last executing test programs: 4m4.838815612s ago: executing program 1 (id=2039): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7cbbd1ca, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x8000000010, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 3m57.292291545s ago: executing program 1 (id=2053): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(0x0, 0x2) fcntl$addseals(r6, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x1) r7 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_INIT(r7, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0xa0300f10, 0x9, 0x8, 0x8, 0xd9, 0x0, 0x0, 0x10, 0xf}}, 0x50) read$alg(r7, 0x0, 0x0) 3m55.783225679s ago: executing program 1 (id=2055): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 3m55.559140067s ago: executing program 1 (id=2057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) write$binfmt_elf64(r5, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x4, 0x2}]}, 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m54.623899552s ago: executing program 1 (id=2058): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0xdffaa000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x14}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r4, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 3m52.871460477s ago: executing program 1 (id=2061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x26020480) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000140)={0x3, 0x0, 0x1, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x8}) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x15) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 3m37.753329167s ago: executing program 32 (id=2061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x26020480) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000140)={0x3, 0x0, 0x1, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x8}) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x15) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 3m8.010526743s ago: executing program 5 (id=2167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb) 3m6.825345035s ago: executing program 5 (id=2170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 3m5.282652707s ago: executing program 5 (id=2174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000040), 0x8c7, 0x180) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semget$private(0x0, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3m4.255211528s ago: executing program 5 (id=2176): creat(&(0x7f0000000080)='./file1\x00', 0xa14089a55daf2c6c) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f000001b000), 0x2, 0x0) memfd_secret(0x80000) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) 2m54.431802816s ago: executing program 5 (id=2195): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0xa01, 0x0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000088) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r0, r3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) 2m53.4386809s ago: executing program 5 (id=2197): dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unshare(0x24020400) unshare(0x2a020400) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x40}, 0x10) 2m38.339522985s ago: executing program 33 (id=2197): dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unshare(0x24020400) unshare(0x2a020400) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x40}, 0x10) 1m35.128856892s ago: executing program 4 (id=2355): syz_emit_ethernet(0x62, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xd, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @empty, @broadcast, {[@lsrr={0x83, 0x1f, 0x4e, [@multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}, "3276ba29"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0x100000}, &(0x7f0000000480)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r4, 0x0, 0x0) shutdown(r2, 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) 1m33.919280486s ago: executing program 4 (id=2357): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}}) r5 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) 1m25.34988202s ago: executing program 4 (id=2373): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000b4d5f3a50bb351a9ea16d2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2d, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r6 = dup(r4) inotify_rm_watch(r6, r5) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0xa000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1m24.148391341s ago: executing program 4 (id=2376): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_usb_connect(0x6, 0x819, &(0x7f0000000b80)={{0x12, 0x1, 0x310, 0x4, 0x63, 0xb1, 0x40, 0x403, 0x6015, 0x3da4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x807, 0x4, 0x7, 0x4, 0x50, 0x80, [{{0x9, 0x4, 0x6c, 0x5, 0x0, 0x5e, 0xbf, 0x3a, 0x70}}, {{0x9, 0x4, 0xa6, 0x0, 0xd, 0x6f, 0xa7, 0xa0, 0x64, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x7c}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x1, 0x5, [0x2, 0x6, 0x7, 0x4, 0x5], 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, 0x2, [0x6, 0x9], 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x6987, 0xa8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x1, 0x6, 0x1, 0xa0, 0xbc}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0xf, "6a2002"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x10, 0x5, 0x10, [@generic={0x40, 0x23, "1669369365dd30bf1db63cc556ec74d48c15f5f8e8103ffa0b6c2533e676a76a9d7049cff1a8c2bacb64cc0b8daa859a893290d78845b8808e5d119ba014"}, @generic={0x40, 0x23, "6fe60fa222f7feeb0e5540d51b725e19d8dea9de0e64596cd9e86e8c45981df08034ba23973d9bf622823d5013e5c8797e961b6235af44ffa49aaa197ff2"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0xa3, 0x48, 0x1, [@generic={0x7f, 0x8, "83dfbbed7fb94fe5e27c74f222d10b63362866b96ea7961a74248866d35cf750a01817b929eba04569101503c802244a0190c87d0d980704406b74c7f97fee2fbd2d8537ffb3e05cc4dca338fa4b0d8ad5b44fe6b3041dd94fd6da787b87af0fd18c76a59c6597dca71fddd49f6d5dea97558cda8179a63ca417b334d3"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0xed, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd2, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x80, 0x4, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x3c, 0xf, 0x19, [@generic={0x89, 0x0, "11e3d8bcb352ca559ebc0e0e3ef59ce1e83f099a8cba7a003b77a0052ae2296cfbb8ba3324e35227d0052abcbbd5ac2db8ba1bd372959b7d82775ef505df69fcdc593f2a4942312342731a2da0f7f3f1c67acbb81d466afb0a0ef391b440dd9c84a5188b9a944ea81ba22b49fad354d49101f2fc23516b4fff5ee21800dfc1e518340a813e79a2"}, @generic={0xc5, 0x23, "92d7fbef71cc720ee702140621b40390c3b60c7965070bdaf108075bcb8a8112740b51b9e08b0da478369b9e824671d157e03c41799e019eee13e5c10651dbb4bac33a0f876035e78b38e6de34b28f803581b0f6a38520d998af5569652da3fcca94880c606252c5cc2e982b8c5232cc5ebf4d9dd83e766e3f06d0e2931ed8a3eee6645158ff41911ae22a4518abca624f67e05366a42391c6fb37eae797e78953ae2c137d0068245683e133782a95f8bf84eb28a188e57e8e41adcaf11261bfeddb98"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x40, 