last executing test programs: 14m56.983451159s ago: executing program 32 (id=288): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0xa, 0x400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0xfff4, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) ioperm(0x5, 0x6, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) ioprio_set$uid(0x0, r2, 0x4007) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m45.759446799s ago: executing program 0 (id=489): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x104, 0x10, 0x7, 0x70bd25, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ecf2dba1371f375, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x10003, 0x80000001, 0x14000000, 0x0, 0x1000000, 0xfffffffffffffffe}, {0x0, 0x2, 0x7, 0xffffffffffffff1d}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x64}, [@coaddr={0x14, 0xe, @in=@private=0xa010102}]}, 0x104}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000240)) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_procfs(0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) 12m41.725477841s ago: executing program 0 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3ff, 0x2) eventfd2(0x8, 0x80001) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, 0x0) 12m39.981886148s ago: executing program 0 (id=496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x9, 0x7, 0xf, 0x3, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x80000001, 0x93, &(0x7f0000000280)=""/147, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0xa, 0x6}, {0x3, 0x4, 0xc, 0xb}, {0x0, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x10}, {0x0, 0x2, 0x3, 0xa}, {0x5, 0x3, 0x1, 0x1}], 0x10, 0x7}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7}, 0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, 0x0, 0x0, 0xfc) r1 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x19cb) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 12m36.821505361s ago: executing program 0 (id=505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) lseek(r3, 0x0, 0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000500), 0x404, r5, 0x0, 0x1ba8847c99}, 0x38) ftruncate(r0, 0xfffffd83) add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080), 0x80) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) close_range(r3, r6, 0x0) 12m31.854369163s ago: executing program 0 (id=512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100", @ANYRES32=0x0, @ANYBLOB="5c65a82d2a25ab26e1745de12cfaa21567b6ee204f46e757573938438b109d585632f92a4ec07ebd844ad78400679c8d5d64e518790df37f04e5db9bbf99d8ac2ed06798433c5d78bc0525d4cb65655d54598b549d3c9d5415f40592a2131742d63737d55cf25906f393996f78e8f0e4284810e4d71dca7fffff3bbe56f8d5849505ef5e34df4499d985cfa43231ac3257cccb0de7c7bf"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) close(0x3) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x2000000000000091, &(0x7f0000000200)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) sendmmsg$sock(r2, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)}], 0x2}}], 0x1, 0x8044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) 12m26.531881756s ago: executing program 0 (id=524): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x800) ioctl$I2C_TIMEOUT(r0, 0x702, 0xfffffffffffff95f) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r8, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r8}}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 12m11.054531108s ago: executing program 33 (id=524): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x800) ioctl$I2C_TIMEOUT(r0, 0x702, 0xfffffffffffff95f) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r8, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r8}}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 10m57.708658171s ago: executing program 3 (id=643): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r6, &(0x7f0000000040), 0x0, 0x5, 0x0) rt_sigqueueinfo(0x0, 0x3c, &(0x7f00000000c0)={0x17, 0x7b7, 0xfffffffc}) unshare(0x64000600) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10m54.691905426s ago: executing program 3 (id=646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x80047441, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001200578300"/20, @ANYRES32=0x0, @ANYBLOB="0600"], 0x24}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0xb, @val=@perf_event={0xa}}, 0x18) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0xc) 10m52.167851115s ago: executing program 3 (id=651): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x5, @sliced={0x8, [0x4, 0x3, 0xc99, 0x644c, 0x4, 0x7f, 0x1, 0x0, 0x7fff, 0x7, 0x5cd1, 0xc, 0x5, 0xbb, 0x4, 0x0, 0x8, 0xc5, 0x9, 0xffff, 0x9, 0x2, 0x7, 0x4, 0x1, 0x6, 0x2, 0x2, 0x9507, 0x5, 0x2, 0x9bc, 0x400, 0x7, 0xf, 0x2, 0x3, 0x0, 0x4, 0x0, 0x800, 0xe6ef, 0x8, 0x100, 0x6, 0x2000, 0x2, 0x3], 0x8001}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 10m47.198466726s ago: executing program 3 (id=659): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000000c0)=0x3) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000003ec0), r6) ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0) 10m45.301805968s ago: executing program 3 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f00000000c0)={'vlan0\x00', 0x1}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2d1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r5, 0x27f4, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) pipe2$watch_queue(&(0x7f0000001180), 0x80) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r6, 0x40045108, &(0x7f00000002c0)=0x4) 10m35.692818726s ago: executing program 3 (id=671): socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x400000000010, 0x3, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xc) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="2d70968437b5"], 0x1f) r7 = getpid() syz_pidfd_open(r7, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x20066}]}) write$UHID_INPUT(r8, &(0x7f00000021c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 10m20.230127212s ago: executing program 34 (id=671): socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x400000000010, 0x3, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xc) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="2d70968437b5"], 0x1f) r7 = getpid() syz_pidfd_open(r7, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x20066}]}) write$UHID_INPUT(r8, &(0x7f00000021c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 8m58.973466059s ago: executing program 5 (id=813): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0xe8, 0x40, 0xfffffffffffffffd, 0x50, 0x4}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000480)=0xe9, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000006a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x5d, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da070000000000010902"], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000640)='/dev/comedi3\x00', 0x181000, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r9, 0x406855c9, &(0x7f0000000380)={0x4, 0x6, {0x53, 0x1, 0x2, {0x7, 0x3}, {0xe, 0x3}, @ramp={0x6, 0x0, {0x9, 0xedbe, 0x1, 0x8a}}}, {0x57, 0xb, 0x1190, {0x9, 0x8000}, {0x2, 0x6}, @const={0x3, {0x1ff, 0x9, 0x81, 0x200}}}}) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="8ce51bd0c74bc6eb0951fa933aa008ce39c8f86c3ab089be15b5441f146479db4f4c694c85b8cec08f82612606f6aee1e9c963b88d2b05a811b0dfc1e8dfad35b1de9e136820b5b0fa14d0f61068f95515d744283d3651ef7e7ccdbabe98b8b8f542d0f89959769be3049f116ca284e008158cd14a49061dc61c1888e874fcdf3ea2098c6908d0", 0x87}], 0x1, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xb7}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x352}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xa8}, 0x20008000) 8m54.207119706s ago: executing program 7 (id=818): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x5, @sliced={0x8, [0x4, 0x3, 0xc99, 0x644c, 0x4, 0x7f, 0x1, 0x0, 0x7fff, 0x7, 0x5cd1, 0xc, 0x5, 0xbb, 0x4, 0x0, 0x8, 0xc5, 0x9, 0xffff, 0x9, 0x2, 0x7, 0x4, 0x1, 0x6, 0x2, 0x2, 0x9507, 0x5, 0x2, 0x9bc, 0x400, 0x7, 0xf, 0x2, 0x3, 0x0, 0x4, 0x0, 0x800, 0xe6ef, 0x8, 0x100, 0x6, 0x2000, 0x2, 0x3], 0x8001}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 8m54.165728884s ago: executing program 5 (id=819): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0xfd, 0x0, 0x81}]}, 0x10) io_uring_enter(0xffffffffffffffff, 0x7357, 0x9fcb, 0x1, &(0x7f0000000780)={[0x7]}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) process_madvise(r7, &(0x7f0000000080), 0x0, 0x14, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 8m53.927647867s ago: executing program 7 (id=821): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x5, @sliced={0x8, [0x4, 0x3, 0xc99, 0x644c, 0x4, 0x7f, 0x1, 0x0, 0x7fff, 0x7, 0x5cd1, 0xc, 0x5, 0xbb, 0x4, 0x0, 0x8, 0xc5, 0x9, 0xffff, 0x9, 0x2, 0x7, 0x4, 0x1, 0x6, 0x2, 0x2, 0x9507, 0x5, 0x2, 0x9bc, 0x400, 0x7, 0xf, 0x2, 0x3, 0x0, 0x4, 0x0, 0x800, 0xe6ef, 0x8, 0x100, 0x6, 0x2000, 0x2, 0x3], 0x8001}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 8m53.171736012s ago: executing program 5 (id=822): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, 0x0, &(0x7f00000000c0)=r2}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mkdir(0x0, 0x21) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x985, 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) 8m50.575038241s ago: executing program 7 (id=825): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(&(0x7f0000000300)='virtiofs\x00', 0x1) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, '\x00', {0x2}, 0x5}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x4000) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) memfd_create(&(0x7f00000006c0)='-B\xd5N4\xa6\xa3y\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcfJ\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#cos7\xa1b1\xb1;i\aj\x0e\x1e\xedI\xaa\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\x90\xae\x96J\xe2]\x00\x86\xb7.<\xf5N\xd3\x94W1\xf7\x18z>\xa7q,\xf7\x96\xb8{\x8e\x024\xe0\x95\x1ce\xe4\x85\xcdi%\xe7>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13\x05\x00\x00\x00\x00\x00\x00\x00X\xe3\xfb\xc8s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i1\x17\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUh\x06\xb3[\xb0>\xa1\xbf\x01\xc3\\\xce0\xa6q.\'L\x8c\xed\xb6\xa8\xd2{\"Qm\x00\x13\xbd\x8f\xba\t\x89\a\xc9[\x06f\x8e\xdc\x0fG4\x12k;3\xbbW\xf7\x00d\tE\xc05\xdb_\xb8\xf9\xd3\x9f\xa2\xb1X\xf8H}F.(\xd5\x0f\x81\xeds\xf0\xc0\xbbx\xd8,\xef\xd4\xd1M\xa2K\xe1\xb0qR\'\xbb\xf7\x905\xc6\n\x85\x94\xa0\x1eL\x8c@#%5\xa6\xc3\xd9\xf7\xdb\xecC\x9f\x8a\xa5$\xb3\x16O\x13:\xa4/=\xc9\xd6R=1Og\xa3\xec\xdc\x00\x00\x00\x00', 0x2) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001004, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000008a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) 8m47.075807219s ago: executing program 5 (id=829): r0 = socket$inet6(0xa, 0x1, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@local, 0x4d5, 0x33}, 0x2, @in=@multicast2, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x4000001) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) 8m45.254584295s ago: executing program 5 (id=831): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x8070bd25, 0x6, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unshare(0x400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6}, 0xc) socket(0x10, 0x3, 0x0) 8m44.896257151s ago: executing program 7 (id=834): socket$alg(0x26, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m40.52160137s ago: executing program 7 (id=838): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x6, 0x2280) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x9}, 0x0) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x3ff, 0x20000) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000400)={0x1, &(0x7f0000000980)=[{0x2b, '\x00', @st={0x4, [{0x0, @svalue=0x7}, {0x1, @uvalue=0x8000000000000001}, {0x3, @uvalue=0x1}, {0x1, @uvalue=0xa}]}}]}) 8m35.869253058s ago: executing program 5 (id=844): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8m28.665390311s ago: executing program 7 (id=851): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fe000e0000000000feffffff0d0000001100000018110000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) preadv(r1, &(0x7f00000012c0), 0x0, 0x0, 0xfffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8m20.532728062s ago: executing program 35 (id=844): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8m12.32464423s ago: executing program 36 (id=851): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fe000e0000000000feffffff0d0000001100000018110000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) preadv(r1, &(0x7f00000012c0), 0x0, 0x0, 0xfffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4m49.249868142s ago: executing program 8 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbb2681d4141ebb86dd60f4a3dfff3f3a00fe8000000000000000000000000000bbff020000faffffffffffffff000000010400907800002f10066cf6cd53020033fffe80005300fcffffff00000000000031fe8000000000000000000000000000aa290000000000000013d87159da0a7f"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000c0a01080000000000000000030000060900010073797a310000000008000b4000000004"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) unshare(0x6a040080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 4m46.605606406s ago: executing program 8 (id=1167): socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000740)=@ethtool_eee={0x44, 0x0, 0x33, 0x6, 0x2, 0x10000, 0x800, 0x6, [0x2, 0xb943]}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'gretap0\x00', {}, {}, 0x2c, 0x3a, 0x5, 0x5}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000900)=@ethtool_wolinfo={0x5, 0x9, 0x9, "188f1fcc6959"}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x20000000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 4m44.809425107s ago: executing program 8 (id=1169): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone3(0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, 0x0, 0x0, 0x0, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 4m41.70940408s ago: executing program 8 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x5, r0, 0x0, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ptrace$getenv(0x4201, 0xffffffffffffffff, 0x3, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x118, 0xb, 0x148, 0x0, 0x148, 0x1a8, 0x230, 0x242, 0x1a8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff000000, 0xffffffff, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x118, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@helper={{0x48}, {0x1, 'syz1\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0xfc}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00', {}, {}, 0x89, 0x1, 0x3a}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000081c872c84870000", @ANYRES16=r7, @ANYBLOB="01000000000000000000030000000400018014000380080001000800000008000300db0100009800058008000100756470001c00028008000300010000000800040007000000080002000600000014000280080001001a00000008000400070000000c00028008000400060000002c00028008000200d406000008000300ff0f00000800020002000000080001001b000000080003000100000007000100696200000c00028008000400ffffffff08000100657468000800010065746800"], 0xc4}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000f445a500e74646c22ff100"/26, @ANYRES32=r5, @ANYBLOB="5bbf010000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) 4m38.494066925s ago: executing program 8 (id=1176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbb2681d4141ebb86dd60f4a3dfff3f3a00fe8000000000000000000000000000bbff020000faffffffffffffff000000010400907800002f10066cf6cd53020033fffe80005300fcffffff00000000000031fe8000000000000000000000000000aa290000000000000013d87159da0a7f"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000c0a01080000000000000000030000060900010073797a310000000008000b4000000004"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) unshare(0x6a040080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 4m37.410317385s ago: executing program 8 (id=1178): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xd}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x6, 0xa, 0x3, 0x80000002, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xdfffffff, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) 4m21.777405625s ago: executing program 37 (id=1178): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xd}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x6, 0xa, 0x3, 0x80000002, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xdfffffff, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) 9.246458523s ago: executing program 6 (id=2001): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x5, @sliced={0x8, [0x4, 0x3, 0xc99, 0x644c, 0x4, 0x7f, 0x1, 0x0, 0x7fff, 0x7, 0x5cd1, 0xc, 0x5, 0xbb, 0x4, 0x0, 0x8, 0xc5, 0x9, 0xffff, 0x9, 0x2, 0x7, 0x4, 0x1, 0x6, 0x2, 0x2, 0x9507, 0x5, 0x2, 0x9bc, 0x400, 0x7, 0xf, 0x2, 0x3, 0x0, 0x4, 0x0, 0x800, 0xe6ef, 0x8, 0x100, 0x6, 0x2000, 0x2, 0x3], 0x8001}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x0, 0x0, 0x0) 