last executing test programs: 13m22.127101106s ago: executing program 32 (id=564): openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) fchdir(r0) capset(&(0x7f0000002100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x3, 0xfffffff9, 0x200800}) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 12m24.837705485s ago: executing program 33 (id=1165): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 11m34.206336662s ago: executing program 1 (id=1702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 11m34.154390734s ago: executing program 1 (id=1703): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c000500000014000300766574"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 11m33.974722611s ago: executing program 1 (id=1707): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m33.293709653s ago: executing program 1 (id=1718): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x897848, 0x0) 11m33.182157795s ago: executing program 1 (id=1720): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(0xffffffffffffffff, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0xffffffff, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 11m32.656795206s ago: executing program 1 (id=1724): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000ac0)=0x102000, 0x4) 11m32.580676881s ago: executing program 34 (id=1724): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000ac0)=0x102000, 0x4) 11m13.076294368s ago: executing program 4 (id=1927): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 11m6.988671796s ago: executing program 4 (id=1986): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="c6", 0xfffffdd1}], 0x1}, 0x4040004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000180)=' ', 0x1) 11m5.588506797s ago: executing program 4 (id=2004): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 11m5.301060356s ago: executing program 4 (id=2011): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x9, 0xfffffffe}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) 11m4.535554538s ago: executing program 4 (id=2022): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 11m4.350073771s ago: executing program 4 (id=2026): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 10m49.290148466s ago: executing program 35 (id=2026): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 7m36.712994746s ago: executing program 8 (id=3503): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000240)=0xb0000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x3, 0x0, 0x0, 0xeb2b, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x337a4002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x5, 0x4, 0xd4, 0x800, 0xa}) 7m36.472226456s ago: executing program 8 (id=3505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r3, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 7m35.159711772s ago: executing program 8 (id=3509): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) 7m33.001537798s ago: executing program 8 (id=3516): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x0, @broadcast}, 0x49) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010429bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="932000000000000008000a00", @ANYRES32=r3, @ANYBLOB="562675946a24df56602ba217818a8636f1a8ac73eabfa990d9"], 0x28}}, 0x20000000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000000c0)={&(0x7f00000002c0)=[{0x7, 0xa001, 0x0, 0x0}], 0x1}) 7m31.70832617s ago: executing program 8 (id=3521): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 7m30.241979935s ago: executing program 8 (id=3524): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x4000001}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a000905"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000003c0)=@int=0x9, 0x4) 7m15.143726652s ago: executing program 36 (id=3524): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x4000001}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a000905"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020}, 0x2020) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000003c0)=@int=0x9, 0x4) 4m42.736525799s ago: executing program 7 (id=4016): syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x400454a4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 4m41.704798638s ago: executing program 7 (id=4019): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m37.219351808s ago: executing program 7 (id=4026): accept$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) 4m36.222865076s ago: executing program 7 (id=4029): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0cc5640, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4m36.040312597s ago: executing program 7 (id=4030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_clone3(0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) 4m33.192128016s ago: executing program 7 (id=4046): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='gretap0\x00') r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='gretap0\x00') r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) read(r3, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000440)={0x2, 0xfa}, 0x2) 1m30.374644041s ago: executing program 6 (id=4435): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af43e0309f910227050000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800014000000002080002400000000d0900010073797a30000073797a3210000000140000001100010000000000000000000500000a132029ed0ec948499aded2c8fda9b3ea10d87bc76a1379b43a6ec83fc20580047c6b70921465443b"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x2c020400) pipe2(&(0x7f00000000c0), 0x0) timer_create(0x5, &(0x7f0000000200)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000100)="402e439e06ca7d6c73ad91140c3301586433c8602bf5b92363f22e69ecffb19954ea2b2b44be81219543f93d2ac3ad665266f53f744c2912d89c087939d4fbf9a3b4f7d35b2dcd38a3644fab8e08dffcfc69049512190b06", &(0x7f0000000180)="6d0ea5bc06bb98062cae3c677fbb4d52ad2b83dcd60f222589092078d24aa94fee71a3bbd78dcd2b67deeccdf5691c186bfe8ac0776473cfa467f9c5f3a5dfe81a1ef4933dc530d03043270f7ffb1731fd14b926f65004ea2b8592793ee015e0784c60dc30ac4f69e35264834244c03e8cee95178fd4"}}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 1m30.136289318s ago: executing program 6 (id=4437): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) 1m28.476318878s ago: executing program 6 (id=4438): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m26.871036321s ago: executing program 6 (id=4441): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) syz_open_dev$vim2m(0x0, 0x800, 0x2) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) 1m25.806716986s ago: executing program 6 (id=4445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x21dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4) 1m10.468647879s ago: executing program 38 (id=4445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x21dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4) 15.845846943s ago: executing program 2 (id=4570): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x2400c804) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xfffffffffffbfffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000004c0)={0x7, 0x0, 0x1, 0xec5d, 0xe, "6a6ee1587e5f8b51"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000480)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)}) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000500)="37096a2d9d22106500d7b0db21c986fd0d439d86965ac29facac1563ab15b25f4ffd8b7b900de146f37789875f37c40377b635e142b3be9723365210adea334e6731cf96da97c62dcc7808ac0b8508aa1610469e2546592ddb9b81c5b29013c4ef2f02d91ef4263d79935a894d0b2e232e72512c8668e38adbe285c0844e44e6718e187250d93982ae83cb76a400f2f6263ca88bc570c230ab", 0x99, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)='%8', 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001340)={r2, r2, r3}, 0x0, 0x0, 0x0) 15.561830239s ago: executing program 0 (id=4573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x7ff, 0x1, 0x3, 0x8}, 0x5, 0xb3}, [{0x2, 0x2, 0x8a, 0x5, 0x1, 0xc}, {0x8, 0x2, 0xa6b, 0x3, 0x9, 0xd}, {0x8, 0x7, 0xee9, 0xfffffff8, 0x7, 0xffff7fff}, {0xf1, 0x3, 0x6, 0x4, 0x9, 0x1667e918}, {0x2, 0x1, 0x101, 0x6, 0xd3, 0x3ff}, {0x2, 0x401, 0x2, 0x8, 0x3, 0x5}, {0xff, 0x2, 0x3, 0x6, 0x5, 0x5}, {0x3511, 0x6, 0x8, 0x401, 0x400, 0xcb}, {0x9, 0x6, 0xe96, 0x3ff, 0x1a5e, 0x5f}, {0x7, 0x5, 0x2, 0x6, 0x3d, 0x1ff}, {0x6, 0x6e, 0x2, 0x6, 0x1ff, 0x101}, {0x101, 0x5, 0x0, 0x4, 0xfffffffa, 0x7f}, {0x5, 0x6, 0x0, 0x0, 0x3, 0x8}, {0xff, 0x100, 0x2, 0x7fffffff, 0x2, 0xc}, {0x96f, 0x3, 0x7ff, 0x9, 0xfff, 0x7}, {0x400, 0xff, 0x2, 0x5, 0x2, 0x3e97ca11}, {0x2, 0xfffffffd, 0xffff, 0x2d, 0x6, 0x7}, {0xd, 0x1, 0x6, 0xfffffffb, 0x1ac5, 0x3}, {0x6, 0xb6, 0x2, 0xfffffffb, 0x1, 0x7}, {0x0, 0x8, 0x1, 0x200, 0x8, 0x7fffffff}, {0x8, 0x1000, 0x13a00, 0x0, 0x5, 0x9}, {0x400, 0x2, 0x4, 0xffffff7f, 0x9, 0x1}, {0x5, 0x9, 0x2, 0xffff2552, 0xfffffff9, 0x7fff}, {0x6, 0x632, 0x10001, 0xfffff676, 0x5, 0x6}, {0x8, 0xffff8484, 0x3, 0x0, 0x6, 0x2}, {0x2, 0x2, 0x84, 0x1, 0x3, 0x2}, {0x80, 0x5f64, 0xc, 0xf, 0x0, 0x6}, {0x2, 0xfa6, 0x2, 0xb, 0x6, 0x8}, {0x60, 0x36eb959b, 0x8, 0x0, 0xe, 0x8}, {0xac, 0x2, 0x2, 0x2, 0xfffffff8, 0x101}, {0x9e, 0xd, 0x5, 0xe, 0xfffff3ce, 0x6}, {0x3404, 0x2, 0xead, 0x800, 0x8, 0x3}, {0x5, 0x800, 0x3, 0x8, 0x100, 0x49c836d6}, {0xd38, 0x6, 0x7ff, 0x3, 0x8, 0x5}, {0x10, 0x5, 0x4, 0x3, 0x9}, {0x6, 0x101, 0x7, 0x1, 0x4, 0x3}, {0x7, 0xe9ab, 0x0, 0x4, 0x1, 0x8}, {0xfffffffb, 0x80000001, 0x7, 0xfffffffb, 0x10, 0x3}, {0xffffffff, 0x4, 0xffff4e30, 0x0, 0x5}, {0x3, 0x4, 0xfffffffd, 0x797, 0xcf, 0xfff}, {0x3ff, 0x8, 0x1, 0x7, 0x0, 0x8}, {0x7ff, 0xa, 0x9, 0x6, 0x4, 0x5}, {0x44, 0x4, 0xba7d, 0x6, 0x9, 0x5}, {0x2, 0x9, 0x4, 0x80000001, 0x7, 0xb4d}, {0x2, 0x7, 0x3, 0x8, 0x3, 0xb7}, {0x6, 0x401, 0xf, 0x40, 0x546e, 0x11c}, {0xffff, 0xa215, 0x18, 0x4, 0x5, 0x3}, {0xfffffffe, 0x400, 0x5, 0x4, 0x8001, 0x6}, {0x8a, 0x4c2e, 0x795e, 0x8, 0x3, 0x3}, {0x5, 0x6, 0x94, 0xffff, 0x9, 0x1}, {0x2, 0x72f3, 0x7, 0x2, 0xb7b, 0xfffffc01}, {0x2, 0x7, 0x3, 0x6, 0x9, 0x3}, {0x4, 0x0, 0x7, 0x4, 0xffffff7f, 0x5ddc}, {0x5735, 0x9b93, 0x959, 0x10001, 0x100, 0x2}, {0x9c, 0x400, 0xb1ee, 0x5, 0x7, 0x8544}, {0x1ff, 0xffffffff, 0xffffffff, 0x363, 0x7ff, 0x1}, {0xa, 0x9, 0x4, 0xffffffff, 0x2, 0xf}, {0x7, 0x2, 0x80000000, 0x3ff, 0xfffffff4, 0xb}, {0xe, 0x5, 0x1, 0x2, 0xfff, 0x5}, {0x7, 0x5, 0x0, 0x3, 0x8001, 0x5f16}, {0x7, 0x6, 0x0, 0x8, 0x9, 0x3e}, {0x4, 0x7, 0x7fffffff, 0x6, 0xfffff287, 0x3}, {0x10001, 0x979, 0x40, 0x6, 0x2, 0xff}, {0x6, 0x40, 0xef, 0x0, 0xf9c0, 0x3}, {0x101, 0x5, 0xfe, 0xc7, 0x32, 0x1}, {0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0xb0a}, {0x1fd6, 0x7, 0x6, 0x2, 0x7, 0x5}, {0xffff, 0x9, 0xc, 0xf06, 0x8, 0x2}, {0x9, 0x5, 0xbd, 0x275, 0x7, 0x3}, {0x4, 0x1ff, 0x5, 0x88, 0x2, 0x8}, {0xb, 0x8, 0x3, 0x3cc3, 0x80000001}, {0x1, 0x743, 0x2, 0x57, 0x6, 0x1}, {0x5, 0xc, 0x2, 0x6, 0x4b0, 0x3}, {0x0, 0x401, 0x8, 0x8, 0x6}, {0x3, 0x8, 0x3, 0xb3, 0x1a327d9d, 0x39e}, {0x4, 0x5, 0xce, 0x1, 0x3, 0x888f}, {0xfffffff7, 0x7, 0x8be7, 0x4, 0x81, 0x8}, {0xfc, 0x9, 0x200, 0x3, 0x6, 0x81}, {0x9, 0x6, 0x100, 0x6, 0x1, 0x7fff}, {0x5, 0x5, 0x40, 0x7a, 0x7, 0x1000}, {0x7, 0x5, 0x9, 0x400, 0x5, 0x4}, {0xd, 0x19, 0x773d, 0x2c1, 0x81, 0x1}, {0x3, 0x9, 0xfff, 0x7, 0x4}, {0x6, 0x9, 0x40, 0x2, 0x7, 0x6}, {0x7, 0x5d9, 0x3, 0x80000001, 0x6, 0x4}, {0x80000000, 0x101, 0x5, 0x0, 0x10001, 0x6}, {0xbb, 0x4, 0x8001, 0x4, 0x8001, 0x7}, {0x8, 0x2616, 0x3, 0x4, 0xffffffff, 0x2f4f}, {0x3, 0x7ff, 0x2, 0x6, 0x10, 0x8}, {0x951, 0xc, 0x7, 0x3, 0xfffffffb, 0x40}, {0x7, 0x40, 0xff, 0x193, 0x8, 0xc0000000}, {0x7, 0xe978, 0x8, 0x7, 0x7, 0x7}, {0x9, 0x81, 0x5, 0x6, 0x9, 0x400}, {0x0, 0x101, 0x0, 0x32d62169, 0x167ddc9, 0x9}, {0x4393a33, 0x0, 0xfff, 0x3, 0x7fff, 0x3}, {0xffffffff, 0x6, 0xfffffff7, 0x8, 0x30000000, 0x4}, {0x5, 0x6, 0x400, 0x6, 0xfffffff7, 0x7fff}, {0x200, 0x8, 0x53, 0x2dc, 0x3, 0xe}, {0x6, 0x9, 0x309085d1, 0x1ff, 0x3, 0x7}, {0x7, 0x7f, 0x101, 0x4d23, 0xb, 0xfff}, {0x7, 0x6, 0xcd, 0xcb93571e, 0xa, 0x5}, {0x800, 0x8, 0x2, 0x9, 0x7f, 0xfffffe00}, {0x0, 0x2, 0x7, 0x8, 0xffff}, {0xa, 0x7ffb, 0xfffffffe, 0x3d, 0x8, 0x7}, {0x5, 0x10001, 0x9130, 0x264, 0x4, 0x2}, {0x7ff, 0x1, 0x3, 0x400, 0x2, 0xdac00000}, {0x2, 0x51, 0x5, 0x0, 0x405, 0x7fff}, {0x1f, 0x3, 0x9, 0x6, 0x68d96f84, 0x10001}, {0xa, 0x9, 0x4, 0x567b, 0xff}, {0x29, 0x0, 0x0, 0x6, 0x75e, 0x9c}, {0x0, 0x401, 0x0, 0x7, 0xd1, 0x5}, {0x4, 0x1, 0x4f27, 0x101, 0x9, 0xfffffffd}, {0x1, 0x8, 0xf, 0x0, 0x6, 0x2}, {0x9, 0x4, 0x4, 0x7fffffff, 0x1, 0x5}, {0x80000001, 0x6, 0x5252, 0x5, 0x7, 0x100}, {0x0, 0x90, 0x7, 0x1, 0x4, 0x8}, {0x2, 0x67, 0xefa, 0x7, 0x2f87, 0xfffffffa}, {0x413c07b2, 0x7, 0x7, 0xcf33, 0x1, 0x9}, {0x5, 0x200009, 0xfffffffd, 0x7, 0x401, 0x6}, {0x3, 0x0, 0x6c4, 0x4, 0x6, 0x1ff}, {0x9, 0x80000001, 0x9, 0xd, 0x2, 0x3}, {0x447fb3a9, 0x8001, 0x200, 0x10, 0x2, 0x5}, {0x7, 0xfffffffd, 0x1, 0xe, 0x7}, {0x3, 0x7, 0x88e, 0x0, 0x6, 0x7}, {0xffffffff, 0xffffffde, 0x81, 0x0, 0x7fff, 0xffff}, {0xd43, 0x855, 0x4, 0x41aa, 0x2, 0xf09c}, {0xaf, 0x61f784e8, 0xed, 0xea, 0x400, 0x5}, {0x7, 0xa, 0x1, 0x6656, 0xfff, 0xb}], [{}, {0x3}, {0x4, 0x1}, {0x0, 0x3aa157f48d3b3bb3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0xd26d20c064367a2c}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 14.986700764s ago: executing program 3 (id=4574): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f00000000c0)={0x9000, 0x3000}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a3000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13.845122081s ago: executing program 3 (id=4576): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000006c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00000800", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) 13.788683046s ago: executing program 0 (id=4577): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="a46bcd08"], 0xd80}}, 0x2004c880) accept4$tipc(r4, 0x0, 0x0, 0x800) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 13.645934497s ago: executing program 2 (id=4579): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xcdc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) 12.095026514s ago: executing program 2 (id=4581): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 11.838602697s ago: executing program 5 (id=4582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08b, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x5, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x2, 0x7ff, 0x1000fd, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x5, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x1, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 11.832817465s ago: executing program 3 (id=4583): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) munlock(&(0x7f000087e000/0x1000)=nil, 0x1000) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 10.344599853s ago: executing program 5 (id=4584): socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xb, 0x0, &(0x7f00000001c0)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000140)="94", 0x1}], 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) unshare(0x22020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x6000, 0x0) 10.294954471s ago: executing program 9 (id=4585): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) lseek(0xffffffffffffffff, 0xfffd, 0x0) pselect6(0x40, &(0x7f0000000240)={0x7, 0x2000, 0xffffffffffffffef, 0x7d, 0xfffffffffffffffc, 0x8000, 0xf, 0xfffffffffffff942}, 0x0, &(0x7f00000002c0)={0x3fe, 0x3ffffff, 0x397e, 0x9, 0x7fffffffffffffff, 0x4000000000f, 0x2, 0x7fffffffffffffff}, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 10.160475132s ago: executing program 5 (id=4586): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) 9.986187426s ago: executing program 3 (id=4587): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) capset(0x0, 0x0) 8.226377723s ago: executing program 5 (id=4588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r4, r4, 0x3, 0xfffffffffffffffa, 0x3ffb}) r5 = socket(0x2, 0x80802, 0x0) getsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f0000001080)=""/3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000000)={0x67, @private=0xa010101, 