0x2, 0x9, [@generic={0xd0, 0x8, "26dc97ee0e7e139e6b09351ed6660b92aa8295e66c254726e1a375ea4c5ebddd8c82a86413624f2cb115cb9fe78211e5dcfb39e86caac9972c3b5a314a4990e9cf72b682046ad82feae49387378fe800ad09b5ce9fcceaf07bc594911ce49fb9e4d340da0e3518056b51fb8d756fac485b7b91920d2c8d76270bb09ab245f851c5c37f0034fa3be07fc58ebefe0f68ef313c141e7846bfd3cf64be4d2964134e635702c4e9de96c666d0a591b9683d245142d2aba12fb422e12295c8a2b0da2c44e1ce1401c30850412b59dfc086"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4f, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x90, 0x2, 0x1}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x28, 0x2, 0xff}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x8, 0x80, 0xc, [@generic={0x4a, 0x0, "4aa87301cf5277681d9fe2b1285d35b62601714b86ec056176c7da614837a2781ef9a5da99d6d19ec442916b725cd67e7e770814e6fda407187e4656b2185513e8e097d40c355058"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x8, 0x1, 0xfb, [@generic={0x5a, 0x24, "139b72c111a5287fa2c81ec75763f75de3bdcd1f35210c543ca3c9d0f015c76f6e96eaf524bd8b6be485a2afd340a82f88326ac5b84aedceeb4920e68cf05b17f7c1b8d0c23921b7d714bee985ed0b7b8d7beec7832012ac"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x80, 0xea, 0x8}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x3, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0xe}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x81, 0x81, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0xab}, @generic={0xef, 0x24, "cb33de27a08d230ec939964895ada1916bb63ea0d787b688a00c7c5c038df20486caa16608dd1f536cc934577481bc8b8d30fd9eeddfd424837adb29621ee8996c82978efafa12d0d12a2bf884c12103647a96989b404dc5f9245bc64cbf7bd81b245a3c394a9093e5975986191c182796401b67e716c58382207404e03c2602eacff9ea2f8ee4202cf87541c3f4a0871c535a24ba935527fa0b9aa94ccfce85c0374e884c77e777f76d6a468ccbbb7da868b718db6de76bc6ea0afe813a56a840525059477dcc932ad2db8b67fa8d44fa0e7665ad4617d47f5c02f7575a12f648bf235b26bd075d291fb0b12e"}]}}]}}, {{0x9, 0x4, 0x26, 0x16, 0x0, 0x1e, 0xb7, 0xdc, 0xd, [@hid_hid={0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xf1b}}]}}, {{0x9, 0x4, 0xcc, 0x8, 0x6, 0x77, 0x38, 0x9d, 0x22, [@generic={0x2d, 0x2, "d9a3927ac6bd17bb576eb30a53dec9988613d1d51919d0bb7f403823ba2e12862dc13ef368190e3f8160a3"}, @uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x24, "", 'P'}, @as_header={0x7, 0x24, 0x1, 0xf5, 0x39, 0x1001}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x5, 0x7, "65fedd"}]}], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x81, 0xb, 0xa, [@generic={0x2c, 0xc, "e313cf890ee9bc24ccb477482796e2312f82ab38451fa2ec8cea54329f81c36fe5575b6f6b1ac381f13c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x7f, 0x0, 0xa0, [@generic={0x3c, 0x31, "27d300c1a61a3d167b44519f39e6b6d9866752cebfcf012c7ecd2037aba2c638c967d39019b49debdfdae88f34b6fcb232f29668641414e28c51"}, @generic={0x7d, 0x23, "3cd58c03595b047b85fe4ed348eca90b048c4be513faad9de28f765c3952133647d8c39c8ee349d37f3cb61d4bdbb78cd0d1b206b13e9b74f5856283b24c48429fc899ab7bf693107207e70ac8419825352c183f3804566169a9dc05a71549b0861c8e2c00583bcf2f84c40803d2522e9e63d9c71255dbe3b5ee5a"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x80, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8c, 0x8}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7, 0x1, 0x8b}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x8, 0x0, 0x5, [@generic={0x74, 0x21, "e6216c666ea7d45e40e582b82160244b824332e192d1db1e10d37393c35815aff3363002d6d5577d0d977f8aebf6fda12758672734552974d663ccb0580f7452b0f10fd4f29a12f5a6b10d96da57e551fcded21a80b6d2ee8862eaeb82c1307ed497afb47509e00e863607e2a7ebfd573697"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x7f, 0x8, 0x0, [@generic={0x16, 0x24, "51eb0474ad06b12fc26e94cc127d61831424ef4a"}, @generic={0x4d, 0x21, "cecd37c684602f7ee46769d1d7b63c0e61a17c8854540fb9c463aaeb3220eca75e7111b9c29496534ab423e26dc105d84e44fa310dfc1901d40b2d1303422b39832f1c57d51ae16c930f94"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xea, 0x3, 0x5, 0x20, 0x7}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x7, [{0x2, &(0x7f00000002c0)=@string={0x2}}, {0x61, &(0x7f0000000200)=@string={0x61, 0x3, "71c6ed9d7783f044542c240048ece1cdbcf2b0e29981bc90743dc5494e50db92e0b83defdb22ee0a5dc9e6b1c232e1093f4a46ed9932276b6d8eae13e9b41a941f965dec9901010735d9aa5a16e47bf3f129bf19a743deefb2c58bd431617b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80e}}, {0x2f, &(0x7f00000003c0)=@string={0x2f, 0x3, "be82547463df4f0b596f89a45f4befed215811b9046d6da55af251f998f8848956151440b71a3b8ac4fd26a009"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x415}}]}) dup3(0xffffffffffffffff, r2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) tkill(r1, 0xb) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40001) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000000)={&(0x7f0000000080)=""/153, 0x99, 0x63, 0x9e}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000140)={0x4, 0x6}) r3 = socket(0x1, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) 1m22.470176134s ago: executing program 4 (id=2381): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000001063110c0000000000851000810000000005000000950000000000f76428"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r6, 0x2007ffd) sendfile(r4, r5, 0x0, 0x1000a3) 1m20.803525992s ago: executing program 4 (id=2383): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="db4654", 0x3}], 0x1) readv(r2, &(0x7f00000001c0), 0x0) r4 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140a, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4c0a6) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1m5.367399441s ago: executing program 34 (id=2383): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="db4654", 0x3}], 0x1) readv(r2, &(0x7f00000001c0), 0x0) r4 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140a, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4c0a6) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 20.075148225s ago: executing program 6 (id=2505): syz_emit_ethernet(0x62, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xd, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @empty, @broadcast, {[@lsrr={0x83, 0x1f, 0x4e, [@multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}, "3276ba29"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0x100000}, &(0x7f0000000480)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futimesat(0xffffffffffffffff, 0x0, 0x0) shutdown(r2, 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) 19.190654455s ago: executing program 6 (id=2508): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x6, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000080)='./file2\x00', 0x145142, 0x84) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES64], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000004050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="0205097ac7e2e17201b2871de51029973b3f8fdb7ebb7262000000000005000600000000000a004e2300000003ff020000000000000000000000000001c4bb00000000000002001305400073000029bdfeb24b0b3668f31dce17cb318b2d70000335000ac75c66b3f09ea8e9561553b026d5739be3dd5cbf35ee36f1ae1848474bb80cca1d19d0aa6421cba1"], 