7.420947835s ago: executing program 6 (id=2002): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000100)={0x5c284387, {{0xa, 0x0, 0x1ff, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000300000000000000000000000000000000000000000000edffffff00"/272], 0x110) shutdown(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) socket(0x40000000015, 0x5, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xb, 0x0, @val=0x80}}}}}}}}, 0x0) 5.926557107s ago: executing program 1 (id=2013): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 5.533032903s ago: executing program 4 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4ede, 0x0, 0xec6}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) 5.507483708s ago: executing program 1 (id=2015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x7044}, 0x20004800) 5.239278618s ago: executing program 4 (id=2016): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000100)={0x5c284387, {{0xa, 0x0, 0x1ff, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000300000000000000000000000000000000000000000000edffffff00"/272], 0x110) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) poll(0x0, 0x0, 0x8) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xb, 0x0, @val=0x80}}}}}}}}, 0x0) 5.23844206s ago: executing program 1 (id=2017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}}, 0x0) 5.011757811s ago: executing program 1 (id=2018): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000300000000000000000000000000000000000000000000edffffff00"/272], 0x110) shutdown(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) socket(0x40000000015, 0x5, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xb, 0x0, @val=0x80}}}}}}}}, 0x0) 4.934542984s ago: executing program 6 (id=2019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbb2681d4141ebb86dd60f4a3dfff3f3a00fe8000000000000000000000000000bbff020000faffffffffffffff000000010400907800002f10066cf6cd53020033fffe80005300fcffffff00000000000031fe8000000000000000000000000000aa290000000000000013d87159da0a7f"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000c0a01080000000000000000030000060900010073797a310000000008000b400000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) unshare(0x6a040080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 3.050852791s ago: executing program 6 (id=2023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.996185972s ago: executing program 9 (id=2024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x6c, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x4, 0x0, {0x329, 0xf70, 0x0, 0x319, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0xa, 0x48}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0x800, 0x0, 0x0, 0x3c0, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x2009, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 1.93747836s ago: executing program 2 (id=2025): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002"], 0x110}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.841562369s ago: executing program 6 (id=2026): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x7c}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x44000) 1.703619825s ago: executing program 9 (id=2027): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(0x3) 1.676051654s ago: executing program 2 (id=2028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000023c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000440)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x8) 1.646916101s ago: executing program 6 (id=2029): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000100)={0x5c284387, {{0xa, 0x0, 0x1ff, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000300000000000000000000000000000000000000000000edffffff00"/272], 0x110) shutdown(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) socket(0x40000000015, 0x5, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xb, 0x0, @val=0x80}}}}}}}}, 0x0) 1.441497973s ago: executing program 2 (id=2030): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000c00002108000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000028005080110001004abee33908f8eef16f162471f400000005000200020000000800"], 0x50}}, 0x0) 1.389669098s ago: executing program 9 (id=2031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x4c000) 1.255138489s ago: executing program 9 (id=2032): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x100000, 0x1, 0x1, 0xa, 0x9, 0xfffe}, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.216903264s ago: executing program 4 (id=2033): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 1.072255551s ago: executing program 2 (id=2034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x2c}}, 0x0) 936.425495ms ago: executing program 1 (id=2035): syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x72d8, 0x0) 910.281803ms ago: executing program 4 (id=2036): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 877.524216ms ago: executing program 2 (id=2037): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 287.967888ms ago: executing program 1 (id=2038): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 257.088366ms ago: executing program 9 (id=2039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 204.578016ms ago: executing program 4 (id=2040): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0xf5ff, r2, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x54}}, 0x24040084) 663.441µs ago: executing program 9 (id=2041): memfd_create(0x0, 0xc) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) 420.921µs ago: executing program 4 (id=2042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331c8c5c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x400000000000001) 0s ago: executing program 2 (id=2043): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000100)={0x5c284387, {{0xa, 0x0, 0x1ff, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000300000000000000000000000000000000000000000000edffffff00"/272], 0x110) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) poll(0x0, 0x0, 0x8) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xb, 0x0, @val=0x80}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): eate } for pid=12018 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 855.534310][ T5771] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 855.552966][ T5771] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 855.573209][ T29] audit: type=1400 audit(1780241144.332:1407): avc: denied { getopt } for pid=12018 comm="syz.1.1071" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 855.603179][ T5771] usb 9-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 855.614334][T12020] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 855.655376][ T5771] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 855.694573][ T5771] usb 9-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 855.712853][ T29] audit: type=1400 audit(1780241144.522:1408): avc: denied { create } for pid=12009 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 855.733500][ T5771] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.744969][ T5771] usb 9-1: Product: syz [ 855.777219][ T5771] usb 9-1: Manufacturer: syz [ 855.789728][ T5771] usb 9-1: SerialNumber: syz [ 857.180711][T12036] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1072'. [ 857.441194][ T29] audit: type=1400 audit(1780241145.982:1409): avc: denied { mount } for pid=12032 comm="syz.9.1072" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 858.599382][ T29] audit: type=1400 audit(1780241146.172:1410): avc: denied { firmware_load } for pid=12032 comm="syz.9.1072" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 858.996654][ T29] audit: type=1400 audit(1780241146.772:1411): avc: denied { create } for pid=11995 comm="syz.8.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 860.307790][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 860.307825][ T29] audit: type=1400 audit(1780241149.062:1414): avc: denied { create } for pid=12045 comm="syz.9.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 860.919489][ T5771] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 860.969075][ T29] audit: type=1400 audit(1780241149.062:1415): avc: denied { write } for pid=12045 comm="syz.9.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 861.121665][ T5771] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 861.183186][ T29] audit: type=1400 audit(1780241149.972:1416): avc: denied { watch } for pid=12059 comm="syz.4.1076" path="/272/file0" dev="tmpfs" ino=1492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 862.428411][ T29] audit: type=1400 audit(1780241150.182:1417): avc: denied { watch } for pid=12059 comm="syz.4.1076" path="/272" dev="tmpfs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 862.578452][T12077] kAFS: unable to lookup cell '' [ 862.585201][ T29] audit: type=1400 audit(1780241151.002:1418): avc: denied { setopt } for pid=12066 comm="syz.6.1077" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 862.630822][T12072] pim6reg: entered allmulticast mode [ 862.649036][T12075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1075'. [ 862.684378][ T29] audit: type=1400 audit(1780241151.112:1419): avc: denied { ioctl } for pid=12066 comm="syz.6.1077" path="socket:[31053]" dev="sockfs" ino=31053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 862.737278][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 862.800160][ T29] audit: type=1400 audit(1780241151.592:1420): avc: denied { module_request } for pid=12053 comm="syz.1.1075" kmod=72746E6C2D6C696E6B2D69703602803667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 862.956844][T12067] team0: entered allmulticast mode [ 862.962392][T12067] team_slave_0: entered allmulticast mode [ 862.968312][T12067] team_slave_1: entered allmulticast mode [ 862.977222][T12067] team0: left allmulticast mode [ 862.982148][T12067] team_slave_0: left allmulticast mode [ 862.987713][T12067] team_slave_1: left allmulticast mode [ 862.993425][T12067] pim6reg: left allmulticast mode [ 863.030421][ T29] audit: type=1400 audit(1780241151.842:1421): avc: denied { write } for pid=12066 comm="syz.6.1077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 863.176489][ T5771] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 863.217018][ T5771] usb 9-1: USB disconnect, device number 2 [ 863.223889][ T29] audit: type=1400 audit(1780241152.042:1422): avc: denied { name_bind } for pid=12068 comm="syz.9.1078" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 863.408166][ T29] audit: type=1400 audit(1780241152.042:1423): avc: denied { node_bind } for pid=12068 comm="syz.9.1078" saddr=fc02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 863.579060][T12088] xt_hashlimit: size too large, truncated to 1048576 [ 864.496703][T12091] udevd[12091]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.099481][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 866.099506][ T29] audit: type=1400 audit(1780241154.812:1440): avc: denied { read } for pid=12105 comm="syz.8.1094" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 866.137856][ T29] audit: type=1400 audit(1780241154.812:1441): avc: denied { open } for pid=12105 comm="syz.8.1094" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 866.291835][T12114] bridge0: port 3(syz_tun) entered blocking state [ 866.299080][T12114] bridge0: port 3(syz_tun) entered disabled state [ 866.310248][T12114] syz_tun: entered allmulticast mode [ 866.325771][T12114] syz_tun: entered promiscuous mode [ 866.335711][T12114] bridge0: port 3(syz_tun) entered blocking state [ 866.344259][T12114] bridge0: port 3(syz_tun) entered forwarding state [ 866.971811][ T29] audit: type=1400 audit(1780241154.822:1442): avc: denied { ioctl } for pid=12105 comm="syz.8.1094" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 866.998797][ T29] audit: type=1400 audit(1780241155.102:1443): avc: denied { write } for pid=12105 comm="syz.8.1094" path="socket:[32408]" dev="sockfs" ino=32408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 867.174185][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1083'. [ 867.343742][T12117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.790007][T12123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.832298][T12124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1088'. [ 868.301627][T12129] xt_hashlimit: size too large, truncated to 1048576 [ 869.332327][ T5757] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 869.479452][T12124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 869.843211][ T5757] usb 2-1: Using ep0 maxpacket: 16 [ 869.869052][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short [ 869.947427][ T5757] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 869.995322][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 869.998860][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.027921][ T5757] usb 2-1: string descriptor 0 read error: -22 [ 870.042059][ T5757] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 870.090514][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.500348][T12145] xt_hashlimit: size too large, truncated to 1048576 [ 871.232962][ T5757] snd-ua101 2-1:1.0: invalid num_altsetting [ 871.243173][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 871.292329][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 871.354161][ T29] audit: type=1400 audit(1780241160.162:1444): avc: denied { write } for pid=12149 comm="syz.9.1092" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 871.519083][ T29] audit: type=1400 audit(1780241160.172:1445): avc: denied { write } for pid=12149 comm="syz.9.1092" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 871.544501][T12131] netlink: 'syz.1.1088': attribute type 10 has an invalid length. [ 871.998512][ T29] audit: type=1400 audit(1780241160.752:1446): avc: denied { create } for pid=12149 comm="syz.9.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 872.046314][T12124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.061081][T12124] bond1: (slave bond0): Enslaving as an active interface with an up link [ 872.129981][ T29] audit: type=1400 audit(1780241160.792:1447): avc: denied { accept } for pid=12149 comm="syz.9.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 872.232025][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.239605][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.283724][T12131] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.290922][T12131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.298476][T12131] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.305682][T12131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.361563][T12157] netlink: 'syz.8.1093': attribute type 39 has an invalid length. [ 872.402390][T12131] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 872.436224][T12151] tc_dump_action: action bad kind [ 872.839780][ T29] audit: type=1400 audit(1780241161.632:1448): avc: denied { write } for pid=12158 comm="syz.6.1095" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 873.636815][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1095'. [ 873.755207][T12163] openvswitch: netlink: Missing key (keys=40, expected=80) [ 873.756302][T12159] bridge_slave_0: left allmulticast mode [ 873.771446][ T29] audit: type=1400 audit(1780241161.632:1449): avc: denied { open } for pid=12158 comm="syz.6.1095" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 873.806617][ T5757] usb 2-1: USB disconnect, device number 11 [ 873.946439][T12159] bridge_slave_0: left promiscuous mode [ 874.019432][ T29] audit: type=1400 audit(1780241161.762:1450): avc: denied { mounton } for pid=12164 comm="syz.9.1096" path="/31/file0" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 874.192363][ T29] audit: type=1400 audit(1780241161.932:1451): avc: denied { create } for pid=12164 comm="syz.9.