0x4e22, 0x3, 'ovf\x00', 0x24, 0x7, 0x17}, 0x2c) sched_setscheduler(0x0, 0x1, 0x0) 6.248666293s ago: executing program 3 (id=4589): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) sendto$inet(r4, 0x0, 0x0, 0x20008005, 0x0, 0x0) 6.163768508s ago: executing program 9 (id=4590): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) listen(r0, 0xff) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) r3 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000baf000/0x4000)=nil, 0x4000, 0x15) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 6.027104513s ago: executing program 5 (id=4591): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000019340)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) personality(0x6) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000193c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000018d000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006ff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00001dc000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) syz_io_uring_setup(0x30da, 0x0, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.75807031s ago: executing program 0 (id=4592): socket$kcm(0x2, 0x200000000000001, 0x106) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) recvmmsg(r2, 0x0, 0x0, 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close(0x3) lseek(r1, 0x851, 0x0) 4.024259115s ago: executing program 9 (id=4593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r3, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) 3.782637085s ago: executing program 3 (id=4594): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x80) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000002d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ffe5acf3", @ANYRES16=r5, @ANYBLOB="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"], 0x26c8}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x4043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0) 2.941766345s ago: executing program 2 (id=4595): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') 2.940595914s ago: executing program 0 (id=4605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.784660073s ago: executing program 9 (id=4596): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) memfd_create(0x0, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000003c0)={0xb, 0x10ccc, 0xfffffffb, 0x6d, 0x5, "2e157e7acc5970c86df3b78699dbe3b63a814b"}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 1.732727609s ago: executing program 2 (id=4597): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004", @ANYRES32=0x1, @ANYBLOB="b4bfbd"], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.726268449s ago: executing program 9 (id=4598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x101) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x2, @mcast2, 0xc0000000}}, 0x0, 0x0, 0x1d, 0x0, "96f545de642d5626f0ab65d100e9ebabc53fc208cf62bb49106f5cccc56c95be5ffca3693df6b6b775439f92a55942e8245aeab82b30c8513f04526794f5171a448ab4c234b48912d2998c9dc0a773c8"}, 0xd8) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r7) 1.443241946s ago: executing program 0 (id=4599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, r4, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) 524.819377ms ago: executing program 2 (id=4600): socket$inet6(0xa, 0x80002, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x9, &(0x7f00000000c0)) r6 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r6, 0x2) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r2, 0x4, r2}, 0x10) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @private2, 0x100}, 0x1c) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 420.959547ms ago: executing program 9 (id=4601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='pids.current\x00', 0x26e1, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 374.681019ms ago: executing program 5 (id=4602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 0s ago: executing program 0 (id=4603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4000) syz_emit_ethernet(0xeb, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0xb5, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x58, 0x50, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x4, 0x6, 0x2, 0x8, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): ed disabled state [ 491.930180][T16557] bridge_slave_0: entered allmulticast mode [ 491.937728][T16557] bridge_slave_0: entered promiscuous mode [ 491.946023][T16557] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.953322][T16557] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.015029][T16557] bridge_slave_1: entered allmulticast mode [ 492.426276][T16557] bridge_slave_1: entered promiscuous mode [ 492.828787][T16557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.922913][T16557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.970551][ T5610] Bluetooth: hci3: command tx timeout [ 493.201204][T16557] team0: Port device team_slave_0 added [ 493.228862][T16557] team0: Port device team_slave_1 added [ 493.328118][T16557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.343279][T16557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.399855][T16557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.435717][T16557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.451499][T16557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.529713][T16557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.673964][T16557] hsr_slave_0: entered promiscuous mode [ 493.695337][T16557] hsr_slave_1: entered promiscuous mode [ 493.727561][T16557] debugfs: 'hsr0' already exists in 'hsr' [ 493.759399][T16557] Cannot create hsr debugfs directory [ 495.197405][T16674] netlink: 'syz.7.3623': attribute type 39 has an invalid length. [ 495.610779][T16557] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 495.655680][T16557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.669575][T16684] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3626'. [ 495.688735][T16557] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 495.743086][T16557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.768887][T16557] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 495.819701][T16557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.858608][T16557] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 495.962697][T16557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.312044][T16697] netlink: 'syz.0.3629': attribute type 178 has an invalid length. [ 496.410013][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.746197][T16557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.746282][ T29] libceph: connect (1)[c::]:6789 error -101 [ 496.826625][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 496.875148][T16703] netlink: 'syz.0.3631': attribute type 1 has an invalid length. [ 496.883814][T16681] ceph: No mds server is up or the cluster is laggy [ 497.638208][T16705] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 497.658632][T16705] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 497.745002][T16706] bond10: (slave bridge3): Enslaving as an active interface with a down link [ 497.796335][T16709] macvlan2: entered promiscuous mode [ 497.811741][T16709] macvlan2: entered allmulticast mode [ 497.824493][T16709] bond10: entered promiscuous mode [ 497.836078][T16709] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 497.999564][T16709] bond10: left promiscuous mode [ 498.067179][T16713] vxlan0: entered promiscuous mode [ 498.079578][T16713] vxlan0: entered allmulticast mode [ 498.108750][ T3366] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.131174][T16557] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.144837][ T3366] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.185987][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.193191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.228909][ T3366] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.261770][ T3366] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.303898][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.311085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.425709][T16726] xt_hashlimit: max too large, truncated to 1048576 [ 498.464210][T16726] xt_hashlimit: overflow, rate too high: 0 [ 498.501363][T16730] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9096] was attempted by " [ 499.326192][T16736] netlink: 'syz.7.3638': attribute type 1 has an invalid length. [ 499.614424][T16743] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3638'. [ 500.489428][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3644'. [ 500.500610][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3644'. [ 500.844133][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3644'. [ 500.853176][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3644'. [ 501.544602][T16770] openvswitch: netlink: Flow key attr not present in new flow. [ 503.448913][T16557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.747520][T16816] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 504.865364][T16827] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16827 comm=syz.0.3656 [ 504.916041][T16816] 8021q: adding VLAN 0 to HW filter on device bond11 [ 505.125254][T16824] bond11: (slave gretap2): making interface the new active one [ 505.200824][T16824] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 505.256970][T16832] erspan0: left allmulticast mode [ 505.287308][T16832] erspan0: left promiscuous mode [ 505.309604][T16832] bridge0: port 1(erspan0) entered disabled state [ 505.447473][T16832] bond0: (slave bond_slave_0): Releasing backup interface [ 505.507067][T16832] bond0: (slave bond_slave_1): Releasing backup interface [ 505.574434][T16832] team0: Port device team_slave_0 removed [ 506.227449][T16832] team0: Port device team_slave_1 removed [ 506.234255][T16832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.243609][T16832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.900342][T16848] ptrace attach of ""[16850] was attempted by ""[16848] [ 507.586790][T16832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.613126][T16832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.698943][T16832] bond2: (slave vlan3): Releasing active interface [ 507.734211][T16832] bond3: (slave geneve2): Releasing active interface [ 507.757310][T16832] geneve2: left allmulticast mode [ 509.028611][T16557] veth0_vlan: entered promiscuous mode [ 509.091521][T16557] veth1_vlan: entered promiscuous mode [ 509.516144][T16557] veth0_macvtap: entered promiscuous mode [ 509.619961][T16557] veth1_macvtap: entered promiscuous mode [ 511.681948][T16557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.781106][T16557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.903717][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.938616][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.302514][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.387599][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.036813][ T3366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.061818][ T3366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.614660][ T30] audit: type=1400 audit(1022.123:962): avc: denied { bind } for pid=16891 comm="syz.0.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 514.670346][T13735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.699835][T13735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.441643][T16903] 9p: Bad value for 'rfdno' [ 517.149347][ T30] audit: type=1400 audit(1024.653:963): avc: denied { write } for pid=16901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.158732][ T13] bond1 (unregistering): (slave bridge1): Releasing active interface [ 517.234395][T16929] fuse: fd is not a fuse device [ 517.331985][T16932] fuse: fd is not a fuse device [ 517.422778][ T30] audit: type=1400 audit(1024.933:964): avc: denied { write } for pid=16933 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.797374][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 517.808960][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.821644][ T13] bond0 (unregistering): Released all slaves [ 517.848461][ T13] bond1 (unregistering): Released all slaves [ 517.884714][ T13] bond2 (unregistering): (slave veth5): Releasing active interface [ 517.895875][ T13] bond2 (unregistering): Released all slaves [ 517.929123][ T13] bond3 (unregistering): Released all slaves [ 518.595025][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 518.857843][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3685'. [ 518.919462][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3685'. [ 518.970876][T16955] netlink: 'syz.6.3685': attribute type 4 has an invalid length. [ 519.067165][T16955] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3685'. [ 519.776641][T16952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.823890][T16952] bond4: (slave bond0): making interface the new active one [ 521.235317][T16952] bond4: (slave bond0): Enslaving as an active interface with an up link [ 521.297675][T16955] .`: renamed from bond0 (while UP) [ 521.738909][ T30] audit: type=1400 audit(1029.243:965): avc: denied { write } for pid=16951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.140753][ T30] audit: type=1400 audit(1029.613:966): avc: denied { write } for pid=16983 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.105255][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 525.091025][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3690'. [ 525.120814][ T30] audit: type=1400 audit(1032.623:967): avc: denied { write } for pid=17002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.464842][ T13] hsr_slave_0: left promiscuous mode [ 525.496268][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.523557][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.693176][ T30] audit: type=1400 audit(1033.193:968): avc: denied { write } for pid=17031 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.817044][T17051] o2cb: This node has not been configured. [ 528.822982][T17051] o2cb: Cluster check failed. Fix errors before retrying. [ 528.830130][T17051] (syz.7.3708,17051,1):user_dlm_register:674 ERROR: status = -22 [ 528.837846][T17051] (syz.7.3708,17051,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 528.848333][ T30] audit: type=1400 audit(1036.323:969): avc: denied { write } for pid=17043 comm="syz.7.3708" name="/" dev="ocfs2_dlmfs" ino=60086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.370022][ T13] team0 (unregistering): Port device team_slave_1 removed [ 529.398588][ T13] team0 (unregistering): Port device team_slave_0 removed [ 530.325336][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 530.838143][T17073] tipc: Enabling of bearer rejected, already enabled [ 531.234185][T17077] netlink: 'syz.0.3715': attribute type 1 has an invalid length. [ 532.886020][T17077] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 532.887062][T17080] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 532.982496][ T13] IPVS: stop unused estimator thread 0... [ 533.116071][ T30] audit: type=1400 audit(1040.623:970): avc: denied { create } for pid=17091 comm="syz.5.3718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 533.289332][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'. [ 533.318208][T17098] bond1: option mode: unable to set because the bond device has slaves [ 533.343638][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 533.344954][T17100] netlink: 'syz.0.3719': attribute type 4 has an invalid length. [ 533.427454][T17100] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3719'. [ 533.471791][T17100] .