0x48}}, 0x84) 17.580773713s ago: executing program 6 (id=2511): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpriority(0x2, 0x0, 0xb0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x4000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) r1 = openat$udambuf(0xffffff9c, 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x7, 0x1, 0x0, "6eccdf9b2ed51e03e6cdde42e5b9b568a530b0f30894c86c95a533c225abce37"}) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000004c0)={r4, 0xffffffffffffffff, 0x3526, 0x0, 0x0, 0x9, 0x7, 0x4, 0xa6, 0x2, 0x3, 0xf96, 'syz0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000300)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000040)=0x29, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x1b, &(0x7f0000000040)=r4, 0x36) 15.674327139s ago: executing program 6 (id=2516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x2020) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0xe6eedc45313651a9, 0x94, 0x1}, 0x9c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c00078008001240f5ffffff090002"], 0x54}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) socket(0x15, 0x5, 0xffffffff) 12.585741039s ago: executing program 6 (id=2523): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffff7}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$sock(r4, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x18, @local, 0x16c}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x80000000}}], 0x18}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) 12.542680446s ago: executing program 7 (id=2524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2b) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc}, 0x20080000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 11.297967041s ago: executing program 7 (id=2525): socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000400)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) poll(&(0x7f0000000080), 0x0, 0x2000009d) write$sndseq(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x424, 0x5a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8007, 0x180, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r0, r3, 0x0) 11.294224688s ago: executing program 0 (id=2526): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000002a00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) move_mount(0xffffffffffffffff, &(0x7f0000000400)='\x00', 0xffffffffffffff9c, 0x0, 0x54) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 9.925843972s ago: executing program 0 (id=2529): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e1a, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x23d, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x33) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xb6, 0x101800) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000003c0)=""/139) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pipe2$watch_queue(0x0, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 8.404047821s ago: executing program 2 (id=2531): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x1c, r5, 0x300, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2044080}, 0x4800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) socket$alg(0x26, 0x5, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 7.894765442s ago: executing program 0 (id=2532): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.732986604s ago: executing program 7 (id=2533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x8d, 0x0, 0x7}]}) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) 6.790233754s ago: executing program 0 (id=2534): socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fanotify_init(0x200, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) epoll_create1(0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.474697728s ago: executing program 7 (id=2535): creat(0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlinkat(0x0, r3, &(0x7f0000000200)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$netlink(0x10, 0x3, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5.250001378s ago: executing program 0 (id=2536): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x220000, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="db4654", 0x3}], 0x1) readv(r2, &(0x7f00000001c0), 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xd8, r4, 0x101, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6ca0, 0x22}}}}, [@mon_options, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "680ba010304342267af97dc0438f0c58a1e6c34197f129db"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140a, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4c0a6) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 4.585301633s ago: executing program 3 (id=2537): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0e020000234d8522a8a56829b8e0453cdda63192c52c279ece4afdf76799f89419fddce062ba55f4ea63fe6e8d633e1bed4ebc0e4958", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x59b1e1b54c2dff8f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'team_slave_0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close(0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f00005c8000/0x3000)=nil) 4.115528258s ago: executing program 2 (id=2538): creat(&(0x7f0000000080)='./file1\x00', 0xa14089a55daf2c6c) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f000001b000), 0x2, 0x0) memfd_secret(0x80000) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x289e0cb5, 0x0) 4.089058678s ago: executing program 3 (id=2539): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) 3.985644897s ago: executing program 3 (id=2540): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='cifs.spnego\x00', 0x0) prlimit64(r1, 0x3, &(0x7f0000000040)={0x1, 0x101}, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(r4, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) preadv(r0, 0x0, 0x0, 0x38, 0x1) mq_notify(r0, 0x0) 3.830532128s ago: executing program 2 (id=2541): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x80202) r3 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) fcntl$notify(r3, 0x402, 0x5) fcntl$notify(r3, 0x402, 0x0) 2.793787346s ago: executing program 3 (id=2542): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r6 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x800, 0x8, 0x1, 0x1, 0x100000001, 0x0, 0x1d84bc8c, 0x209, 0x5, 0x8001, 0xdd, 0x0, 0x5, 0x1de0, 0x4, 0x4, {0x3ff, 0x9}, 0x9, 0x4}}) openat(0xffffffffffffff9c, 0x0, 0x10300, 0x1c8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 2.703669006s ago: executing program 6 (id=2543): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 1.772183332s ago: executing program 0 (id=2544): socket$inet(0x2, 0x1, 0x100) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r3, &(0x7f0000000040)=[{&(0x7f0000002240)="c3", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 1.77101997s ago: executing program 2 (id=2545): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r6, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="816900000000080000000000000000002100010008081c00"], 0x70}}, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 1.753566528s ago: executing program 3 (id=2546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 1.719199919s ago: executing program 7 (id=2547): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x2a) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000100)={0xda, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 1.620759625s ago: executing program 2 (id=2548): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x428, 0xd0, 0x1b8, 0x1b8, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 217.4121ms ago: executing program 7 (id=2549): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) fchdir(0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @remote}, 0x10) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe, 0x46031, 0xffffffffffffffff, 0x180000000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) munmap(&(0x7f0000c90000/0x2000)=nil, 0x2000) 104.136551ms ago: executing program 3 (id=2550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8080) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) 0s ago: executing program 2 (id=2551): syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)="00154e", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) setitimer(0x2, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r4, &(0x7f0000002080)=""/4108, 0x100c) kernel console output (not intermixed with test programs): pe=1326 audit(1765661296.629:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13738 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 898.025046][ T30] audit: type=1326 audit(1765661296.629:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13738 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 898.049433][ T30] audit: type=1326 audit(1765661296.629:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13738 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 900.665280][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'. [ 902.160074][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 902.160102][ T30] audit: type=1400 audit(1765661302.259:857): avc: denied { write } for pid=13784 comm="syz.3.1883" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 902.507967][T13799] tmpfs: User quota block hardlimit too large. [ 902.523927][ T30] audit: type=1400 audit(1765661302.979:858): avc: denied { read } for pid=13798 comm="syz.3.1886" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 902.975819][ T30] audit: type=1400 audit(1765661302.979:859): avc: denied { open } for pid=13798 comm="syz.3.1886" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 902.999597][ T30] audit: type=1400 audit(1765661302.979:860): avc: denied { ioctl } for pid=13798 comm="syz.3.1886" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 903.084075][ T30] audit: type=1400 audit(1765661302.979:861): avc: denied { setopt } for pid=13798 comm="syz.3.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 904.244705][ T30] audit: type=1400 audit(1765661304.699:862): avc: denied { read } for pid=13814 comm="syz.3.1889" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 904.451403][T13817] bridge0: port 3(gretap0) entered blocking state [ 904.458207][T13817] bridge0: port 3(gretap0) entered disabled state [ 904.466446][T13817] gretap0: entered allmulticast mode [ 904.483418][T13817] gretap0: entered promiscuous mode [ 904.490837][T13817] bridge0: port 3(gretap0) entered blocking state [ 904.497358][T13817] bridge0: port 3(gretap0) entered forwarding state [ 906.132747][ T30] audit: type=1400 audit(1765661304.699:863): avc: denied { open } for pid=13814 comm="syz.3.1889" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 908.388764][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 908.483097][ T30] audit: type=1400 audit(1765661308.839:864): avc: denied { nlmsg_read } for pid=13830 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 909.363081][ T30] audit: type=1400 audit(1765661309.289:865): avc: denied { execute } for pid=13834 comm="syz.2.1894" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 910.272508][ T30] audit: type=1400 audit(1765661310.379:866): avc: denied { write } for pid=13846 comm="syz.3.1896" name="radio2" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 910.802642][ T30] audit: type=1400 audit(1765661310.839:867): avc: denied { write } for pid=13849 comm="syz.1.1897" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 915.279491][ T30] audit: type=1400 audit(1765661315.399:868): avc: denied { ioctl } for pid=13898 comm="syz.0.1908" path="socket:[36329]" dev="sockfs" ino=36329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 915.362224][ T30] audit: type=1400 audit(1765661315.399:869): avc: denied { ioctl } for pid=13898 comm="syz.0.1908" path="socket:[36328]" dev="sockfs" ino=36328 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 915.460553][ T30] audit: type=1400 audit(1765661315.409:870): avc: denied { shutdown } for pid=13898 comm="syz.0.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 915.595840][ T30] audit: type=1400 audit(1765661316.049:871): avc: denied { mounton } for pid=13907 comm="syz.2.1910" path="/420/file0" dev="tmpfs" ino=2227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 915.638650][T13908] geneve2: left promiscuous mode [ 918.923011][T13919] futex_wake_op: syz.0.1913 tries to shift op by -1; fix this program [ 918.934272][ T30] audit: type=1400 audit(1765661319.389:872): avc: denied { create } for pid=13918 comm="syz.4.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 919.791300][ T30] audit: type=1400 audit(1765661320.209:873): avc: denied { ioctl } for pid=13918 comm="syz.4.1914" path="socket:[36351]" dev="sockfs" ino=36351 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 923.194909][ T30] audit: type=1400 audit(1765661323.549:874): avc: denied { getopt } for pid=13947 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 926.045102][ T30] audit: type=1400 audit(1765661325.689:875): avc: denied { setopt } for pid=13964 comm="syz.4.