.463858][ T9569] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 441.880782][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.905259][ T9569] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 441.957594][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.415657][ T9569] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 442.465950][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.663630][ T9849] xt_l2tp: unknown flags: 17 [ 442.690573][ T29] audit: type=1400 audit(1776448945.940:512): avc: denied { create } for pid=9850 comm="syz.5.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 442.841645][ T29] audit: type=1400 audit(1776448945.960:513): avc: denied { ioctl } for pid=9850 comm="syz.5.859" path="socket:[22746]" dev="sockfs" ino=22746 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 442.919455][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.020111][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.186157][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.193299][ T8698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.381430][ T29] audit: type=1400 audit(1776448946.630:514): avc: denied { connect } for pid=9857 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 443.384073][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.408124][ T8698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.468217][ T29] audit: type=1400 audit(1776448946.670:515): avc: denied { read } for pid=9859 comm="syz.6.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 443.982947][ T5479] 8021q: adding VLAN 0 to HW filter on device eth14 [ 444.668061][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.379097][ T9569] veth0_vlan: entered promiscuous mode [ 445.426469][ T9569] veth1_vlan: entered promiscuous mode [ 446.292586][ T29] audit: type=1400 audit(1776448949.540:516): avc: denied { getopt } for pid=9911 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 446.342152][ T9569] veth0_macvtap: entered promiscuous mode [ 446.382217][ T9916] XFS (nullb0): Invalid superblock magic number [ 447.648130][ T9569] veth1_macvtap: entered promiscuous mode [ 447.752858][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.806388][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.873659][ T8703] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.032825][ T5479] 8021q: adding VLAN 0 to HW filter on device eth15 [ 448.549437][ T8703] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.581803][ T8703] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.628758][ T8703] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.990016][ T8703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.030506][ T8703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.277343][ T8703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.840700][ T8703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.232327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 452.712617][ T29] audit: type=1800 audit(1776448955.940:517): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.875" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 454.422557][ T5479] 8021q: adding VLAN 0 to HW filter on device eth16 [ 454.452479][ T5942] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 454.662539][ T5942] usb 9-1: Using ep0 maxpacket: 8 [ 454.697903][ T5942] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 454.726384][ T5942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.869458][ T5942] pvrusb2: Hardware description: Terratec Grabster AV400 [ 454.911581][ T5942] pvrusb2: ********** [ 454.948826][ T5942] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 455.054476][ T5942] pvrusb2: Important functionality might not be entirely working. [ 455.103694][T10028] comedi comedi0: Minor 2 could not be opened [ 455.401247][T10029] netlink: 'syz.8.879': attribute type 21 has an invalid length. [ 455.425789][ T5942] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 455.439969][T10029] netlink: 156 bytes leftover after parsing attributes in process `syz.8.879'. [ 455.450984][ T5942] pvrusb2: ********** [ 455.670506][ T2350] pvrusb2: Invalid write control endpoint [ 456.184204][ T10] usb 9-1: USB disconnect, device number 2 [ 456.374002][ T2350] pvrusb2: Invalid write control endpoint [ 456.408117][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 456.426479][ T29] audit: type=1400 audit(1776448959.670:518): avc: denied { ioctl } for pid=10042 comm="syz.5.885" path="socket:[23873]" dev="sockfs" ino=23873 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 456.643179][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 457.149983][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 457.182769][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 457.613508][ T2350] pvrusb2: Device being rendered inoperable [ 457.784203][ T2350] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 458.258511][ T5942] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 458.312068][ T2350] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 458.414443][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 458.555545][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 458.620148][ T2350] pvrusb2: Attached sub-driver cx25840 [ 458.628821][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 458.679591][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.679601][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 459.322522][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.381186][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 459.405016][T10075] netlink: 84 bytes leftover after parsing attributes in process `syz.1.890'. [ 459.445115][ T5942] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 459.498617][ T5942] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 459.600670][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.646078][ T5942] usb 6-1: config 0 descriptor?? [ 459.679681][ T5942] usb 6-1: can't set config #0, error -71 [ 459.716360][ T5942] usb 6-1: USB disconnect, device number 9 [ 459.741734][ T29] audit: type=1400 audit(1776448962.990:519): avc: denied { create } for pid=10059 comm="syz.8.