`: renamed from bond0 [ 533.739077][ T30] audit: type=1400 audit(1041.243:971): avc: denied { write } for pid=17079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.937525][ T8320] IPVS: starting estimator thread 0... [ 534.050632][T17108] IPVS: using max 45 ests per chain, 108000 per kthread [ 534.058924][T17110] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 534.190802][ T30] audit: type=1400 audit(1041.693:972): avc: denied { write } for pid=17109 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.259377][T17112] overlayfs: failed to clone lowerpath [ 534.280003][ T30] audit: type=1400 audit(1041.783:973): avc: denied { connect } for pid=17111 comm="syz.6.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 534.317283][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 538.668646][T17186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3737'. [ 540.250391][T17186] .`: (slave bond_slave_0): Releasing backup interface [ 540.312866][T17198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.397083][ T30] audit: type=1800 audit(1047.903:974): pid=17198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3740" name="nullb0" dev="tmpfs" ino=2200 res=0 errno=0 [ 540.590167][T17186] bond_slave_0: entered promiscuous mode [ 540.615228][T17186] bond_slave_0: entered allmulticast mode [ 540.701141][T17205] netlink: 'syz.9.3741': attribute type 2 has an invalid length. [ 540.710521][T17205] netlink: 'syz.9.3741': attribute type 1 has an invalid length. [ 540.721456][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3741'. [ 542.360333][T17220] netlink: 'syz.6.3746': attribute type 2 has an invalid length. [ 542.391967][T17220] netlink: 'syz.6.3746': attribute type 2 has an invalid length. [ 542.466609][T17222] syzkaller0: entered promiscuous mode [ 542.476440][T17222] syzkaller0: entered allmulticast mode [ 543.295113][ T30] audit: type=1400 audit(1050.603:975): avc: denied { shutdown } for pid=17233 comm="syz.6.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 544.590008][ T30] audit: type=1400 audit(1052.093:976): avc: denied { write } for pid=17224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.609109][T17259] netlink: 'syz.9.3755': attribute type 1 has an invalid length. [ 545.774305][ T30] audit: type=1400 audit(1053.283:977): avc: denied { write } for pid=17267 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.845424][ T5610] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 545.856475][ T5610] Bluetooth: hci3: Injecting HCI hardware error event [ 545.869410][ T5610] Bluetooth: hci3: hardware error 0x00 [ 547.556977][T17296] syzkaller0: entered promiscuous mode [ 547.564146][T17296] syzkaller0: entered allmulticast mode [ 547.875968][ T30] audit: type=1326 audit(1055.383:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 547.979861][ T30] audit: type=1326 audit(1055.383:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 548.067011][ T30] audit: type=1326 audit(1055.463:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 548.512875][ T30] audit: type=1326 audit(1055.463:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 548.551276][ T30] audit: type=1326 audit(1055.463:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 548.581722][ T30] audit: type=1326 audit(1055.463:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 548.611241][ T30] audit: type=1326 audit(1055.463:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 548.642750][ T30] audit: type=1326 audit(1055.463:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 548.660253][T17315] netlink: 'syz.5.3773': attribute type 13 has an invalid length. [ 548.673109][ T30] audit: type=1326 audit(1055.473:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.3769" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 549.605267][ T5610] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 550.536720][T17360] netlink: 'syz.7.3780': attribute type 1 has an invalid length. [ 550.651006][T17362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17362 comm=syz.7.3780 [ 550.975020][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 550.975036][ T30] audit: type=1400 audit(1058.483:999): avc: denied { write } for pid=17338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.107710][ T30] audit: type=1400 audit(1059.613:1000): avc: denied { write } for pid=17369 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.394677][ T30] audit: type=1400 audit(1059.903:1001): avc: denied { accept } for pid=17374 comm="syz.5.3782" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 552.646946][T17360] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 554.618035][T17414] fuse: fd is not a fuse device [ 555.749481][ T30] audit: type=1400 audit(1063.253:1002): avc: denied { write } for pid=17390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.448952][T17435] fuse: fd is not a fuse device [ 557.700719][T17439] syzkaller0: entered promiscuous mode [ 557.728091][T17439] syzkaller0: entered allmulticast mode [ 557.739395][ T30] audit: type=1400 audit(1065.243:1003): avc: denied { write } for pid=17436 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.846896][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.235314][ T8338] libceph: connect (1)[c::]:6789 error -101 [ 558.384829][ T8338] libceph: mon0 (1)[c::]:6789 connect error [ 558.495321][ T8338] libceph: connect (1)[c::]:6789 error -101 [ 558.526046][ T8338] libceph: mon0 (1)[c::]:6789 connect error [ 559.336241][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3802'. [ 559.370914][T17452] ceph: No mds server is up or the cluster is laggy [ 559.535109][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 559.595811][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 559.804032][T17485] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 559.865036][T17485] bond0: option active_slave: invalid value (veth0_to_hsr) [ 560.315734][ T30] audit: type=1400 audit(1067.823:1004): avc: denied { write } for pid=17450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.385939][ T30] audit: type=1400 audit(1068.893:1005): avc: denied { write } for pid=17503 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.314003][T17526] netlink: 'syz.5.3812': attribute type 1 has an invalid length. [ 563.453115][T17532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17532 comm=syz.5.3812 [ 563.500160][T17526] 8021q: adding VLAN 0 to HW filter on device bond11 [ 565.090194][T17559] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 565.308336][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3816'. [ 565.324717][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3816'. [ 566.293021][ T30] audit: type=1400 audit(1072.863:1006): avc: denied { write } for pid=17534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.460607][T17565] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 566.582007][T17565] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 567.868953][ T30] audit: type=1400 audit(1075.363:1007): avc: denied { write } for pid=17577 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.334610][T17559] bond0: (slave bridge4): Enslaving as an active interface with a down link [ 569.250660][T17574] macvlan2: entered promiscuous mode [ 569.353412][T17574] macvlan2: entered allmulticast mode [ 569.382606][T17574] bond0: entered promiscuous mode [ 569.445447][T17574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 569.534416][T17601] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 569.837964][T17574] bond0: left promiscuous mode [ 571.196837][T17623] IPVS: persistence engine module ip_vs_pe_ not found [ 571.672624][T17633] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 572.892142][ T30] audit: type=1800 audit(1080.383:1008): pid=17597 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.3826" name="bus" dev="ramfs" ino=59186 res=0 errno=0 [ 575.052796][ T30] audit: type=1400 audit(1082.533:1009): avc: denied { getopt } for pid=17662 comm="syz.5.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 575.451497][T17667] netlink: 'syz.7.3844': attribute type 1 has an invalid length. [ 575.525394][T17669] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3844'. [ 575.584909][T17650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3839'. [ 575.597850][T17650] openvswitch: netlink: Flow key attr not present in new flow. [ 576.092043][T17678] bridge0: entered promiscuous mode [ 576.180848][ T30] audit: type=1400 audit(1083.683:1010): avc: denied { write } for pid=17640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.328814][T17671] bridge0: left promiscuous mode [ 578.163563][ T30] audit: type=1400 audit(1085.673:1011): avc: denied { write } for pid=17692 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.447350][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3852'. [ 578.769862][T17710] futex_wake_op: syz.7.3854 tries to shift op by 144; fix this program [ 581.176072][ T30] audit: type=1400 audit(1088.683:1012): avc: denied { write } for pid=17703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.470852][ T30] audit: type=1400 audit(1088.983:1013): avc: denied { write } for pid=17733 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.243294][T17763] overlayfs: failed to clone upperpath [ 586.902843][T17773] usb usb7: usbfs: process 17773 (syz.9.3864) did not claim interface 0 before use [ 589.519535][ T30] audit: type=1400 audit(1097.023:1014): avc: denied { listen } for pid=17806 comm="syz.9.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 592.771465][T17844] fuse: fd is not a fuse device [ 593.161168][T17853] : entered promiscuous mode [ 593.410732][ T30] audit: type=1400 audit(1100.923:1015): avc: denied { read } for pid=17862 comm="syz.9.3892" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 594.801926][ T30] audit: type=1400 audit(1100.923:1016): avc: denied { open } for pid=17862 comm="syz.9.3892" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 595.984088][ T989] libceph: connect (1)[c::]:6789 error -101 [ 596.013193][ T989] libceph: mon0 (1)[c::]:6789 connect error [ 596.038954][ T989] libceph: connect (1)[c::]:6789 error -101 [ 596.057694][ T989] libceph: mon0 (1)[c::]:6789 connect error [ 596.102294][T17883] ceph: No mds server is up or the cluster is laggy [ 596.103702][ T30] audit: type=1400 audit(1103.603:1017): avc: denied { write } for pid=17841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.980826][ T30] audit: type=1400 audit(1104.493:1018): avc: denied { write } for pid=17903 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.188158][ T5274] veth0_macvtap: left promiscuous mode [ 597.699458][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3905'. [ 597.740221][T17924] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3905'. [ 597.967704][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3905'. [ 599.003102][T17924] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3905'. [ 599.552603][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3909'. [ 599.561563][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3895'. [ 599.561592][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3895'. [ 600.431121][T17942] team0: Port device team_slave_0 removed [ 600.508733][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3912'. [ 601.739879][ T30] audit: type=1400 audit(1109.243:1019): avc: denied { write } for pid=17923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.966372][ T30] audit: type=1400 audit(1109.473:1020): avc: denied { write } for pid=17976 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.620809][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'. [ 602.834233][T17992] vlan4: entered promiscuous mode [ 602.881188][T17992] hsr0: entered promiscuous mode [ 602.947299][T17992] vlan4: entered allmulticast mode [ 603.011045][T17992] hsr0: entered allmulticast mode [ 603.083690][T17992] hsr_slave_0: entered allmulticast mode [ 603.459646][T18000] netlink: 'syz.9.3923': attribute type 12 has an invalid length. [ 603.890203][ T24] libceph: connect (1)[c::]:6789 error -101 [ 603.936274][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 603.984144][T18013] ceph: No mds server is up or the cluster is laggy [ 606.921110][ T30] audit: type=1400 audit(1114.433:1021): avc: denied { setopt } for pid=18053 comm="syz.7.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 607.870226][T18066] xt_hashlimit: size too large, truncated to 1048576 [ 610.915526][T18087] orangefs_mount: mount request failed with -4 [ 612.553946][T18100] netlink: 'syz.7.3946': attribute type 21 has an invalid length. [ 612.562138][T18100] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3946'. [ 614.952382][T18121] dummy0: entered allmulticast mode [ 615.606661][ T30] audit: type=1400 audit(1123.113:1022): avc: denied { ioctl } for pid=18124 comm="syz.6.3952" path="socket:[62627]" dev="sockfs" ino=62627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 617.042625][T18146] fuse: fd is not a fuse device [ 617.159113][T18148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=18148 comm=syz.0.3961 [ 619.340187][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.746769][T18178] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3968'. [ 622.108015][ T30] audit: type=1400 audit(1129.613:1023): avc: denied { write } for pid=18132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.523843][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3973'. [ 623.566445][ T30] audit: type=1400 audit(1131.073:1024): avc: denied { write } for pid=18198 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.517708][T18241] fuse: fd is not a fuse device [ 628.003759][T18257] netlink: 'syz.5.3990': attribute type 1 has an invalid length. [ 628.290096][ T30] audit: type=1400 audit(1135.793:1025): avc: denied { write } for pid=18217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.312047][T18261] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 628.881464][T18279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18279 comm=syz.6.3994 [ 631.247522][T18261] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 632.143842][ T30] audit: type=1400 audit(1139.653:1026): avc: denied { write } for pid=18303 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.019919][T18264] bond12: (slave bridge4): Enslaving as an active interface with a down link [ 633.037117][T18257] macvlan0: entered promiscuous mode [ 633.042766][T18257] macvlan0: entered allmulticast mode [ 633.050082][T18257] bond12: entered promiscuous mode [ 633.055806][T18257] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 633.064642][T18257] bond12: left promiscuous mode [ 637.626782][ T30] audit: type=1400 audit(1145.133:1027): avc: denied { create } for pid=18356 comm="syz.9.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 637.662189][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4015'. [ 637.726189][T18365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4014'. [ 641.206648][ T30] audit: type=1400 audit(1148.703:1028): avc: denied { mount } for pid=18393 comm="syz.5.4023" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 642.830514][ T30] audit: type=1400 audit(1150.253:1029): avc: denied { mount } for pid=18399 comm="syz.7.4026" name="/" dev="rpc_pipefs" ino=61843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 646.551570][ T8323] IPVS: starting estimator thread 0... [ 646.679986][T18444] IPVS: using max 75 ests per chain, 180000 per kthread [ 650.420623][ T30] audit: type=1400 audit(1157.923:1030): avc: denied { bind } for pid=18490 comm="syz.9.