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 874.229756][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.626953][ T29] audit: type=1400 audit(1780241163.192:1452): avc: denied { ioctl } for pid=12172 comm="syz.4.1097" path="socket:[31148]" dev="sockfs" ino=31148 ioctlcmd=0xae90 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 874.651935][ T29] audit: type=1400 audit(1780241163.302:1453): avc: denied { prog_run } for pid=12172 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 874.740187][T12159] batman_adv: batadv0: Adding interface: bridge_slave_0 [ 874.747205][T12159] batman_adv: batadv0: The MTU of interface bridge_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.773265][T12159] batman_adv: batadv0: Interface activated: bridge_slave_0 [ 875.415309][T12177] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 875.504492][T12177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.578153][T12177] team0: Port device netdevsim1 added [ 875.735141][T12188] xt_hashlimit: size too large, truncated to 1048576 [ 876.073205][T12180] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 876.320082][T12180] team0: Port device netdevsim1 removed [ 876.704867][T12180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 876.740563][T12180] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 876.793320][T12192] bridge_slave_0: left allmulticast mode [ 876.821318][T12192] bridge_slave_0: left promiscuous mode [ 876.925298][T12192] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.070794][T12192] batman_adv: batadv0: Adding interface: bridge_slave_0 [ 877.096818][T12192] batman_adv: batadv0: The MTU of interface bridge_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.146019][T12192] batman_adv: batadv0: Interface activated: bridge_slave_0 [ 877.208917][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 877.208946][ T29] audit: type=1800 audit(1780241166.012:1459): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1098" name="SYSV798dd838" dev="tmpfs" ino=0 res=0 errno=0 [ 877.323221][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 877.411706][T12192] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 877.437195][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1101'. [ 877.481546][T12192] openvswitch: netlink: Missing key (keys=40, expected=80) [ 877.499267][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 877.529019][ T42] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 877.547254][ T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 877.562661][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 877.573929][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 877.587835][ T42] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 877.640254][ T42] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 877.678027][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.001050][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.008555][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.070458][T12210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.255262][ T42] usb 2-1: usb_control_msg returned -32 [ 878.271374][ T42] usbtmc 2-1:16.0: can't read capabilities [ 878.537131][ T29] audit: type=1400 audit(1780241167.132:1460): avc: denied { read write } for pid=12201 comm="syz.1.1103" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 878.561520][ T29] audit: type=1400 audit(1780241167.132:1461): avc: denied { open } for pid=12201 comm="syz.1.1103" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 879.658274][T12213] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 880.275996][ T29] audit: type=1400 audit(1780241169.052:1462): avc: denied { bind } for pid=12217 comm="syz.9.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 880.967702][ T29] audit: type=1400 audit(1780241169.052:1463): avc: denied { setopt } for pid=12217 comm="syz.9.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 881.010639][ T29] audit: type=1400 audit(1780241169.052:1464): avc: denied { accept } for pid=12217 comm="syz.9.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 881.063214][ T29] audit: type=1400 audit(1780241169.052:1465): avc: denied { write } for pid=12217 comm="syz.9.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 881.089413][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.131180][ T29] audit: type=1400 audit(1780241169.122:1466): avc: denied { read } for pid=12217 comm="syz.9.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 881.192608][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.392985][T12220] tc_dump_action: action bad kind [ 882.563114][ T5813] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.578903][ T5771] usb 2-1: USB disconnect, device number 12 [ 882.601873][ T5813] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.678849][ T5813] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.698207][ T5813] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.149671][T12236] IPv6: NLM_F_CREATE should be specified when creating new route [ 883.157921][T12236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 883.165170][T12236] IPv6: NLM_F_CREATE should be set when creating new route [ 883.183879][T12236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 883.191122][T12236] IPv6: NLM_F_CREATE should be set when creating new route [ 884.003491][ T29] audit: type=1400 audit(1780241172.822:1467): avc: denied { write } for pid=12238 comm="syz.9.1111" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 884.086944][ T29] audit: type=1400 audit(1780241172.842:1468): avc: denied { read } for pid=12238 comm="syz.9.1111" dev="nsfs" ino=4026534316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 884.200121][ T29] audit: type=1400 audit(1780241172.842:1469): avc: denied { open } for pid=12238 comm="syz.9.1111" path="net:[4026534316]" dev="nsfs" ino=4026534316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 884.234134][T12241] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1111'. [ 884.345777][ T29] audit: type=1400 audit(1780241172.852:1470): avc: denied { create } for pid=12238 comm="syz.9.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 884.461646][ T29] audit: type=1400 audit(1780241172.852:1471): avc: denied { bind } for pid=12238 comm="syz.9.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 884.506038][ T29] audit: type=1400 audit(1780241172.962:1472): avc: denied { write } for pid=12238 comm="syz.9.1111" path="socket:[32612]" dev="sockfs" ino=32612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 884.530926][ T29] audit: type=1400 audit(1780241172.982:1473): avc: denied { create } for pid=12238 comm="syz.9.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 884.554981][ T29] audit: type=1400 audit(1780241172.982:1474): avc: denied { write } for pid=12238 comm="syz.9.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 884.633031][T12241] bridge1: entered promiscuous mode [ 884.650337][T12241] bridge1: entered allmulticast mode [ 886.001006][ T29] audit: type=1400 audit(1780241174.412:1475): avc: denied { append } for pid=12250 comm="syz.8.1113" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 886.085303][ T29] audit: type=1400 audit(1780241174.802:1476): avc: denied { write } for pid=12250 comm="syz.8.1113" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 886.767195][T12242] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.774440][T12242] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.048818][T12242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.068101][T12242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.052130][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 889.052163][ T29] audit: type=1400 audit(1780241177.682:1482): avc: denied { bind } for pid=12284 comm="syz.6.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 889.595892][T12281] IPv6: NLM_F_CREATE should be specified when creating new route [ 890.063193][ T29] audit: type=1400 audit(1780241178.412:1483): avc: denied { watch_reads } for pid=12279 comm="syz.1.1117" path="/215" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 890.251440][ T29] audit: type=1400 audit(1780241178.992:1484): avc: denied { write } for pid=12294 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 890.794458][T12309] xt_hashlimit: size too large, truncated to 1048576 [ 890.942029][ T29] audit: type=1400 audit(1780241179.752:1485): avc: denied { create } for pid=12306 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 890.967663][ T29] audit: type=1400 audit(1780241179.782:1486): avc: denied { connect } for pid=12306 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 891.311025][T12319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 892.027227][ T29] audit: type=1400 audit(1780241179.782:1487): avc: denied { bind } for pid=12306 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 893.024273][ T29] audit: type=1400 audit(1780241179.782:1488): avc: denied { write } for pid=12306 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 893.435502][ T29] audit: type=1400 audit(1780241179.782:1489): avc: denied { getopt } for pid=12306 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 893.457260][T12317] Process accounting resumed [ 893.826787][ T29] audit: type=1400 audit(1780241182.622:1490): avc: denied { block_suspend } for pid=12335 comm="syz.1.1125" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 893.856365][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1126'. [ 894.204154][T12334] bridge3: entered promiscuous mode [ 894.885305][T12334] bridge3: entered allmulticast mode [ 895.043204][T12347] bridge0: port 1(syz_tun) entered blocking state [ 895.050444][T12347] bridge0: port 1(syz_tun) entered disabled state [ 895.057720][T12347] syz_tun: entered allmulticast mode [ 895.066076][T12347] syz_tun: entered promiscuous mode [ 895.076460][T12347] bridge0: port 1(syz_tun) entered blocking state [ 895.084308][T12347] bridge0: port 1(syz_tun) entered forwarding state [ 895.112993][ T29] audit: type=1400 audit(1780241183.922:1491): avc: denied { write } for pid=12303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.241361][ T29] audit: type=1400 audit(1780241184.052:1492): avc: denied { write } for pid=12352 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.984020][ T29] audit: type=1400 audit(1780241184.792:1493): avc: denied { setopt } for pid=12359 comm="syz.4.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 896.020688][T12336] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 896.034169][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'. [ 896.044062][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 896.440069][ T29] audit: type=1400 audit(1780241185.252:1494): avc: denied { write } for pid=12361 comm="syz.8.1129" name="video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 897.308902][ T29] audit: type=1400 audit(1780241185.432:1495): avc: denied { create } for pid=12365 comm="syz.6.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 897.366560][ T29] audit: type=1400 audit(1780241185.432:1496): avc: denied { bind } for pid=12365 comm="syz.6.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 897.691167][ T29] audit: type=1400 audit(1780241186.492:1497): avc: denied { map } for pid=12372 comm="syz.6.1132" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 898.004548][ T29] audit: type=1400 audit(1780241186.492:1498): avc: denied { execute } for pid=12372 comm="syz.6.1132" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 898.137656][T12387] netlink: 'syz.9.1135': attribute type 40 has an invalid length. [ 898.380917][ T29] audit: type=1400 audit(1780241187.002:1499): avc: denied { getopt } for pid=12383 comm="syz.9.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 898.587252][ T29] audit: type=1400 audit(1780241187.392:1500): avc: denied { watch watch_reads } for pid=12372 comm="syz.6.1132" path="pipe:[18424]" dev="pipefs" ino=18424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 901.355312][ T29] audit: type=1400 audit(1780241190.172:1501): avc: denied { mount } for pid=12413 comm="syz.4.1142" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 901.420938][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 901.476784][ T29] audit: type=1400 audit(1780241190.252:1502): avc: denied { create } for pid=12413 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 901.637137][ T29] audit: type=1400 audit(1780241190.322:1503): avc: denied { sys_admin } for pid=12413 comm="syz.4.1142" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 901.717966][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 901.831755][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 902.037592][ T29] audit: type=1400 audit(1780241190.712:1504): avc: denied { ioctl } for pid=12419 comm="syz.9.1143" path="socket:[31437]" dev="sockfs" ino=31437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 902.108037][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 902.286492][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1143'. [ 902.798845][T12424] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.809789][T12424] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.922923][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 903.448943][T12430] xt_hashlimit: size too large, truncated to 1048576 [ 905.361240][T12439] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 905.583272][ T29] audit: type=1400 audit(1780241193.332:1505): avc: denied { create } for pid=12435 comm="syz.8.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 905.945760][ T29] audit: type=1400 audit(1780241193.342:1506): avc: denied { write } for pid=12435 comm="syz.8.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 905.968152][ T29] audit: type=1400 audit(1780241194.622:1507): avc: denied { create } for pid=12427 comm="syz.4.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 905.989149][ T29] audit: type=1400 audit(1780241194.722:1508): avc: denied { bind } for pid=12427 comm="syz.4.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 906.456428][T12442] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 906.508083][T12446] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1147'. [ 906.527076][T12444] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1148'. [ 906.536393][T12444] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1148'. [ 906.546789][T12444] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1148'. [ 906.555848][T12444] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1148'. [ 906.585101][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1148'. [ 906.645918][ T29] audit: type=1400 audit(1780241195.452:1509): avc: denied { read write } for pid=12443 comm="syz.8.1148" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 906.648559][T12444] hsr_slave_1 (unregistering): left promiscuous mode [ 906.691792][T12442] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 906.782792][ T29] audit: type=1400 audit(1780241195.452:1510): avc: denied { open } for pid=12443 comm="syz.8.1148" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 906.859158][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.865535][T12442] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 907.010767][ T29] audit: type=1400 audit(1780241195.822:1511): avc: denied { create } for pid=12438 comm="syz.9.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 907.088344][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.111137][T12446] bond0 (unregistering): Released all slaves [ 907.331229][T12442] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 908.202194][ T5810] syz1: Port: 1 Link DOWN [ 909.212653][ T7163] smbdirect: ib_dev[syz1] removed [ 909.756627][T12477] xt_hashlimit: size too large, truncated to 1048576 [ 910.177245][ T29] audit: type=1400 audit(1780241198.562:1512): avc: denied { unmount } for pid=12470 comm="syz.6.1154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 911.296059][ T29] audit: type=1400 audit(1780241199.072:1513): avc: denied { create } for pid=12472 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 911.903374][ T29] audit: type=1400 audit(1780241200.712:1514): avc: denied { create } for pid=12472 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 913.504488][ T29] audit: type=1400 audit(1780241201.002:1515): avc: denied { ioctl } for pid=12472 comm="syz.1.1156" path="socket:[31501]" dev="sockfs" ino=31501 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 914.060896][T12475] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 915.443817][ T29] audit: type=1400 audit(1780241204.232:1516): avc: denied { create } for pid=12506 comm="syz.6.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 916.533271][ T29] audit: type=1400 audit(1780241205.342:1517): avc: denied { setopt } for pid=12506 comm="syz.6.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 916.791975][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1166'. [ 916.801007][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1166'. [ 916.814510][ T29] audit: type=1400 audit(1780241205.582:1518): avc: denied { bind } for pid=12521 comm="syz.4.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 916.863591][ T29] audit: type=1400 audit(1780241205.582:1519): avc: denied { node_bind } for pid=12521 comm="syz.4.1166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 916.975812][T12528] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 917.123606][T12528] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 917.138359][T12528] overlayfs: failed to look up (tracing) for ino (-66) [ 918.744771][ T29] audit: type=1400 audit(1780241205.582:1520): avc: denied { connect } for pid=12521 comm="syz.4.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 918.770043][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1166'. [ 918.846975][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1166'. [ 920.606334][ T29] audit: type=1400 audit(1780241205.752:1521): avc: denied { mount } for pid=12518 comm="syz.8.1167" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 920.640147][T12541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.396766][ T29] audit: type=1400 audit(1780241205.752:1522): avc: denied { mounton } for pid=12518 comm="syz.8.1167" path="/53/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 921.447539][ T29] audit: type=1400 audit(1780241205.912:1523): avc: denied { create } for pid=12518 comm="syz.8.