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 926.152509][ T30] audit: type=1400 audit(1765661326.599:876): avc: denied { mount } for pid=13953 comm="syz.2.1922" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 926.856068][ T30] audit: type=1400 audit(1765661327.009:877): avc: denied { name_connect } for pid=13971 comm="syz.0.1927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 928.586827][ T30] audit: type=1400 audit(1765661329.039:878): avc: denied { audit_read } for pid=13981 comm="syz.4.1930" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 928.881682][T13986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.963456][ T30] audit: type=1400 audit(1765661329.419:879): avc: denied { mount } for pid=13988 comm="syz.3.1931" name="/" dev="autofs" ino=36466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 929.087649][T13986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.306782][T13986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.486634][T13994] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 929.511677][T13994] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 929.842605][T13986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.297895][ T30] audit: type=1400 audit(1765661330.429:880): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 930.319097][ T6167] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.333956][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.370742][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.405144][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.446391][ T30] audit: type=1400 audit(1765661330.899:881): avc: denied { mount } for pid=14003 comm="syz.0.1934" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 931.402011][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.454882][ T30] audit: type=1400 audit(1765661330.939:882): avc: denied { mount } for pid=14003 comm="syz.0.1934" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 931.476866][ T30] audit: type=1400 audit(1765661331.379:883): avc: denied { create } for pid=14005 comm="syz.3.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 931.567734][ T30] audit: type=1400 audit(1765661331.429:884): avc: denied { setopt } for pid=14005 comm="syz.3.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 931.731551][T14012] PKCS8: Unsupported PKCS#8 version [ 931.870730][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1938'. [ 931.961329][ T30] audit: type=1400 audit(1765661332.069:885): avc: denied { create } for pid=14003 comm="syz.0.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 932.026191][ T30] audit: type=1400 audit(1765661332.319:886): avc: denied { bind } for pid=14014 comm="syz.2.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 932.069996][ T30] audit: type=1400 audit(1765661332.449:887): avc: denied { setopt } for pid=14013 comm="syz.4.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 932.685940][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'. [ 933.968687][T14043] syz.0.1944 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 934.687563][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 934.687578][ T30] audit: type=1400 audit(1765661335.139:892): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 935.177410][T14052] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 935.205659][T14052] netlink: 'syz.4.1945': attribute type 2 has an invalid length. [ 935.214028][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 935.961314][ T30] audit: type=1400 audit(1765661336.079:893): avc: denied { ioctl } for pid=14048 comm="syz.1.1946" path="socket:[36693]" dev="sockfs" ino=36693 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 936.936520][ T30] audit: type=1400 audit(1765661337.389:894): avc: denied { create } for pid=14064 comm="syz.2.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 937.309935][T14069] No source specified [ 937.838773][ T30] audit: type=1400 audit(1765661337.719:895): avc: denied { create } for pid=14064 comm="syz.2.1948" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 937.974151][ T30] audit: type=1400 audit(1765661337.759:896): avc: denied { mounton } for pid=14064 comm="syz.2.1948" path="/428/file0" dev="tmpfs" ino=2270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 938.187331][ T30] audit: type=1400 audit(1765661338.629:897): avc: denied { mount } for pid=14074 comm="syz.4.1952" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 938.716205][ T30] audit: type=1400 audit(1765661338.629:898): avc: denied { getopt } for pid=14074 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 938.797131][T14044] syz.3.1943 (14044): drop_caches: 2 [ 938.954873][ T30] audit: type=1400 audit(1765661339.399:899): avc: denied { unmount } for pid=14074 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 940.166493][ T5826] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 940.200554][ T30] audit: type=1400 audit(1765661340.069:900): avc: denied { bind } for pid=14088 comm="syz.2.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 940.771587][ T30] audit: type=1400 audit(1765661341.169:901): avc: denied { connect } for pid=14104 comm="syz.2.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 944.754561][T14123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.761832][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 944.769388][T14123] IPv6: NLM_F_CREATE should be set when creating new route [ 945.788065][ T30] audit: type=1400 audit(1765661346.239:902): avc: denied { read write } for pid=14130 comm="syz.4.1963" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 945.913219][ T30] audit: type=1400 audit(1765661346.239:903): avc: denied { open } for pid=14130 comm="syz.4.1963" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 947.286069][ T30] audit: type=1400 audit(1765661347.709:904): avc: denied { create } for pid=14144 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 947.916103][ T30] audit: type=1400 audit(1765661348.369:905): avc: denied { write } for pid=14146 comm="syz.1.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 947.985995][T14162] Device name cannot be null; rc = [-22] [ 948.036979][T14162] netlink: 'syz.3.1969': attribute type 2 has an invalid length. [ 948.059235][ T30] audit: type=1400 audit(1765661348.489:906): avc: denied { write } for pid=14160 comm="syz.3.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 948.913807][ T30] audit: type=1400 audit(1765661348.969:907): avc: denied { bind } for pid=14166 comm="syz.0.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 948.948874][ T30] audit: type=1400 audit(1765661348.969:908): avc: denied { setopt } for pid=14166 comm="syz.0.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 950.027441][ T30] audit: type=1400 audit(1765661350.479:909): avc: denied { read } for pid=14174 comm="syz.0.1972" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 950.062903][T14175] netlink: 'syz.0.1972': attribute type 21 has an invalid length. [ 950.205364][T14175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1972'. [ 950.215564][ T30] audit: type=1400 audit(1765661350.509:910): avc: denied { open } for pid=14174 comm="syz.0.1972" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 951.121544][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 951.306583][ T30] audit: type=1400 audit(1765661351.759:911): avc: denied { bind } for pid=14186 comm="syz.3.