last executing test programs: 1m51.401765001s ago: executing program 3 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x1c, r7, 0x1, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x11) write$cgroup_int(r4, &(0x7f0000000100)=0x8000000000000000, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}}, 0x40) 1m50.120232526s ago: executing program 3 (id=55): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000638000018001280080001007369740c000280ff0100000000000008000a0000", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)='c', 0x1}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000001c0)) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000b00)={r10, r9}) setsockopt$sock_attach_bpf(r10, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1m47.584663086s ago: executing program 3 (id=60): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) 1m40.0003667s ago: executing program 3 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0xfcd8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r2, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mknodat(0xffffffffffffffff, 0x0, 0x4296, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x7b6, 0xd4, 0x2, 0x3fe}, {0x315, 0xff, 0x5f, 0x40}]}) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf250300000030000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="14000400200100"/18], 0x44}}, 0x84) 1m37.709997707s ago: executing program 3 (id=70): socket$inet6(0xa, 0x80001, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000140)={0x400, 0x6}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) 1m36.490308257s ago: executing program 3 (id=73): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/kmsg\x00', 0x0, 0x0) read(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194) shutdown(r2, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000003c0)={&(0x7f0000000340)=""/80, 0x50, 0x3, 0x2}) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 1m21.212671367s ago: executing program 32 (id=73): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/kmsg\x00', 0x0, 0x0) read(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194) shutdown(r2, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000003c0)={&(0x7f0000000340)=""/80, 0x50, 0x3, 0x2}) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 47.428405166s ago: executing program 0 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x40000003, 0x6}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x40000003, 0x92f, 0x65584d4d, 0x8000}, {0x40000003, 0x1, 0x8, 0x4}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) set_mempolicy(0x8000, &(0x7f0000000040)=0x40ffd, 0x5) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x80084, 0x9, 0x76a, 0x1c, "00ef02ffffe40000000000010100"}) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 44.296656129s ago: executing program 0 (id=145): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000300)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000000206010200000000000000000200000314000780080008400000003708000640000008000e0003006269746d61703a6970000000050005000a00000005000400040000000900020073797a310000000005000100070000000d0003006c6973743a73657400000000"], 0x74}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r5, 0x0, 0x0) 41.494417542s ago: executing program 0 (id=149): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0x2002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x0, 0x5, 0x2400}], 0x18) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x2, 0x3, 0xfd5}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 40.261401567s ago: executing program 0 (id=152): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x20000000000009, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r1, &(0x7f00000010c0)=""/4096, 0x1000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 37.454980171s ago: executing program 0 (id=155): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000140)='./file0\x00', 0x4a141, 0xb8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x4804) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) 35.60154529s ago: executing program 0 (id=157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa0f, 0xa46}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x34, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 20.344757383s ago: executing program 33 (id=157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa0f, 0xa46}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x34, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 13.728164859s ago: executing program 5 (id=186): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setrlimit(0x0, &(0x7f0000000200)={0xb0, 0x2}) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) openat$hwrng(0xffffffffffffff9c, 0x0, 0xd01, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000604}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5ac1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc097}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfdb}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000004) r4 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) acct(&(0x7f00000000c0)='./file1\x00') syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 12.656870396s ago: executing program 4 (id=187): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_bond\x00', 0x2}) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0) mq_getsetattr(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) getsockname(r3, 0x0, &(0x7f0000000440)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 12.540786776s ago: executing program 5 (id=188): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="1c0000001a0001000000000400"/28], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x1000}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="280c00001a000100000000000000000002dc4a"], 0xc28}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0x42031, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x88) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x40000a, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) 10.106615159s ago: executing program 5 (id=191): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0xffffffffffdffffe}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r7, &(0x7f00000001c0)=[{0x84, 0xfe, 0x4, 0x4, @tick, {0x4}, {0xe}, @raw32}], 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) 9.879718115s ago: executing program 2 (id=192): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x20, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) 9.739076022s ago: executing program 1 (id=193): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, &(0x7f0000000f00), 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r1, &(0x7f0000000800)='AAAA', 0x4) socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r3, 0x400454cc, 0x8) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 8.29388895s ago: executing program 2 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x100, 0x3, {{0x7, 0x4, 0x1, 0x18, 0x1c, 0x67, 0x0, 0xa, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@lsrr={0x83, 0x3, 0xea}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) write(r1, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8, 0x8, 0x80000001, 0xf599, 0x1000, 0x80002, 0x1000}, 0x1c) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000380)='big_key\x00', 0x0, &(0x7f00000003c0)='\x00', 0x1, 0xfffffffffffffffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x180}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = getpid() process_vm_readv(r5, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NFT_BATCH(r3, 0x0, 0x40880) close(0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 8.168609544s ago: executing program 4 (id=195): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x2000008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_on}]}) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) shutdown(r4, 0x1) 7.958553612s ago: executing program 1 (id=196): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="180900000000000000bd7002fadbdf25010000000400ae809a0339004da02a61ac232c305b558598d452f7e5d8962722808e5fda393f1a896de81d97f1dba8f4dd707ef517cf19e4d7c0f9ebfbcb82664adbaf2fe0c8492e1f37f5574154700a24a52ba82ec4d650290bd12091b00cc65ac48a8cc7fc99dd275870825993f225e5dfdbf4b1c51a0a6ca9d19b468d84f680b671748edea436f09632bd1ab9bb211e1bb3e6d6e235592bc0056407d48324a3953aba117247ba2890c4ffa3029abee10b9bde38097289cd4b58bc232b52208c4c8cf6c9bab494ca1e229e61f46009d4f5643d50fe6b"], 0x18}}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64$ublk_ch(0xffffffffffffffff, &(0x7f0000001f80)=@buf_max_buf, 0x1000, 0xa) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe}) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 6.613144031s ago: executing program 2 (id=197): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x58) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 6.594710797s ago: executing program 4 (id=198): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="0100000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.562604353s ago: executing program 5 (id=199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000003b00)={r4, 0x1, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611970000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a37", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80), 0xc) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) 4.443510586s ago: executing program 2 (id=200): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000400)={0x1, 0x0, [{0xd, 0xed, 0x4, 0x401, 0xfffffff9, 0x9, 0x7}]}) sendmsg$key(0xffffffffffffffff, 0x0, 0x24040001) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) 4.442857079s ago: executing program 4 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xa1, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000400)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000071, 0x0, 0x80000006}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000300)={0x2, [[0x9ef8, 0xf1, 0x0, 0x1, 0xfffffffc, 0x0, 0xe, 0x10], [0x0, 0x4, 0x0, 0x0, 0x20000000, 0x4, 0xffffffff], [0x5, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf7}, {0x0, 0xfffffffd}, {0xffffdfff}, {0x4, 0x5, 0x0, 0x1}, {0x7b, 0xfffffffe}, {}, {0xffffffff, 0xa}, {0xcea7e06}, {0x0, 0xffff}, {0x2, 0x10000000}, {0x9, 0xd78}, {0xfffffff8, 0x2}], '\x00', 0x4, 0x0, 0x0, 0xf8}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000140)=[{0x1, 0x3, {0x2}, {0x1, 0xff, 0x2}, 0xff, 0x8ba7f48ebc57eea8}], 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 4.335940204s ago: executing program 1 (id=202): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 2.277862093s ago: executing program 1 (id=203): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r3, &(0x7f0000001100)="0200"/128, 0x80) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2.208401136s ago: executing program 5 (id=204): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0xff) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x6, 0x7fffffffffffffff}) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setresgid(0xee00, 0xee01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) recvfrom(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x4000, 0x35ce9dbc6723c08f, &(0x7f0000000080)) sendmsg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$kcm(r5, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=ANY=[], 0x2560}, 0x20000880) 1.576373669s ago: executing program 5 (id=205): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x74}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8cd", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) 1.478776937s ago: executing program 4 (id=206): ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xac, 0x2, {0x2, @sliced={0x83d, [0x5, 0x4, 0x200, 0x5, 0x2000, 0x9, 0x100, 0x1, 0x5, 0x9, 0xfff5, 0x1, 0x1, 0x1, 0x3, 0x4, 0x7fff, 0xd6c8, 0x6, 0x4, 0x1, 0xb, 0x6, 0x9, 0x1ff, 0xff, 0x6e, 0x9, 0x5, 0x8, 0x4, 0xfa3c, 0x3, 0xd, 0x101, 0x3, 0x8000, 0x8, 0xd2b, 0x5, 0xd, 0x8, 0x6, 0x2, 0x0, 0x1, 0x9, 0xc], 0x10}}, 0x7}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffc0000, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x9, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x100000000008000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000280)={0x0, r3, 0x7, 0x8, 0x3ff, 0xfffffffffffffff8}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x40, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x25}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x20008014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0x8081, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='\xaa#\x00', &(0x7f0000000240)='+!