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 921.678878][ T29] audit: type=1400 audit(1780241207.392:1524): avc: denied { listen } for pid=12516 comm="syz.9.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 921.844039][T12545] Cannot find add_set index 0 as target [ 922.908976][ T29] audit: type=1400 audit(1780241207.402:1525): avc: denied { accept } for pid=12516 comm="syz.9.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 923.108459][ T29] audit: type=1400 audit(1780241207.782:1526): avc: denied { unmount } for pid=10565 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 924.153222][ T29] audit: type=1400 audit(1780241211.812:1527): avc: denied { name_bind } for pid=12549 comm="syz.4.1171" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 924.177436][ T29] audit: type=1400 audit(1780241211.982:1528): avc: denied { sqpoll } for pid=12548 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 924.531833][ T29] audit: type=1400 audit(1780241213.342:1529): avc: denied { setopt } for pid=12549 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 924.681208][ T29] audit: type=1400 audit(1780241213.402:1530): avc: denied { ioctl } for pid=12549 comm="syz.4.1171" path="socket:[33468]" dev="sockfs" ino=33468 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 924.956979][T12559] netlink: 'syz.6.1173': attribute type 4 has an invalid length. [ 925.477706][T12565] netlink: 'syz.1.1175': attribute type 21 has an invalid length. [ 925.493131][T12565] netlink: 'syz.1.1175': attribute type 6 has an invalid length. [ 925.664119][T12565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1175'. [ 925.819714][T12571] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12571 comm=syz.9.1174 [ 926.104249][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1178'. [ 927.609841][T12596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.985858][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1181'. [ 929.276451][T12603] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 929.330735][ T42] IPVS: starting estimator thread 0... [ 929.483141][T12604] IPVS: using max 64 ests per chain, 153600 per kthread [ 930.853459][ T29] audit: type=1400 audit(1780241219.672:1531): avc: denied { map } for pid=12612 comm="syz.6.1184" path="socket:[31656]" dev="sockfs" ino=31656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 930.881098][ T29] audit: type=1400 audit(1780241219.692:1532): avc: denied { accept } for pid=12612 comm="syz.6.1184" path="socket:[31656]" dev="sockfs" ino=31656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 931.026722][ T29] audit: type=1400 audit(1780241219.842:1533): avc: denied { connect } for pid=12610 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 931.046442][ T29] audit: type=1400 audit(1780241219.842:1534): avc: denied { name_connect } for pid=12610 comm="syz.1.1183" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 931.130595][ T29] audit: type=1400 audit(1780241219.942:1535): avc: denied { create } for pid=12615 comm="syz.9.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 931.254071][ T9] libceph: connect (1)[c::]:6789 error -99 [ 931.260052][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 931.275950][ T29] audit: type=1400 audit(1780241220.092:1536): avc: denied { write } for pid=12626 comm="syz.6.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 931.981583][ T9] libceph: connect (1)[c::]:6789 error -99 [ 931.988712][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.998823][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 932.535296][ T9] libceph: connect (1)[c::]:6789 error -99 [ 932.553343][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 932.586346][T12655] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1189'. [ 932.620529][T12623] ceph: No mds server is up or the cluster is laggy [ 932.889299][T12659] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1190'. [ 932.943651][T12655] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 933.094419][ T29] audit: type=1400 audit(1780241221.912:1537): avc: denied { create } for pid=12658 comm="syz.6.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 933.790466][ T29] audit: type=1400 audit(1780241221.932:1538): avc: denied { setopt } for pid=12658 comm="syz.6.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 933.970137][ T29] audit: type=1400 audit(1780241221.932:1539): avc: denied { bind } for pid=12658 comm="syz.6.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 934.953323][ T29] audit: type=1400 audit(1780241223.772:1540): avc: denied { sys_module } for pid=12636 comm="syz.9.1189" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 936.405005][ T29] audit: type=1400 audit(1780241225.212:1541): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 938.084040][ T29] audit: type=1400 audit(1780241226.872:1542): avc: denied { create } for pid=12683 comm="syz.1.1195" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 938.148439][ T29] audit: type=1400 audit(1780241226.882:1543): avc: denied { write } for pid=12683 comm="syz.1.1195" name="file0" dev="tmpfs" ino=1242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 938.519238][ T29] audit: type=1400 audit(1780241226.882:1544): avc: denied { open } for pid=12683 comm="syz.1.1195" path="/228/file0" dev="tmpfs" ino=1242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 938.600383][ T29] audit: type=1400 audit(1780241226.882:1545): avc: denied { ioctl } for pid=12683 comm="syz.1.1195" path="/228/file0" dev="tmpfs" ino=1242 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 939.438931][T12705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.046231][T12694] bridge0: port 1(syz_tun) entered disabled state [ 941.153215][ T29] audit: type=1400 audit(1780241229.962:1546): avc: denied { unlink } for pid=5613 comm="syz-executor" name="file0" dev="tmpfs" ino=1242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 941.409507][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.456899][T12720] kAFS: unable to lookup cell '' [ 941.743748][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.783687][T12724] netlink: 'syz.1.1202': attribute type 10 has an invalid length. [ 941.803366][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.815189][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.823260][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.831533][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.885402][ T29] audit: type=1400 audit(1780241230.692:1547): avc: denied { mounton } for pid=12722 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 941.958014][T12720] netlink: 'syz.1.1202': attribute type 10 has an invalid length. [ 942.011201][ T29] audit: type=1400 audit(1780241230.822:1548): avc: denied { append } for pid=12717 comm="syz.1.1202" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 942.042648][T12721] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 942.513598][T12694] batman_adv: batadv0: Interface deactivated: bridge_slave_0 [ 942.600179][T12694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.637781][T12694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.052440][T12724] bond0: (slave netdevsim1): Releasing backup interface [ 943.219896][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.608911][T12746] xt_hashlimit: size too large, truncated to 1048576 [ 943.971660][ T5630] Bluetooth: hci2: command tx timeout [ 944.011143][ T6715] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 944.035323][ T6715] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 944.229581][T12724] team0: Port device netdevsim1 added [ 945.820888][T12761] xt_hashlimit: size too large, truncated to 1048576 [ 945.934985][T12720] team0: Port device netdevsim1 removed [ 945.993515][ T5630] Bluetooth: hci2: command 0x041b tx timeout [ 946.202957][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.577689][T12767] xt_hashlimit: size too large, truncated to 1048576 [ 946.941219][T12720] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 947.232104][ T13] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.259597][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.306499][ T13] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 947.330125][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.574167][T12784] 9p: Bad value for 'wfdno' [ 949.570780][T10565] bridge0: port 3(syz_tun) entered disabled state [ 949.995341][T10565] syz_tun (unregistering): left allmulticast mode [ 950.001875][T10565] syz_tun (unregistering): left promiscuous mode [ 950.033411][T10565] bridge0: port 3(syz_tun) entered disabled state [ 950.074022][ T13] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.083347][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.092365][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.101641][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.110752][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.119867][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.129004][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.138114][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.147163][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.156355][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.165536][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.174764][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1211'. [ 950.290670][ T13] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.308496][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.829479][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.865010][T12737] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 951.059327][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.245844][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.315168][T12737] usb 2-1: Using ep0 maxpacket: 16 [ 951.395265][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.420944][T12737] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 951.432733][T12737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.455357][T12737] usb 2-1: config 0 has no interface number 0 [ 951.483162][T12737] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 951.493304][T12737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.502098][T12737] usb 2-1: Product: syz [ 951.506417][T12737] usb 2-1: Manufacturer: syz [ 951.511184][T12737] usb 2-1: SerialNumber: syz [ 951.521052][T12737] usb 2-1: config 0 descriptor?? [ 951.645637][T12737] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 951.659607][T12737] uvcvideo 2-1:0.105: No valid video chain found. [ 951.831746][T12818] kAFS: unable to lookup cell '' [ 951.880568][T12818] netlink: 'syz.6.1215': attribute type 10 has an invalid length. [ 951.949637][T12821] netlink: 'syz.6.1215': attribute type 10 has an invalid length. [ 952.035039][T12818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.053503][T12818] team0: Port device netdevsim1 added [ 952.059548][T12820] hsr_slave_0: left promiscuous mode [ 952.067645][T12820] hsr_slave_1: left promiscuous mode [ 952.137645][T12821] team0: Port device netdevsim1 removed [ 952.212144][T12821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.245359][T12821] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 952.445066][ T29] audit: type=1400 audit(1780241241.252:1549): avc: denied { getopt } for pid=12825 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 952.550594][ T29] audit: type=1400 audit(1780241241.292:1550): avc: denied { listen } for pid=12825 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 952.631964][T12722] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.662534][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.689826][T12722] bridge_slave_0: entered allmulticast mode [ 952.734010][T12722] bridge_slave_0: entered promiscuous mode [ 952.766606][T12722] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.819086][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.853265][T12722] bridge_slave_1: entered allmulticast mode [ 952.886291][T12722] bridge_slave_1: entered promiscuous mode [ 952.991748][ T5757] usb 2-1: USB disconnect, device number 13 [ 953.142272][T12722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.225744][T12722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.429369][T12722] team0: Port device team_slave_0 added [ 953.468189][T12722] team0: Port device team_slave_1 added [ 953.616136][ T29] audit: type=1400 audit(1780241242.432:1551): avc: denied { write } for pid=12835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.642343][T12722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.659701][T12722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.769273][T12722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.838665][ T29] audit: type=1400 audit(1780241242.652:1552): avc: denied { write } for pid=12849 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.208371][T12722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.229517][T12722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.261027][T12851] netlink: 'syz.6.1219': attribute type 28 has an invalid length. [ 954.278136][T12851] netlink: 'syz.6.1219': attribute type 29 has an invalid length. [ 954.293285][T12722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.317488][T12848] bridge_slave_0: entered promiscuous mode [ 954.323526][T12848] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 954.343029][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 956.347132][ T13] bridge_slave_1: left allmulticast mode [ 956.380618][ T13] bridge_slave_1: left promiscuous mode [ 956.421248][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.364860][ T29] audit: type=1400 audit(1780241246.162:1553): avc: denied { mount } for pid=12863 comm="syz.6.1222" name="/" dev="ramfs" ino=34995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 957.879322][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.916462][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.937294][ T13] bond0 (unregistering): Released all slaves [ 958.170615][T12722] hsr_slave_0: entered promiscuous mode [ 958.177460][T12722] hsr_slave_1: entered promiscuous mode [ 958.184334][T12722] debugfs: 'hsr0' already exists in 'hsr' [ 958.190182][T12722] Cannot create hsr debugfs directory [ 959.232482][T12884] Scaler: ================= START STATUS ================= [ 959.253062][T12884] Scaler: ================== END STATUS ================== [ 959.576575][T12893] __nla_validate_parse: 13 callbacks suppressed [ 959.576616][T12893] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1224'. [ 960.412492][T12903] overlayfs: failed to clone upperpath [ 960.740406][ T29] audit: type=1400 audit(1780241249.372:1554): avc: denied { mount } for pid=12901 comm="syz.9.1225" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 960.962509][T12909] kAFS: unable to lookup cell '' [ 961.112831][ T29] audit: type=1400 audit(1780241249.922:1555): avc: denied { write } for pid=12885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.361663][T12722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.626609][ T29] audit: type=1400 audit(1780241250.442:1556): avc: denied { write } for pid=12916 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.540819][ T29] audit: type=1400 audit(1780241251.352:1557): avc: denied { connect } for pid=12921 comm="syz.9.