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 651.227732][ T29] IPVS: starting estimator thread 0... [ 651.339854][T18507] IPVS: using max 46 ests per chain, 110400 per kthread [ 652.851057][ T30] audit: type=1400 audit(1160.363:1031): avc: denied { write } for pid=18492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.971854][ T30] audit: type=1400 audit(1160.483:1032): avc: denied { write } for pid=18530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.465708][ T30] audit: type=1400 audit(1161.973:1033): avc: denied { write } for pid=18532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.966237][T18554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4059'. [ 656.847921][ T30] audit: type=1400 audit(1164.353:1034): avc: denied { write } for pid=18556 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.358799][T18578] tipc: Enabling of bearer rejected, failed to enable media [ 661.846846][ T30] audit: type=1400 audit(1169.343:1035): avc: denied { write } for pid=18564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.938175][T18608] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4068'. [ 661.976222][T18608] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4068'. [ 662.019581][T18608] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4068'. [ 662.204081][ T30] audit: type=1400 audit(1169.713:1036): avc: denied { write } for pid=18613 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.266923][T16188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.421577][T16188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.437612][T16188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.451032][T16188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.459393][T16188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 663.316946][T18628] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4074'. [ 663.447877][T18630] bridge0: entered promiscuous mode [ 663.911263][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4075'. [ 663.976633][T18622] bridge0: left promiscuous mode [ 664.642319][T16188] Bluetooth: hci5: command tx timeout [ 664.773627][T18637] xt_nfacct: accounting object `syz1' does not exist [ 664.899328][T18637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18637 comm=syz.9.4075 [ 665.147169][T18656] IPVS: persistence engine module ip_vs_pe_ not found [ 665.958189][ T30] audit: type=1400 audit(1173.463:1037): avc: denied { write } for pid=18621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.646404][T18680] fuse: fd is not a fuse device [ 666.719735][T16188] Bluetooth: hci5: command tx timeout [ 666.896501][T18684] syzkaller0: entered promiscuous mode [ 666.915864][T18684] syzkaller0: entered allmulticast mode [ 667.006563][T18685] tipc: Started in network mode [ 667.015968][T18685] tipc: Node identity fe7b2e8b922d, cluster identity 4711 [ 667.042908][T18685] tipc: Enabled bearer , priority 0 [ 667.065211][T18684] tipc: Resetting bearer [ 667.092998][T18683] tipc: Resetting bearer [ 667.168167][ T30] audit: type=1400 audit(1174.673:1038): avc: denied { write } for pid=18681 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 667.194942][T18683] tipc: Disabling bearer [ 668.799973][T16188] Bluetooth: hci5: command tx timeout [ 669.370363][ T30] audit: type=1400 audit(1176.873:1039): avc: denied { write } for pid=18693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.880140][T16188] Bluetooth: hci5: command tx timeout [ 671.297471][ T30] audit: type=1400 audit(1178.803:1040): avc: denied { write } for pid=18747 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.566124][T18759] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.573653][T18759] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.657461][T18759] bridge0: entered allmulticast mode [ 671.705122][T18762] bridge_slave_1: left allmulticast mode [ 671.740655][T18762] bridge_slave_1: left promiscuous mode [ 671.777651][T18762] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.880479][T18762] bridge_slave_0: left allmulticast mode [ 671.886909][T18762] bridge_slave_0: left promiscuous mode [ 671.910595][T18762] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.596544][T18615] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.682281][T18615] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.181158][T18615] bridge_slave_0: entered allmulticast mode [ 673.303296][T18615] bridge_slave_0: entered promiscuous mode [ 673.367509][T18615] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.441230][T18615] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.506828][T18615] bridge_slave_1: entered allmulticast mode [ 673.592677][T18615] bridge_slave_1: entered promiscuous mode [ 673.789278][ T30] audit: type=1400 audit(1181.143:1041): avc: denied { write } for pid=18766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.048502][T18615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.235656][T18615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.291144][ T30] audit: type=1400 audit(1182.803:1042): avc: denied { write } for pid=18800 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.375231][T18615] team0: Port device team_slave_0 added [ 675.394482][T18807] tipc: Enabling of bearer rejected, failed to enable media [ 675.554121][T18615] team0: Port device team_slave_1 added [ 676.078920][T18810] tipc: Enabling of bearer rejected, failed to enable media [ 676.307077][T18615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.381889][T18615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.513063][T18615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.615893][T18615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.553154][T18615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.713834][T18615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.142888][T18615] hsr_slave_0: entered promiscuous mode [ 678.199231][T18615] hsr_slave_1: entered promiscuous mode [ 678.238428][T18615] debugfs: 'hsr0' already exists in 'hsr' [ 678.280951][T18615] Cannot create hsr debugfs directory [ 680.806980][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 682.503244][T18880] IPVS: Error connecting to the multicast addr [ 683.340253][ T30] audit: type=1400 audit(1190.853:1043): avc: denied { write } for pid=18850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.385735][T18893] netlink: 'syz.5.4127': attribute type 1 has an invalid length. [ 683.461381][T18897] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4127'. [ 683.644984][ T30] audit: type=1400 audit(1191.153:1044): avc: denied { write } for pid=18904 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.716830][T18893] 8021q: adding VLAN 0 to HW filter on device bond13 [ 688.638867][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4138'. [ 690.599372][ T30] audit: type=1400 audit(1198.103:1045): avc: denied { write } for pid=18919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.629621][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4142'. [ 690.739419][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4142'. [ 690.886303][T18956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 691.169595][ T30] audit: type=1400 audit(1198.673:1046): avc: denied { write } for pid=18964 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.385271][T18615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 691.490551][T18615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.562019][T18615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 691.665077][T18615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.723695][T18615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 691.848553][T18615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.918421][ T30] audit: type=1326 audit(1199.423:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.4144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b639ce59 code=0x7ffc0000 [ 691.951099][T18615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 692.014713][T18615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.116262][ T30] audit: type=1326 audit(1199.423:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.4144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b639ce59 code=0x7ffc0000 [ 692.177249][T18986] fuse: fd is not a fuse device [ 692.294366][ T30] audit: type=1326 audit(1199.423:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.4144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b639ce59 code=0x7ffc0000 [ 692.483774][ T30] audit: type=1326 audit(1199.423:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.4144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b639ce59 code=0x7ffc0000 [ 692.843269][T18995] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4146'. [ 693.728035][ T30] audit: type=1326 audit(1199.463:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.4144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b639ce59 code=0x7ffc0000 [ 694.069467][ T30] audit: type=1326 audit(1199.463:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.4144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b639ce59 code=0x7ffc0000 [ 694.099121][ T30] audit: type=1326 audit(1199.463:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.4144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f25b639ce59 code=0x7ffc0000 [ 694.226172][T18615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.262025][ T30] audit: type=1326 audit(1199.473:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.4144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b639ce59 code=0x7ffc0000 [ 694.476335][T18615] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.692871][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.700066][T13739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.058558][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.065735][T13739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.094570][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 697.094588][ T30] audit: type=1400 audit(1204.593:1116): avc: denied { write } for pid=18972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.248860][ T8338] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 697.431946][ T8338] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 697.625910][ T8338] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 697.644487][ T8338] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 697.659026][ T8338] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 698.407766][ T8338] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 698.437856][ T8338] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 698.631999][ T8338] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 699.093485][ T8338] usb 10-1: Product: syz [ 699.098610][ T8338] usb 10-1: Manufacturer: syz [ 699.127300][ T8338] cdc_wdm 10-1:1.0: skipping garbage [ 699.133197][ T8338] cdc_wdm 10-1:1.0: skipping garbage [ 699.144477][ T8338] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 699.151169][ T8338] cdc_wdm 10-1:1.0: Unknown control protocol [ 699.192080][ T30] audit: type=1400 audit(1206.703:1117): avc: denied { write } for pid=19021 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.590378][ T30] audit: type=1400 audit(1208.023:1118): avc: denied { getopt } for pid=19048 comm="syz.5.4158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 700.795067][ T30] audit: type=1400 audit(1208.303:1119): avc: denied { read write } for pid=19012 comm="syz.9.4151" name="cdc-wdm0" dev="devtmpfs" ino=3210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 701.144560][ T30] audit: type=1400 audit(1208.333:1120): avc: denied { open } for pid=19012 comm="syz.9.4151" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 703.283028][ T29] usb 10-1: USB disconnect, device number 2 [ 703.364265][ T30] audit: type=1400 audit(1210.873:1121): avc: denied { bpf } for pid=19074 comm="syz.5.4161" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 703.870419][T19088] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4163'. [ 703.883806][T19088] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4163'. [ 704.650615][T18615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.056618][ T30] audit: type=1400 audit(1212.563:1122): avc: denied { write } for pid=19053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.091690][T18615] veth0_vlan: entered promiscuous mode [ 705.882869][T18615] veth1_vlan: entered promiscuous mode [ 706.312634][ T30] audit: type=1400 audit(1213.813:1123): avc: denied { write } for pid=19103 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.321633][T18615] veth0_macvtap: entered promiscuous mode [ 706.476051][T18615] veth1_macvtap: entered promiscuous mode [ 706.517015][T18615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.551882][T18615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.582580][T13735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.613584][T13735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.660336][T13735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.911061][T19120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65309 sclass=netlink_route_socket pid=19120 comm=syz.5.4170 [ 706.927052][T13735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.140309][ T30] audit: type=1400 audit(1214.643:1124): avc: denied { perfmon } for pid=19126 comm="syz.5.4171" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 707.311059][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4171'. [ 707.954685][T19140] siw: device registration error -23 [ 708.994577][ T30] audit: type=1400 audit(1216.503:1125): avc: denied { write } for pid=19124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.891517][ T30] audit: type=1400 audit(1217.393:1126): avc: denied { write } for pid=19163 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.923820][T13756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.080927][T13756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.397083][T13731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.435032][T13731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.233241][T19210] overlayfs: failed to clone upperpath [ 715.312181][T19212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.885067][ T30] audit: type=1400 audit(1223.393:1127): avc: denied { write } for pid=19172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.983784][T19236] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4190'. [ 717.008128][T19236] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4190'. [ 717.052051][T19236] netlink: 'syz.9.4190': attribute type 6 has an invalid length. [ 717.071639][T19154] libceph: connect (1)[c::]:6789 error -101 [ 717.093726][T19154] libceph: mon0 (1)[c::]:6789 connect error [ 717.102826][T19154] libceph: connect (1)[c::]:6789 error -101 [ 717.109591][T19154] libceph: mon0 (1)[c::]:6789 connect error [ 717.148905][T19238] ceph: No mds server is up or the cluster is laggy [ 717.183006][ T30] audit: type=1400 audit(1224.693:1128): avc: denied { write } for pid=19244 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.335786][T19250] fuse: fd is not a fuse device [ 717.418112][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'. [ 717.464075][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4191'. [ 717.503237][T19238] netlink: 'syz.0.4191': attribute type 14 has an invalid length. [ 718.353470][ T30] audit: type=1400 audit(1225.853:1129): avc: denied { write } for pid=19268 comm="syz.2.4197" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 718.651308][ T30] audit: type=1400 audit(1226.163:1130): avc: denied { read append } for pid=19275 comm="syz.9.4198" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 718.750921][ T30] audit: type=1400 audit(1226.193:1131): avc: denied { open } for pid=19275 comm="syz.9.4198" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 719.170457][ T30] audit: type=1400 audit(1226.203:1132): avc: denied { map } for pid=19275 comm="syz.9.4198" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 719.299117][ T30] audit: type=1400 audit(1226.203:1133): avc: denied { write execute } for pid=19275 comm="syz.9.4198" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 719.386335][ T30] audit: type=1400 audit(1226.403:1134): avc: denied { ioctl } for pid=19284 comm="syz.2.4199" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 719.478029][ T30] audit: type=1400 audit(1226.893:1135): avc: denied { write } for pid=19257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.548482][T19290] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4200'. [ 719.787311][T19286] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 719.807833][T19286] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 721.278249][ T30] audit: type=1400 audit(1228.783:1136): avc: denied { write } for pid=19296 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.520163][T16188] Bluetooth: hci5: command 0x0c1a tx timeout [ 721.971201][T19286] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 722.564868][T19324] netlink: 'syz.9.4205': attribute type 16 has an invalid length. [ 723.600828][T16188] Bluetooth: hci5: command 0x0c1a tx timeout [ 724.953780][ T30] audit: type=1400 audit(1232.463:1137): avc: denied { write } for pid=19309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.055478][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4212'. [ 725.580890][ T30] audit: type=1400 audit(1233.093:1138): avc: denied { write } for pid=19348 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.979758][T16188] Bluetooth: hci5: command 0x0c1a tx timeout [ 731.406493][T19410] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 731.406493][T19410] Please contact the netfilter-devel mailing list or update your nftables rules. [ 733.199846][T19422] /dev/nullb0: Can't lookup blockdev [ 734.129751][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4230'. [ 734.397863][T19418] macvtap1: entered promiscuous mode [ 734.750203][T19418] dummy0: entered promiscuous mode [ 734.837936][T19418] macvtap1: entered allmulticast mode [ 735.741480][T19418] dummy0: entered allmulticast mode [ 735.961485][ T30] audit: type=1400 audit(1243.463:1139): avc: denied { write } for pid=19362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.749072][ T5799] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 736.941769][ T5799] usb 3-1: config 0 has no interfaces? [ 736.948749][ T5799] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 737.006304][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.092531][ T30] audit: type=1400 audit(1244.593:1140): avc: denied { create } for pid=19454 comm="syz.0.