\x00', 0x0) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f00000002c0)={0x0}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x2, @sdr={0x34343452, 0x4}}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.460655497s ago: executing program 2 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket(0x10, 0x803, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) socket(0x23, 0x80805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24622, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000000)=""/83) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0xc840) 1.187008953s ago: executing program 1 (id=208): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 892.260232ms ago: executing program 4 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x1100, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100736977"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 855.149901ms ago: executing program 1 (id=210): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002b0009082dbd7000fedbdf25050000"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x8, @loopback}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x400}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x6}], 0x74) sendto$inet6(r3, &(0x7f0000000100)="b8", 0x1, 0x2004c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, 0x0) r6 = fsmount(r4, 0x0, 0x94) read$FUSE(r6, &(0x7f00000006c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000062c0)={0x2020}, 0x202c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) 0s ago: executing program 2 (id=211): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x23, 0x80805, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24622, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff02000000b7080000000016007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040100f0ffffffb702000008000000182300003e9f", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x4) listen(r4, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000001580)='/dev/fuse\x00') ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) kernel console output (not intermixed with test programs): [ 54.591518][ T29] audit: type=1400 audit(1785623056.751:111): avc: denied { write } for pid=5459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.645181][ T29] audit: type=1400 audit(1785623056.801:112): avc: denied { write } for pid=5470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.804901][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 56.804916][ T29] audit: type=1400 audit(1785623058.961:125): avc: denied { write } for pid=5560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.858020][ T29] audit: type=1400 audit(1785623059.011:126): avc: denied { write } for pid=5571 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.203061][ T29] audit: type=1400 audit(1785623059.361:127): avc: denied { write } for pid=5575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.260599][ T29] audit: type=1400 audit(1785623059.421:128): avc: denied { write } for pid=5586 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 61.773613][ T29] audit: type=1400 audit(1785623063.931:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.798047][ T29] audit: type=1400 audit(1785623063.951:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.800969][ T5594] cgroup: Unknown subsys name 'net' [ 61.827029][ T29] audit: type=1400 audit(1785623063.981:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.952236][ T5594] cgroup: Unknown subsys name 'cpuset' [ 61.960098][ T5594] cgroup: Unknown subsys name 'rlimit' [ 62.078120][ T29] audit: type=1400 audit(1785623064.231:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.111362][ T29] audit: type=1400 audit(1785623064.231:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.133541][ T29] audit: type=1400 audit(1785623064.231:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 62.163320][ T29] audit: type=1400 audit(1785623064.231:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.183804][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 62.192539][ T29] audit: type=1400 audit(1785623064.231:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.218259][ T29] audit: type=1400 audit(1785623064.231:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.241639][ T29] audit: type=1400 audit(1785623064.341:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.267619][ T29] audit: type=1400 audit(1785623064.341:139): avc: denied { write } for pid=5596 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.293416][ T29] audit: type=1400 audit(1785623064.351:140): avc: denied { read } for pid=5594 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.194478][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.851126][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 66.851143][ T29] audit: type=1400 audit(1785623069.001:146): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="socket:[5348]" dev="sockfs" ino=5348 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.890221][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.899056][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.909966][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.916383][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.917770][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.925659][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.932146][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.946127][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.952940][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.953538][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.961258][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.975107][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.976566][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.991242][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.993721][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.005412][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.005762][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.019145][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.021123][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.026927][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.035131][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.042664][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.055705][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.064512][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.072307][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.080352][ T29] audit: type=1400 audit(1785623069.221:147): avc: denied { read } for pid=5611 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.123777][ T29] audit: type=1400 audit(1785623069.231:148): avc: denied { open } for pid=5611 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.169842][ T29] audit: type=1400 audit(1785623069.231:149): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 67.192059][ T29] audit: type=1400 audit(1785623069.241:150): avc: denied { module_request } for pid=5611 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 67.222115][ T29] audit: type=1400 audit(1785623069.261:151): avc: denied { sys_module } for pid=5611 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.311352][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.318946][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.328065][ T5611] bridge_slave_0: entered allmulticast mode [ 68.334928][ T5611] bridge_slave_0: entered promiscuous mode [ 68.357167][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.364332][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.371493][ T5611] bridge_slave_1: entered allmulticast mode [ 68.378142][ T5611] bridge_slave_1: entered promiscuous mode [ 68.455044][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.485280][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.505158][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.512415][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.520368][ T5617] bridge_slave_0: entered allmulticast mode [ 68.527015][ T5617] bridge_slave_0: entered promiscuous mode [ 68.544182][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.551352][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.558433][ T5607] bridge_slave_0: entered allmulticast mode [ 68.565285][ T5607] bridge_slave_0: entered promiscuous mode [ 68.575779][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.583459][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.590887][ T5617] bridge_slave_1: entered allmulticast mode [ 68.597519][ T5617] bridge_slave_1: entered promiscuous mode [ 68.614143][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.621288][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.628359][ T5607] bridge_slave_1: entered allmulticast mode [ 68.635166][ T5607] bridge_slave_1: entered promiscuous mode [ 68.667030][ T5611] team0: Port device team_slave_0 added [ 68.678641][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.685899][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.693052][ T5608] bridge_slave_0: entered allmulticast mode [ 68.699955][ T5608] bridge_slave_0: entered promiscuous mode [ 68.720076][ T5611] team0: Port device team_slave_1 added [ 68.732273][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.739394][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.746611][ T5608] bridge_slave_1: entered allmulticast mode [ 68.753338][ T5608] bridge_slave_1: entered promiscuous mode [ 68.761981][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.771197][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.778272][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.785533][ T5606] bridge_slave_0: entered allmulticast mode [ 68.792495][ T5606] bridge_slave_0: entered promiscuous mode [ 68.806820][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.824065][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.833479][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.840873][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.847989][ T5606] bridge_slave_1: entered allmulticast mode [ 68.854815][ T5606] bridge_slave_1: entered promiscuous mode [ 68.869479][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.896907][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.904029][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.930057][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.949311][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.972293][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.979346][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.005465][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.024459][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.035400][ T5617] team0: Port device team_slave_0 added [ 69.042970][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.062216][ T5607] team0: Port device team_slave_0 added [ 69.075872][ T5617] team0: Port device team_slave_1 added [ 69.082244][ T5624] Bluetooth: hci3: command tx timeout [ 69.089365][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.100687][ T5607] team0: Port device team_slave_1 added [ 69.139054][ T5608] team0: Port device team_slave_0 added [ 69.159395][ T5606] team0: Port device team_slave_0 added [ 69.160201][ T5624] Bluetooth: hci1: command tx timeout [ 69.160295][ T5624] Bluetooth: hci4: command tx timeout [ 69.160366][ T5624] Bluetooth: hci0: command tx timeout [ 69.166209][ T4926] Bluetooth: hci2: command tx timeout [ 69.168862][ T5606] team0: Port device team_slave_1 added [ 69.201173][ T5608] team0: Port device team_slave_1 added [ 69.207212][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.214269][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.243180][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.267473][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.274513][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.300428][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.319225][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.326267][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.352211][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.367116][ T5611] hsr_slave_0: entered promiscuous mode [ 69.373382][ T5611] hsr_slave_1: entered promiscuous mode [ 69.385835][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.392894][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.419138][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.442682][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.449673][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.475544][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.487489][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.494471][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.520428][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.531677][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.538670][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.564624][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.587912][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.594899][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.620898][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.670289][ T5617] hsr_slave_0: entered promiscuous mode [ 69.676389][ T5617] hsr_slave_1: entered promiscuous mode [ 69.682638][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 69.688393][ T5617] Cannot create hsr debugfs directory [ 69.723335][ T5608] hsr_slave_0: entered promiscuous mode [ 69.729940][ T5608] hsr_slave_1: entered promiscuous mode [ 69.735796][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 69.741542][ T5608] Cannot create hsr debugfs directory [ 69.757116][ T5607] hsr_slave_0: entered promiscuous mode [ 69.763161][ T5607] hsr_slave_1: entered promiscuous mode [ 69.769061][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 69.775014][ T5607] Cannot create hsr debugfs directory [ 69.804319][ T5606] hsr_slave_0: entered promiscuous mode [ 69.810505][ T5606] hsr_slave_1: entered promiscuous mode [ 69.816355][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 69.822107][ T5606] Cannot create hsr debugfs directory [ 70.154402][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.164868][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.172979][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.182222][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.190206][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.199263][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.207108][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.215403][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.267764][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.277660][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.292585][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.302130][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.310308][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.318721][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.326857][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.335049][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.402718][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.411917][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.429899][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.438618][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.447254][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.455789][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.473499][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.482681][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.538571][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.564545][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.573691][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.581534][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.590968][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.598554][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.609304][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.617039][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.625860][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.650675][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.684843][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.692259][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.701632][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.708689][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.776876][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.787111][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.795747][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.804980][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.813485][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.822486][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.838430][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.848995][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.858929][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.909004][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.921782][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.949642][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.956730][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.975906][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.983000][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.002869][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.005766][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.011391][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.047086][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.063528][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.070678][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.092834][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.099991][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.135543][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.153224][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.160345][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.171334][ T5624] Bluetooth: hci3: command tx timeout [ 71.185614][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.192704][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.239975][ T5621] Bluetooth: hci2: command tx timeout [ 71.240026][ T4926] Bluetooth: hci4: command tx timeout [ 71.245727][ T5610] Bluetooth: hci1: command tx timeout [ 71.252673][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.257691][ T5624] Bluetooth: hci0: command tx timeout [ 71.323932][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.359194][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.366366][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.388363][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.395532][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.614284][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.742971][ T5611] veth0_vlan: entered promiscuous mode [ 71.788247][ T5611] veth1_vlan: entered promiscuous mode [ 71.914743][ T5611] veth0_macvtap: entered promiscuous mode [ 71.956914][ T5611] veth1_macvtap: entered promiscuous mode [ 71.994769][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.045626][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.101474][ T198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.114329][ T198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.182901][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.282164][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.307555][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.335730][ T1560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.337858][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.347842][ T1560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.380439][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.391824][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.434503][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.448799][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.461256][ T5617] veth0_vlan: entered promiscuous mode [ 72.488473][ T29] audit: type=1400 audit(1785623074.641:152): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.TNMTJa/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.533694][ T29] audit: type=1400 audit(1785623074.641:153): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.537142][ T5617] veth1_vlan: entered promiscuous mode [ 72.572600][ T29] audit: type=1400 audit(1785623074.651:154): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.TNMTJa/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.601848][ T5608] veth0_vlan: entered promiscuous mode [ 72.618074][ T5608] veth1_vlan: entered promiscuous mode [ 72.651171][ T29] audit: type=1400 audit(1785623074.651:155): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.653915][ T5606] veth0_vlan: entered promiscuous mode [ 72.691261][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.699555][ T29] audit: type=1400 audit(1785623074.651:156): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.TNMTJa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.715591][ T5617] veth0_macvtap: entered promiscuous mode [ 72.742341][ T29] audit: type=1400 audit(1785623074.651:157): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.TNMTJa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.757819][ T5608] veth0_macvtap: entered promiscuous mode [ 72.772134][ T29] audit: type=1400 audit(1785623074.661:158): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.783415][ T5608] veth1_macvtap: entered promiscuous mode [ 72.804338][ T29] audit: type=1400 audit(1785623074.671:159): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.829643][ T29] audit: type=1400 audit(1785623074.671:160): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="gadgetfs" ino=6866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.833135][ T5617] veth1_macvtap: entered promiscuous mode [ 72.852897][ T29] audit: type=1400 audit(1785623074.681:161): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.902474][ T5606] veth1_vlan: entered promiscuous mode [ 72.922027][ T5607] veth0_vlan: entered promiscuous mode [ 72.943267][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.964301][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.026262][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.185119][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.240384][ T5624] Bluetooth: hci3: command tx timeout [ 73.319616][ T5610] Bluetooth: hci1: command tx timeout [ 73.325521][ T5621] Bluetooth: hci2: command tx timeout [ 73.325564][ T4926] Bluetooth: hci4: command tx timeout [ 73.331398][ T5624] Bluetooth: hci0: command tx timeout [ 73.508358][ T5607] veth1_vlan: entered promiscuous mode [ 73.532229][ T5606] veth0_macvtap: entered promiscuous mode [ 73.580027][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819755][ T1560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845491][ T5606] veth1_macvtap: entered promiscuous mode [ 73.870175][ T1560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.955342][ T1560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.063474][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.077343][ T198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.085298][ T198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.103412][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141198][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.174860][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.184814][ T365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.197580][ T1560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.579110][ T1560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.591911][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.629725][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.651985][ T5607] veth0_macvtap: entered promiscuous mode [ 74.659657][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.721247][ T5607] veth1_macvtap: entered promiscuous mode [ 74.750821][ T5813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.769189][ T5813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.801888][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.155152][ T5821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 75.775583][ T4926] Bluetooth: hci3: command tx timeout [ 75.783250][ T4926] Bluetooth: hci4: command tx timeout [ 75.788936][ T4926] Bluetooth: hci0: command tx timeout [ 75.794379][ T4926] Bluetooth: hci1: command tx timeout [ 75.800006][ T4926] Bluetooth: hci2: command tx timeout [ 75.874859][ T365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.904666][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.954690][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.970037][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.003611][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.025188][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.039160][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.063529][ T5826] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 77.169389][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.217852][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.507035][ T365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.591453][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.657545][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.741888][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.599249][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 78.599270][ T29] audit: type=1400 audit(1785623080.601:187): avc: denied { create } for pid=5833 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.016982][ T5839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 79.020387][ T29] audit: type=1400 audit(1785623080.731:188): avc: denied { create } for pid=5833 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.215801][ T29] audit: type=1400 audit(1785623081.121:189): avc: denied { map_create } for pid=5837 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.217514][ T1560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.234990][ T29] audit: type=1400 audit(1785623081.171:190): avc: denied { create } for pid=5833 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.347664][ T1560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.348999][ T29] audit: type=1400 audit(1785623081.171:191): avc: denied { write } for pid=5833 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.418749][ T29] audit: type=1400 audit(1785623081.171:192): avc: denied { nlmsg_read } for pid=5833 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.563057][ T29] audit: type=1400 audit(1785623081.211:193): avc: denied { write } for pid=5833 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.624520][ T29] audit: type=1400 audit(1785623081.221:194): avc: denied { setopt } for pid=5833 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.641973][ T5813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.654480][ T5813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.797958][ T29] audit: type=1400 audit(1785623081.221:195): avc: denied { perfmon } for pid=5837 comm="syz.0.