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 962.571504][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 962.852437][T12927] xt_hashlimit: size too large, truncated to 1048576 [ 963.048368][ T13] hsr_slave_0: left promiscuous mode [ 963.055213][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.070378][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.082248][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.090495][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.099325][ T13] batman_adv: batadv0: Interface deactivated: bridge_slave_0 [ 963.108457][ T13] batman_adv: batadv0: Removing interface: bridge_slave_0 [ 963.159903][ T13] veth1_macvtap: left promiscuous mode [ 963.171567][ T13] veth0_macvtap: left promiscuous mode [ 963.180654][ T13] veth1_vlan: left promiscuous mode [ 963.187442][ T13] veth0_vlan: left promiscuous mode [ 963.305041][T12933] kAFS: unable to lookup cell '' [ 963.327427][T12933] netlink: 'syz.6.1230': attribute type 10 has an invalid length. [ 963.402728][T12934] netlink: 'syz.6.1230': attribute type 10 has an invalid length. [ 963.748138][ T13] team0 (unregistering): Port device team_slave_1 removed [ 963.786516][ T13] team0 (unregistering): Port device team_slave_0 removed [ 964.217778][T12924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=12924 comm=syz.9.1228 [ 964.267664][T12933] bond0: (slave netdevsim1): Releasing backup interface [ 964.349949][T12933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 964.363208][T12933] team0: Port device netdevsim1 added [ 964.381658][T12934] team0: Port device netdevsim1 removed [ 964.391637][T12934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 964.405890][T12934] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 964.494899][T12722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.680329][ T29] audit: type=1800 audit(1780241253.472:1558): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1231" name="nullb0" dev="tmpfs" ino=1703 res=0 errno=0 [ 964.714642][ T29] audit: type=1400 audit(1780241253.532:1559): avc: denied { create } for pid=12938 comm="syz.6.1232" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 964.744341][T12939] netlink: 'syz.6.1232': attribute type 33 has an invalid length. [ 964.752195][T12939] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1232'. [ 964.784562][ T29] audit: type=1400 audit(1780241253.592:1560): avc: denied { append } for pid=12938 comm="syz.6.1232" name="file0" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 964.821414][ T29] audit: type=1400 audit(1780241253.602:1561): avc: denied { open } for pid=12938 comm="syz.6.1232" path="/145/bus/file0" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 965.055729][T12722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.399783][T12722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.590302][ T29] audit: type=1400 audit(1780241254.402:1562): avc: denied { write } for pid=12942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.627966][T12964] vlan0: entered allmulticast mode [ 965.633108][T12964] bond0: entered allmulticast mode [ 965.638201][T12964] bond_slave_0: entered allmulticast mode [ 965.643902][T12964] bond_slave_1: entered allmulticast mode [ 965.649621][T12964] bridge0: entered allmulticast mode [ 965.801789][T12967] fuse: Unknown parameter '/0xffffffffffffffff' [ 966.191637][T12964] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1236'. [ 966.231046][T12964] bond2: (slave bond0): Releasing active interface [ 966.249643][T12964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.258668][T12964] bond_slave_0: left allmulticast mode [ 966.265232][T12964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.274170][T12964] bond_slave_1: left allmulticast mode [ 966.280822][T12964] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 966.289463][T12964] bridge0: left allmulticast mode [ 966.295097][T12964] bond0 (unregistering): Released all slaves [ 966.307803][T12731] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 966.439571][ T29] audit: type=1400 audit(1780241254.432:1563): avc: denied { bind } for pid=12963 comm="syz.4.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 966.670851][T12731] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 966.683450][T12731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.515389][ T29] audit: type=1400 audit(1780241254.432:1564): avc: denied { setopt } for pid=12963 comm="syz.4.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 967.526761][T12731] usb 2-1: config 0 has no interface number 0 [ 967.562606][T12731] usb 2-1: config 0 interface 205 has no altsetting 0 [ 967.790770][ T29] audit: type=1400 audit(1780241255.402:1565): avc: denied { write } for pid=12970 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.823834][T12731] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 967.854696][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1239'. [ 968.035482][T12981] overlayfs: failed to clone upperpath [ 968.249704][T12731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.251113][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19 [ 968.296913][T12731] usb 2-1: Product: syz [ 968.310709][T12731] usb 2-1: Manufacturer: syz [ 968.323370][ T29] audit: type=1400 audit(1780241257.142:1566): avc: denied { shutdown } for pid=12982 comm="syz.4.1240" lport=44495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 968.367468][T12731] usb 2-1: SerialNumber: syz [ 968.392933][T12987] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1239'. [ 968.404454][T12731] usb 2-1: config 0 descriptor?? [ 968.684457][T12731] usb 2-1: can't set config #0, error -71 [ 968.886329][T12731] usb 2-1: USB disconnect, device number 14 [ 970.842506][T12722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 971.308597][T12722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.318331][T12722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 971.396952][T12722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.469782][T12722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 971.500752][T12722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.709502][T12722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 972.750870][T12722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.321451][T13034] fuse: Unknown parameter '/0xffffffffffffffff' [ 974.068653][T13036] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.1249'. [ 974.077827][T13036] openvswitch: netlink: EtherType 0 is less than min 600 [ 974.116971][T12722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.146061][T12722] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.160388][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.167645][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.187265][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.194478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.331298][ T29] audit: type=1400 audit(1780241263.142:1567): avc: denied { write } for pid=13011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.528961][ T29] audit: type=1400 audit(1780241263.342:1568): avc: denied { write } for pid=13048 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.625889][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20 [ 976.006108][T13068] kAFS: unable to lookup cell '' [ 976.131957][T13068] netlink: 'syz.9.1251': attribute type 10 has an invalid length. [ 976.332725][T13076] netlink: 'syz.9.1251': attribute type 10 has an invalid length. [ 976.575559][T13082] xt_TPROXY: Can be used only with -p tcp or -p udp [ 977.232540][ T29] audit: type=1400 audit(1780241265.973:1569): avc: denied { map } for pid=13077 comm="syz.6.1255" path="socket:[35556]" dev="sockfs" ino=35556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 977.268897][ T29] audit: type=1400 audit(1780241265.982:1570): avc: denied { read } for pid=13077 comm="syz.6.1255" path="socket:[35556]" dev="sockfs" ino=35556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 977.313374][T13068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.346778][T13068] team0: Port device netdevsim1 added [ 978.109459][T12722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.252312][T12722] veth0_vlan: entered promiscuous mode [ 978.323546][T12722] veth1_vlan: entered promiscuous mode [ 978.543131][T12722] veth0_macvtap: entered promiscuous mode [ 978.571525][ T29] audit: type=1400 audit(1780241267.236:1571): avc: denied { write } for pid=13105 comm="syz.6.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 978.606311][T12722] veth1_macvtap: entered promiscuous mode [ 978.707073][T12722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.755020][T12722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.814808][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.833931][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.846683][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.915698][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.264467][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1257'. [ 979.412163][ T5813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.467203][ T5813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.883348][T13137] fuse: Unknown parameter '/0x0000000000000008' [ 982.895180][T13135] gfs2: gfs2 mount does not exist [ 982.969498][ T29] audit: type=1400 audit(1780241271.298:1572): avc: denied { connect } for pid=13130 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 983.053627][ T5813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.061500][ T5813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.398887][ T29] audit: type=1400 audit(1780241271.597:1573): avc: denied { mounton } for pid=12722 comm="syz-executor" path="/root/syzkaller.P8WFS9/syz-tmp" dev="sda1" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 983.746395][T13145] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 983.758618][T13145] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 983.822785][ T29] audit: type=1400 audit(1780241271.878:1574): avc: denied { mount } for pid=13139 comm="syz.1.1260" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 983.845192][T13146] fuse: Unknown parameter 'user_i00000000000000000000' [ 983.852246][ T29] audit: type=1400 audit(1780241272.103:1575): avc: denied { firmware_load } for pid=13139 comm="syz.1.1260" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 983.872790][ T29] audit: type=1400 audit(1780241272.187:1576): avc: denied { mounton } for pid=13139 comm="syz.1.1260" path="/238/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 983.940360][ T29] audit: type=1400 audit(1780241272.271:1577): avc: denied { mounton } for pid=12722 comm="syz-executor" path="/root/syzkaller.P8WFS9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 984.047085][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 984.057487][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 984.137194][ T29] audit: type=1400 audit(1780241272.318:1578): avc: denied { mounton } for pid=12722 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 984.293018][ T29] audit: type=1400 audit(1780241272.318:1579): avc: denied { mount } for pid=12722 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 984.474459][ T29] audit: type=1400 audit(1780241272.318:1580): avc: denied { mounton } for pid=12722 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 985.427948][ T29] audit: type=1400 audit(1780241272.318:1581): avc: denied { mount } for pid=12722 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 987.312991][T13176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1264'. [ 988.304332][T13170] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1265'. [ 988.344679][T13187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=13187 comm=syz.6.1267 [ 989.629122][T13203] bridge_slave_0: left allmulticast mode [ 989.642879][T13203] bridge_slave_0: left promiscuous mode [ 989.662568][T13203] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.141123][T13201] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 990.164857][T13204] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 990.175079][T13204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 990.184664][T13204] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 990.327468][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1270'. [ 990.336709][T13201] openvswitch: netlink: Missing key (keys=40, expected=80) [ 991.894551][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 992.264925][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 992.264942][ T29] audit: type=1400 audit(1780241280.057:1585): avc: denied { write } for pid=13183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.385274][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1276'. [ 992.721048][T13222] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13222 comm=syz.1.1273 [ 992.923842][ T29] audit: type=1400 audit(1780241280.646:1586): avc: denied { write } for pid=13241 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.821802][T13245] kAFS: unable to lookup cell '' [ 993.830702][T13245] netlink: 'syz.4.1278': attribute type 10 has an invalid length. [ 994.033143][T13252] netlink: 'syz.4.1278': attribute type 10 has an invalid length. [ 994.041477][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.165338][T13252] team0: Port device netdevsim1 removed [ 995.220958][ T29] audit: type=1400 audit(1780241282.209:1587): avc: denied { connect } for pid=13254 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 995.768738][ T29] audit: type=1400 audit(1780241283.342:1588): avc: denied { name_connect } for pid=13259 comm="syz.6.1280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 996.830724][ T29] audit: type=1400 audit(1780241284.333:1589): avc: denied { accept } for pid=13259 comm="syz.6.1280" lport=59405 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 997.150090][ T29] audit: type=1400 audit(1780241284.390:1590): avc: denied { read } for pid=13259 comm="syz.6.1280" lport=59405 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 997.559717][ T29] audit: type=1400 audit(1780241284.427:1591): avc: denied { setopt } for pid=13259 comm="syz.6.1280" lport=59405 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 998.035574][ T29] audit: type=1326 audit(1780241285.456:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.106653][ T29] audit: type=1326 audit(1780241285.456:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.155620][ T29] audit: type=1326 audit(1780241285.456:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.198814][ T29] audit: type=1326 audit(1780241285.456:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.687692][ T29] audit: type=1326 audit(1780241285.494:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.716794][ T29] audit: type=1326 audit(1780241285.494:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.743361][ T29] audit: type=1326 audit(1780241285.494:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.769882][ T29] audit: type=1326 audit(1780241285.503:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.796422][ T29] audit: type=1326 audit(1780241285.503:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 998.836195][T13283] netlink: 'syz.2.1285': attribute type 2 has an invalid length. [ 998.866134][T13283] : entered promiscuous mode [ 998.985526][ T29] audit: type=1326 audit(1780241285.503:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.1.1283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fae9f99ce59 code=0x7ffc0000 [ 1000.316902][T13279] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1000.361790][T13279] SET target dimension over the limit! [ 1002.549083][T13323] kAFS: unable to lookup cell '' [ 1002.672732][T13323] kAFS: unable to lookup cell '(,c' [ 1003.629283][T13337] binder: 13331:13337 ioctl c00c620f 2000000003c0 returned -22 [ 1005.718267][T13340] syz.9.1294 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1006.054669][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1006.072117][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1006.082964][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1006.089363][T13343] ceph: No mds server is up or the cluster is laggy [ 1006.102716][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1006.455373][T13354] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1006.508044][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 1008.019440][T13369] fuse: Unknown parameter '/0xffffffffffffffff' [ 1008.586141][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 1008.586160][ T29] audit: type=1400 audit(1780241295.329:1779): avc: denied { write } for pid=13333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.124587][ T29] audit: type=1400 audit(1780241295.825:1780): avc: denied { open } for pid=13362 comm="syz.2.1297" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1009.204662][ T29] audit: type=1400 audit(1780241295.909:1781): avc: denied { write } for pid=13381 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.720380][T13387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1301'. [ 1012.395152][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1012.417677][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1012.553433][T13409] ceph: No mds server is up or the cluster is laggy [ 1013.105991][T13429] xt_hashlimit: size too large, truncated to 1048576 [ 1013.283952][ T29] audit: type=1400 audit(1780241299.587:1782): avc: denied { read write } for pid=13415 comm="syz.2.1307" name="sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1013.566236][ T29] audit: type=1400 audit(1780241299.587:1783): avc: denied { open } for pid=13415 comm="syz.2.1307" path="/dev/sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1013.590464][ T29] audit: type=1400 audit(1780241299.587:1784): avc: denied { ioctl } for pid=13415 comm="syz.2.1307" path="/dev/sg0" dev="devtmpfs" ino=786 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1014.126614][ T29] audit: type=1400 audit(1780241300.513:1785): avc: denied { write } for pid=13418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.279243][ T29] audit: type=1400 audit(1780241300.607:1786): avc: denied { read write } for pid=13438 comm="syz.2.1310" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1014.389678][ T29] audit: type=1400 audit(1780241300.607:1787): avc: denied { open } for pid=13438 comm="syz.2.1310" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1014.464084][ T29] audit: type=1400 audit(1780241300.673:1788): avc: denied { ioctl } for pid=13438 comm="syz.2.1310" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1014.749331][T13439] input: syz0 as /devices/virtual/input/input14 [ 1015.194627][ T29] audit: type=1400 audit(1780241300.822:1789): avc: denied { write } for pid=13443 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.778318][ T29] audit: type=1400 audit(1780241302.058:1790): avc: denied { read } for pid=4967 comm="acpid" name="event4" dev="devtmpfs" ino=2956 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1016.169529][ T29] audit: type=1400 audit(1780241302.058:1791): avc: denied { open } for pid=4967 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2956 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1016.607852][ T29] audit: type=1400 audit(1780241302.058:1792): avc: denied { ioctl } for pid=4967 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2956 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1016.863285][ T29] audit: type=1400 audit(1780241302.254:1793): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1017.411863][T13438] ALSA: mixer_oss: invalid OSS volume '' [ 1017.541804][T13478] xt_hashlimit: size too large, truncated to 1048576 [ 1017.725920][T13481] fuse: Unknown parameter '/0xffffffffffffffff' [ 1019.104820][T13496] xt_hashlimit: size too large, truncated to 1048576 [ 1020.010785][ T5629] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1020.049682][T13486] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1020.199281][ T5629] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.247116][ T5629] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1020.287102][ T5629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.357661][ T5629] usb 2-1: config 0 descriptor?? [ 1020.416611][ T5629] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1021.061845][ T5629] gspca_spca501: reg write: error -110 [ 1021.524775][ T5629] spca501 2-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1021.537639][T13511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13511 comm=syz.2.1323 [ 1021.567041][ T5629] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 1021.987014][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 1024.176735][T12735] usb 2-1: USB disconnect, device number 15 [ 1024.853863][T13545] fuse: Unknown parameter '/0x0000000000000008' [ 1026.376573][ T29] audit: type=1400 audit(1780241311.709:1794): avc: denied { read } for pid=13542 comm="syz.6.