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 460.038748][T10088] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 460.209335][T10088] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 461.425797][ T29] audit: type=1400 audit(1776448964.670:520): avc: denied { append } for pid=10118 comm="syz.8.898" name="dvr0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 462.846063][ T29] audit: type=1400 audit(1776448966.100:521): avc: denied { map } for pid=10132 comm="syz.6.901" path="socket:[23335]" dev="sockfs" ino=23335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 463.154405][T10142] overlayfs: failed to clone lowerpath [ 463.166483][ T29] audit: type=1400 audit(1776448966.400:522): avc: denied { mount } for pid=10141 comm="syz.0.903" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 463.252146][T10144] netlink: 'syz.6.904': attribute type 8 has an invalid length. [ 463.562498][T10148] lo speed is unknown, defaulting to 1000 [ 463.568638][T10148] lo speed is unknown, defaulting to 1000 [ 463.586303][T10148] lo speed is unknown, defaulting to 1000 [ 463.598473][T10148] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 463.613006][T10148] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 463.630174][T10148] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 463.657554][T10148] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 463.716691][T10148] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 463.880307][T10148] lo speed is unknown, defaulting to 1000 [ 463.887077][T10148] lo speed is unknown, defaulting to 1000 [ 463.894559][T10148] lo speed is unknown, defaulting to 1000 [ 463.901074][T10148] lo speed is unknown, defaulting to 1000 [ 463.907611][T10148] lo speed is unknown, defaulting to 1000 [ 466.030525][T10171] comedi comedi0: Minor 2 could not be opened [ 466.826573][T10181] netlink: 56 bytes leftover after parsing attributes in process `syz.0.914'. [ 466.836691][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 466.845923][T10181] netlink: 43 bytes leftover after parsing attributes in process `syz.0.914'. [ 466.854867][T10181] netlink: 43 bytes leftover after parsing attributes in process `syz.0.914'. [ 467.902439][T10190] netlink: 'syz.1.915': attribute type 4 has an invalid length. [ 467.918311][T10190] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 467.926073][T10190] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 469.375863][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 475.082369][ T29] audit: type=1400 audit(1776448978.330:523): avc: denied { unmount } for pid=6530 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 475.140731][T10291] overlayfs: failed to clone upperpath [ 477.191402][T10314] netlink: 'syz.5.938': attribute type 1 has an invalid length. [ 477.199314][T10314] netlink: 760 bytes leftover after parsing attributes in process `syz.5.938'. [ 477.208442][T10314] netlink: 1 bytes leftover after parsing attributes in process `syz.5.938'. [ 477.625060][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 477.658621][ T29] audit: type=1400 audit(1776448980.860:524): avc: denied { connect } for pid=10317 comm="syz.5.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 478.124277][ T5869] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2E, changing to 0xE [ 478.158598][ T5869] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 25970, setting to 1024 [ 478.258346][ T5869] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 478.272252][ T5869] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 478.296990][ T5869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 478.320891][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.351803][ T5869] usb 2-1: SerialNumber: syz [ 478.378259][T10312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 478.865578][ T5869] usbtest 2-1:1.0: Linux user mode ISO test driver [ 478.879995][ T5869] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 478.941055][ T5869] usb 2-1: USB disconnect, device number 7 [ 480.876954][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.8.944'. [ 481.905416][T10369] random: crng reseeded on system resumption [ 482.118647][T10369] Restarting kernel threads ... [ 482.124557][T10369] Done restarting kernel threads. [ 482.139453][ T29] audit: type=1400 audit(1776448985.370:525): avc: denied { ioctl } for pid=10359 comm="syz.5.947" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 483.101659][T10368] lo speed is unknown, defaulting to 1000 [ 483.760168][ T29] audit: type=1400 audit(1776448986.970:526): avc: denied { watch watch_reads } for pid=10367 comm="syz.1.948" path="pipe:[5253]" dev="pipefs" ino=5253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 484.082418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 485.836710][ T29] audit: type=1400 audit(1776448989.080:527): avc: denied { audit_write } for pid=10391 comm="syz.0.953" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 486.321949][ T29] audit: type=1400 audit(1776448989.170:528): avc: denied { watch watch_reads } for pid=10391 comm="syz.0.953" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 486.749049][T10407] random: crng reseeded on system resumption [ 488.465745][T10432] SQUASHFS error: Failed to read block 0x0: -5 [ 490.704061][T10447] GUP no longer grows the stack in syz.1.961 (10447): 200000004000-200000005000 (200000001000) [ 490.977686][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.1.961 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.977725][T10447] Tainted: [L]=SOFTLOCKUP [ 490.977734][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 490.977751][T10447] Call Trace: [ 490.977759][T10447] [ 490.977768][T10447] dump_stack_lvl+0x100/0x190 [ 490.977801][T10447] gup_vma_lookup.cold+0x83/0x96 [ 490.977835][T10447] __get_user_pages+0x241/0x32a0 [ 490.977866][T10447] ? down_read_killable+0x307/0x4b0 [ 490.977901][T10447] ? __pfx___get_user_pages+0x10/0x10 [ 490.977934][T10447] __gup_longterm_locked+0x87d/0x16f0 [ 490.977954][T10447] ? find_held_lock+0x2b/0x80 [ 490.977975][T10447] ? __pfx___gup_longterm_locked+0x10/0x10 [ 490.977988][T10447] ? lock_acquire+0x1b1/0x370 [ 490.978007][T10447] gup_fast_fallback+0x16dc/0x2790 [ 490.978031][T10447] ? __pfx_gup_fast_fallback+0x10/0x10 [ 490.978046][T10447] ? __lock_acquire+0x4a5/0x2630 [ 490.978061][T10447] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 490.978082][T10447] get_user_pages_fast+0xa7/0xf0 [ 490.978095][T10447] ? __pfx_get_user_pages_fast+0x10/0x10 [ 490.978111][T10447] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 490.978133][T10447] ? __mutex_lock+0x26d/0x1b10 [ 490.978147][T10447] ? pipe_lock+0x69/0x80 [ 490.978159][T10447] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 490.978180][T10447] ? __pfx___mutex_lock+0x10/0x10 [ 490.978193][T10447] ? find_held_lock+0x2b/0x80 [ 490.978210][T10447] ? futex_unqueue+0x133/0x2c0 [ 490.978224][T10447] ? import_ubuf+0x1b6/0x220 [ 490.978245][T10447] iov_iter_get_pages2+0xa3/0x100 [ 490.978264][T10447] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 490.978282][T10447] ? wait_for_space+0x2ca/0x3b0 [ 490.978297][T10447] __do_sys_vmsplice+0x7dd/0x13c0 [ 490.978317][T10447] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 490.978335][T10447] ? __pfx_futex_wait+0x10/0x10 [ 490.978379][T10447] ? do_syscall_64+0x10b/0xf80 [ 490.978392][T10447] do_syscall_64+0x10b/0xf80 [ 490.978404][T10447] ? clear_bhb_loop+0x40/0x90 [ 490.978418][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.978431][T10447] RIP: 0033:0x7fde04d9c819 [ 490.978441][T10447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.978453][T10447] RSP: 002b:00007fde05ca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 490.978470][T10447] RAX: ffffffffffffffda RBX: 00007fde05015fa0 RCX: 00007fde04d9c819 [ 490.978479][T10447] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 490.978487][T10447] RBP: 00007fde04e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 490.978495][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.978503][T10447] R13: 00007fde05016038 R14: 00007fde05015fa0 R15: 00007ffce698db78 [ 490.978526][T10447] [ 491.530659][T10465] net_ratelimit: 10 callbacks suppressed [ 491.530683][T10465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.594340][T10466] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 491.845484][ T29] audit: type=1400 audit(1776448995.100:529): avc: denied { setopt } for pid=10467 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 494.298576][T10513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.985910][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.6.978'. [ 497.912548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 501.285087][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.291648][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.824715][ T29] audit: type=1400 audit(1776449005.080:530): avc: denied { ioctl } for pid=10575 comm="syz.0.988" path="socket:[25003]" dev="sockfs" ino=25003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 501.922789][T10576] netlink: 164 bytes leftover after parsing attributes in process `syz.0.988'. [ 501.954147][ T160] bond0: (slave bond_slave_0): interface is now down [ 501.971255][T10579] netlink: 'syz.6.989': attribute type 10 has an invalid length. [ 502.027284][ T160] bond0: (slave bond_slave_1): interface is now down [ 502.055313][T10579] syz_tun: entered promiscuous mode [ 502.064145][ T29] audit: type=1400 audit(1776449005.320:531): avc: denied { map } for pid=10575 comm="syz.0.988" path="socket:[25000]" dev="sockfs" ino=25000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 502.084649][ T160] bond0: (slave bond_slave_0): interface is now down [ 502.151265][T10579] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 502.155422][ T29] audit: type=1400 audit(1776449005.320:532): avc: denied { read } for pid=10575 comm="syz.0.988" path="socket:[25000]" dev="sockfs" ino=25000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 502.161707][ T160] bond0: (slave bond_slave_1): interface is now down [ 502.243890][ T160] bond0: (slave syz_tun): interface is now down [ 503.421597][ T160] bond0: now running without any active interface! [ 504.522127][ T29] audit: type=1400 audit(1776449007.770:533): avc: denied { listen } for pid=10592 comm="syz.5.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 504.869996][ T29] audit: type=1326 audit(1776449008.120:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 505.428584][ T29] audit: type=1326 audit(1776449008.630:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 505.550312][T10605] syz.1.996 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 505.676582][ T29] audit: type=1326 audit(1776449008.660:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 505.794877][T10612] dummy0: entered allmulticast mode [ 505.802449][T10611] dummy0: left allmulticast mode [ 505.819599][ T29] audit: type=1326 audit(1776449008.660:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 505.954091][ T29] audit: type=1326 audit(1776449008.660:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 505.986932][T10607] usb usb7: usbfs: process 10607 (syz.1.996) did not claim interface 0 before use [ 506.151397][ T29] audit: type=1326 audit(1776449008.790:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 507.432824][T10628] 9pnet_fd: Insufficient options for proto=fd [ 507.972750][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 507.972767][ T29] audit: type=1326 audit(1776449011.220:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 508.098034][ T29] audit: type=1326 audit(1776449011.230:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 508.212349][ T29] audit: type=1400 audit(1776449011.460:615): avc: denied { accept } for pid=10616 comm="syz.0.1001" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 510.395831][ T29] audit: type=1400 audit(1776449013.640:616): avc: denied { ioctl } for pid=10643 comm="syz.8.1007" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 511.180262][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1011'. [ 513.954742][ T29] audit: type=1326 