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 737.126775][ T5799] usb 3-1: config 0 descriptor?? [ 737.199599][ T30] audit: type=1400 audit(1244.603:1141): avc: denied { write } for pid=19454 comm="syz.0.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 737.267123][ T30] audit: type=1400 audit(1244.763:1142): avc: denied { write } for pid=19456 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.799822][ T29] usb 3-1: USB disconnect, device number 10 [ 740.597933][T19503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4244'. [ 742.163111][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.341537][ T30] audit: type=1400 audit(1249.843:1143): avc: denied { write } for pid=19470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.658385][T19500] ip6tnl0: Caught tx_queue_len zero misconfig [ 742.692652][T19517] netlink: 'syz.2.4249': attribute type 1 has an invalid length. [ 742.786791][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4249'. [ 742.815110][T19517] hsr_slave_1: entered allmulticast mode [ 743.025727][ T30] audit: type=1400 audit(1250.533:1144): avc: denied { write } for pid=19520 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.571852][T19548] fuse: fd is not a fuse device [ 745.610375][T19544] netlink: 'syz.0.4252': attribute type 9 has an invalid length. [ 745.748575][T19549] PKCS8: Unsupported PKCS#8 version [ 745.936592][T19556] fuse: fd is not a fuse device [ 746.945982][ T30] audit: type=1326 audit(1254.113:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 748.199973][ T30] audit: type=1326 audit(1254.113:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 748.226843][ T30] audit: type=1326 audit(1254.273:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbcfbb59bbb code=0x7ffc0000 [ 748.254980][ T30] audit: type=1326 audit(1254.353:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 748.541992][ T30] audit: type=1326 audit(1254.353:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 748.969264][ T30] audit: type=1326 audit(1254.493:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbcfbb592ac code=0x7ffc0000 [ 749.009804][ T30] audit: type=1326 audit(1254.833:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbcfbb5930e code=0x7ffc0000 [ 749.047938][ T30] audit: type=1326 audit(1254.953:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcfbb9caeb code=0x7ffc0000 [ 749.184855][ T30] audit: type=1326 audit(1255.083:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcfbb5d68e code=0x7ffc0000 [ 749.414496][ T30] audit: type=1326 audit(1255.313:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcfbb5d68e code=0x7ffc0000 [ 749.510712][ T30] audit: type=1326 audit(1255.593:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19555 comm="syz.6.4257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 754.169879][ T8330] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 754.390496][ T8330] usb 10-1: Using ep0 maxpacket: 32 [ 754.463512][ T8330] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 754.536525][ T8330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.631234][ T8330] usb 10-1: Product: syz [ 754.667374][ T8330] usb 10-1: Manufacturer: syz [ 754.707145][ T8330] usb 10-1: SerialNumber: syz [ 754.848115][ T8330] usb 10-1: config 0 descriptor?? [ 754.856270][T19628] GUP no longer grows the stack in syz.0.4272 (19628): 200000004000-200000005000 (200000001000) [ 755.756953][T19628] CPU: 0 UID: 0 PID: 19628 Comm: syz.0.4272 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.756974][T19628] Tainted: [L]=SOFTLOCKUP [ 755.756983][T19628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 755.756989][T19628] Call Trace: [ 755.756994][T19628] [ 755.756999][T19628] dump_stack_lvl+0x100/0x190 [ 755.757017][T19628] gup_vma_lookup.cold+0x83/0x96 [ 755.757034][T19628] __get_user_pages+0x241/0x32a0 [ 755.757052][T19628] ? down_read_killable+0x307/0x4b0 [ 755.757066][T19628] ? __pfx___get_user_pages+0x10/0x10 [ 755.757083][T19628] __gup_longterm_locked+0x87d/0x16f0 [ 755.757096][T19628] ? __lock_acquire+0x481/0x2630 [ 755.757114][T19628] ? __pfx___gup_longterm_locked+0x10/0x10 [ 755.757130][T19628] ? lock_acquire+0x1b1/0x370 [ 755.757150][T19628] gup_fast_fallback+0x16dc/0x2790 [ 755.757173][T19628] ? __pfx_gup_fast_fallback+0x10/0x10 [ 755.757188][T19628] ? __lock_acquire+0x4a5/0x2630 [ 755.757203][T19628] ? finish_task_switch.isra.0+0x2d3/0x1010 [ 755.757219][T19628] get_user_pages_fast+0xa7/0xf0 [ 755.757233][T19628] ? __pfx_get_user_pages_fast+0x10/0x10 [ 755.757251][T19628] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 755.757270][T19628] ? __mutex_lock+0x26d/0x1b10 [ 755.757286][T19628] ? pipe_lock+0x69/0x80 [ 755.757300][T19628] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 755.757317][T19628] ? __pfx___mutex_lock+0x10/0x10 [ 755.757332][T19628] ? find_held_lock+0x2b/0x80 [ 755.757342][T19628] ? futex_unqueue+0x133/0x2c0 [ 755.757357][T19628] ? import_ubuf+0x1b6/0x220 [ 755.757376][T19628] iov_iter_get_pages2+0xa3/0x100 [ 755.757392][T19628] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 755.757409][T19628] ? wait_for_space+0x2ca/0x3b0 [ 755.757426][T19628] __do_sys_vmsplice+0x7dd/0x13c0 [ 755.757447][T19628] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 755.757466][T19628] ? __pfx_futex_wait+0x10/0x10 [ 755.757501][T19628] ? do_syscall_64+0x10b/0xf80 [ 755.757516][T19628] do_syscall_64+0x10b/0xf80 [ 755.757530][T19628] ? clear_bhb_loop+0x40/0x90 [ 755.757543][T19628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.757554][T19628] RIP: 0033:0x7f3fc279ce59 [ 755.757565][T19628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.757575][T19628] RSP: 002b:00007f3fc3570028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 755.757586][T19628] RAX: ffffffffffffffda RBX: 00007f3fc2a15fa0 RCX: 00007f3fc279ce59 [ 755.757593][T19628] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 755.757599][T19628] RBP: 00007f3fc2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 755.757605][T19628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.757611][T19628] R13: 00007f3fc2a16038 R14: 00007f3fc2a15fa0 R15: 00007ffc26f4b5b8 [ 755.757625][T19628] [ 756.221752][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 756.221767][ T30] audit: type=1400 audit(1263.713:1158): avc: denied { write } for pid=19603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.263304][ T8330] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 756.295501][ T30] audit: type=1400 audit(1263.803:1159): avc: denied { write } for pid=19639 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.097152][ T30] audit: type=1400 audit(1264.603:1160): avc: denied { write } for pid=19643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.244654][ T30] audit: type=1400 audit(1264.753:1161): avc: denied { write } for pid=19658 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.102383][ T8330] gspca_ov534_9: reg_r err -71 [ 759.107508][ T8330] gspca_ov534_9: Unknown sensor 0000 [ 759.107641][ T8330] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 759.414348][T19674] ÿ: renamed from dummy0 (while UP) [ 760.036976][T19689] netlink: zone id is out of range [ 760.042130][T19689] netlink: get zone limit has 8 unknown bytes [ 760.718549][ T8330] usb 10-1: USB disconnect, device number 3 [ 761.461988][T13757] bridge_slave_1: left allmulticast mode [ 761.477986][T13757] bridge_slave_1: left promiscuous mode [ 761.500794][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.536762][T13757] ¾x9ÿ: left allmulticast mode [ 761.558780][T13757] ¾x9ÿ: left promiscuous mode [ 761.582642][T13757] bridge0: port 1(1¾x9ÿ) entered disabled state [ 762.007432][T19723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4292'. [ 762.247696][ T30] audit: type=1400 audit(1269.753:1162): avc: denied { write } for pid=19705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.334158][T13757] bond3 (unregistering): (slave gretap1): Releasing active interface [ 762.557924][ T30] audit: type=1400 audit(1270.063:1163): avc: denied { write } for pid=19734 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.583897][T13757] bond5 (unregistering): (slave gretap2): Releasing active interface [ 762.706329][ T30] audit: type=1400 audit(1270.203:1164): avc: denied { write } for pid=19732 comm="syz.5.4303" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 762.915840][ T30] audit: type=1400 audit(1270.203:1165): avc: denied { add_name } for pid=19732 comm="syz.5.4303" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 762.936228][ T30] audit: type=1400 audit(1270.203:1166): avc: denied { create } for pid=19732 comm="syz.5.4303" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 763.000353][T13757] bond4 (unregistering): (slave geneve2): Releasing active interface [ 764.186773][T13757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.198317][T13757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.208559][T13757] bond0 (unregistering): Released all slaves [ 764.222015][T13757] bond1 (unregistering): Released all slaves [ 764.238892][T13757] bond2 (unregistering): Released all slaves [ 764.256901][T13757] bond3 (unregistering): Released all slaves [ 764.281386][T13757] bond4 (unregistering): Released all slaves [ 764.304013][T13757] bond5 (unregistering): Released all slaves [ 764.334555][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 765.197088][T13757] tipc: Left network mode [ 768.413006][ T30] audit: type=1400 audit(1275.923:1167): avc: denied { write } for pid=19760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.896583][ T30] audit: type=1400 audit(1276.403:1168): avc: denied { write } for pid=19796 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.562404][T19816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.872955][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 773.479603][ T5799] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 774.452239][ T5799] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 774.491429][ T5799] usb 10-1: can't read configurations, error -61 [ 774.769810][ T5799] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 774.900018][ T8323] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 774.953221][ T5799] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 774.969460][ T5799] usb 10-1: can't read configurations, error -61 [ 775.047213][ T5799] usb usb10-port1: attempt power cycle [ 775.095243][T13757] hsr_slave_0: left promiscuous mode [ 775.126301][T13757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.169775][ T8323] usb 3-1: Using ep0 maxpacket: 16 [ 775.178104][ T8323] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 775.203958][ T30] audit: type=1400 audit(1282.703:1169): avc: denied { write } for pid=19847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.242508][ T8323] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.271214][ T8323] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 775.280313][ T8323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.413248][ T8323] usbhid 3-1:128.0: couldn't find an input interrupt endpoint [ 775.764740][ T30] audit: type=1400 audit(1283.273:1170): avc: denied { write } for pid=19873 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.334937][T13757] team0 (unregistering): Port device team_slave_1 removed [ 776.617344][T13757] team0 (unregistering): Port device team_slave_0 removed [ 777.483655][T19892] netlink: 'syz.5.4323': attribute type 4 has an invalid length. [ 778.651490][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 780.565132][T19840] usb 3-1: USB disconnect, device number 11 [ 781.283916][ T30] audit: type=1326 audit(1288.793:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 781.356471][ T30] audit: type=1326 audit(1288.793:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 781.772308][ T30] audit: type=1326 audit(1288.843:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 781.800111][ T30] audit: type=1326 audit(1288.923:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 781.826270][ T30] audit: type=1326 audit(1288.923:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 781.852405][ T30] audit: type=1326 audit(1289.023:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 781.878431][ T30] audit: type=1326 audit(1289.023:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 782.243517][ T30] audit: type=1326 audit(1289.023:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 782.534429][T19951] openvswitch: netlink: Missing key (keys=40, expected=100) [ 782.618872][ T30] audit: type=1326 audit(1289.023:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcfbb5d68e code=0x7ffc0000 [ 782.799813][ T30] audit: type=1326 audit(1289.023:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.6.4333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcfbb9ce59 code=0x7ffc0000 [ 783.449940][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 784.875924][T19970] orangefs_mount: mount request failed with -4 [ 787.479971][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 787.480005][ T30] audit: type=1400 audit(1294.933:1196): avc: denied { nlmsg_read } for pid=20003 comm="syz.6.