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 951.678345][ T30] audit: type=1400 audit(1765661351.759:912): avc: denied { mount } for pid=14186 comm="syz.3.1975" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 951.775935][ T30] audit: type=1400 audit(1765661352.219:913): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 952.368335][ T30] audit: type=1400 audit(1765661352.819:914): avc: denied { bind } for pid=14196 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 952.420611][ T30] audit: type=1400 audit(1765661352.819:915): avc: denied { connect } for pid=14196 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 952.480345][ T30] audit: type=1400 audit(1765661352.819:916): avc: denied { mounton } for pid=14196 comm="syz.3.1978" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 955.334225][ T30] audit: type=1400 audit(1765661355.729:917): avc: denied { listen } for pid=14214 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 955.431551][ T30] audit: type=1400 audit(1765661355.749:918): avc: denied { remount } for pid=14214 comm="syz.1.1985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 955.454144][ T30] audit: type=1400 audit(1765661355.769:919): avc: denied { read } for pid=14216 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 956.418672][T14237] kAFS: No cell specified [ 956.550378][ T30] audit: type=1400 audit(1765661356.999:920): avc: denied { bind } for pid=14234 comm="syz.3.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 956.799378][ T30] audit: type=1400 audit(1765661357.059:921): avc: denied { listen } for pid=14234 comm="syz.3.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 956.941611][T14247] bridge0: port 1(gretap0) entered blocking state [ 956.948521][T14247] bridge0: port 1(gretap0) entered disabled state [ 956.957107][T14247] gretap0: entered allmulticast mode [ 956.972169][T14247] gretap0: entered promiscuous mode [ 956.979406][T14247] bridge0: port 1(gretap0) entered blocking state [ 956.985923][T14247] bridge0: port 1(gretap0) entered forwarding state [ 958.151519][ T30] audit: type=1400 audit(1765661358.399:922): avc: denied { accept } for pid=14234 comm="syz.3.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 958.202965][ T30] audit: type=1400 audit(1765661358.629:923): avc: denied { mount } for pid=14249 comm="syz.4.1992" name="/" dev="ocfs2_dlmfs" ino=38173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 958.480755][T14252] o2cb: This node has not been configured. [ 958.486860][T14252] o2cb: Cluster check failed. Fix errors before retrying. [ 958.494195][T14252] (syz.4.1992,14252,1):user_dlm_register:674 ERROR: status = -22 [ 958.501982][T14252] (syz.4.1992,14252,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 958.843232][ T30] audit: type=1400 audit(1765661358.929:924): avc: denied { add_name } for pid=14249 comm="syz.4.1992" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 958.867872][ T30] audit: type=1400 audit(1765661358.929:925): avc: denied { create } for pid=14249 comm="syz.4.1992" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 958.891682][ T30] audit: type=1400 audit(1765661358.929:926): avc: denied { associate } for pid=14249 comm="syz.4.1992" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 959.249492][T14259] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1993'. [ 959.292369][T14259] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1993'. [ 963.816289][T14299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'. [ 965.550957][ T30] audit: type=1400 audit(1765661365.999:927): avc: denied { create } for pid=14313 comm="syz.3.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 965.748498][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 967.010002][ T30] audit: type=1400 audit(1765661366.219:928): avc: denied { write } for pid=14313 comm="syz.3.2008" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 967.103785][ T30] audit: type=1400 audit(1765661366.229:929): avc: denied { ioctl } for pid=14313 comm="syz.3.2008" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 967.246955][ T30] audit: type=1400 audit(1765661366.329:930): avc: denied { map } for pid=14311 comm="syz.0.2007" path="/dev/tty21" dev="devtmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 967.275451][T14330] netlink: 'syz.1.2011': attribute type 12 has an invalid length. [ 967.283870][T14330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2011'. [ 967.706841][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 967.862825][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 232, setting to 64 [ 967.915120][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 968.051399][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 968.225409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 968.419755][ T30] audit: type=1400 audit(1765661368.769:931): avc: denied { append } for pid=14335 comm="syz.0.2012" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 968.651336][ T9] usb 4-1: Product: syz [ 968.662764][ T9] usb 4-1: Manufacturer: syz [ 968.668602][ T9] usb 4-1: SerialNumber: syz [ 968.680810][ T9] usb 4-1: config 0 descriptor?? [ 968.699618][T14327] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 968.723138][ T9] usb 4-1: selecting invalid altsetting 0 [ 970.853131][ T9] usb 4-1: USB disconnect, device number 10 [ 971.380897][T14363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.412078][T14363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 973.331392][T14388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2023'. [ 973.341733][T14388] unsupported nlmsg_type 40 [ 974.041704][ T30] audit: type=1400 audit(1765661374.489:932): avc: denied { read write } for pid=14389 comm="syz.3.2025" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 974.972856][ T30] audit: type=1400 audit(1765661374.529:933): avc: denied { open } for pid=14389 comm="syz.3.2025" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 975.351622][ T30] audit: type=1400 audit(1765661374.689:934): avc: denied { getopt } for pid=14391 comm="syz.2.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 975.371339][ T30] audit: type=1400 audit(1765661374.689:935): avc: denied { shutdown } for pid=14391 comm="syz.2.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 975.391383][ T30] audit: type=1400 audit(1765661375.429:936): avc: denied { setopt } for pid=14399 comm="syz.4.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 976.448087][ T30] audit: type=1400 audit(1765661375.489:937): avc: denied { relabelto } for pid=14393 comm="syz.0.2027" name="354" dev="tmpfs" ino=1903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 976.508486][T14401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2028'. [ 976.626011][ T30] audit: type=1400 audit(1765661375.489:938): avc: denied { associate } for pid=14393 comm="syz.0.2027" name="354" dev="tmpfs" ino=1903 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 976.853321][ T30] audit: type=1400 audit(1765661375.499:939): avc: denied { mounton } for pid=14393 comm="syz.0.2027" path="/354" dev="tmpfs" ino=1903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 976.892787][ T30] audit: type=1400 audit(1765661375.499:940): avc: denied { mount } for pid=14393 comm="syz.0.2027" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 977.412864][ T30] audit: type=1400 audit(1765661376.909:941): avc: denied { getopt } for pid=14396 comm="syz.2.