audit(1776449017.200:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 514.035500][T10690] ptrace attach of "./syz-executor exec"[9569] was attempted by "./syz-executor exec"[10690] [ 514.363284][ T29] audit: type=1326 audit(1776449017.210:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 514.502566][ T29] audit: type=1326 audit(1776449017.230:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 515.087060][ T29] audit: type=1326 audit(1776449017.230:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 515.307852][ T29] audit: type=1400 audit(1776449017.300:621): avc: denied { ioctl } for pid=10682 comm="syz.8.1015" path="socket:[25181]" dev="sockfs" ino=25181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 515.386704][ T29] audit: type=1326 audit(1776449017.510:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde04d9c582 code=0x7ffc0000 [ 516.363444][ T29] audit: type=1326 audit(1776449017.510:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde04d9c582 code=0x7ffc0000 [ 516.401851][ T29] audit: type=1326 audit(1776449017.520:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 516.532467][T10703] netlink: 'syz.5.1020': attribute type 39 has an invalid length. [ 517.392928][ T29] audit: type=1326 audit(1776449017.520:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 517.681161][ T29] audit: type=1326 audit(1776449017.520:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 519.459412][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 519.459430][ T29] audit: type=1400 audit(1776449022.700:683): avc: denied { read write } for pid=10707 comm="syz.8.1022" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 520.071832][ T29] audit: type=1400 audit(1776449022.710:684): avc: denied { open } for pid=10707 comm="syz.8.1022" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 520.185489][T10731] netlink: 'syz.5.1024': attribute type 27 has an invalid length. [ 520.852566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 520.926013][T10740] dummy0: entered promiscuous mode [ 521.561774][T10740] dummy0: left promiscuous mode [ 522.060751][T10754] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 522.562829][ T29] audit: type=1800 audit(1776449025.820:685): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1034" name="nullb0" dev="tmpfs" ino=598 res=0 errno=0 [ 523.983273][ T29] audit: type=1326 audit(1776449026.850:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 524.098882][ T29] audit: type=1326 audit(1776449026.850:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 524.143435][ T29] audit: type=1326 audit(1776449026.860:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 524.201023][ T29] audit: type=1326 audit(1776449026.860:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 524.247788][ T29] audit: type=1326 audit(1776449026.860:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 524.420217][ T29] audit: type=1326 audit(1776449027.060:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 525.431307][ T29] audit: type=1326 audit(1776449027.060:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 525.455336][ T29] audit: type=1326 audit(1776449027.180:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde04d5d04e code=0x7ffc0000 [ 525.837810][ T29] audit: type=1326 audit(1776449027.180:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde04d9c819 code=0x7ffc0000 [ 525.995019][ T29] audit: type=1326 audit(1776449027.180:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde04d5d04e code=0x7ffc0000 [ 526.032065][ T29] audit: type=1326 audit(1776449027.180:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde04d5d04e code=0x7ffc0000 [ 526.527877][ T29] audit: type=1326 audit(1776449027.180:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde04d5d04e code=0x7ffc0000 [ 526.551410][ T29] audit: type=1326 audit(1776449027.190:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde04d5d04e code=0x7ffc0000 [ 526.574906][ T29] audit: type=1326 audit(1776449027.190:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde04d5d04e code=0x7ffc0000 [ 527.016422][ T29] audit: type=1326 audit(1776449027.190:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde04d5d04e code=0x7ffc0000 [ 527.090574][ T29] audit: type=1326 audit(1776449027.190:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10773 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde04d5d04e code=0x7ffc0000 [ 528.644423][T10807] random: crng reseeded on system resumption [ 529.030205][T10807] Restarting kernel threads ... [ 529.035571][T10807] Done restarting kernel threads. [ 529.931712][T10806] lo speed is unknown, defaulting to 1000 [ 530.666156][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 530.666176][ T29] audit: type=1400 audit(1776449033.890:754): avc: denied { mount } for pid=10810 comm="syz.8.1044" name="/" dev="hugetlbfs" ino=26017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 535.234309][ T29] audit: type=1400 audit(1776449038.410:755): avc: denied { getopt } for pid=10845 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 536.813313][ T29] audit: type=1326 audit(1776449040.070:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 536.840961][ T29] audit: type=1326 audit(1776449040.070:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 536.869439][ T29] audit: type=1326 audit(1776449040.070:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 537.956208][T10868] random: crng reseeded on system resumption [ 538.261820][ T29] audit: type=1326 audit(1776449040.070:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 539.235871][ T29] audit: type=1326 audit(1776449040.070:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 539.259405][ T29] audit: type=1326 audit(1776449040.090:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 539.283030][ T29] audit: type=1326 audit(1776449040.090:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 539.848883][T10866] lo speed is unknown, defaulting to 1000 [ 539.869401][ T29] audit: type=1326 audit(1776449040.090:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 539.901140][ T29] audit: type=1326 audit(1776449040.090:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.6.