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1026.553674][ T29] audit: type=1400 audit(1780241311.755:1795): avc: denied { write } for pid=13542 comm="syz.6.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1027.092991][T13563] xt_hashlimit: size too large, truncated to 1048576 [ 1027.276082][T13556] xt_hashlimit: size too large, truncated to 1048576 [ 1027.542233][ T5629] IPVS: starting estimator thread 0... [ 1028.191474][T13573] IPVS: using max 35 ests per chain, 84000 per kthread [ 1028.433235][ T29] audit: type=1400 audit(1780241314.076:1796): avc: denied { bind } for pid=13578 comm="syz.9.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1028.662580][T12731] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1029.194263][T12731] usb 3-1: Using ep0 maxpacket: 8 [ 1029.285866][T12731] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1029.526647][T12731] usb 3-1: config 4 has an invalid interface number: 203 but max is 0 [ 1029.546290][T12731] usb 3-1: config 4 has no interface number 0 [ 1029.558528][T12731] usb 3-1: config 4 interface 203 has no altsetting 0 [ 1029.851230][T12731] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=f3.d0 [ 1029.860620][T12731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.869106][T12731] usb 3-1: Product: syz [ 1029.874343][T12731] usb 3-1: Manufacturer: syz [ 1029.879425][T12731] usb 3-1: SerialNumber: syz [ 1030.620616][T13596] netlink: 'syz.4.1339': attribute type 4 has an invalid length. [ 1031.147746][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1341'. [ 1032.089409][T13598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.125707][T13598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.233953][T12731] cdc_acm 3-1:4.203: More than one union descriptor, skipping ... [ 1032.263723][T13598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.319266][T12731] usb 3-1: USB disconnect, device number 6 [ 1032.426533][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1032.475098][T13598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.495993][T13598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.539629][T13598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1032.580609][T13598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1032.627225][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1032.639290][T13598] veth1_vlan: left promiscuous mode [ 1032.645761][T13598] veth0_vlan: left promiscuous mode [ 1032.652903][T13598] veth0_vlan: entered promiscuous mode [ 1032.664870][T13598] veth1_vlan: entered promiscuous mode [ 1032.788464][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1032.803023][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1032.814940][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1032.824732][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1032.835870][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1032.849669][T13598] veth1_macvtap: left promiscuous mode [ 1033.600301][T13619] fuse: Unknown parameter '/0x0000000000000009' [ 1034.050646][T13598] veth0_macvtap: left promiscuous mode [ 1034.057696][T13598] veth0_macvtap: entered promiscuous mode [ 1034.068244][T13598] veth1_macvtap: entered promiscuous mode [ 1034.074224][T13598] veth1_macvtap: entered allmulticast mode [ 1034.114415][T13598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1034.150350][T13598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1034.187292][T13598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1034.234174][T13598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1034.296148][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.303910][ T7165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.335239][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.342695][ T7165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.460062][T12731] syz2: Port: 1 Link ACTIVE [ 1034.943338][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.992278][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.229778][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.279159][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.418262][T13652] kAFS: unable to lookup cell '' [ 1038.706125][T13654] xt_hashlimit: size too large, truncated to 1048576 [ 1039.378214][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1039.431806][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.540262][ T9] usb 2-1: config 0 descriptor?? [ 1039.625805][ T9] usb 2-1: can't set config #0, error -32 [ 1040.887823][ T6715] usb 2-1: USB disconnect, device number 16 [ 1041.144652][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1352'. [ 1041.197554][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1352'. [ 1041.266148][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1352'. [ 1041.286785][T13675] xt_hashlimit: size too large, truncated to 1048576 [ 1041.487690][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1352'. [ 1041.511096][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1352'. [ 1042.437192][T12736] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1042.652000][T12736] usb 2-1: Using ep0 maxpacket: 8 [ 1042.672563][T12736] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1043.489862][T12736] usb 2-1: config 2 has an invalid interface number: 80 but max is 0 [ 1043.500282][T12736] usb 2-1: config 2 has no interface number 0 [ 1043.507063][T12736] usb 2-1: config 2 interface 80 has no altsetting 0 [ 1043.551973][T12736] usb 2-1: string descriptor 0 read error: -22 [ 1043.585860][T12736] usb 2-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=91.c6 [ 1043.620452][T12736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.353415][T12736] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 1044.743885][T12736] usb 2-1: USB disconnect, device number 17 [ 1045.597904][T13716] xt_hashlimit: size too large, truncated to 1048576 [ 1046.718028][T13726] xt_hashlimit: size too large, truncated to 1048576 [ 1047.051126][T13732] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1366'. [ 1048.092169][T13732] xt_cgroup: path and classid specified [ 1048.830373][T13745] trusted_key: encrypted_key: keylen parameter is missing [ 1048.844705][T13745] netlink: 'syz.9.1368': attribute type 40 has an invalid length. [ 1050.859179][ T29] audit: type=1400 audit(1780241335.079:1797): avc: denied { append } for pid=13747 comm="syz.1.1369" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1051.010281][T13758] 9p: Bad value for 'wfdno' [ 1051.715232][ T29] audit: type=1400 audit(1780241335.873:1798): avc: denied { setopt } for pid=13765 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1053.876652][ T29] audit: type=1400 audit(1780241337.194:1799): avc: denied { listen } for pid=13742 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1053.902307][ T29] audit: type=1400 audit(1780241337.194:1800): avc: denied { connect } for pid=13742 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1053.941627][ T29] audit: type=1400 audit(1780241337.194:1801): avc: denied { read } for pid=13742 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1055.594940][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1376'. [ 1055.650700][ T29] audit: type=1400 audit(1780241339.410:1802): avc: denied { create } for pid=13786 comm="syz.6.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1055.678946][ T29] audit: type=1400 audit(1780241339.428:1803): avc: denied { connect } for pid=13786 comm="syz.6.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1055.991265][T12731] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1056.164140][T12731] usb 2-1: Using ep0 maxpacket: 8 [ 1056.179368][T12731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1056.200155][T12731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.229309][T12731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1056.262883][T12731] usb 2-1: config 1 has no interface number 0 [ 1056.280282][T12731] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 1056.455622][T12731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.474346][T12731] usb 2-1: Product: syz [ 1056.485403][T12731] usb 2-1: Manufacturer: syz [ 1056.499211][T12731] usb 2-1: SerialNumber: syz [ 1057.577612][T12731] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1057.590942][T12731] usb 2-1: USB disconnect, device number 18 [ 1057.884673][T13825] sch_tbf: burst 0 is lower than device veth0_to_hsr mtu (1514) ! [ 1058.313682][T13829] kAFS: unable to lookup cell '' [ 1058.431881][T13804] udevd[13804]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1059.419020][ T29] audit: type=1400 audit(1780241342.650:1804): avc: denied { audit_write } for pid=13830 comm="syz.2.1383" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1059.577931][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.946397][ T29] audit: type=1400 audit(1780241344.386:1805): avc: denied { read } for pid=13852 comm="syz.1.1388" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1061.736928][ T29] audit: type=1400 audit(1780241344.414:1806): avc: denied { open } for pid=13852 comm="syz.1.1388" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1061.909422][ T29] audit: type=1400 audit(1780241345.272:1807): avc: denied { setattr } for pid=13852 comm="syz.1.1388" name="" dev="pipefs" ino=4629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1062.082478][ T29] audit: type=1400 audit(1780241345.392:1808): avc: denied { watch_mount } for pid=13852 comm="syz.1.1388" path="/261" dev="tmpfs" ino=1417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1062.759052][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1391'. [ 1062.859445][T13872] macsec1: entered promiscuous mode [ 1062.891122][T13872] dummy0: entered promiscuous mode [ 1062.949121][T13872] macsec1: entered allmulticast mode [ 1063.003204][T13872] dummy0: entered allmulticast mode [ 1063.033063][ T29] audit: type=1326 audit(1780241346.315:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13865 comm="syz.4.1392" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d21b9ce59 code=0x0 [ 1063.178390][T13872] dummy0: left allmulticast mode [ 1063.202719][T13872] dummy0: left promiscuous mode [ 1063.492366][T13879] overlayfs: failed to clone upperpath [ 1063.526846][T13879] overlayfs: failed to clone lowerpath [ 1063.563010][T13879] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1394'. [ 1064.525263][T13889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.534430][T13889] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1064.784737][T13897] kAFS: unable to lookup cell '' [ 1064.839191][T13896] xt_hashlimit: size too large, truncated to 1048576 [ 1065.151554][T13885] netlink: 'syz.2.1397': attribute type 28 has an invalid length. [ 1065.159827][T13885] netlink: 'syz.2.1397': attribute type 29 has an invalid length. [ 1065.167797][T13885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1397'. [ 1066.405980][T13920] xt_hashlimit: size too large, truncated to 1048576 [ 1068.916427][T13969] xt_hashlimit: size too large, truncated to 1048576 [ 1070.120121][T13979] xt_hashlimit: size too large, truncated to 1048576 [ 1070.208802][T13990] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1070.530388][ T29] audit: type=1400 audit(1780241353.239:1810): avc: denied { getopt } for pid=13996 comm="syz.9.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1070.851145][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1071.097091][T14013] fuse: Unknown parameter '/0x0000000000000008' [ 1072.001529][T14018] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1437'. [ 1072.341533][ T9] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1072.358381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.378117][ T9] usb 2-1: config 0 descriptor?? [ 1073.009070][ T9] pwc: Samsung MPC-C10 USB webcam detected. [ 1073.027736][T14018] bridge1: entered promiscuous mode [ 1073.032990][T14018] bridge1: entered allmulticast mode [ 1073.460358][T14032] kAFS: unable to lookup cell '' [ 1073.550895][ T9] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1073.580435][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 1073.601224][ T9] pwc: recv_control_msg error -71 req 04 val 1700 [ 1073.720895][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1073.830377][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 1073.901245][T14044] xt_hashlimit: size too large, truncated to 1048576 [ 1073.937429][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 1073.994623][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 1074.031564][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 1074.070177][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 1074.167592][ T9] pwc: recv_control_msg error -71 req 02 val 2200 [ 1074.195696][ T9] pwc: recv_control_msg error -71 req 06 val 0600 [ 1074.236361][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 1074.273502][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1074.315954][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1075.151251][T14064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1449'. [ 1075.530767][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1075.620724][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1075.728497][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1075.836231][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1075.953116][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1075.985094][ T9] pwc: Registered as video103. [ 1075.991665][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 1076.343432][ T9] usb 2-1: USB disconnect, device number 19 [ 1076.458508][T14080] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1077.197620][T14083] fuse: Unknown parameter '/0x0000000000000008' [ 1078.192964][T14090] netlink: 8492 bytes leftover after parsing attributes in process `syz.2.1461'. [ 1079.589716][T14125] fuse: Unknown parameter '/0x0000000000000008' [ 1081.478953][T14131] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1081.649703][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1081.703692][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1081.711368][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1081.988609][T14118] infiniband syz0: set active [ 1081.997858][T12735] hsr0 speed is unknown, defaulting to 1000 [ 1082.028265][T14118] infiniband syz0: added hsr0 [ 1082.039345][T14118] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1082.072781][T14118] infiniband syz0: Couldn't open port 1 [ 1082.086982][T14118] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1082.102723][T14118] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1082.126155][T14118] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1082.224966][T14118] RDS/IB: syz0: added [ 1082.229873][T14118] smc: adding ib device syz0 with port count 1 [ 1082.236370][T14118] smc: ib device syz0 port 1 has no pnetid [ 1082.249390][T12735] hsr0 