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 795.716333][ T30] audit: type=1400 audit(1303.223:1197): avc: denied { mount } for pid=20070 comm="syz.0.4365" name="/" dev="hugetlbfs" ino=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 796.582025][ T8330] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 796.623094][T20076] overlayfs: failed to resolve './file1': -2 [ 796.647711][ T30] audit: type=1400 audit(1304.073:1198): avc: denied { mounton } for pid=20070 comm="syz.0.4365" path="/bus" dev="hugetlbfs" ino=67586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 796.672549][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 796.819800][ T8330] usb 10-1: device descriptor read/64, error -32 [ 797.100942][ T8330] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 797.195400][T20087] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4368'. [ 797.537549][ T8330] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 797.621808][ T8330] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 797.848411][ T8330] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 799.366495][ T8330] usb 10-1: string descriptor 0 read error: -71 [ 799.379897][ T8330] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 799.402569][ T8330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.442293][ T8330] usb 10-1: can't set config #168, error -71 [ 799.472441][ T8330] usb 10-1: USB disconnect, device number 8 [ 799.485438][T20110] netlink: 'syz.0.4372': attribute type 1 has an invalid length. [ 799.572314][ T30] audit: type=1400 audit(1307.073:1199): avc: denied { write } for pid=20079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.204916][ T30] audit: type=1400 audit(1307.713:1200): avc: denied { write } for pid=20124 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.252814][T20115] bond12: (slave gretap3): making interface the new active one [ 800.297429][T20115] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 800.417975][T20093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.756073][T20135] fuse: fd is not a fuse device [ 801.195157][T20141] netlink: 'syz.5.4367': attribute type 9 has an invalid length. [ 803.474591][ T30] audit: type=1800 audit(1310.833:1201): pid=20161 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4379" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 803.614715][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.778087][T20169] hsr_slave_1: left allmulticast mode [ 803.857827][ T30] audit: type=1400 audit(1311.363:1202): avc: denied { write } for pid=20163 comm="syz.6.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 803.885233][T20169] macvtap1: left promiscuous mode [ 803.898674][T20169] macvtap1: left allmulticast mode [ 803.912281][T20169] dummy0: left allmulticast mode [ 804.050562][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4382'. [ 804.261935][ T30] audit: type=1400 audit(1311.773:1203): avc: denied { write } for pid=20133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.763112][T20180] bond0: Unable to set down delay as MII monitoring is disabled [ 805.791597][T20180] bond0 (unregistering): Released all slaves [ 805.898287][ T30] audit: type=1400 audit(1313.403:1204): avc: denied { write } for pid=20185 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.936632][T13736] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.961042][T13736] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.360185][T16188] Bluetooth: hci5: unexpected event for opcode 0x0009 [ 808.486715][T13736] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.500534][T13736] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.974631][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 810.162266][ T24] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 810.284280][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.292810][ T24] usb 10-1: Product: syz [ 810.297264][ T24] usb 10-1: Manufacturer: syz [ 810.302418][ T24] usb 10-1: SerialNumber: syz [ 810.401203][ T24] usb 10-1: config 0 descriptor?? [ 811.149837][ T30] audit: type=1400 audit(1318.363:1205): avc: denied { write } for pid=20252 comm="syz.0.4401" name="file0" dev="tmpfs" ino=4371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 811.278543][T13736] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.693502][ T30] audit: type=1400 audit(1318.373:1206): avc: denied { ioctl } for pid=20252 comm="syz.0.4401" path="/816/file0" dev="tmpfs" ino=4371 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 811.696778][T13736] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.919582][ T30] audit: type=1400 audit(1319.183:1207): avc: denied { write } for pid=20221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.967881][ T24] usb 10-1: USB disconnect, device number 9 [ 813.144767][T19917] udevd[19917]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.200493][T13736] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.206817][ T30] audit: type=1400 audit(1320.703:1208): avc: denied { write } for pid=20299 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.232770][T13736] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.597967][T13736] bridge_slave_1: left allmulticast mode [ 813.603876][T13736] bridge_slave_1: left promiscuous mode [ 813.609671][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.629220][T13736] bridge_slave_0: left allmulticast mode [ 813.635683][T13736] bridge_slave_0: left promiscuous mode [ 813.641787][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.674153][T13736] batman_adv: batadv0: Interface deactivated: gretap1 [ 813.984699][ T30] audit: type=1400 audit(1321.493:1209): avc: denied { write } for pid=20306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.011459][T13736] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 814.021939][T20321] fuse: Unknown parameter '0x00000000000000050x0000000000000005' [ 814.181391][T13736] ip6gretap1 (unregistering): left allmulticast mode [ 816.055775][ T8330] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 816.119921][ T30] audit: type=1400 audit(1323.623:1210): avc: denied { write } for pid=20330 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.289820][ T8330] usb 10-1: Using ep0 maxpacket: 32 [ 816.297900][ T8330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.082269][ T8330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.112090][ T8330] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 817.121256][ T8330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.134576][ T8330] usb 10-1: config 0 descriptor?? [ 817.223467][ T8330] usb 10-1: can't set config #0, error -71 [ 817.251834][ T8330] usb 10-1: USB disconnect, device number 10 [ 817.266677][T13736] batman_adv: batadv0: Removing interface: gretap1 [ 817.431098][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4423'. [ 818.350387][T13736] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 818.598647][T13736] bond3 (unregistering): (slave bridge3): Removing an active aggregator [ 818.613421][T13736] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 818.622334][T13736] bond3 (unregistering): (slave bridge3): the permanent HWaddr of slave - fa:d7:e6:b5:ae:37 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 818.647594][T13736] bridge3 (unregistering): left promiscuous mode [ 818.654219][T13736] bridge3 (unregistering): left allmulticast mode [ 819.807735][T13736] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 819.863406][T13736] bridge4 (unregistering): left promiscuous mode [ 819.921206][T13736] bridge4 (unregistering): left allmulticast mode [ 820.139030][T13736] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 820.234597][T13736] bridge5 (unregistering): left promiscuous mode [ 820.274954][T13736] bridge5 (unregistering): left allmulticast mode [ 820.450113][T13736] .` (unregistering): left promiscuous mode [ 820.467125][T13736] bond_slave_0: left promiscuous mode [ 820.473517][T13736] bond_slave_1: left promiscuous mode [ 820.502379][T13736] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.524944][T13736] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.543814][T13736] .` (unregistering): Released all slaves [ 820.565673][T13736] bond1 (unregistering): Released all slaves [ 820.582872][T13736] bond2 (unregistering): Released all slaves [ 820.632461][T13736] bond0 (unregistering): Released all slaves [ 820.654346][T13736] bond3 (unregistering): Released all slaves [ 820.696332][T13736] bond4 (unregistering): Released all slaves [ 820.826904][T13736] bond5 (unregistering): Released all slaves [ 820.954984][T20345] batman_adv: batadv0: Adding interface: dummy0 [ 821.012984][T20345] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.091594][T20382] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 821.099525][T20345] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 821.127505][T13736] IPVS: stopping backup sync thread 12704 ... [ 821.129329][T20349] batman_adv: batadv0: Removing interface: dummy0 [ 821.401677][T20383] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 821.412781][T20383] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 821.442693][T20385] macvlan3: entered promiscuous mode [ 821.448021][T20385] macvlan3: entered allmulticast mode [ 821.508110][T20385] bond13: entered promiscuous mode [ 821.670084][T20385] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 821.713606][T20385] bond13: left promiscuous mode [ 823.147370][ T30] audit: type=1326 audit(1330.653:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20399 comm="syz.2.4424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb46319ce59 code=0x0 [ 826.371815][ T30] audit: type=1400 audit(1333.873:1212): avc: denied { write } for pid=20405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.804613][T13736] batadv0: left promiscuous mode [ 826.885597][T13736] hsr_slave_0: left promiscuous mode [ 826.920001][T13736] hsr_slave_1: left promiscuous mode [ 826.947032][T13736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.082791][T13736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.114365][T13736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.656622][ T30] audit: type=1400 audit(1335.163:1213): avc: denied { write } for pid=20442 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.934176][T13736] veth1_macvtap: left promiscuous mode [ 828.066194][T13736] veth1_vlan: left promiscuous mode [ 828.125842][T13736] veth0_vlan: left promiscuous mode [ 831.220108][T13736] team0 (unregistering): Port device team_slave_1 removed [ 831.244606][T13736] team0 (unregistering): Port device team_slave_0 removed [ 831.399494][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 834.122411][T20500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20500 comm=syz.5.4443 [ 834.167067][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4442'. [ 834.329996][T13736] IPVS: stop unused estimator thread 0... [ 836.442534][T20522] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4444'. [ 839.157521][ T30] audit: type=1400 audit(1346.663:1214): avc: denied { getopt } for pid=20534 comm="syz.2.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 839.685883][T20548] netlink: 'syz.9.4451': attribute type 4 has an invalid length. [ 841.819239][ T30] audit: type=1400 audit(1349.303:1215): avc: denied { write } for pid=20488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.944784][ T30] audit: type=1400 audit(1350.143:1216): avc: denied { write } for pid=20560 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.095384][T20574] dvmrp1: entered allmulticast mode [ 843.150321][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 843.849924][T19840] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 844.189774][T19840] usb 3-1: Using ep0 maxpacket: 8 [ 844.253090][T19840] usb 3-1: config 0 has an invalid interface number: 128 but max is 2 [ 844.333581][T19840] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 844.365486][T19840] usb 3-1: config 0 has no interface number 1 [ 844.599783][T19840] usb 3-1: config 0 has no interface number 2 [ 844.607480][T19840] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 844.626791][T19840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.761377][T19840] usb 3-1: config 0 descriptor?? [ 845.865159][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4465'. [ 846.033227][T19840] qcserial 3-1:0.128: Qualcomm USB modem converter detected [ 846.462938][ T30] audit: type=1400 audit(1353.973:1217): avc: denied { write } for pid=20588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.627640][T20620] sch_fq: defrate 0 ignored. [ 846.709404][ T30] audit: type=1400 audit(1354.213:1218): avc: denied { write } for pid=20622 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.836480][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 846.872033][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4469'. [ 846.980404][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4469'. [ 847.478917][ T30] audit: type=1400 audit(1354.983:1219): avc: denied { write } for pid=20627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.239524][ T8330] usb 3-1: USB disconnect, device number 12 [ 848.319398][ T8330] qcserial 3-1:0.128: device disconnected [ 848.905647][ T30] audit: type=1400 audit(1356.413:1220): avc: denied { write } for pid=20654 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.584029][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16 [ 850.643828][T20663] tipc: Resetting bearer [ 850.797198][T20663] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 850.803257][T20663] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 852.186942][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4488'. [ 852.564896][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 852.593735][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 852.603023][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 852.624693][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 852.633758][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 852.639571][T20687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4481'. [ 852.696483][T16188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 852.706377][T16188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 852.718359][T16188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 852.726589][T16188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 852.734490][T16188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 852.989793][ T8321] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 853.179890][ T8321] usb 3-1: Using ep0 maxpacket: 32 [ 853.252831][ T8321] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 853.322879][ T8321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.381081][ T8321] usb 3-1: Product: syz [ 853.408139][ T8321] usb 3-1: Manufacturer: syz [ 853.442329][ T8321] usb 3-1: SerialNumber: syz [ 853.535411][ T8321] usb 3-1: config 0 descriptor?? [ 853.695518][T20514] syz_tun (unregistering): left allmulticast mode [ 854.198816][ T30] audit: type=1400 audit(1361.697:1221): avc: denied { write } for pid=20694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.639658][ T30] audit: type=1400 audit(1362.147:1222): avc: denied { write } for pid=20722 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.800133][T16188] Bluetooth: hci0: command tx timeout [ 856.201780][ T8330] usb 3-1: USB disconnect, device number 13 [ 856.759675][T20749] siw: device registration error -23 [ 856.910317][T16188] Bluetooth: hci0: command tx timeout [ 857.191537][ T30] audit: type=1400 audit(1364.697:1223): avc: denied { write } for pid=20733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.265889][T20748] overlay: ./file0 is not a directory [ 857.828022][ T30] audit: type=1400 audit(1365.307:1224): avc: denied { write } for pid=20752 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.274041][T20758] siw: device registration error -23 [ 858.973852][T16188] Bluetooth: hci0: command tx timeout [ 861.069707][T16188] Bluetooth: hci0: command tx timeout [ 861.269383][T20779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4494'. [ 861.399567][T20785] netlink: 'syz.5.4494': attribute type 10 has an invalid length. [ 861.448273][T20785] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4494'. [ 862.596839][T20801] ufs: You didn't specify the type of your ufs filesystem [ 862.596839][T20801] [ 862.596839][T20801] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 862.596839][T20801] [ 862.596839][T20801] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 862.629513][T20801] ufs: ufstype=old is supported read-only [ 864.667890][ T30] audit: type=1400 audit(1372.177:1225): avc: denied { write } for pid=20765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.052128][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.419868][T20352] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 865.619524][T20825] futex_wake_op: syz.2.4503 tries to shift op by 144; fix this program [ 866.383402][T20352] usb 10-1: Using ep0 maxpacket: 8 [ 866.426688][T20352] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.486562][T20352] usb 10-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 866.531433][T20352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.546463][ T30] audit: type=1400 