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5db7b9c819 code=0x7ffc0000 [ 540.132417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 540.264734][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 540.799063][ T7684] libceph: connect (1)[c::]:6789 error -101 [ 540.925386][ T7684] libceph: mon0 (1)[c::]:6789 connect error [ 540.953472][T10878] ceph: No mds server is up or the cluster is laggy [ 541.196541][ T7684] libceph: connect (1)[c::]:6789 error -101 [ 541.206336][ T7684] libceph: mon0 (1)[c::]:6789 connect error [ 541.663351][T10884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10884 comm=syz.0.1061 [ 541.943835][T10891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.349642][ T29] audit: type=1400 audit(1776449045.580:765): avc: denied { wake_alarm } for pid=10895 comm="syz.8.1066" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 542.418166][T10900] No control pipe specified [ 542.454022][ T29] audit: type=1400 audit(1776449045.650:766): avc: denied { map } for pid=10899 comm="syz.5.1067" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 542.484354][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1067'. [ 542.502748][ T29] audit: type=1400 audit(1776449045.730:767): avc: denied { read } for pid=10899 comm="syz.5.1067" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 542.528456][ T29] audit: type=1400 audit(1776449045.730:768): avc: denied { open } for pid=10899 comm="syz.5.1067" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 542.565265][T10900] hsr_slave_0: left promiscuous mode [ 542.602053][T10900] hsr_slave_1: left promiscuous mode [ 542.618223][ T29] audit: type=1400 audit(1776449045.870:769): avc: denied { ioctl } for pid=10899 comm="syz.5.1067" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 542.648414][T10904] binder: 10895:10904 ioctl c0046209 200000000000000 returned -22 [ 543.570032][T10914] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 544.329664][T10921] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 544.336782][T10921] overlayfs: failed to set xattr on upper [ 544.345111][T10921] overlayfs: ...falling back to redirect_dir=nofollow. [ 544.351996][T10921] overlayfs: ...falling back to index=off. [ 544.357865][T10921] overlayfs: ...falling back to uuid=null. [ 544.415024][T10922] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 544.422075][T10922] overlayfs: failed to set xattr on upper [ 544.427882][T10922] overlayfs: ...falling back to redirect_dir=nofollow. [ 544.436446][T10922] overlayfs: ...falling back to index=off. [ 544.442334][T10922] overlayfs: ...falling back to uuid=null. [ 544.448569][T10922] overlayfs: conflicting lowerdir path [ 545.273780][T10932] omfs: Invalid superblock (0) [ 545.545782][T10910] 9pnet_virtio: no channels available for device syz [ 545.843397][T10938] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 545.912513][ T29] audit: type=1326 audit(1776449049.110:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e499c819 code=0x7ffc0000 [ 546.405096][ T29] audit: type=1326 audit(1776449049.110:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f65e499c819 code=0x7ffc0000 [ 546.996825][ T29] audit: type=1326 audit(1776449049.110:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e499c819 code=0x7ffc0000 [ 547.042425][ T29] audit: type=1326 audit(1776449049.110:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f65e499c819 code=0x7ffc0000 [ 547.245957][ T29] audit: type=1326 audit(1776449049.110:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e499c819 code=0x7ffc0000 [ 547.787615][ T29] audit: type=1326 audit(1776449049.110:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f65e499c819 code=0x7ffc0000 [ 547.811787][ T29] audit: type=1326 audit(1776449049.120:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e499c819 code=0x7ffc0000 [ 547.952108][ T29] audit: type=1326 audit(1776449049.120:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e499c819 code=0x7ffc0000 [ 547.980678][T10957] kAFS: unable to lookup cell 'ÿ' [ 547.990409][T10957] kAFS: unable to lookup cell '(,c¾Ì' [ 548.112484][ T29] audit: type=1400 audit(1776449049.650:778): avc: denied { setattr } for pid=10924 comm="syz.5.1073" name="secretmem" dev="secretmem" ino=25594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 548.429182][T10963] ptrace attach of "./syz-executor exec"[7875] was attempted by "./syz-executor exec"[10963] [ 549.613896][ T29] audit: type=1400 audit(1776449052.640:779): avc: denied { getopt } for pid=10965 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.702600][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 555.213919][T11013] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1092'. [ 555.508827][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1095'. [ 556.260116][T11021] syz_tun: left promiscuous mode [ 556.288254][T11021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.297780][T11040] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[11040] [ 557.325009][ T7684] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 557.873760][ T7684] usb 9-1: Using ep0 maxpacket: 16 [ 557.894455][ T7684] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.099421][ T7684] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.240848][ T7684] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 558.452302][ T7684] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 558.477877][ T7684] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.493535][ T7684] usb 9-1: config 0 descriptor?? [ 558.802519][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 559.904820][ T7684] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 559.919558][ T7684] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 560.032939][ T5869] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 560.272448][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 560.319687][ T7684] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0002/input/input7 [ 560.371838][ T5869] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 560.389770][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.404012][ T5869] usb 2-1: Product: syz [ 560.417410][ T5869] usb 2-1: Manufacturer: syz [ 560.426915][ T5869] usb 2-1: SerialNumber: syz [ 560.441158][ T29] audit: type=1400 audit(1776449063.690:780): avc: denied { read } for pid=5169 comm="acpid" name="js0" dev="devtmpfs" ino=2861 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.580600][ T29] audit: type=1400 audit(1776449063.690:781): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2861 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.675299][ T29] audit: type=1400 audit(1776449063.690:782): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2861 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.707902][ T7684] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 560.745938][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.783169][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.002546][T11087] SET target dimension over the limit! [ 561.337758][ T800] usb 9-1: USB disconnect, device number 3 [ 561.913733][T11096] SQUASHFS error: Failed to read block 0x0: -5 [ 562.266286][T11098] : entered allmulticast mode [ 562.545912][T11102] xt_policy: output policy not valid in PREROUTING and INPUT [ 562.667429][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.876497][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.107688][ T29] audit: type=1400 audit(1776449066.360:783): avc: denied { create } for pid=11105 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.155354][ T29] audit: type=1400 audit(1776449066.380:784): avc: denied { setopt } for pid=11105 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.210423][ T800] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 563.682181][ T29] audit: type=1400 audit(1776449066.620:785): avc: denied { map } for pid=11104 comm="syz.8.1118" path="socket:[26505]" dev="sockfs" ino=26505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 563.742366][ T800] usb 6-1: Using ep0 maxpacket: 8 [ 563.750207][ T800] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.756171][ T29] audit: type=1400 audit(1776449066.640:786): avc: denied { bind } for pid=11104 comm="syz.8.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 563.761720][ T800] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 563.792296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 563.837769][T11097] lo speed is unknown, defaulting to 1000 [ 563.850031][ T800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 34494, setting to 1024 [ 563.966400][ T800] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 563.980277][ T800] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 563.988495][ T800] usb 6-1: Product: syz [ 564.019749][ T800] usb 6-1: Manufacturer: syz [ 564.041126][ T800] usb 6-1: SerialNumber: syz [ 564.159242][ T800] usb 6-1: config 0 descriptor?? [ 564.170252][T11102] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 565.399322][ T5869] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 565.482721][ T800] rc_core: IR keymap rc-imon-rsc not found [ 565.784098][ T29] audit: type=1400 audit(1776449068.980:787): avc: denied { read write } for pid=11124 comm="syz.8.1122" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 565.814502][ T800] Registered IR keymap rc-empty [ 565.823955][ T5869] usb 2-1: USB disconnect, device number 8 [ 565.837192][ T800] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 565.869792][ T29] audit: type=1400 audit(1776449068.980:788): avc: denied { open } for pid=11124 comm="syz.8.1122" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 566.087391][ T800] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 566.785233][ T800] usb 6-1: USB disconnect, device number 10 [ 568.248224][T11156] SQUASHFS error: Failed to read block 0x0: -5 [ 568.945611][ T29] audit: type=1400 audit(1776449072.190:789): avc: denied { listen } for pid=11153 comm="syz.8.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 569.029579][ T29] audit: type=1400 audit(1776449072.190:790): avc: denied { accept } for pid=11153 comm="syz.8.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 569.163791][ T5942] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 569.255860][ T7684] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 569.296596][ T5906] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 569.413018][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 569.419742][ T5942] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 569.430164][ T5942] usb 6-1: config 0 has no interface number 0 [ 569.437909][ T5942] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.448891][ T5942] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 569.460869][ T5942] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 569.472816][ T5942] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 569.547881][T11168] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1133'. [ 569.878999][ T5942] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 569.888653][ T7684] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 569.897381][ T5906] usb 9-1: Using ep0 maxpacket: 8 [ 569.902471][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.910483][ T7684] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 569.920048][ T5906] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.933469][ T5942] usb 6-1: config 0 descriptor?? [ 569.941312][ T7684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.951734][ T5906] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 569.974417][ T5906] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 569.988801][ T7684] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 570.014127][ T7684] usb 2-1: config 0 has no interface number 0 [ 570.021639][ T5942] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 570.021713][ T5906] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.047581][ T7684] usb 2-1: config 0 has no interface number 1 [ 570.054454][ T7684] usb 2-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice=29.ac [ 570.064124][ T7684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.072327][ T5906] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.085943][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.107818][ T7684] usb 2-1: config 0 descriptor?? [ 570.123958][ T7684] usb 2-1: unknown number of interfaces: 2 [ 570.849625][T11175] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1134'. [ 571.334120][ T5822] usb 6-1: USB disconnect, device number 11 [ 571.448648][ T800] usb 2-1: USB disconnect, device number 9 [ 571.624589][T11177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27161 sclass=netlink_route_socket pid=11177 comm=syz.6.1135 [ 571.674544][ T5822] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 571.690970][ T5906] usb 9-1: usb_control_msg returned -71 [ 571.699943][ T5906] usbtmc 9-1:16.0: can't read capabilities [ 571.758329][ T5906] usb 9-1: USB disconnect, device number 4 [ 571.816763][ T7684] Process accounting resumed [ 571.897994][T11178] Process accounting resumed [ 572.981896][ T29] audit: type=1400 audit(1776449075.440:791): avc: denied { write } for pid=11184 comm="syz.8.1137" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 573.540501][ T29] audit: type=1400 audit(1776449076.790:792): avc: denied { open } for pid=11194 comm="syz.8.1139" path="/dev/ptyr4" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 574.038764][ T29] audit: type=1400 audit(1776449077.290:793): avc: denied { ioctl } for pid=11194 comm="syz.8.1139" path="/dev/ptyr4" dev="devtmpfs" ino=139 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 574.094339][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1141'. [ 574.181315][ T29] audit: type=1400 audit(1776449077.430:794): avc: denied { create } for pid=11194 comm="syz.8.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 575.398092][T11200] bridge_slave_0: left allmulticast mode [ 575.427560][T11200] bridge_slave_0: left promiscuous mode [ 575.438911][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.070741][T11200] bridge_slave_1: left allmulticast mode [ 576.090707][T11200] bridge_slave_1: left promiscuous mode [ 576.104078][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.573048][T11200] bond0: (slave bond_slave_0): Releasing backup interface [ 576.669051][ T29] audit: type=1400 audit(1776449079.900:795): avc: denied { watch_sb } for pid=11215 comm="syz.6.1146" path="/144/file0" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 577.505908][T11200] bond0: (slave bond_slave_1): Releasing backup interface [ 577.579681][T11200] team0: Port device team_slave_0 removed [ 577.762236][T11200] team0: Port device team_slave_1 removed [ 577.786702][T11234] siw: device registration error -23 [ 577.796610][T11200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.807107][T11234] smc: removing ib device syz2 [ 577.821843][T11200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.536833][T11234] smbdirect: ib_dev[syz2] removed [ 578.802378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 579.086325][T11234] ------------[ cut here ]------------ [ 579.091817][T11234] !xa_empty(&pool->xa) [ 579.091827][T11234] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.6.1149/11234 [ 579.107331][T11234] Modules linked in: [ 579.111693][T11234] CPU: 0 UID: 0 PID: 11234 Comm: syz.6.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.122664][T11234] Tainted: [L]=SOFTLOCKUP [ 579.126968][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.137129][T11234] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 579.142698][T11234] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 16 df 4b f9 5b c3 cc cc cc cc e8 0b df 4b f9 90 <0f> 0b 90 e8 02 df 4b f9 5b c3 cc cc cc cc e8 57 99 b8 f9 eb d0 0f [ 579.162514][T11234] RSP: 0018:ffffc90004a471c0 EFLAGS: 00010246 [ 579.168590][T11234] RAX: 0000000000080000 RBX: ffff888032de1390 RCX: ffffc90015965000 [ 579.176576][T11234] RDX: 0000000000080000 RSI: ffffffff88bce3b5 RDI: ffff888032de1410 [ 579.184565][T11234] RBP: ffffffff88bb4640 R08: 0000000000000005 R09: 0000000000000001 [ 579.192556][T11234] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888032de06a0 [ 579.200509][T11234] R13: ffff888032ddffe0 R14: ffff888032ddffe0 R15: ffff888032de10f8 [ 579.208508][T11234] FS: 00007f5db89ef6c0(0000) GS:ffff8881242f2000(0000) knlGS:0000000000000000 [ 579.218256][T11234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.225233][T11234] CR2: 00005555654224e8 CR3: 0000000033e26000 CR4: 00000000003526f0 [ 579.233227][T11234] Call Trace: [ 579.236487][T11234] [ 579.239395][T11234] rxe_dealloc+0x25/0xc0 [ 579.243656][T11234] ib_dealloc_device+0x49/0x230 [ 579.248495][T11234] __ib_unregister_device+0x396/0x480 [ 579.253881][T11234] ib_unregister_device_and_put+0x5a/0x80 [ 579.259581][T11234] nldev_dellink+0x226/0x320 [ 579.264185][T11234] ? __pfx_nldev_dellink+0x10/0x10 [ 579.269368][T11234] ? rcu_is_watching+0x12/0xc0 [ 579.274150][T11234] ? cap_capable+0x10b/0x440 [ 579.278730][T11234] ? bpf_lsm_capable+0x9/0x10 [ 579.283508][T11234] ? security_capable+0x80/0x260 [ 579.288427][T11234] ? ns_capable+0xd2/0xf0 [ 579.292754][T11234] ? __pfx_nldev_dellink+0x10/0x10 [ 579.297863][T11234] rdma_nl_rcv_msg+0x392/0x6f0 [ 579.302654][T11234] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 579.307922][T11234] ? __lock_acquire+0x4a5/0x2630 [ 579.312879][T11234] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 579.319463][T11234] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 579.326435][T11234] ? netlink_deliver_tap+0x1ae/0xcc0 [ 579.331713][T11234] netlink_unicast+0x585/0x850 [ 579.336486][T11234] ? __pfx_netlink_unicast+0x10/0x10 [ 579.341770][T11234] netlink_sendmsg+0x8b0/0xda0 [ 579.346685][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.351966][T11234] ? __might_fault+0x60/0x140 [ 579.356669][T11234] ____sys_sendmsg+0x9e1/0xb70 [ 579.361423][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.366726][T11234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.371999][T11234] ? __pfx_futex_wake_mark+0x10/0x10 [ 579.377309][T11234] ___sys_sendmsg+0x190/0x1e0 [ 