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.947458][ T29] audit: type=1400 audit(1785623081.221:196): avc: denied { bind } for pid=5833 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.600836][ T5857] Zero length message leads to an empty skb [ 83.747231][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 84.340365][ T29] audit: type=1400 audit(1785623085.881:217): avc: denied { create } for pid=5892 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.589494][ T29] audit: type=1400 audit(1785623086.011:218): avc: denied { mounton } for pid=5894 comm="syz.2.13" path="/3/proc" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.657714][ T29] audit: type=1400 audit(1785623086.021:219): avc: denied { create } for pid=5894 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.741956][ T29] audit: type=1400 audit(1785623086.031:220): avc: denied { setopt } for pid=5894 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.792622][ T29] audit: type=1400 audit(1785623086.081:221): avc: denied { map_read map_write } for pid=5894 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.834038][ T5904] Bluetooth: MGMT ver 1.23 [ 84.846806][ T29] audit: type=1400 audit(1785623086.141:222): avc: denied { write } for pid=5894 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.901974][ T5911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 84.912645][ T29] audit: type=1400 audit(1785623086.541:223): avc: denied { prog_run } for pid=5894 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.036711][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 85.077371][ T29] audit: type=1400 audit(1785623086.701:224): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.106748][ T29] audit: type=1400 audit(1785623086.741:225): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.153380][ T29] audit: type=1400 audit(1785623086.891:226): avc: denied { write } for pid=5905 comm="syz.3.16" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.177117][ T5921] base or size exceeds the MTRR width [ 86.579130][ T1220] cfg80211: failed to load regulatory.db [ 88.450496][ T5944] xt_TPROXY: Can be used only with -p tcp or -p udp [ 88.616531][ T5946] gretap0: entered promiscuous mode [ 88.908234][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 88.908249][ T29] audit: type=1400 audit(1785623090.691:252): avc: denied { mount } for pid=5940 comm="syz.2.23" name="/" dev="rpc_pipefs" ino=9507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 89.253693][ T29] audit: type=1400 audit(1785623090.761:253): avc: denied { read write } for pid=5940 comm="syz.2.23" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 89.278048][ T29] audit: type=1400 audit(1785623090.761:254): avc: denied { open } for pid=5940 comm="syz.2.23" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 89.337319][ T29] audit: type=1400 audit(1785623091.411:255): avc: denied { mount } for pid=5948 comm="syz.3.25" name="/" dev="configfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 89.403056][ T29] audit: type=1400 audit(1785623091.411:256): avc: denied { write } for pid=5948 comm="syz.3.25" name="core" dev="configfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.463331][ T29] audit: type=1400 audit(1785623091.411:257): avc: denied { add_name } for pid=5948 comm="syz.3.25" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.487690][ T29] audit: type=1400 audit(1785623091.441:258): avc: denied { create } for pid=5948 comm="syz.3.25" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 89.508682][ T29] audit: type=1400 audit(1785623091.471:259): avc: denied { write } for pid=5948 comm="syz.3.25" name="rd_mcp_0" dev="configfs" ino=9532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.532560][ T29] audit: type=1400 audit(1785623091.491:260): avc: denied { create } for pid=5951 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.553106][ T29] audit: type=1400 audit(1785623091.641:261): avc: denied { write } for pid=5948 comm="syz.3.25" name="rd_mcp_0" dev="configfs" ino=9532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.343201][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 90.624448][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 90.681881][ T5968] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 90.718731][ T5970] Bluetooth: MGMT ver 1.23 [ 90.791304][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 90.846128][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 90.877391][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 90.908236][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 90.952132][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 90.993946][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 91.027513][ T5965] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 91.076920][ T5965] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=34064 sclass=netlink_xfrm_socket pid=5965 comm=syz.0.30 [ 91.107669][ T5965] file system registered [ 91.219852][ T5735] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.286494][ T5980] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 91.286494][ T5980] Please contact the netfilter-devel mailing list or update your nftables rules. [ 91.373203][ T5981] Cannot find set identified by id 0 to match [ 91.989467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.919258][ T5624] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 92.934779][ T5624] Bluetooth: hci2: command 0x0401 tx timeout [ 93.914247][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 93.914263][ T29] audit: type=1400 audit(1785623095.581:282): avc: denied { write } for pid=5985 comm="syz.3.35" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.066551][ T5735] usb 2-1: device descriptor read/all, error -71 [ 94.331119][ T5995] tmpfs: Unknown parameter 'nr_ino' [ 95.029607][ T29] audit: type=1400 audit(1785623096.681:283): avc: denied { create } for pid=5992 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.321719][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 95.427650][ T29] audit: type=1400 audit(1785623096.691:284): avc: denied { bind } for pid=5992 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.684191][ T29] audit: type=1400 audit(1785623096.691:285): avc: denied { accept } for pid=5992 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.861843][ T29] audit: type=1400 audit(1785623096.701:286): avc: denied { read } for pid=5992 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.157563][ T29] audit: type=1400 audit(1785623096.701:287): avc: denied { write } for pid=5992 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.358097][ T29] audit: type=1400 audit(1785623097.941:288): avc: denied { ioctl } for pid=6000 comm="syz.4.40" path="socket:[9751]" dev="sockfs" ino=9751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.483956][ T29] audit: type=1400 audit(1785623097.941:289): avc: denied { append } for pid=6000 comm="syz.4.40" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.565098][ T29] audit: type=1400 audit(1785623097.941:290): avc: denied { name_connect } for pid=6000 comm="syz.4.40" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.664508][ T29] audit: type=1400 audit(1785623098.821:291): avc: denied { read write } for pid=6007 comm="syz.2.42" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 97.352525][ T6019] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 98.104698][ T6022] udc dummy_udc.0: failed to start g1: -19 [ 98.111869][ T6022] UDC core: g1: couldn't find an available UDC or it's busy [ 98.161728][ T6019] smpboot: CPU 1 is now offline [ 98.429743][ T4990] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.317865][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 99.317875][ T29] audit: type=1400 audit(1785623101.471:312): avc: denied { write } for pid=6028 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.499573][ T4990] usb 3-1: Using ep0 maxpacket: 8 [ 100.200487][ T6045] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.248399][ T4990] usb 3-1: device descriptor read/all, error -71 [ 100.256910][ T29] audit: type=1400 audit(1785623101.531:313): avc: denied { create } for pid=6042 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.525532][ T29] audit: type=1400 audit(1785623102.511:314): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 100.585695][ T6050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.51'. [ 100.775161][ T29] audit: type=1400 audit(1785623102.721:315): avc: denied { setopt } for pid=6047 comm="syz.2.50" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.678443][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 101.698725][ T29] audit: type=1400 audit(1785623102.821:316): avc: denied { create } for pid=6049 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.763285][ T198] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.947002][ T29] audit: type=1400 audit(1785623102.831:317): avc: denied { setopt } for pid=6049 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.030314][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'. [ 102.159749][ T29] audit: type=1400 audit(1785623103.981:318): avc: denied { getopt } for pid=6049 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.324730][ T29] audit: type=1400 audit(1785623103.981:319): avc: denied { ioctl } for pid=6049 comm="syz.1.51" path="socket:[10125]" dev="sockfs" ino=10125 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.764128][ T6071] bridge2: entered promiscuous mode [ 104.423254][ T29] audit: type=1400 audit(1785623103.981:320): avc: denied { write } for pid=6049 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.506283][ T29] audit: type=1400 audit(1785623104.171:321): avc: denied { create } for pid=6063 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.973186][ T6091] bridge1: entered promiscuous mode [ 110.442878][ T29] audit: type=1400 audit(1785623104.221:322): avc: denied { name_bind } for pid=6064 comm="syz.2.54" src=599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 110.647082][ T29] audit: type=1400 audit(1785623104.311:323): avc: denied { write } for pid=6063 comm="syz.3.55" path="socket:[10141]" dev="sockfs" ino=10141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.930757][ T29] audit: type=1400 audit(1785623104.461:324): avc: denied { write } for pid=6063 comm="syz.3.55" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.562189][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.568907][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 111.854961][ T29] audit: type=1400 audit(1785623104.461:325): avc: denied { ioctl } for pid=6063 comm="syz.3.55" path="socket:[10161]" dev="sockfs" ino=10161 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.100050][ T29] audit: type=1400 audit(1785623106.751:326): avc: denied { create } for pid=6075 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.248327][ T6117] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 112.266938][ T29] audit: type=1400 audit(1785623106.751:327): avc: denied { connect } for pid=6075 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.813314][ T6122] bridge1: entered promiscuous mode [ 113.343215][ T29] audit: type=1326 audit(1785623106.761:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 114.742761][ T6126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.577828][ T29] audit: type=1326 audit(1785623106.761:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 115.762493][ T29] audit: type=1326 audit(1785623106.761:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 116.383017][ T6142] bridge1: entered promiscuous mode [ 117.832604][ T29] audit: type=1326 audit(1785623106.761:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 119.965782][ T29] audit: type=1326 audit(1785623106.761:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 121.598742][ T6153] infiniband syz2: set down [ 121.603415][ T6153] infiniband syz2: added ipvlan0 [ 121.633088][ T6153] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 121.634945][ T6153] infiniband syz2: Couldn't open port 1 [ 121.650026][ T6153] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 121.665180][ T6153] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 121.683494][ T6153] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 121.718738][ T6153] RDS/IB: syz2: added [ 121.723093][ T6153] smc: adding ib device syz2 with port count 1 [ 121.729328][ T6153] smc: ib device syz2 port 1 has no pnetid [ 122.271236][ T29] audit: type=1326 audit(1785623106.761:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 122.422155][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 122.833054][ T6163] bridge2: entered promiscuous mode [ 123.403731][ T6155] ceph: No mds server is up or the cluster is laggy [ 123.431006][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 124.436032][ T29] audit: type=1326 audit(1785623106.761:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 125.309318][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 125.338826][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 125.434948][ T29] audit: type=1326 audit(1785623106.761:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 125.477410][ T5902] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 125.673682][ T5902] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 126.353010][ T29] audit: type=1326 audit(1785623106.761:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bce15e84e code=0x7ffc0000 [ 126.405697][ T5902] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 126.471270][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 126.519145][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.542111][ T29] audit: type=1326 audit(1785623106.761:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 126.659178][ T5902] usb 2-1: can't set config #4, error -71 [ 127.398777][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 127.405033][ T5624] Bluetooth: hci5: command 0x1003 tx timeout [ 127.438559][ T5902] usb 2-1: USB disconnect, device number 4 [ 127.446025][ T29] audit: type=1326 audit(1785623106.761:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 127.573391][ T6179] xt_CT: No such helper "netbios-ns" [ 128.462773][ T6186] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.609731][ T29] audit: type=1326 audit(1785623106.761:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.0.57" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6bce19e019 code=0x7ffc0000 [ 129.303035][ T6193] bridge1: entered promiscuous mode [ 129.809493][ T29] audit: type=1400 audit(1785623107.761:340): avc: denied { unlink } for pid=6076 comm="syz.1.58" name="#1" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 130.931670][ T5902] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.748730][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.756707][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.814747][ T29] audit: type=1400 audit(1785623107.761:341): avc: denied { mount } for pid=6076 comm="syz.1.58" name="/" dev="overlay" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 133.765671][ T6207] syz.2.91 (6207): drop_caches: 2 [ 134.422419][ T29] audit: type=1400 audit(1785623108.651:342): avc: denied { append } for pid=6075 comm="syz.0.57" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.655921][ T29] audit: type=1400 audit(1785623109.321:343): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.714665][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.727523][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.734920][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.746118][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.755348][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.857023][ T29] audit: type=1326 audit(1785623112.651:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.1.61" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b3159e019 code=0x0 [ 135.082951][ T29] audit: type=1400 audit(1785623112.701:345): avc: denied { setopt } for pid=6094 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.273257][ T29] audit: type=1400 audit(1785623113.131:346): avc: denied { ioctl } for pid=6096 comm="syz.0.62" path="socket:[10248]" dev="sockfs" ino=10248 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.143799][ T29] audit: type=1400 audit(1785623116.701:347): avc: denied { write } for pid=6114 comm="syz.2.67" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.316002][ T29] audit: type=1400 audit(1785623116.701:348): avc: denied { open } for pid=6114 comm="syz.2.67" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.509983][ T29] audit: type=1400 audit(1785623117.821:349): avc: denied { write } for pid=6133 comm="syz.1.72" name="rd_mcp_0" dev="configfs" ino=9532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.702835][ T29] audit: type=1400 audit(1785623117.851:350): avc: denied { write } for pid=6133 comm="syz.1.72" name="rd_mcp_0" dev="configfs" ino=9532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.761133][ T6237] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.841341][ T5624] Bluetooth: hci5: command tx timeout [ 136.916696][ T29] audit: type=1400 audit(1785623117.891:351): avc: denied { map } for pid=6130 comm="syz.4.71" path="socket:[10455]" dev="sockfs" ino=10455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 137.227251][ T6240] xt_policy: output policy not valid in PREROUTING and INPUT [ 138.919942][ T5624] Bluetooth: hci5: command tx timeout [ 139.774061][ T5902] IPVS: starting estimator thread 0... [ 139.795857][ T6261] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 139.806450][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 139.806461][ T29] audit: type=1400 audit(1785623141.951:391): avc: denied { mount } for pid=6257 comm="syz.0.101" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 140.090542][ T6262] IPVS: using max 79 ests per chain, 189600 per kthread [ 140.961117][ T29] audit: type=1400 audit(1785623142.881:392): avc: denied { connect } for pid=6264 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.995475][ T6268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.004608][ T6268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.060695][ T5624] Bluetooth: hci5: command tx timeout [ 141.072819][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.102334][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.973166][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.002242][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.874190][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.892758][ T29] audit: type=1400 audit(1785623142.981:393): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 142.966547][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.981302][ T6281] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 143.020786][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.048983][ T29] audit: type=1400 audit(1785623143.041:394): avc: denied { append } for pid=6266 comm="syz.2.103" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 143.088902][ T5624] Bluetooth: hci5: command tx timeout [ 143.111189][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.131717][ T6281] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 143.192092][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.236970][ T29] audit: type=1400 audit(1785623143.851:395): avc: denied { mmap_zero } for pid=6271 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 143.577030][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.591655][ T6281] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 143.630723][ T6213] bridge_slave_0: entered allmulticast mode [ 143.669947][ T6213] bridge_slave_0: entered promiscuous mode [ 143.703946][ T29] audit: type=1400 audit(1785623145.381:396): avc: denied { append } for pid=6276 comm="syz.1.105" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 143.752309][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.822539][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.872368][ T6213] bridge_slave_1: entered allmulticast mode [ 143.901210][ T29] audit: type=1400 audit(1785623145.391:397): avc: denied { create } for pid=6276 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.926288][ T6213] bridge_slave_1: entered promiscuous mode [ 144.104187][ T29] audit: type=1400 audit(1785623145.431:398): avc: denied { bind } for pid=6276 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.133603][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.297029][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.639640][ T6300] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 145.105334][ T29] audit: type=1400 audit(1785623145.751:399): avc: denied { firmware_load } for pid=6276 comm="syz.1.105" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 145.633091][ T6304] bridge2: entered promiscuous mode [ 146.088644][ T4990] syz2: Port: 1 Link ACTIVE [ 147.111572][ T5902] net_ratelimit: 13 callbacks suppressed [ 147.111584][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.126877][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.416348][ T6213] team0: Port device team_slave_0 added [ 148.119479][ T29] audit: type=1400 audit(1785623146.111:400): avc: denied { create } for pid=6289 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.273062][ T6213] team0: Port device team_slave_1 added [ 149.099548][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.107953][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.155101][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.173653][ T6306] netlink: 'syz.4.113': attribute type 2 has an invalid length. [ 149.181599][ T6306] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 149.191665][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.205338][ T29] audit: type=1400 audit(1785623151.361:401): avc: denied { ioctl } for pid=6305 comm="syz.4.113" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.254297][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.300107][ T4990] libceph: connect (1)[c::]:6789 error -101 [ 149.328004][ T4990] libceph: mon0 (1)[c::]:6789 connect error [ 149.336434][ T6306] ceph: No mds server is up or the cluster is laggy [ 149.698446][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.835527][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.860080][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.853190][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.854081][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.881992][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.819195][ T6325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.838479][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.853300][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.958154][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.940558][ T29] audit: type=1400 audit(1785623156.091:402): avc: denied { remount } for pid=6337 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.976849][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.018664][ T6213] hsr_slave_0: entered promiscuous mode [ 154.055794][ T6213] hsr_slave_1: entered promiscuous mode [ 154.163306][ T6213] debugfs: 'hsr0' already exists in 'hsr' [ 154.839861][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.002994][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.014709][ T6213] Cannot create hsr debugfs directory [ 155.085333][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.094772][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.103091][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.121738][ T6344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.169191][ T29] audit: type=1400 audit(1785623157.321:403): avc: denied { mount } for pid=6347 comm="syz.4.121" name="/" dev="ramfs" ino=11553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 155.639634][ T29] audit: type=1400 audit(1785623157.361:404): avc: denied { watch watch_reads } for pid=6347 comm="syz.4.121" path="/" dev="ramfs" ino=11553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 157.356318][ T6355] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 157.364688][ T6355] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 157.373161][ T6355] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 157.393531][ T29] audit: type=1400 audit(1785623159.551:405): avc: denied { ioctl } for pid=6351 comm="syz.1.123" path="socket:[11597]" dev="sockfs" ino=11597 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.514560][ T29] audit: type=1400 audit(1785623159.621:406): avc: denied { mount } for pid=6353 comm="syz.2.124" name="/" dev="hugetlbfs" ino=11660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 157.817974][ T5624] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 157.826076][ T4926] Bluetooth: hci0: command 0xfc11 tx timeout [ 157.846854][ T6213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.014837][ T29] audit: type=1400 audit(1785623160.171:407): avc: denied { connect } for pid=6364 comm="syz.4.126" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.201479][ T5902] net_ratelimit: 8 callbacks suppressed [ 158.201491][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.923844][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.112629][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.233500][ T6213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.261410][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.274990][ T29] audit: type=1400 audit(1785623161.051:408): avc: denied { connect } for pid=6364 