speed is unknown, defaulting to 1000 [ 1082.853668][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1083.031014][T14163] fuse: Unknown parameter '/0x0000000000000008' [ 1083.310498][T14155] hsr0 speed is unknown, defaulting to 1000 [ 1083.480198][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1083.788383][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1084.243195][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1084.298561][T14207] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1502'. [ 1084.318970][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 1084.416657][ T29] audit: type=1400 audit(1780241366.063:1811): avc: denied { map } for pid=14210 comm="syz.1.1503" path="/dev/video4" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1084.497158][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1084.940393][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1512'. [ 1085.036014][T14231] xt_hashlimit: size too large, truncated to 1048576 [ 1086.122738][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1086.661292][T14118] hsr0 speed is unknown, defaulting to 1000 [ 1087.099831][T14267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.414640][T14266] 9p: Bad value for 'wfdno' [ 1087.996279][T14279] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1525'. [ 1088.528410][T14291] fuse: Unknown parameter '/0xffffffffffffffff' [ 1088.945146][T14296] xt_hashlimit: size too large, truncated to 1048576 [ 1090.300276][T14315] overlay: Bad value for 'upperdir' [ 1090.501719][ T29] audit: type=1326 audit(1780241371.667:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14258 comm="syz.1.1519" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae9f99ce59 code=0x0 [ 1090.604255][T14320] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1091.522509][T14328] xt_hashlimit: size too large, truncated to 1048576 [ 1092.227150][T14336] hsr0 speed is unknown, defaulting to 1000 [ 1093.980943][T14349] hsr0 speed is unknown, defaulting to 1000 [ 1095.260495][T14364] xt_hashlimit: size too large, truncated to 1048576 [ 1095.763363][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1547'. [ 1096.597016][T14396] xt_hashlimit: size too large, truncated to 1048576 [ 1096.913298][ T5629] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1097.091424][ T5629] usb 3-1: Using ep0 maxpacket: 32 [ 1097.157508][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1097.183226][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1097.203446][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1097.215661][ T5629] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1097.243890][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.453514][ T5629] usb 3-1: config 0 descriptor?? [ 1097.470880][T14390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1097.487151][ T5629] hub 3-1:0.0: USB hub found [ 1097.665415][T14414] xt_hashlimit: size too large, truncated to 1048576 [ 1097.865484][ T5629] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 1098.085256][ T5629] usbhid 3-1:0.0: can't add hid device: -71 [ 1098.098213][ T5629] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1098.138434][ T5629] usb 3-1: USB disconnect, device number 7 [ 1098.297085][ T29] audit: type=1400 audit(1780241378.867:1813): avc: denied { connect } for pid=14428 comm="syz.6.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1098.339643][ T29] audit: type=1400 audit(1780241378.895:1814): avc: denied { setopt } for pid=14428 comm="syz.6.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1098.443404][T14433] fuse: Unknown parameter '/0xffffffffffffffff' [ 1098.554074][T14438] fuse: Unknown parameter '/0xffffffffffffffff' [ 1098.993114][T14446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1099.328001][T14466] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 1099.335784][T14466] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1582'. [ 1099.346786][T14466] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1582'. [ 1099.365723][T14465] fuse: Unknown parameter '/0xffffffffffffffff' [ 1099.515396][T14466] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 1099.523689][T14466] netlink: 'syz.1.1582': attribute type 8 has an invalid length. [ 1099.531479][T14466] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1582'. [ 1099.951498][T14485] xt_hashlimit: size too large, truncated to 1048576 [ 1100.793919][T14488] kAFS: unable to lookup cell '' [ 1101.116557][T14499] fuse: Unknown parameter '/0x0000000000000007' [ 1101.457406][T14510] fuse: Unknown parameter '/0x0000000000000009' [ 1102.113190][T14516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.120343][T14516] bridge0: port 2(bridge_slave_1) entered listening state [ 1102.430296][T14516] veth0_to_team: entered promiscuous mode [ 1102.471795][ T151] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.489709][ T151] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.537724][ T151] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.578838][ T151] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.835860][T14537] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1102.863800][T14537] overlayfs: missing 'lowerdir' [ 1102.994165][ T29] audit: type=1400 audit(1780241383.207:1815): avc: denied { read append } for pid=14542 comm="syz.1.1618" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1103.060734][ T29] audit: type=1400 audit(1780241383.207:1816): avc: denied { open } for pid=14542 comm="syz.1.1618" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1103.122543][ T29] audit: type=1400 audit(1780241383.253:1817): avc: denied { ioctl } for pid=14542 comm="syz.1.1618" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1103.645738][ T29] audit: type=1400 audit(1780241383.807:1818): avc: denied { map } for pid=14559 comm="syz.1.1628" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1103.791690][ T29] audit: type=1400 audit(1780241383.945:1819): avc: denied { write } for pid=14570 comm="syz.4.1631" path="socket:[40247]" dev="sockfs" ino=40247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1104.589878][T14587] hsr0 speed is unknown, defaulting to 1000 [ 1105.531334][T14595] fuse: Unknown parameter '/0xffffffffffffffff' [ 1107.227441][ T29] audit: type=1400 audit(1780241387.121:1820): avc: denied { write } for pid=14620 comm="syz.9.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1107.507519][ T29] audit: type=1400 audit(1780241387.379:1821): avc: denied { read } for pid=14625 comm="syz.4.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1107.733163][ T29] audit: type=1400 audit(1780241387.582:1822): avc: denied { ioctl } for pid=14630 comm="syz.1.1651" path="socket:[39413]" dev="sockfs" ino=39413 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1108.654636][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1108.882076][T14669] hsr0 speed is unknown, defaulting to 1000 [ 1109.620602][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1109.735988][T14677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1667'. [ 1110.132859][ T29] audit: type=1400 audit(1780241389.798:1823): avc: denied { read } for pid=14695 comm="syz.4.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1110.281277][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.292198][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.301938][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1110.314823][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1110.323862][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.361172][ T29] audit: type=1400 audit(1780241389.918:1824): avc: denied { getopt } for pid=14700 comm="syz.4.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1110.364383][ T9] usb 2-1: config 0 descriptor?? [ 1110.624637][T14706] hsr0 speed is unknown, defaulting to 1000 [ 1111.523072][ T29] audit: type=1400 audit(1780241391.081:1825): avc: denied { bind } for pid=14710 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1111.772997][ T9] usb 2-1: can't set config #0, error -71 [ 1111.820705][ T9] usb 2-1: USB disconnect, device number 20 [ 1112.165140][T14730] xt_hashlimit: size too large, truncated to 1048576 [ 1113.501157][T14739] hsr0 speed is unknown, defaulting to 1000 [ 1115.535424][T14784] hsr0 speed is unknown, defaulting to 1000 [ 1116.797161][T14788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1710'. [ 1116.839326][T14788] bridge4: entered promiscuous mode [ 1116.877657][T14788] bridge4: entered allmulticast mode [ 1117.521572][T14800] hsr0 speed is unknown, defaulting to 1000 [ 1118.972773][T14811] hsr0 speed is unknown, defaulting to 1000 [ 1119.640943][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1121.082409][T14837] xt_limit: Overflow, try lower: 324384747/4200216962 [ 1121.631992][T14856] fuse: Unknown parameter '/0xffffffffffffffff' [ 1121.948450][T14860] xt_hashlimit: size too large, truncated to 1048576 [ 1123.273598][T14870] hsr0 speed is unknown, defaulting to 1000 [ 1125.013808][T14881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.093504][ T29] audit: type=1400 audit(1780241403.609:1826): avc: denied { write } for pid=14885 comm="syz.9.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1125.502919][T14892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1743'. [ 1125.535570][T14893] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1741'. [ 1125.837089][T14908] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1749'. [ 1126.134261][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.356995][T14911] hsr0 speed is unknown, defaulting to 1000 [ 1127.324972][T14920] xt_hashlimit: size too large, truncated to 1048576 [ 1128.278608][T14924] kAFS: unable to lookup cell '' [ 1128.690753][T14933] xt_hashlimit: size too large, truncated to 1048576 [ 1129.553782][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1754'. [ 1132.116689][T14976] hsr0 speed is unknown, defaulting to 1000 [ 1133.267751][T14982] hsr0 speed is unknown, defaulting to 1000 [ 1135.139479][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1136.081367][ T29] audit: type=1400 audit(1780241413.755:1827): avc: denied { bind } for pid=14996 comm="syz.9.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1136.802495][T15007] xt_hashlimit: size too large, truncated to 1048576 [ 1138.921585][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 1139.262905][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1789'. [ 1139.314328][T15049] bridge4: entered promiscuous mode [ 1139.320369][T15049] bridge4: entered allmulticast mode [ 1139.617263][T15055] xt_hashlimit: size too large, truncated to 1048576 [ 1139.720325][ T6715] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1140.286675][T15059] tipc: Enabling of bearer rejected, failed to enable media [ 1140.374496][ T6715] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1140.396802][ T6715] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1140.445582][ T6715] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1140.503195][ T6715] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1140.803129][T15075] hsr0 speed is unknown, defaulting to 1000 [ 1141.470822][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1141.546252][ T6715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.756371][ T6715] usb 3-1: config 0 descriptor?? [ 1141.802284][T15047] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1142.960342][ T6715] usbhid 3-1:0.0: can't add hid device: -71 [ 1142.996562][ T6715] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1143.062482][ T6715] usb 3-1: USB disconnect, device number 8 [ 1143.295988][T15098] kAFS: unable to lookup cell '' [ 1143.592385][T15106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1144.768964][T15113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1807'. [ 1144.861991][T15113] bridge1: entered promiscuous mode [ 1144.895398][T15113] bridge1: entered allmulticast mode [ 1145.727451][T15120] tipc: MTU too low for tipc bearer [ 1146.083578][T15124] hsr0 speed is unknown, defaulting to 1000 [ 1146.837292][T14789] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1148.237257][T15137] 9p: Bad value for 'rfdno' [ 1148.312714][T15143] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1148.712236][T15157] xt_hashlimit: size too large, truncated to 1048576 [ 1149.652619][T15176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1150.753949][T15174] fuse: Unknown parameter '/0xffffffffffffffff' [ 1150.833014][T15175] hsr0 speed is unknown, defaulting to 1000 [ 1152.606740][ T29] audit: type=1400 audit(1780241429.006:1828): avc: denied { create } for pid=15191 comm="syz.2.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1152.641638][ T29] audit: type=1400 audit(1780241429.043:1829): avc: denied { setopt } for pid=15191 comm="syz.2.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1152.949193][T15201] netlink: 7060 bytes leftover after parsing attributes in process `syz.9.1835'. [ 1153.669575][T15219] xt_hashlimit: size too large, truncated to 1048576 [ 1153.937152][T15223] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1846'. [ 1154.439452][T15227] hsr0 speed is unknown, defaulting to 1000 [ 1155.199684][T15232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1848'. [ 1155.649166][T15235] hsr0 speed is unknown, defaulting to 1000 [ 1156.815415][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 1158.253358][T15264] 9p: Unknown access argument : -22 [ 1158.483360][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1864'. [ 1158.655597][T15278] kAFS: unable to lookup cell '' [ 1160.571657][T15301] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1163.465415][ T5629] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 1163.707232][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1163.751087][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1163.797679][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1163.866415][ T5629] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1163.899015][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.922735][ T5629] usb 3-1: config 0 descriptor?? [ 1163.950464][T15329] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1164.531700][ T5629] asus 0003:0C45:5112.0001: unexpected long global item [ 1164.567013][ T5629] asus 0003:0C45:5112.0001: Asus hid parse failed: -22 [ 1164.585294][ T5629] asus 0003:0C45:5112.0001: probe with driver asus failed with error -22 [ 1164.695214][ T9] usb 3-1: USB disconnect, device number 9 [ 1164.779757][ T29] audit: type=1400 audit(1780241440.242:1830): avc: denied { ioctl } for pid=15336 comm="syz.6.1882" path="socket:[42367]" dev="sockfs" ino=42367 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1164.931497][T15363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1894'. [ 1165.211042][T15377] xt_hashlimit: size too large, truncated to 1048576 [ 1165.212545][T15376] fuse: Unknown parameter '/0x0000000000000009' [ 1166.341173][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1908'. [ 1166.350773][ T29] audit: type=1400 audit(1780241441.691:1831): avc: denied { nlmsg_read } for pid=15396 comm="syz.9.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1166.930266][T15407] xt_hashlimit: size too large, truncated to 1048576 [ 1167.506889][T15419] fuse: Bad value for 'fd' [ 1167.723110][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.730412][ C1] bridge0: topology change detected, propagating [ 1167.966999][ T29] audit: type=1400 audit(1780241443.187:1832): avc: denied { setopt } for pid=15435 comm="syz.1.