audit(1374.057:1226): avc: denied { write } for pid=20821 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.578225][T20675] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.589648][T20352] usb 10-1: Product: syz [ 866.594048][T20352] usb 10-1: Manufacturer: syz [ 866.601044][T20675] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.608709][T20352] usb 10-1: SerialNumber: syz [ 866.615190][T20675] bridge_slave_0: entered allmulticast mode [ 866.630559][T20352] usb 10-1: config 0 descriptor?? [ 866.635827][T20675] bridge_slave_0: entered promiscuous mode [ 866.682379][T20675] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.716420][T20352] cdc_ether 10-1:0.0: skipping garbage [ 866.732350][T20352] cdc_ether 10-1:0.0: bad CDC descriptors [ 866.755983][T20352] usb 10-1: unsupported MDLM descriptors [ 866.789859][T20675] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.803730][T20352] cdc_acm 10-1:0.0: skipping garbage [ 866.806282][T20675] bridge_slave_1: entered allmulticast mode [ 866.826550][T20675] bridge_slave_1: entered promiscuous mode [ 867.431719][T20675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.448982][ T8330] usb 10-1: USB disconnect, device number 11 [ 867.465693][T20675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.469163][T20820] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 867.633012][T20675] team0: Port device team_slave_0 added [ 867.779071][T20675] team0: Port device team_slave_1 added [ 867.949442][T20675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.956488][T20675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.015607][T20675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.339800][T20675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.339816][T20675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.339837][T20675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.370273][T20675] hsr_slave_0: entered promiscuous mode [ 868.370999][T20675] hsr_slave_1: entered promiscuous mode [ 868.371539][T20675] debugfs: 'hsr0' already exists in 'hsr' [ 868.371556][T20675] Cannot create hsr debugfs directory [ 870.100497][T20858] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 870.146249][ T30] audit: type=1400 audit(1377.657:1227): avc: denied { block_suspend } for pid=20853 comm="syz.9.4508" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 870.366387][ T30] audit: type=1400 audit(1377.877:1228): avc: denied { write } for pid=20832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.435369][T20866] x_tables: duplicate underflow at hook 1 [ 872.481754][ T30] audit: type=1400 audit(1379.987:1229): avc: denied { write } for pid=20877 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.089568][T20879] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4513'. [ 873.866762][ T30] audit: type=1400 audit(1381.377:1230): avc: denied { write } for pid=20883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.111496][T19840] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 874.122431][ T30] audit: type=1400 audit(1381.627:1231): avc: denied { write } for pid=20898 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.355970][T19840] usb 10-1: Using ep0 maxpacket: 32 [ 874.364813][T20675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 874.378517][T19840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.413305][T19840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.415428][T20675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.432200][T20675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 874.438831][T19840] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 874.472788][T19840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.661956][T19840] usb 10-1: config 0 descriptor?? [ 874.813755][T19840] hub 10-1:0.0: USB hub found [ 874.920867][T20675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.928690][T20675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 875.117468][T20675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 875.142713][T20675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 875.165180][T20675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 875.223760][T19840] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 875.745176][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.781873][T19840] usbhid 10-1:0.0: can't add hid device: -71 [ 875.799431][T19840] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 875.903358][T19840] usb 10-1: USB disconnect, device number 12 [ 875.909787][T20675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.924945][T20675] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.942328][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.029860][ T30] audit: type=1400 audit(1383.467:1232): avc: denied { write } for pid=20903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 876.052755][T19154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.336381][T20675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 876.379102][ T30] audit: type=1326 audit(1383.877:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20932 comm="syz.0.4519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 876.860447][ T8338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.907338][T20675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 876.921520][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.928665][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.938010][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.943302][T20946] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 876.952388][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.981449][T20946] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 876.992572][T20946] overlayfs: failed to look up (tracing) for ino (-66) [ 877.011751][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.068199][ T30] audit: type=1326 audit(1383.877:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20932 comm="syz.0.4519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 877.068249][ T30] audit: type=1326 audit(1383.877:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20932 comm="syz.0.4519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 877.068289][ T30] audit: type=1326 audit(1383.887:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20932 comm="syz.0.4519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 877.068326][ T30] audit: type=1326 audit(1383.887:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20932 comm="syz.0.4519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc279ce59 code=0x7ffc0000 [ 877.068362][ T30] audit: type=1400 audit(1384.397:1238): avc: denied { write } for pid=20940 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.146825][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.991614][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.199966][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.641821][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.918785][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4529'. [ 880.993578][T21000] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4529'. [ 881.033285][T20675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.129076][ T30] audit: type=1400 audit(1388.637:1239): avc: denied { write } for pid=20952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.259195][T20675] veth0_vlan: entered promiscuous mode [ 881.317718][T20675] veth1_vlan: entered promiscuous mode [ 881.723681][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4531'. [ 881.731404][T20352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.759736][ T30] audit: type=1400 audit(1389.257:1240): avc: denied { write } for pid=21005 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.878944][T20675] veth0_macvtap: entered promiscuous mode [ 882.002575][ T8338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.105522][T20675] veth1_macvtap: entered promiscuous mode [ 882.424408][T20675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.435907][T20675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.482949][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.538927][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.565994][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.638736][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.841523][T20352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.291639][T13756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.361631][T13756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.927587][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.724726][T13747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.784104][T13747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.033409][T20352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.048774][ T30] audit: type=1400 audit(1392.557:1241): avc: denied { write } for pid=21017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.129727][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.839727][ T30] audit: type=1400 audit(1393.347:1242): avc: denied { write } for pid=21054 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.905647][T21052] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 885.913616][T21052] ALSA: mixer_oss: invalid index 1374389 [ 886.080144][T20352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.236995][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.309220][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.159281][T21078] netlink: 'syz.2.4543': attribute type 1 has an invalid length. [ 888.174758][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.239579][T21083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4543'. [ 888.293216][T21078] bond1: entered promiscuous mode [ 888.319899][T20352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.341794][T21078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.403830][T21083] bond1: entered allmulticast mode [ 888.472723][T21090] Bluetooth: MGMT ver 1.23 [ 888.515673][T21078] bond1: (slave bridge1): making interface the new active one [ 888.549899][T21078] bridge1: entered promiscuous mode [ 888.636034][T21078] bridge1: entered allmulticast mode [ 888.717607][T21078] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 888.848938][ T30] audit: type=1400 audit(1396.347:1243): avc: denied { wake_alarm } for pid=21092 comm="syz.5.4544" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 889.605276][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.148919][ T8330] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 891.697363][T20352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.774550][ T30] audit: type=1400 audit(1399.227:1244): avc: denied { write } for pid=21068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 891.812837][T19154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.865299][ T8330] usb 4-1: Using ep0 maxpacket: 8 [ 892.093268][ T8330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.106017][ T8330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.116931][ T8330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.889029][ T8330] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 892.890164][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.899887][ T8330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.993143][T21121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.003777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.015652][ T8330] usb 4-1: config 0 descriptor?? [ 893.041970][ T8330] usb 4-1: can't set config #0, error -71 [ 893.070282][ T30] audit: type=1400 audit(1400.577:1245): avc: denied { write } for pid=21118 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.108641][ T8330] usb 4-1: USB disconnect, device number 15 [ 893.212356][T21121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.531299][T21119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.541529][T20352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.635907][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4556'. [ 895.033865][ T8338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.051677][T20352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.760890][ T8338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.797311][T21119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.091630][ T8330] net_ratelimit: 4 callbacks suppressed [ 898.091652][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.171446][ T30] audit: type=1400 audit(1405.687:1246): avc: denied { write } for pid=21149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 898.422474][ T30] audit: type=1400 audit(1405.937:1247): avc: denied { write } for pid=21166 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 898.547815][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.721303][T21174] netlink: 'syz.3.4562': attribute type 4 has an invalid length. [ 899.600686][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.340787][T19840] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 900.521338][T19840] usb 10-1: Using ep0 maxpacket: 8 [ 900.552081][T19840] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.573778][ T30] audit: type=1400 audit(1408.087:1248): avc: denied { write } for pid=21173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 900.613313][T19840] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 900.680071][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.722821][T19840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 900.786816][T19840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 900.935955][T19840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 900.948434][T19840] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.963420][T19840] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 900.972798][T19840] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.020893][T19840] usb 10-1: Product: syz [ 901.035805][T19840] usb 10-1: Manufacturer: syz [ 901.762778][ T8338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.788957][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.807227][T19840] usb 10-1: SerialNumber: syz [ 901.837720][T19840] usb 10-1: config 0 descriptor?? [ 901.866974][T21190] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 901.965181][ T30] audit: type=1400 audit(1409.477:1249): avc: denied { write } for pid=21205 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.119777][T21190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.152796][T21190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.904318][T21190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.918940][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.007269][T21216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.018031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.743131][T21190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.799449][T21190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.840662][T21190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.922020][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.940411][T19840] rc_core: IR keymap rc-snapstream-firefly not found [ 903.986547][T19840] Registered IR keymap rc-empty [ 904.022055][T19840] rc rc0: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 904.044156][T19840] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input22 [ 904.625904][T19840] input: syz syz mouse as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input23 [ 904.989937][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.281079][T21241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4574'. [ 905.290734][T21241] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 905.301335][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.599608][T19154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.740009][T19840] usb 10-1: USB disconnect, device number 13 [ 905.740072][ C1] ati_remote 10-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 905.792142][ T4964] ati_remote 10-1:0.0: ati_remote_open: usb_submit_urb failed! [ 905.803266][ T30] audit: type=1400 audit(1413.317:1250): avc: denied { write } for pid=21207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 906.323350][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.557981][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.572394][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4576'. [ 907.618609][T21248] openvswitch: netlink: ct_state flags 40020000 unsupported [ 907.681644][ T30] audit: type=1400 audit(1415.187:1251): avc: denied { create } for pid=21264 comm="syz.2.