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.339887][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.171960][ T6213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.206711][ T29] audit: type=1400 audit(1785623162.351:409): avc: denied { create } for pid=6375 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 160.282305][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.292641][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.328843][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 160.362334][ T6213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.410162][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.828547][ T6377] process 'syz.4.129' launched '/dev/fd/3' with NULL argv: empty string added [ 160.838004][ T29] audit: type=1400 audit(1785623162.981:410): avc: denied { execute } for pid=6375 comm="syz.4.129" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.594945][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.606029][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.747638][ T29] audit: type=1400 audit(1785623163.561:411): avc: denied { setopt } for pid=6393 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.833954][ T6400] syzkaller0: entered promiscuous mode [ 161.852851][ T6402] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.876423][ T6400] syzkaller0: entered allmulticast mode [ 161.992364][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.003088][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.032352][ T29] audit: type=1400 audit(1785623163.731:412): avc: denied { write } for pid=6393 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.025556][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.037848][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.088496][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.552575][ T5902] net_ratelimit: 9 callbacks suppressed [ 163.552587][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.567174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.933865][ T29] audit: type=1400 audit(1785623163.781:413): avc: denied { execute_no_trans } for pid=6375 comm="syz.4.129" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.041614][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.049869][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.334981][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.756325][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.763434][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.737111][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.745728][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.756445][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.766890][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.725048][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.592671][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.657094][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.664237][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.714957][ T29] audit: type=1400 audit(1785623169.871:414): avc: denied { setopt } for pid=6433 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.947874][ T29] audit: type=1400 audit(1785623170.101:415): avc: denied { connect } for pid=6438 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 167.977320][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 168.009378][ T6441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.756323][ T5902] net_ratelimit: 22 callbacks suppressed [ 168.756336][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.770742][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.798794][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.920430][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.505330][ T29] audit: type=1400 audit(1785623171.641:416): avc: denied { read write } for pid=6443 comm="syz.4.147" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.801454][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.810554][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.818696][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.518058][ T6460] binder: 6459:6460 ioctl 4018620d 0 returned -22 [ 170.580886][ T29] audit: type=1400 audit(1785623171.641:417): avc: denied { open } for pid=6443 comm="syz.4.147" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.590156][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.598413][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.622323][ T29] audit: type=1400 audit(1785623171.701:418): avc: denied { write } for pid=6438 comm="syz.0.145" laddr=fe80::44e3:2cff:fea7:168b lport=910 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.799813][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.703824][ T29] audit: type=1400 audit(1785623172.391:419): avc: denied { write } for pid=6459 comm="syz.2.148" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.472567][ T6489] Device name cannot be null; rc = [-22] [ 174.564818][ T29] audit: type=1400 audit(1785623172.671:420): avc: denied { ioctl } for pid=6459 comm="syz.2.148" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.700296][ T5902] net_ratelimit: 5 callbacks suppressed [ 174.700308][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.714106][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.437371][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.671136][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.377062][ T5793] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 176.397224][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.405766][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.413970][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.590704][ T5793] usb 5-1: not running at top speed; connect to a high speed hub [ 176.648467][ T6514] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.664252][ T29] audit: type=1400 audit(1785623178.821:421): avc: denied { nlmsg_write } for pid=6510 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.697137][ T5793] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 176.729160][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.777294][ T5793] usb 5-1: Product: syz [ 176.801027][ T5793] usb 5-1: Manufacturer: syz [ 176.823171][ T5793] usb 5-1: SerialNumber: syz [ 177.401495][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.556323][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.620285][ T29] audit: type=1400 audit(1785623179.771:422): avc: denied { set_context_mgr } for pid=6520 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 177.640942][ T6522] binder: 6520:6522 ioctl 4018620d 0 returned -22 [ 177.879736][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.914820][ T6213] veth0_vlan: entered promiscuous mode [ 178.074690][ T29] audit: type=1400 audit(1785623180.231:423): avc: denied { connect } for pid=6525 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.117666][ T6213] veth1_vlan: entered promiscuous mode [ 178.168846][ T6213] veth0_macvtap: entered promiscuous mode [ 178.191837][ T6213] veth1_macvtap: entered promiscuous mode [ 178.233955][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.255365][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.578452][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.632455][ T5813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.651360][ T29] audit: type=1400 audit(1785623180.791:424): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.735372][ T5793] usb 5-1: can't set config #1, error -71 [ 178.786609][ T5813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.822481][ T5793] usb 5-1: USB disconnect, device number 2 [ 178.870321][ T5813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.953742][ T5875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.144165][ T5902] net_ratelimit: 4 callbacks suppressed [ 181.145124][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.319431][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.371576][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.395799][ T29] audit: type=1400 audit(1785623183.551:425): avc: denied { create } for pid=6533 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.510657][ T6531] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 181.576934][ T5871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.628254][ T5871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.703387][ T29] audit: type=1400 audit(1785623183.861:426): avc: denied { search } for pid=6545 comm="syz.2.164" name="/" dev="configfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.747030][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.782967][ T5871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.837210][ T5871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.888784][ T29] audit: type=1400 audit(1785623183.881:427): avc: denied { search } for pid=6545 comm="syz.2.164" name="dlm" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.066871][ T6557] macsec1: entered promiscuous mode [ 183.036483][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.046740][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.066312][ T6557] dummy0: entered promiscuous mode [ 183.679526][ T6561] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 184.038680][ T29] audit: type=1400 audit(1785623183.881:428): avc: denied { write search } for pid=6545 comm="syz.2.164" name="dlm" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.064750][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.408096][ T6564] ======================================================= [ 184.408096][ T6564] WARNING: The mand mount option has been deprecated and [ 184.408096][ T6564] and is ignored by this kernel. Remove the mand [ 184.408096][ T6564] option from the mount to silence this warning. [ 184.408096][ T6564] ======================================================= [ 185.024914][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.043034][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.055763][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.075328][ T6557] macsec1: entered allmulticast mode [ 185.097411][ T6557] dummy0: entered allmulticast mode [ 185.108965][ T6557] dummy0: left allmulticast mode [ 185.114323][ T29] audit: type=1400 audit(1785623183.881:429): avc: denied { add_name } for pid=6545 comm="syz.2.164" name="cluster1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.144761][ T5720] dummy0: left promiscuous mode [ 185.167171][ T6560] bridge3: entered promiscuous mode [ 185.191518][ T29] audit: type=1400 audit(1785623183.901:430): avc: denied { search } for pid=6545 comm="syz.2.164" name="/" dev="configfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.388870][ T29] audit: type=1400 audit(1785623183.901:431): avc: denied { search } for pid=6545 comm="syz.2.164" name="dlm" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.363399][ T5624] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.389993][ T5829] net_ratelimit: 1 callbacks suppressed [ 186.390005][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.407426][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.407441][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.419071][ T29] audit: type=1400 audit(1785623183.901:432): avc: denied { search } for pid=6545 comm="syz.2.164" name="cluster1" dev="configfs" ino=13048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.406210][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.414557][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.423268][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.433069][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.214000][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.227416][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.368047][ T6579] mmap: syz.4.169 (6579) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.382762][ T6579] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 189.464501][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.928888][ T29] audit: type=1400 audit(1785623183.901:433): avc: denied { search } for pid=6545 comm="syz.2.164" name="comms" dev="configfs" ino=13050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.773240][ T29] audit: type=1400 audit(1785623183.901:434): avc: denied { write search } for pid=6545 comm="syz.2.164" name="comms" dev="configfs" ino=13050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.602402][ T5712] net_ratelimit: 3 callbacks suppressed [ 191.602415][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.616201][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.628232][ T5625] Bluetooth: hci2: command 0x0401 tx timeout [ 191.634286][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 191.640303][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 191.721780][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.731140][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.743621][ T29] audit: type=1400 audit(1785623183.901:435): avc: denied { search } for pid=6545 comm="syz.2.164" name="/" dev="configfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.888165][ T29] audit: type=1400 