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1168.251468][T15446] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1924'. [ 1169.895683][T15471] hsr0 speed is unknown, defaulting to 1000 [ 1171.224075][T15477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1172.008696][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1937'. [ 1172.409160][T15497] 9p: Bad value for 'rfdno' [ 1172.748723][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1172.757993][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1172.767210][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1172.776439][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1172.785523][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1172.794729][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1172.803894][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1172.813278][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1172.825109][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'. [ 1175.523527][T15516] hsr0 speed is unknown, defaulting to 1000 [ 1175.919677][T15521] hsr0 speed is unknown, defaulting to 1000 [ 1177.607119][T15532] __nla_validate_parse: 11 callbacks suppressed [ 1177.607140][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'. [ 1178.487535][ T5757] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1178.695890][ T5757] usb 2-1: Using ep0 maxpacket: 32 [ 1178.738964][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1178.792735][ T5757] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1178.849347][ T5757] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1178.896600][ T5757] usb 2-1: config 14 has no interface number 0 [ 1178.926505][ T5757] usb 2-1: config 14 has no interface number 1 [ 1178.960402][ T5757] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1179.161090][ T5757] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1179.296571][T15557] xt_hashlimit: size too large, truncated to 1048576 [ 1180.054108][ T5757] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1180.418789][ T5757] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1180.481000][ T5757] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1180.532455][ T5757] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1180.580306][ T5757] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1180.612852][ T5757] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1180.637194][T15568] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1959'. [ 1180.659515][T15568] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1959'. [ 1180.661637][ T5757] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1180.734212][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.765899][ T5757] usb 2-1: Product: syz [ 1180.797064][ T5757] usb 2-1: Manufacturer: syz [ 1180.813325][ T5757] usb 2-1: SerialNumber: syz [ 1181.166178][ T5757] legousbtower 2-1:14.57: interrupt endpoints not found [ 1181.800715][T15574] hsr0 speed is unknown, defaulting to 1000 [ 1182.067507][ T5757] legousbtower 2-1:14.228: get version request failed: -71 [ 1182.107095][ T5757] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 1182.433456][ T5757] usb 2-1: USB disconnect, device number 21 [ 1184.421167][T15616] xt_hashlimit: size too large, truncated to 1048576 [ 1185.294201][T15625] xt_hashlimit: size too large, truncated to 1048576 [ 1185.777745][T15630] hsr0 speed is unknown, defaulting to 1000 [ 1187.906565][ T29] audit: type=1400 audit(1780241461.595:1833): avc: denied { read } for pid=15651 comm="syz.1.1982" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1188.052242][ T29] audit: type=1400 audit(1780241461.595:1834): avc: denied { open } for pid=15651 comm="syz.1.1982" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1188.318608][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'. [ 1188.848495][T15668] xt_hashlimit: size too large, truncated to 1048576 [ 1189.782843][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 1189.807985][T15678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1990'. [ 1190.029615][T15678] geneve3: entered promiscuous mode [ 1190.043884][T15678] geneve3: entered allmulticast mode [ 1190.397069][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.463802][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.481612][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.491870][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.530066][T15686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1987'. [ 1191.563612][T15704] hsr0 speed is unknown, defaulting to 1000 [ 1193.275409][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1194.201350][T15730] hsr0 speed is unknown, defaulting to 1000 [ 1195.218646][T15734] xt_hashlimit: size too large, truncated to 1048576 [ 1195.865733][T15738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15738 comm=syz.9.2003 [ 1196.819545][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 1196.904802][ T29] audit: type=1400 audit(1780241469.913:1835): avc: denied { ioctl } for pid=15758 comm="syz.4.2010" path="socket:[42872]" dev="sockfs" ino=42872 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1197.173380][T15763] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2007'. [ 1198.500427][T15791] hsr0 speed is unknown, defaulting to 1000 [ 1200.157938][T15802] fuse: Unknown parameter '/0xffffffffffffffff' [ 1202.351781][T15832] ipvlan0: entered allmulticast mode [ 1202.388058][T15832] batadv_slave_1: entered allmulticast mode [ 1202.440311][T15832] batman_adv: batadv0: Adding interface: ipvlan0 [ 1202.472287][T15832] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.537965][T15832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.559947][T15832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.585455][T15832] batman_adv: batadv0: Interface activated: ipvlan0 [ 1204.118083][ T48] wlan1: Trigger new scan to find an IBSS to join [ 1316.799779][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1316.806765][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15847/1:b..l P15840/3:b..l [ 1316.816738][ C1] rcu: (detected by 1, t=10502 jiffies, g=78089, q=110 ncpus=2) [ 1316.824470][ C1] task:syz.1.2038 state:R running task stack:25880 pid:15840 tgid:15838 ppid:5613 task_flags:0x400140 flags:0x00080000 [ 1316.839580][ C1] Call Trace: [ 1316.842878][ C1] [ 1316.845819][ C1] __schedule+0x1295/0x67a0 [ 1316.850338][ C1] ? irqentry_exit+0x24d/0x970 [ 1316.855109][ C1] ? irqentry_exit+0x24d/0x970 [ 1316.859880][ C1] ? __pfx___schedule+0x10/0x10 [ 1316.864736][ C1] ? xas_find+0x32c/0x8e0 [ 1316.869074][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1316.874456][ C1] preempt_schedule_common+0x42/0xc0 [ 1316.879744][ C1] preempt_schedule_thunk+0x16/0x30 [ 1316.884957][ C1] _raw_spin_unlock+0x3e/0x50 [ 1316.889632][ C1] filemap_map_pages+0x15ac/0x2140 [ 1316.894768][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1316.900254][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1316.905721][ C1] do_fault+0x985/0x1750 [ 1316.909968][ C1] __handle_mm_fault+0x187d/0x2a00 [ 1316.915095][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1316.920518][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1316.925987][ C1] ? pte_offset_map_lock+0x174/0x320 [ 1316.931272][ C1] ? find_held_lock+0x2b/0x80 [ 1316.935953][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 1316.940982][ C1] handle_mm_fault+0x37b/0xa30 [ 1316.945755][ C1] __get_user_pages+0x1178/0x32a0 [ 1316.950790][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1316.956176][ C1] populate_vma_page_range+0x267/0x3f0 [ 1316.961638][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1316.967623][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1316.973431][ C1] ? do_mmap+0x93f/0x12f0 [ 1316.977763][ C1] __mm_populate+0x107/0x3a0 [ 1316.982355][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1316.987469][ C1] ? up_write+0x28c/0x4f0 [ 1316.991805][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1316.996428][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1317.001542][ C1] ? do_futex+0x192/0x350 [ 1317.005875][ C1] ? __pfx_do_futex+0x10/0x10 [ 1317.010561][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 1317.015239][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 1317.020180][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1317.025491][ C1] ? xfd_validate_state+0x129/0x190 [ 1317.030710][ C1] __x64_sys_mmap+0x125/0x190 [ 1317.035390][ C1] do_syscall_64+0x115/0x870 [ 1317.039993][ C1] ? clear_bhb_loop+0x40/0x90 [ 1317.044682][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.050575][ C1] RIP: 0033:0x7fae9f99ce59 [ 1317.055016][ C1] RSP: 002b:00007faea092d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1317.063432][ C1] RAX: ffffffffffffffda RBX: 00007fae9fc15fa0 RCX: 00007fae9f99ce59 [ 1317.071398][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1317.079362][ C1] RBP: 00007fae9fa32d6f R08: ffffffffffffffff R09: 0000000000000000 [ 1317.087327][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1317.095292][ C1] R13: 00007fae9fc16038 R14: 00007fae9fc15fa0 R15: 00007ffc7c4fb208 [ 1317.103277][ C1] [ 1317.106293][ C1] task:syz.4.2042 state:R running task stack:27432 pid:15847 tgid:15845 ppid:5616 task_flags:0x40044c flags:0x00080000 [ 1317.119777][ C1] Call Trace: [ 1317.123054][ C1] [ 1317.125981][ C1] __schedule+0x1295/0x67a0 [ 1317.130506][ C1] ? __nr_to_section+0x3e/0x100 [ 1317.135361][ C1] ? __pfx___schedule+0x10/0x10 [ 1317.140215][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1317.145598][ C1] preempt_schedule_common+0x42/0xc0 [ 1317.150886][ C1] preempt_schedule_thunk+0x16/0x30 [ 1317.156101][ C1] _raw_spin_unlock+0x3e/0x50 [ 1317.160786][ C1] __zap_vma_range+0x16f7/0x4a30 [ 1317.165752][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1317.171043][ C1] ? find_held_lock+0x2b/0x80 [ 1317.175733][ C1] unmap_vmas+0x299/0x5f0 [ 1317.180070][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1317.184922][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1317.189914][ C1] exit_mmap+0x1ef/0xa10 [ 1317.194159][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1317.198917][ C1] ? rcu_is_watching+0x12/0xc0 [ 1317.203694][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1317.208818][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1317.213940][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1317.218888][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1317.224531][ C1] __mmput+0x12a/0x410 [ 1317.228609][ C1] mmput+0x67/0x80 [ 1317.232337][ C1] do_exit+0x8b2/0x2af0 [ 1317.236925][ C1] ? lock_acquire+0x1b1/0x370 [ 1317.241602][ C1] ? find_held_lock+0x2b/0x80 [ 1317.246272][ C1] ? __pfx_do_exit+0x10/0x10 [ 1317.250875][ C1] ? find_held_lock+0x2b/0x80 [ 1317.255600][ C1] ? get_signal+0x7e5/0x2210 [ 1317.260203][ C1] do_group_exit+0xd5/0x2a0 [ 1317.264713][ C1] get_signal+0x20ff/0x2210 [ 1317.269230][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1317.274171][ C1] ? __pfx_get_signal+0x10/0x10 [ 1317.279035][ C1] ? do_futex+0x192/0x350 [ 1317.283370][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1317.288928][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1317.295097][ C1] ? __fget_files+0x21f/0x3d0 [ 1317.299779][ C1] ? rcu_is_watching+0x12/0xc0 [ 1317.304551][ C1] exit_to_user_mode_loop+0x98/0x670 [ 1317.309861][ C1] ? rcu_is_watching+0x12/0xc0 [ 1317.314635][ C1] do_syscall_64+0x666/0x870 [ 1317.319227][ C1] ? clear_bhb_loop+0x40/0x90 [ 1317.323907][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.329794][ C1] RIP: 0033:0x7f5d21b9ce59 [ 1317.334203][ C1] RSP: 002b:00007f5d1fdee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1317.342610][ C1] RAX: 0000000000000001 RBX: 00007f5d21e15fa8 RCX: 00007f5d21b9ce59 [ 1317.350575][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5d21e15fac [ 1317.358538][ C1] RBP: 00007f5d21e15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1317.366501][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1317.374465][ C1] R13: 00007f5d21e16038 R14: 00007ffe59470130 R15: 00007ffe59470218 [ 1317.382444][ C1] [ 1317.385471][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g78089 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1317.397781][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=56381 [ 1317.405665][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g78089 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1317.417026][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1317.426984][ C1] rcu: RCU grace-period kthread stack dump: [ 1317.432857][ C1] task:rcu_preempt state:I stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1317.444775][ C1] Call Trace: [ 1317.448047][ C1] [ 1317.450972][ C1] __schedule+0x1295/0x67a0 [ 1317.455498][ C1] ? __pfx___schedule+0x10/0x10 [ 1317.460343][ C1] ? find_held_lock+0x2b/0x80 [ 1317.465015][ C1] ? schedule+0x2bf/0x390 [ 1317.469351][ C1] schedule+0xdd/0x390 [ 1317.473420][ C1] schedule_timeout+0x127/0x280 [ 1317.478268][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1317.483637][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1317.488922][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.494726][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1317.500187][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1317.504951][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1317.510235][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 1317.515693][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1317.520627][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1317.525820][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1317.531625][ C1] rcu_gp_kthread+0x179/0x230 [ 1317.536299][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1317.541492][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1317.547302][ C1] ? __kthread_parkme+0x18c/0x230 [ 1317.552334][ C1] ? kthread+0x13a/0x450 [ 1317.556571][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1317.561764][ C1] kthread+0x370/0x450 [ 1317.565832][ C1] ? __pfx_kthread+0x10/0x10 [ 1317.570421][ C1] ret_from_fork+0x72b/0xd50 [ 1317.575012][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.580128][ C1] ? __switch_to+0x800/0x1100 [ 1317.584810][ C1] ? __pfx_kthread+0x10/0x10 [ 1317.589412][ C1] ret_from_fork_asm+0x1a/0x30 [ 1317.594194][ C1] [ 1317.597205][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1317.603534][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1317.608753][ C0] NMI backtrace for cpu 0 [ 1317.608771][ C0] CPU: 0 UID: 0 PID: 15846 Comm: syz.9.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.608795][ C0] Tainted: [L]=SOFTLOCKUP [ 1317.608804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1317.608815][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x2c/0x80 [ 1317.608841][ C0] Code: 1e fa 55 48 89 f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 66 3d 58 f6 48 89 df e8 3e 8d 58 f6 f7 c5 00 02 00 00 75 23 9c 58 c4 02 75 37 bf 01 00 00 00 e8 55 59 48 f6 65 8b 05 3e 9d 7d 08 [ 1317.608858][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00000046 [ 1317.608872][ C0] RAX: 0000000000000046 RBX: ffffffff9b361598 RCX: ffffffff81e4c063 [ 1317.608883][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9b361598 [ 1317.608893][ C0] RBP: 0000000000000006 R08: 0000000000000000 R09: fffffbfff366c2b3 [ 1317.608904][ C0] R10: ffffffff9b36159b R11: 0000000000000001 R12: 0000000000000002 [ 1317.608914][ C0] R13: ffff888057a1b300 R14: dffffc0000000000 R15: 1ffff92000000fb0 [ 1317.608926][ C0] FS: 00007f511a42a6c0(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 1317.608943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1317.608954][ C0] CR2: 0000200000000240 CR3: 00000000846e9000 CR4: 00000000003526f0 [ 1317.608965][ C0] Call Trace: [ 1317.608972][ C0] [ 1317.608979][ C0] debug_object_activate+0x331/0x490 [ 1317.609005][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1317.609026][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1317.609054][ C0] enqueue_hrtimer+0x75/0x2f0 [ 1317.609080][ C0] __hrtimer_run_queues+0x73d/0xa00 [ 1317.609110][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1317.609142][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1317.609167][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1317.609190][ C0] [ 1317.609195][ C0] [ 1317.609201][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1317.609221][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1317.609243][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 66 3d 58 f6 48 89 df e8 3e 8d 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 59 48 f6 65 8b 05 3e 9d 7d 08 85 c0 74 16 5b [ 1317.609259][ C0] RSP: 0018:ffffc90004a87c88 EFLAGS: 00000246 [ 1317.609272][ C0] RAX: 0000000000000002 RBX: ffff8880b84284c0 RCX: 0000000000000080 [ 1317.609283][ C0] RDX: 0000000000000000 RSI: ffffffff8df0f560 RDI: ffffffff8c1c4480 [ 1317.609294][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 1317.609305][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: fffffbfff21ae1aa [ 1317.609315][ C0] R13: dffffc0000000000 R14: fcf343dd9f50dadb R15: 0000000000000002 [ 1317.609334][ C0] clock_was_set+0x5d9/0x870 [ 1317.609363][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 1317.609388][ C0] ? rcu_is_watching+0x12/0xc0 [ 1317.609414][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1317.609436][ C0] do_settimeofday64+0x330/0x4d0 [ 1317.609456][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 1317.609474][ C0] ? security_capable+0x80/0x260 [ 1317.609494][ C0] ? uhid_dev_create+0x442/0x530 [ 1317.609521][ C0] ? capable+0xd3/0xf0 [ 1317.609545][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 1317.609567][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 1317.609594][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1317.609627][ C0] ? rcu_is_watching+0x12/0xc0 [ 1317.609653][ C0] do_syscall_64+0x115/0x870 [ 1317.609676][ C0] ? clear_bhb_loop+0x40/0x90 [ 1317.609696][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.609713][ C0] RIP: 0033:0x7f511959ce59 [ 1317.609728][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.609743][ C0] RSP: 002b:00007f511a42a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1317.609758][ C0] RAX: ffffffffffffffda RBX: 00007f5119815fa0 RCX: 00007f511959ce59 [ 1317.609769][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 1317.609779][ C0] RBP: 00007f5119632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1317.609789][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.609800][ C0] R13: 00007f5119816038 R14: 00007f5119815fa0 R15: 00007ffd2ec8b9b8 [ 1317.609818][ C0]