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 908.000805][T19154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.004099][ T30] audit: type=1400 audit(1415.507:1252): avc: denied { write } for pid=21262 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 908.151526][ T30] audit: type=1400 audit(1415.547:1253): avc: denied { bind } for pid=21264 comm="syz.2.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 908.265918][ T30] audit: type=1400 audit(1415.547:1254): avc: denied { connect } for pid=21264 comm="syz.2.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 908.383133][ T30] audit: type=1400 audit(1415.547:1255): avc: denied { write } for pid=21264 comm="syz.2.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 908.568005][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.602975][ T30] audit: type=1400 audit(1416.107:1256): avc: denied { setattr } for pid=21252 comm="syz.9.4578" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 909.417178][ T30] audit: type=1326 audit(1416.927:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21289 comm="syz.9.4585" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b639ce59 code=0x0 [ 909.602534][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.296188][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.649606][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.329990][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.901247][T21311] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 913.361338][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.400308][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.508913][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.517076][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.525189][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.097766][ T30] audit: type=1400 audit(1423.607:1258): avc: denied { write } for pid=21288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.560192][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.814220][ T30] audit: type=1400 audit(1424.327:1259): avc: denied { write } for pid=21336 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.855306][T21338] tipc: Enabling of bearer rejected, already enabled [ 917.826235][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.856632][ T30] audit: type=1400 audit(1424.597:1260): avc: denied { view } for pid=21345 comm="syz.9.4596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 918.550869][T21353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21353 comm=syz.9.4598 [ 1024.549549][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1024.556529][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20675/1:b..l P21371/1:b..l [ 1024.566316][ C1] rcu: (detected by 1, t=10502 jiffies, g=116637, q=845 ncpus=2) [ 1024.574110][ C1] task:sed state:R running task stack:24872 pid:21371 tgid:21371 ppid:21370 task_flags:0x40000c flags:0x00080000 [ 1024.588387][ C1] Call Trace: [ 1024.591669][ C1] [ 1024.594595][ C1] __schedule+0x1295/0x67a0 [ 1024.599117][ C1] ? __pfx___schedule+0x10/0x10 [ 1024.603965][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1024.609327][ C1] preempt_schedule_common+0x42/0xc0 [ 1024.614607][ C1] preempt_schedule_thunk+0x16/0x30 [ 1024.619801][ C1] _raw_spin_unlock+0x3e/0x50 [ 1024.624476][ C1] __zap_vma_range+0x1791/0x4bf0 [ 1024.629442][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1024.634723][ C1] ? find_held_lock+0x2b/0x80 [ 1024.639407][ C1] unmap_vmas+0x299/0x5f0 [ 1024.643736][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1024.648590][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1024.653539][ C1] exit_mmap+0x1ef/0xa10 [ 1024.657809][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1024.662652][ C1] ? trace_contention_end+0x122/0x170 [ 1024.668024][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1024.673136][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1024.678250][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1024.683192][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1024.688849][ C1] __mmput+0x12a/0x410 [ 1024.692921][ C1] mmput+0x67/0x80 [ 1024.696642][ C1] do_exit+0x8b2/0x2af0 [ 1024.700795][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1024.705815][ C1] ? __pfx_do_exit+0x10/0x10 [ 1024.710392][ C1] ? do_group_exit+0x1bd/0x2a0 [ 1024.715159][ C1] ? rcu_is_watching+0x12/0xc0 [ 1024.719933][ C1] do_group_exit+0xd5/0x2a0 [ 1024.724429][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1024.729446][ C1] x64_sys_call+0x102c/0x1530 [ 1024.734122][ C1] do_syscall_64+0x10b/0xf80 [ 1024.738709][ C1] ? clear_bhb_loop+0x40/0x90 [ 1024.743378][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.749259][ C1] RIP: 0033:0x7fd50a8a76c5 [ 1024.753662][ C1] RSP: 002b:00007ffd24ea0e48 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 1024.762069][ C1] RAX: ffffffffffffffda RBX: 00007fd50a9a8fe8 RCX: 00007fd50a8a76c5 [ 1024.770201][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1024.778157][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1024.786117][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1024.794160][ C1] R13: 0000000000000000 R14: 00007fd50a9a7680 R15: 00007fd50a9a9000 [ 1024.802128][ C1] [ 1024.805133][ C1] task:syz-executor state:R running task stack:23544 pid:20675 tgid:20675 ppid:20662 task_flags:0x400140 flags:0x00080000 [ 1024.818608][ C1] Call Trace: [ 1024.821870][ C1] [ 1024.824790][ C1] __schedule+0x1295/0x67a0 [ 1024.829294][ C1] ? __schedule+0x12a7/0x67a0 [ 1024.833979][ C1] ? __pfx___schedule+0x10/0x10 [ 1024.838840][ C1] ? mark_held_locks+0x40/0x70 [ 1024.843600][ C1] preempt_schedule_irq+0x50/0x90 [ 1024.848711][ C1] irqentry_exit+0x205/0x7e0 [ 1024.853298][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.859270][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1024.864468][ C1] Code: 05 3b a2 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 46 40 f3 0e 0f 82 a4 02 00 00 8b 35 ce 73 f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd a1 26 12 0f 85 ed 02 00 00 48 83 c4 [ 1024.884062][ C1] RSP: 0018:ffffc90004af72a0 EFLAGS: 00000206 [ 1024.890115][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 1024.898073][ C1] RDX: 0000000000000000 RSI: ffffffff8defcec5 RDI: ffffffff8c1c3a00 [ 1024.906028][ C1] RBP: ffffffff8e7e5620 R08: 00000000875ba5a4 R09: 0000000000000007 [ 1024.914073][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1024.922128][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.930099][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1024.935380][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1024.940573][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1024.946727][ C1] unwind_next_frame+0xd1/0x2090 [ 1024.951657][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1024.956766][ C1] ? save_stack+0x162/0x1e0 [ 1024.961285][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1024.967434][ C1] arch_stack_walk+0x94/0xf0 [ 1024.972041][ C1] ? save_stack+0x162/0x1e0 [ 1024.976541][ C1] stack_trace_save+0x8e/0xc0 [ 1024.981204][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1024.986563][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1024.991492][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1024.997289][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1025.002492][ C1] save_stack+0x162/0x1e0 [ 1025.006807][ C1] ? __pfx_save_stack+0x10/0x10 [ 1025.011659][ C1] ? page_ext_put+0x3e/0xd0 [ 1025.016153][ C1] __reset_page_owner+0x84/0x190 [ 1025.021083][ C1] free_unref_folios+0xa0d/0x16f0 [ 1025.026109][ C1] ? __print_lock_name+0x60/0x80 [ 1025.031034][ C1] ? folios_put_refs+0x50a/0xa90 [ 1025.035970][ C1] folios_put_refs+0x571/0xa90 [ 1025.040734][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1025.046019][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1025.052341][ C1] shmem_undo_range+0x5e5/0x1570 [ 1025.057272][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1025.062653][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1025.068280][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1025.073062][ C1] ? kasan_save_stack+0x3f/0x50 [ 1025.077897][ C1] ? kasan_save_stack+0x30/0x50 [ 1025.082733][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1025.088097][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1025.094159][ C1] ? dentry_free+0xbc/0x170 [ 1025.098658][ C1] ? __dentry_kill+0x4c6/0x690 [ 1025.103420][ C1] ? dput.part.0+0x456/0x570 [ 1025.108004][ C1] shmem_evict_inode+0x3f3/0xc40 [ 1025.112931][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 1025.118651][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1025.124095][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1025.130156][ C1] ? find_held_lock+0x2b/0x80 [ 1025.134819][ C1] ? evict+0x37e/0xad0 [ 1025.138874][ C1] ? evict+0x37e/0xad0 [ 1025.142929][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1025.148372][ C1] evict+0x3c2/0xad0 [ 1025.152283][ C1] ? __pfx_evict+0x10/0x10 [ 1025.156704][ C1] ? iput.part.0+0x5fd/0xf50 [ 1025.161286][ C1] iput.part.0+0x605/0xf50 [ 1025.165692][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 1025.170973][ C1] iput+0x35/0x40 [ 1025.174591][ C1] filename_unlinkat+0x466/0x730 [ 1025.179526][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 1025.184985][ C1] ? do_getname+0x191/0x390 [ 1025.189487][ C1] __x64_sys_unlink+0x46/0x70 [ 1025.194158][ C1] do_syscall_64+0x10b/0xf80 [ 1025.198744][ C1] ? clear_bhb_loop+0x40/0x90 [ 1025.203413][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.209293][ C1] RIP: 0033:0x7f617e59bf47 [ 1025.213700][ C1] RSP: 002b:00007ffd333537e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1025.222103][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f617e59bf47 [ 1025.230057][ C1] RDX: 00007ffd33353810 RSI: 00007ffd333538a0 RDI: 00007ffd333538a0 [ 1025.238013][ C1] RBP: 00007ffd333538a0 R08: 00007ffd333548a0 R09: 00000000ffffffff [ 1025.245968][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd33354930 [ 1025.253922][ C1] R13: 00007f617e6321ca R14: 00000000000df645 R15: 00007ffd33354970 [ 1025.261893][ C1] [ 1025.264898][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g116637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1025.276165][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1025.286290][ C1] rcu: RCU grace-period kthread stack dump: [ 1025.292162][ C1] task:rcu_preempt state:R running task stack:28360 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1025.305642][ C1] Call Trace: [ 1025.308913][ C1] [ 1025.311835][ C1] __schedule+0x1295/0x67a0 [ 1025.316352][ C1] ? __pfx___schedule+0x10/0x10 [ 1025.321195][ C1] ? find_held_lock+0x2b/0x80 [ 1025.325862][ C1] ? schedule+0x2bf/0x390 [ 1025.330190][ C1] schedule+0xdd/0x390 [ 1025.334250][ C1] schedule_timeout+0x127/0x280 [ 1025.339091][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1025.344471][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1025.349750][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1025.355556][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1025.361012][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1025.365790][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1025.371072][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1025.376003][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1025.381197][ C1] rcu_gp_kthread+0x179/0x230 [ 1025.385869][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1025.391155][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1025.397042][ C1] ? __kthread_parkme+0x18c/0x230 [ 1025.402147][ C1] ? kthread+0x13a/0x450 [ 1025.406378][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1025.411565][ C1] kthread+0x370/0x450 [ 1025.415635][ C1] ? __pfx_kthread+0x10/0x10 [ 1025.420220][ C1] ret_from_fork+0x72b/0xd50 [ 1025.424804][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1025.429908][ C1] ? __switch_to+0x800/0x1100 [ 1025.434583][ C1] ? __pfx_kthread+0x10/0x10 [ 1025.439169][ C1] ret_from_fork_asm+0x1a/0x30 [ 1025.443942][ C1] [ 1025.446964][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1025.453277][ C1] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.464302][ C1] Tainted: [L]=SOFTLOCKUP [ 1025.468613][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.478651][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 1025.485332][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 39 83 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 1025.504925][ C1] RSP: 0018:ffffc9000393f618 EFLAGS: 00000293 [ 1025.510978][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc2bed [ 1025.518936][ C1] RDX: ffff88802e722500 RSI: ffffffff81fc2bc7 RDI: ffff88802e722500 [ 1025.526891][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 1025.534846][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1025.542799][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 1025.550755][ C1] FS: 00005555578d5500(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 1025.559670][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1025.566238][ C1] CR2: 00007f3fc35456b8 CR3: 000000005a882000 CR4: 00000000003526f0 [ 1025.574198][ C1] Call Trace: [ 1025.577463][ C1] [ 1025.580380][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1025.585576][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1025.591892][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1025.596821][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1025.601757][ C1] ? rcu_is_watching+0x12/0xc0 [ 1025.606517][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1025.611708][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1025.616813][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1025.621919][ C1] ? dup_mmap+0x12cd/0x2180 [ 1025.626411][ C1] ? dup_mmap+0x12cd/0x2180 [ 1025.630908][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1025.636539][ C1] ? up_write+0x28c/0x4f0 [ 1025.640868][ C1] dup_mmap+0x12e8/0x2180 [ 1025.645197][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1025.649864][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1025.655665][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1025.660594][ C1] ? find_held_lock+0x2b/0x80 [ 1025.665258][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1025.671173][ C1] copy_process+0x6c78/0x7ed0 [ 1025.675850][ C1] ? __pfx_copy_process+0x10/0x10 [ 1025.680859][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1025.685890][ C1] kernel_clone+0x12e/0x9c0 [ 1025.690381][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1025.695393][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1025.700330][ C1] ? find_held_lock+0x2b/0x80 [ 1025.704993][ C1] ? __might_fault+0xc5/0x140 [ 1025.709667][ C1] __do_sys_clone+0xd9/0x120 [ 1025.714249][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1025.719451][ C1] ? rcu_is_watching+0x12/0xc0 [ 1025.724223][ C1] do_syscall_64+0x10b/0xf80 [ 1025.728827][ C1] ? clear_bhb_loop+0x40/0x90 [ 1025.733500][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.739381][ C1] RIP: 0033:0x7f3fc27c58d2 [ 1025.743787][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1025.763472][ C1] RSP: 002b:00007ffc26f4b7d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1025.771877][ C1] RAX: ffffffffffffffda RBX: 00007ffc26f4b7d0 RCX: 00007f3fc27c58d2 [ 1025.779838][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1025.787794][ C1] RBP: 00007ffc26f4b95c R08: 0000000000000000 R09: 0000000000000001 [ 1025.795750][ C1] R10: 00005555578d57d0 R11: 0000000000000246 R12: 0000000000000001 [ 1025.803796][ C1] R13: 00000000000927c0 R14: 00000000000e041c R15: 00007ffc26f4b9b0 [ 1025.811770][ C1]