audit(1785623183.901:436): avc: denied { search } for pid=6545 comm="syz.2.164" name="dlm" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.969793][ T1220] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 192.022277][ T29] audit: type=1400 audit(1785623183.901:437): avc: denied { search } for pid=6545 comm="syz.2.164" name="cluster1" dev="configfs" ino=13048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.096250][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.111409][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.119888][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.133952][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.141366][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.180855][ T1220] usb 6-1: Using ep0 maxpacket: 32 [ 192.210821][ T29] audit: type=1400 audit(1785623183.901:438): avc: denied { search } for pid=6545 comm="syz.2.164" name="comms" dev="configfs" ino=13050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.249187][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.298057][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.359600][ T1220] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.377779][ T29] audit: type=1400 audit(1785623183.901:439): avc: denied { search } for pid=6545 comm="syz.2.164" name="1" dev="configfs" ino=13069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.431699][ T1220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.530319][ T1220] usb 6-1: config 0 descriptor?? [ 192.551815][ T29] audit: type=1400 audit(1785623183.901:440): avc: denied { read } for pid=6545 comm="syz.2.164" name="local" dev="configfs" ino=13070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 192.584354][ T1220] hub 6-1:0.0: USB hub found [ 192.613139][ T6596] syz.4.177 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 192.728294][ T29] audit: type=1800 audit(1785623183.921:441): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.164" name="local" dev="configfs" ino=13070 res=0 errno=0 [ 192.768777][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.780949][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.128045][ T1220] hub 6-1:0.0: 1 port detected [ 193.866632][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.924013][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.935513][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.942315][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.950916][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.009604][ T29] audit: type=1400 audit(1785623183.941:442): avc: denied { search } for pid=6545 comm="syz.2.164" name="/" dev="configfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.102063][ T1220] hub 6-1:0.0: activate --> -90 [ 194.156744][ T29] audit: type=1400 audit(1785623183.941:443): avc: denied { search } for pid=6545 comm="syz.2.164" name="dlm" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 194.212178][ T5624] Bluetooth: hci0: command tx timeout [ 195.063837][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.168240][ T29] audit: type=1400 audit(1785623183.941:444): avc: denied { search } for pid=6545 comm="syz.2.164" name="cluster1" dev="configfs" ino=13048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.298417][ T29] audit: type=1400 audit(1785623183.941:445): avc: denied { search } for pid=6545 comm="syz.2.164" name="comms" dev="configfs" ino=13050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.368570][ T5902] usb 6-1: USB disconnect, device number 2 [ 195.374515][ T1220] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 195.497123][ T6625] overlayfs: overlapping lowerdir path [ 195.640815][ T29] audit: type=1400 audit(1785623183.941:446): avc: denied { search } for pid=6545 comm="syz.2.164" name="1" dev="configfs" ino=13069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.353120][ T5624] Bluetooth: hci0: command tx timeout [ 196.792475][ T6637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.182'. [ 196.850941][ T29] audit: type=1400 audit(1785623183.951:447): avc: denied { search } for pid=6545 comm="syz.2.164" name="/" dev="configfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.999638][ T5902] net_ratelimit: 5 callbacks suppressed [ 196.999648][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.017275][ T29] audit: type=1400 audit(1785623183.951:448): avc: denied { search } for pid=6545 comm="syz.2.164" name="dlm" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.212506][ T29] audit: type=1400 audit(1785623183.951:449): avc: denied { search } for pid=6545 comm="syz.2.164" name="cluster1" dev="configfs" ino=13048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.403981][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.412326][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.420523][ T5902] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 198.145819][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.340628][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.372018][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.401571][ T5902] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 198.443391][ T5624] Bluetooth: hci0: command tx timeout [ 198.636238][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.644631][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.000081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.204077][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.253936][ T6652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.285421][ T5902] usb 3-1: config 0 descriptor?? [ 199.346118][ T6652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.364170][ T5902] pwc: Askey VC010 type 2 USB webcam detected. [ 199.376204][ T6657] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 199.428330][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 199.428343][ T29] audit: type=1400 audit(1785623201.581:474): avc: denied { setopt } for pid=6645 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.516134][ T6663] ubi16: attaching mtd0 [ 199.563730][ T6663] ubi16: scanning is finished [ 199.569214][ T6590] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.603255][ T6663] ubi16: empty MTD device detected [ 199.612297][ T6666] netlink: 148 bytes leftover after parsing attributes in process `syz.5.188'. [ 199.623038][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.650786][ T6590] bridge_slave_0: entered allmulticast mode [ 199.674167][ T6590] bridge_slave_0: entered promiscuous mode [ 199.687294][ T6590] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.697351][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.818051][ T29] audit: type=1400 audit(1785623201.971:475): avc: denied { create } for pid=6664 comm="syz.5.188" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 200.789081][ T5624] Bluetooth: hci0: command tx timeout [ 200.809922][ T6590] bridge_slave_1: entered allmulticast mode [ 200.819536][ T6590] bridge_slave_1: entered promiscuous mode [ 200.830392][ T29] audit: type=1400 audit(1785623202.831:476): avc: denied { create } for pid=6669 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 200.933935][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 201.262483][ T6590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.272194][ T29] audit: type=1400 audit(1785623203.141:477): avc: denied { setopt } for pid=6641 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.303875][ T6590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.329526][ T29] audit: type=1400 audit(1785623203.191:478): avc: denied { execute } for pid=6664 comm="syz.5.188" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 201.390710][ T6590] team0: Port device team_slave_0 added [ 201.402665][ T6590] team0: Port device team_slave_1 added [ 201.408600][ T29] audit: type=1400 audit(1785623203.451:479): avc: denied { write } for pid=6664 comm="syz.5.188" name="file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 201.455297][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.471675][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.501817][ T29] audit: type=1400 audit(1785623203.451:480): avc: denied { open } for pid=6664 comm="syz.5.188" path="/6/file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 201.526087][ T29] audit: type=1400 audit(1785623203.451:481): avc: denied { ioctl } for pid=6664 comm="syz.5.188" path="/6/file0" dev="tmpfs" ino=52 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 201.550509][ T6590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.565507][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.572773][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.599068][ T6590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.638357][ T6590] hsr_slave_0: entered promiscuous mode [ 201.644793][ T6590] hsr_slave_1: entered promiscuous mode [ 201.651002][ T6590] debugfs: 'hsr0' already exists in 'hsr' [ 201.658475][ T6590] Cannot create hsr debugfs directory [ 201.811750][ T6590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.894390][ T6590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.938328][ T29] audit: type=1400 audit(1785623204.091:482): avc: denied { unlink } for pid=6213 comm="syz-executor" name="file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 202.036416][ T6590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.060936][ T6680] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.089082][ T6679] binder: 6677:6679 ioctl c0306201 0 returned -14 [ 202.122865][ T6590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.166659][ T5902] pwc: recv_control_msg error -71 req 02 val 2b00 [ 202.291812][ T6663] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 202.312685][ T5902] pwc: recv_control_msg error -71 req 02 val 2700 [ 202.327647][ T6590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.367788][ T6663] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 202.381276][ T5902] pwc: recv_control_msg error -71 req 02 val 2c00 [ 202.848213][ T6590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.064936][ T5793] net_ratelimit: 13 callbacks suppressed [ 203.064964][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.128156][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.266309][ T6590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.280665][ T5902] pwc: recv_control_msg error -71 req 04 val 1000 [ 203.291900][ T6663] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 203.323419][ T5902] pwc: recv_control_msg error -71 req 04 val 1300 [ 203.339242][ T6590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.349322][ T6663] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 203.382978][ T6688] gadgetfs: bound to dummy_udc driver [ 203.391213][ T5902] pwc: recv_control_msg error -71 req 04 val 1400 [ 203.410720][ T6663] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 203.428456][ T5902] pwc: recv_control_msg error -71 req 02 val 2000 [ 203.456837][ T6663] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 203.490527][ T5902] pwc: recv_control_msg error -71 req 02 val 2100 [ 203.540358][ T6663] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1314223744 [ 203.552333][ T5902] pwc: recv_control_msg error -71 req 04 val 1500 [ 203.572967][ T29] audit: type=1400 audit(1785623205.721:483): avc: denied { module_request } for pid=6683 comm="syz.2.192" kmod="syztnl2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 203.622407][ T6687] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 203.637201][ T5902] pwc: recv_control_msg error -71 req 02 val 2500 [ 203.657280][ T6663] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 203.684508][ T6688] openvswitch: netlink: Flow key attr not present in new flow. [ 203.692217][ T5829] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 203.718410][ T5902] pwc: recv_control_msg error -71 req 02 val 2400 [ 203.758834][ C0] gadgetfs: connected [ 203.764091][ T5829] gadgetfs: disconnected [ 203.791932][ T6681] ubi16: background thread "ubi_bgt16d" started, PID 6681 [ 203.804398][ T5902] pwc: recv_control_msg error -71 req 02 val 2600 [ 203.814993][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.859204][ T5902] pwc: recv_control_msg error -71 req 02 val 2900 [ 203.880880][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.891267][ T6699] gadgetfs: suspended from state 2 [ 203.910448][ T5829] usb 1-1: device descriptor read/all, error -71 [ 203.940386][ T6590] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.956826][ T5902] pwc: recv_control_msg error -71 req 02 val 2800 [ 203.998264][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 204.029967][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.037077][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.047070][ T5902] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.087704][ T6707] overlayfs: missing 'workdir' [ 204.096987][ T5902] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.204777][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.213281][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.242679][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.251214][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.301747][ T5902] pwc: Registered as video103. [ 204.311432][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.318531][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.334816][ T365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.347037][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.419320][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 204.570318][ T6707] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 205.344300][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 205.344310][ T29] audit: type=1400 audit(1785623207.501:486): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=2807 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.423368][ T5902] usb 3-1: USB disconnect, device number 5 [ 207.273409][ T29] audit: type=1400 audit(1785623207.531:487): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2807 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.225232][ T29] audit: type=1400 audit(1785623207.531:488): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2807 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.587357][ T10] net_ratelimit: 111 callbacks suppressed [ 208.587369][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.605295][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.656913][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.672005][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.006073][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 209.255458][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055742c00: rx timeout, send abort [ 209.327655][ T6729] binder: 6726:6729 ioctl 400c620e 200000003b00 returned -22 [ 209.453505][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.461888][ T1220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.471814][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.606904][ T6729] netlink: 36 bytes leftover after parsing attributes in process `syz.5.199'. [ 209.644614][ T29] audit: type=1400 audit(1785623209.421:489): avc: denied { ioctl } for pid=6718 comm="syz.4.198" path="socket:[14243]" dev="sockfs" ino=14243 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.682871][ T6737] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.773491][ T6730] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 209.793863][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.804857][ T4990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.881315][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.899204][ T29] audit: type=1400 audit(1785623209.421:490): avc: denied { name_connect } for pid=6718 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 210.509332][ T29] audit: type=1400 audit(1785623209.471:491): avc: denied { read } for pid=6718 comm="syz.4.198" lport=51619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.694124][ T29] audit: type=1400 audit(1785623210.691:492): avc: denied { bind } for pid=6728 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 210.819829][ T6758] netlink: 'syz.4.206': attribute type 8 has an invalid length. [ 211.030184][ T29] audit: type=1400 audit(1785623210.701:493): avc: denied { connect } for pid=6728 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.092412][ T6767] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.162290][ T29] audit: type=1400 audit(1785623210.721:494): avc: denied { create } for pid=6728 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.326915][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 212.156425][ T29] audit: type=1400 audit(1785623211.071:495): avc: denied { bind } for pid=6728 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.909756][ T6590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.969310][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.209'. [ 213.075694][ T6770] smc: removing ib device syz2 [ 213.091954][ T6770] smbdirect: ib_dev[syz2] removed [ 213.685709][ T6770] ------------[ cut here ]------------ [ 213.691239][ T6770] !xa_empty(&pool->xa) [ 213.691247][ T6770] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.4.209/6770 [ 213.706493][ T6770] Modules linked in: [ 213.710526][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.4.209 Not tainted syzkaller #0 PREEMPT(full) [ 213.719972][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 213.730079][ T6770] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 213.735538][ T6770] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 56 ce 25 f9 5b e9 50 6f da 02 e8 4b ce 25 f9 90 <0f> 0b 90 e8 42 ce 25 f9 5b e9 3c 6f da 02 e8 17 58 96 f9 eb d0 0f [ 213.757066][ T6770] RSP: 0018:ffffc9000430f180 EFLAGS: 00010246 [ 213.763165][ T6770] RAX: 0000000000080000 RBX: ffff888034ffd398 RCX: ffffc9000dfda000 [ 213.771136][ T6770] RDX: 0000000000080000 RSI: ffffffff88e49395 RDI: ffff888034ffd418 [ 213.779089][ T6770] RBP: ffffffff88e2edc0 R08: 0000000000000005 R09: 0000000000000001 [ 213.787060][ T6770] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888034ffc698 [ 213.796021][ T6770] R13: ffff888034ffbfe0 R14: ffff888034ffbfe0 R15: ffff888034ffd0f8 [ 213.804245][ T6770] FS: 00007f9bb6e906c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 213.813198][ T6770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.819782][ T6770] CR2: 00002000000015c0 CR3: 0000000036891000 CR4: 00000000003526f0 [ 213.827729][ T6770] Call Trace: [ 213.831002][ T6770] [ 213.833913][ T6770] rxe_dealloc+0x25/0xc0 [ 213.838137][ T6770] ib_dealloc_device+0x49/0x230 [ 213.844363][ T6770] __ib_unregister_device+0x396/0x480 [ 213.849763][ T6770] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 213.855550][ T6770] ib_unregister_device_and_put+0x5a/0x80 [ 213.861257][ T6770] nldev_dellink+0x308/0x430 [ 213.865824][ T6770] ? __pfx_nldev_dellink+0x10/0x10 [ 213.870937][ T6770] ? unwind_get_return_address+0x59/0xa0 [ 213.876586][ T6770] ? rcu_is_watching+0x12/0xc0 [ 213.881470][ T6770] ? cap_capable+0x107/0x430 [ 213.886037][ T6770] ? bpf_lsm_capable+0x9/0x10 [ 213.890709][ T6770] ? security_capable+0x80/0x260 [ 213.895621][ T6770] ? ns_capable+0xd2/0xf0 [ 213.899944][ T6770] ? __pfx_nldev_dellink+0x10/0x10 [ 213.905032][ T6770] rdma_nl_rcv_msg+0x392/0x6f0 [ 213.909791][ T6770] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 213.915073][ T6770] ? __lock_acquire+0x49f/0x1a40 [ 213.920021][ T6770] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 213.926413][ T6770] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 213.933346][ T6770] ? netlink_deliver_tap+0x1ae/0xcc0 [ 213.938625][ T6770] netlink_unicast+0x585/0x850 [ 213.944210][ T6770] ? __pfx_netlink_unicast+0x10/0x10 [ 213.950043][ T6770] ? __pfx_sock_has_perm+0x10/0x10 [ 213.955137][ T6770] netlink_sendmsg+0x8b0/0xda0 [ 213.960057][ T6770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.965316][ T6770] ? selinux_socket_sendmsg+0x198/0x2f0 [ 213.970878][ T6770] ____sys_sendmsg+0xa4d/0xbe0 [ 213.975623][ T6770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.980902][ T6770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.986174][ T6770] ___sys_sendmsg+0x190/0x1e0 [ 213.990841][ T6770] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.996010][ T6770] ? __lock_acquire+0x49f/0x1a40 [ 214.000957][ T6770] __sys_sendmsg+0x160/0x210 [ 214.005524][ T6770] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.010629][ T6770] do_syscall_64+0x115/0x870 [ 214.015193][ T6770] ? clear_bhb_loop+0x40/0x90 [ 214.019877][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.025745][ T6770] RIP: 0033:0x7f9bb5f9e019 [ 214.030149][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.050781][ T6770] RSP: 002b:00007f9bb6e90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.059172][ T6770] RAX: ffffffffffffffda RBX: 00007f9bb6225fa0 RCX: 00007f9bb5f9e019 [ 214.067687][ T6770] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 214.075684][ T6770] RBP: 00007f9bb603500c R08: 0000000000000000 R09: 0000000000000000 [ 214.083655][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.091618][ T6770] R13: 00007f9bb6226038 R14: 00007f9bb6225fa0 R15: 00007ffdc1861ba8 [ 214.099592][ T6770] [ 214.102590][ T6770] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.109862][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.4.209 Not tainted syzkaller #0 PREEMPT(full) [ 214.119063][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 214.129126][ T6770] Call Trace: [ 214.132397][ T6770] [ 214.135319][ T6770] dump_stack_lvl+0x100/0x190 [ 214.139991][ T6770] vpanic+0x552/0x970 [ 214.143975][ T6770] ? __pfx_vpanic+0x10/0x10 [ 214.148480][ T6770] panic+0xd1/0xe0 [ 214.152192][ T6770] ? __pfx_panic+0x10/0x10 [ 214.156597][ T6770] check_panic_on_warn.cold+0x19/0x34 [ 214.161955][ T6770] ? rxe_pool_cleanup+0x46/0x60 [ 214.166800][ T6770] __warn.cold+0x191/0x318 [ 214.171200][ T6770] __report_bug+0x30f/0x440 [ 214.175681][ T6770] ? rxe_pool_cleanup+0x46/0x60 [ 214.180517][ T6770] ? __pfx___report_bug+0x10/0x10 [ 214.185515][ T6770] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 214.191295][ T6770] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 214.197092][ T6770] ? __flush_workqueue+0x426/0x1200 [ 214.202269][ T6770] ? rxe_pool_cleanup+0x46/0x60 [ 214.207094][ T6770] report_bug+0xb2/0x220 [ 214.211310][ T6770] ? rxe_pool_cleanup+0x46/0x60 [ 214.216147][ T6770] handle_bug+0x16a/0x2a0 [ 214.220461][ T6770] exc_invalid_op+0x17/0x50 [ 214.224940][ T6770] asm_exc_invalid_op+0x1a/0x20 [ 214.229762][ T6770] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 214.235205][ T6770] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 56 ce 25 f9 5b e9 50 6f da 02 e8 4b ce 25 f9 90 <0f> 0b 90 e8 42 ce 25 f9 5b e9 3c 6f da 02 e8 17 58 96 f9 eb d0 0f [ 214.254784][ T6770] RSP: 0018:ffffc9000430f180 EFLAGS: 00010246 [ 214.260827][ T6770] RAX: 0000000000080000 RBX: ffff888034ffd398 RCX: ffffc9000dfda000 [ 214.268772][ T6770] RDX: 0000000000080000 RSI: ffffffff88e49395 RDI: ffff888034ffd418 [ 214.276717][ T6770] RBP: ffffffff88e2edc0 R08: 0000000000000005 R09: 0000000000000001 [ 214.284661][ T6770] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888034ffc698 [ 214.292602][ T6770] R13: ffff888034ffbfe0 R14: ffff888034ffbfe0 R15: ffff888034ffd0f8 [ 214.300545][ T6770] ? __pfx_rxe_dealloc+0x10/0x10 [ 214.305462][ T6770] ? rxe_pool_cleanup+0x45/0x60 [ 214.310286][ T6770] rxe_dealloc+0x25/0xc0 [ 214.314508][ T6770] ib_dealloc_device+0x49/0x230 [ 214.319337][ T6770] __ib_unregister_device+0x396/0x480 [ 214.324680][ T6770] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 214.330473][ T6770] ib_unregister_device_and_put+0x5a/0x80 [ 214.336165][ T6770] nldev_dellink+0x308/0x430 [ 214.340730][ T6770] ? __pfx_nldev_dellink+0x10/0x10 [ 214.345827][ T6770] ? unwind_get_return_address+0x59/0xa0 [ 214.351464][ T6770] ? rcu_is_watching+0x12/0xc0 [ 214.356204][ T6770] ? cap_capable+0x107/0x430 [ 214.360771][ T6770] ? bpf_lsm_capable+0x9/0x10 [ 214.365418][ T6770] ? security_capable+0x80/0x260 [ 214.370339][ T6770] ? ns_capable+0xd2/0xf0 [ 214.374651][ T6770] ? __pfx_nldev_dellink+0x10/0x10 [ 214.379748][ T6770] rdma_nl_rcv_msg+0x392/0x6f0 [ 214.384500][ T6770] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 214.389770][ T6770] ? __lock_acquire+0x49f/0x1a40 [ 214.394683][ T6770] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 214.401075][ T6770] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 214.407999][ T6770] ? netlink_deliver_tap+0x1ae/0xcc0 [ 214.413276][ T6770] netlink_unicast+0x585/0x850 [ 214.418021][ T6770] ? __pfx_netlink_unicast+0x10/0x10 [ 214.423276][ T6770] ? __pfx_sock_has_perm+0x10/0x10 [ 214.428371][ T6770] netlink_sendmsg+0x8b0/0xda0 [ 214.433110][ T6770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.438367][ T6770] ? selinux_socket_sendmsg+0x198/0x2f0 [ 214.443889][ T6770] ____sys_sendmsg+0xa4d/0xbe0 [ 214.448639][ T6770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.453896][ T6770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.459171][ T6770] ___sys_sendmsg+0x190/0x1e0 [ 214.463819][ T6770] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.468988][ T6770] ? __lock_acquire+0x49f/0x1a40 [ 214.473915][ T6770] __sys_sendmsg+0x160/0x210 [ 214.478479][ T6770] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.483572][ T6770] do_syscall_64+0x115/0x870 [ 214.488145][ T6770] ? clear_bhb_loop+0x40/0x90 [ 214.492822][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.498718][ T6770] RIP: 0033:0x7f9bb5f9e019 [ 214.503121][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.522720][ T6770] RSP: 002b:00007f9bb6e90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.531125][ T6770] RAX: ffffffffffffffda RBX: 00007f9bb6225fa0 RCX: 00007f9bb5f9e019 [ 214.539074][ T6770] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 214.547026][ T6770] RBP: 00007f9bb603500c R08: 0000000000000000 R09: 0000000000000000 [ 214.554968][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.562921][ T6770] R13: 00007f9bb6226038 R14: 00007f9bb6225fa0 R15: 00007ffdc1861ba8 [ 214.570876][ T6770] [ 214.573912][ T6770] Kernel Offset: disabled [ 214.578210][ T6770] Rebooting in 86400 seconds..