579.381973][T11234] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.387202][T11234] ? do_futex+0x192/0x350 [ 579.391516][T11234] __sys_sendmsg+0x170/0x220 [ 579.396116][T11234] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.401218][T11234] ? __x64_sys_futex+0x34f/0x4d0 [ 579.406226][T11234] ? rcu_is_watching+0x12/0xc0 [ 579.411009][T11234] do_syscall_64+0x10b/0xf80 [ 579.415615][T11234] ? clear_bhb_loop+0x40/0x90 [ 579.420473][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.426401][T11234] RIP: 0033:0x7f5db7b9c819 [ 579.430798][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.450442][T11234] RSP: 002b:00007f5db89ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.458866][T11234] RAX: ffffffffffffffda RBX: 00007f5db7e15fa0 RCX: 00007f5db7b9c819 [ 579.466872][T11234] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 579.474865][T11234] RBP: 00007f5db7c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 579.482845][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.490794][T11234] R13: 00007f5db7e16038 R14: 00007f5db7e15fa0 R15: 00007ffd51a5a068 [ 579.498799][T11234] [ 579.501796][T11234] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 579.509050][T11234] CPU: 0 UID: 0 PID: 11234 Comm: syz.6.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.519958][T11234] Tainted: [L]=SOFTLOCKUP [ 579.524293][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.534331][T11234] Call Trace: [ 579.537587][T11234] [ 579.540493][T11234] dump_stack_lvl+0x100/0x190 [ 579.545152][T11234] vpanic+0x552/0x970 [ 579.549137][T11234] ? __pfx_vpanic+0x10/0x10 [ 579.553635][T11234] panic+0xd1/0xe0 [ 579.557333][T11234] ? __pfx_panic+0x10/0x10 [ 579.561751][T11234] check_panic_on_warn.cold+0x19/0x34 [ 579.567098][T11234] ? rxe_pool_cleanup+0x46/0x60 [ 579.571922][T11234] __warn.cold+0x191/0x328 [ 579.576315][T11234] __report_bug+0x296/0x3d0 [ 579.580801][T11234] ? rxe_pool_cleanup+0x46/0x60 [ 579.585639][T11234] ? __pfx___report_bug+0x10/0x10 [ 579.590650][T11234] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 579.596441][T11234] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 579.602233][T11234] ? __flush_workqueue+0x426/0x1200 [ 579.607419][T11234] ? rxe_pool_cleanup+0x46/0x60 [ 579.612268][T11234] report_bug+0xb2/0x220 [ 579.616503][T11234] ? rxe_pool_cleanup+0x46/0x60 [ 579.621347][T11234] handle_bug+0x16a/0x2a0 [ 579.625675][T11234] exc_invalid_op+0x17/0x50 [ 579.630161][T11234] asm_exc_invalid_op+0x1a/0x20 [ 579.634986][T11234] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 579.640422][T11234] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 16 df 4b f9 5b c3 cc cc cc cc e8 0b df 4b f9 90 <0f> 0b 90 e8 02 df 4b f9 5b c3 cc cc cc cc e8 57 99 b8 f9 eb d0 0f [ 579.660001][T11234] RSP: 0018:ffffc90004a471c0 EFLAGS: 00010246 [ 579.666046][T11234] RAX: 0000000000080000 RBX: ffff888032de1390 RCX: ffffc90015965000 [ 579.673994][T11234] RDX: 0000000000080000 RSI: ffffffff88bce3b5 RDI: ffff888032de1410 [ 579.681940][T11234] RBP: ffffffff88bb4640 R08: 0000000000000005 R09: 0000000000000001 [ 579.689910][T11234] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888032de06a0 [ 579.697871][T11234] R13: ffff888032ddffe0 R14: ffff888032ddffe0 R15: ffff888032de10f8 [ 579.705825][T11234] ? __pfx_rxe_dealloc+0x10/0x10 [ 579.710749][T11234] ? rxe_pool_cleanup+0x45/0x60 [ 579.715588][T11234] rxe_dealloc+0x25/0xc0 [ 579.719810][T11234] ib_dealloc_device+0x49/0x230 [ 579.724638][T11234] __ib_unregister_device+0x396/0x480 [ 579.729997][T11234] ib_unregister_device_and_put+0x5a/0x80 [ 579.735691][T11234] nldev_dellink+0x226/0x320 [ 579.740265][T11234] ? __pfx_nldev_dellink+0x10/0x10 [ 579.745394][T11234] ? rcu_is_watching+0x12/0xc0 [ 579.750135][T11234] ? cap_capable+0x10b/0x440 [ 579.754704][T11234] ? bpf_lsm_capable+0x9/0x10 [ 579.759352][T11234] ? security_capable+0x80/0x260 [ 579.764285][T11234] ? ns_capable+0xd2/0xf0 [ 579.768589][T11234] ? __pfx_nldev_dellink+0x10/0x10 [ 579.773680][T11234] rdma_nl_rcv_msg+0x392/0x6f0 [ 579.778431][T11234] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 579.783714][T11234] ? __lock_acquire+0x4a5/0x2630 [ 579.788632][T11234] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 579.795030][T11234] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 579.801950][T11234] ? netlink_deliver_tap+0x1ae/0xcc0 [ 579.807218][T11234] netlink_unicast+0x585/0x850 [ 579.811983][T11234] ? __pfx_netlink_unicast+0x10/0x10 [ 579.817355][T11234] netlink_sendmsg+0x8b0/0xda0 [ 579.822111][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.827381][T11234] ? __might_fault+0x60/0x140 [ 579.832042][T11234] ____sys_sendmsg+0x9e1/0xb70 [ 579.836784][T11234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.842048][T11234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.847316][T11234] ? __pfx_futex_wake_mark+0x10/0x10 [ 579.852594][T11234] ___sys_sendmsg+0x190/0x1e0 [ 579.857246][T11234] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.862441][T11234] ? do_futex+0x192/0x350 [ 579.866750][T11234] __sys_sendmsg+0x170/0x220 [ 579.871317][T11234] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.876403][T11234] ? __x64_sys_futex+0x34f/0x4d0 [ 579.881324][T11234] ? rcu_is_watching+0x12/0xc0 [ 579.886070][T11234] do_syscall_64+0x10b/0xf80 [ 579.890638][T11234] ? clear_bhb_loop+0x40/0x90 [ 579.895292][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.901160][T11234] RIP: 0033:0x7f5db7b9c819 [ 579.905551][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.925137][T11234] RSP: 002b:00007f5db89ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.933524][T11234] RAX: ffffffffffffffda RBX: 00007f5db7e15fa0 RCX: 00007f5db7b9c819 [ 579.941470][T11234] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 579.949430][T11234] RBP: 00007f5db7c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 579.957395][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.965345][T11234] R13: 00007f5db7e16038 R14: 00007f5db7e15fa0 R15: 00007ffd51a5a068 [ 579.973316][T11234] [ 579.976609][T11234] Kernel Offset: disabled [ 579.980914][T11234] Rebooting in 86400 seconds..