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 977.690383][T14424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 977.696905][T14424] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 977.779912][T14424] vhci_hcd vhci_hcd.0: Device attached [ 978.280660][T14425] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 978.327973][ T4025] vhci_hcd vhci_hcd.0: stop threads [ 978.339006][ T4025] vhci_hcd vhci_hcd.0: release socket [ 978.351386][ T5935] usb 34-1: SetAddress Request (2) to port 0 [ 978.366144][ T4025] vhci_hcd vhci_hcd.0: disconnect device [ 979.668540][ T5935] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 980.786589][ T5935] usb 34-1: enqueue for inactive port 0 [ 981.148296][T14433] syz.0.2035 (14433): drop_caches: 2 [ 981.571737][ T5935] usb usb34-port1: attempt power cycle [ 982.230426][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 982.239385][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 982.248405][T14457] netlink: 'syz.0.2041': attribute type 13 has an invalid length. [ 982.256275][T14457] netlink: 'syz.0.2041': attribute type 12 has an invalid length. [ 982.564948][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 982.564958][ T30] audit: type=1400 audit(1765661383.019:946): avc: denied { create } for pid=14458 comm="syz.4.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 982.752256][ T5935] usb usb34-port1: unable to enumerate USB device [ 983.985991][T14468] ubi31: attaching mtd0 [ 984.022981][T14468] ubi31: scanning is finished [ 984.035477][T14468] ubi31: empty MTD device detected [ 984.059550][ T30] audit: type=1400 audit(1765661384.509:947): avc: denied { connect } for pid=14464 comm="syz.0.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 984.951521][ T30] audit: type=1400 audit(1765661384.619:948): avc: denied { read write } for pid=14470 comm="syz.3.2044" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 986.006106][T14476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 986.081286][ T30] audit: type=1400 audit(1765661384.619:949): avc: denied { open } for pid=14470 comm="syz.3.2044" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 986.425827][T14468] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 990.201839][T14518] wireguard0: entered promiscuous mode [ 990.341988][T14518] wireguard0: entered allmulticast mode [ 991.601911][T14531] overlayfs: failed lookup in lower (newroot/406, name='file1', err=-40): overlapping layers [ 991.781603][ T30] audit: type=1400 audit(1765661392.169:950): avc: denied { map } for pid=14528 comm="syz.1.2058" path="socket:[38960]" dev="sockfs" ino=38960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 992.121305][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 992.236121][ T30] audit: type=1400 audit(1765661392.179:951): avc: denied { read } for pid=14528 comm="syz.1.2058" path="socket:[38960]" dev="sockfs" ino=38960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 992.836406][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.001339][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 993.018212][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 993.057267][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.190517][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 993.201325][ T30] audit: type=1400 audit(1765661393.539:952): avc: denied { getopt } for pid=14546 comm="syz.0.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 993.223623][ T24] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 993.665789][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.679559][T14554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 994.203584][ T30] audit: type=1400 audit(1765661394.659:953): avc: denied { read write } for pid=14560 comm="syz.3.2066" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 994.234130][ T24] usb 5-1: config 0 descriptor?? [ 994.283129][ T30] audit: type=1400 audit(1765661394.679:954): avc: denied { open } for pid=14560 comm="syz.3.2066" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 994.651373][ T30] audit: type=1400 audit(1765661395.089:955): avc: denied { name_bind } for pid=14562 comm="syz.3.2067" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 995.121678][ T30] audit: type=1326 audit(1765661395.099:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14562 comm="syz.3.2067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee6558f749 code=0x0 [ 995.215661][T14572] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 995.394351][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 995.573019][T14573] openvswitch: netlink: Message has 592 unknown bytes. [ 995.580138][T14573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.739492][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 996.197007][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 996.251601][ T24] usb 5-1: USB disconnect, device number 14 [ 996.646934][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 996.701647][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 996.968872][T14584] ceph: No mds server is up or the cluster is laggy [ 997.053043][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 997.111415][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 997.439484][ T30] audit: type=1400 audit(1765661397.889:957): avc: denied { create } for pid=14594 comm="syz.2.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 997.871027][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 997.891285][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 1001.746944][T14651] misc userio: Invalid payload size [ 1003.924977][T14675] overlayfs: failed to clone lowerpath [ 1004.007896][T14676] overlayfs: failed to clone lowerpath [ 1006.093062][ T30] audit: type=1400 audit(1765661406.549:958): avc: denied { ioctl } for pid=14685 comm="syz.4.2094" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1006.094916][T14686] binder: 14685:14686 unknown command 0 [ 1006.168031][T14686] binder: 14685:14686 ioctl c0306201 200000000080 returned -22 [ 1006.168852][ T30] audit: type=1400 audit(1765661406.549:959): avc: denied { set_context_mgr } for pid=14685 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1006.245476][ T30] audit: type=1400 audit(1765661406.679:960): avc: denied { map } for pid=14685 comm="syz.4.2094" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1006.251308][T14686] binder: 14685:14686 ioctl c0306201 200000000300 returned -11 [ 1006.304813][ T30] audit: type=1400 audit(1765661406.699:961): avc: denied { call } for pid=14685 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1006.424098][ T30] audit: type=1400 audit(1765661406.699:962): avc: denied { read } for pid=14685 comm="syz.4.2094" path="socket:[40202]" dev="sockfs" ino=40202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1006.498077][ T30] audit: type=1400 audit(1765661406.949:963): avc: denied { getopt } for pid=14692 comm="syz.3.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1006.517903][T14694] IPVS: length: 218 != 24 [ 1006.525669][T14694] syz_tun: entered allmulticast mode [ 1006.544062][T14692] syz_tun: left allmulticast mode [ 1007.142472][T14696] ªªªªªª: renamed from lo (while UP) [ 1009.051591][ T30] audit: type=1400 audit(1765661409.509:964): avc: denied { read } for pid=14720 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1009.131468][ T30] audit: type=1400 audit(1765661409.529:965): avc: denied { open } for pid=14720 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1009.174162][T14721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1009.184361][T14721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1009.194553][T14721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1009.269936][T14721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1009.287654][T14721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1009.338154][ T30] audit: type=1400 audit(1765661409.579:966): avc: denied { ioctl } for pid=14720 comm="syz-executor" path="socket:[40253]" dev="sockfs" ino=40253 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1009.659956][ T30] audit: type=1400 audit(1765661409.769:967): avc: denied { mounton } for pid=14720 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1011.015534][T14720] chnl_net:caif_netlink_parms(): no params data found [ 1011.432902][T14721] Bluetooth: hci5: command tx timeout [ 1011.779917][T14740] overlayfs: missing 'lowerdir' [ 1011.980144][ T30] audit: type=1400 audit(1765661412.389:968): avc: denied { map } for pid=14738 comm="syz.3.2106" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1012.781476][ T30] audit: type=1400 audit(1765661412.389:969): avc: denied { execute } for pid=14738 comm="syz.3.2106" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1013.215558][ T30] audit: type=1400 audit(1765661413.669:970): avc: denied { mount } for pid=14754 comm="syz.2.2108" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1013.310129][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.328058][T14720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.348765][T14720] bridge_slave_0: entered allmulticast mode [ 1013.362735][T14720] bridge_slave_0: entered promiscuous mode [ 1013.376768][T14720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.403158][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.426027][T14720] bridge_slave_1: entered allmulticast mode [ 1013.440164][T14720] bridge_slave_1: entered promiscuous mode [ 1013.494307][T14720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.511816][T14721] Bluetooth: hci5: command tx timeout [ 1013.522500][T14720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.562324][T14720] team0: Port device team_slave_0 added [ 1013.570682][T14720] team0: Port device team_slave_1 added [ 1013.643722][T14720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.651333][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.102958][T14720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.116114][T14720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.123129][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.149241][T14720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.959744][T14720] hsr_slave_0: entered promiscuous mode [ 1014.983425][T14720] hsr_slave_1: entered promiscuous mode [ 1015.001572][T14720] debugfs: 'hsr0' already exists in 'hsr' [ 1015.019344][T14720] Cannot create hsr debugfs directory [ 1015.655110][T14721] Bluetooth: hci5: command tx timeout [ 1016.312792][T14720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1016.436698][T14720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1017.683563][T14721] Bluetooth: hci5: command tx timeout [ 1018.070102][T14720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1018.125322][T14720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1018.143350][ T30] audit: type=1400 audit(1765661418.599:971): avc: denied { read append } for pid=14809 comm="syz.0.2123" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1018.204853][ T30] audit: type=1400 audit(1765661418.619:972): avc: denied { open } for pid=14809 comm="syz.0.2123" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1019.488408][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 1019.512757][T14830] netlink: 'syz.3.2127': attribute type 2 has an invalid length. [ 1019.834615][T14834] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1019.904664][T14827] pimreg: entered allmulticast mode [ 1019.982744][T14720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.038217][T14720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.178918][ T3059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.179555][ T30] audit: type=1400 audit(1765661420.629:973): avc: denied { name_bind } for pid=14840 comm="syz.3.2130" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1020.186073][ T3059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.640825][ T3059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.647958][ T3059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.730803][T14862] bridge0: entered promiscuous mode [ 1021.736901][T14862] macvlan2: entered promiscuous mode [ 1022.046909][T14720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.002536][T14876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2135'. [ 1023.163053][T14720] veth0_vlan: entered promiscuous mode [ 1023.212087][T14720] veth1_vlan: entered promiscuous mode [ 1023.282257][T14720] veth0_macvtap: entered promiscuous mode [ 1023.388749][T14720] veth1_macvtap: entered promiscuous mode [ 1023.409644][T14720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.542380][T14720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.926614][ T30] audit: type=1400 audit(1765661425.129:974): avc: denied { mounton } for pid=14881 comm="syz.4.2138" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1025.461429][ T3919] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.617103][ T3919] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.635012][ T30] audit: type=1400 audit(1765661426.079:975): avc: denied { create } for pid=14898 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1026.351690][ T30] audit: type=1400 audit(1765661426.079:976): avc: denied { write } for pid=14898 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1027.127968][T14891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1027.303138][ T3919] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.339121][ T3919] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.122511][T14918] netlink: 'syz.4.2146': attribute type 4 has an invalid length. [ 1028.984867][ T30] audit: type=1400 audit(1765661429.439:977): avc: denied { ioctl } for pid=14924 comm="syz.4.2147" path="socket:[41002]" dev="sockfs" ino=41002 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1029.045458][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.678222][ T30] audit: type=1400 audit(1765661430.029:978): avc: denied { write } for pid=14926 comm="syz.3.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1029.707172][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.943283][ T30] audit: type=1400 audit(1765661430.399:979): avc: denied { setattr } for pid=14924 comm="syz.4.2147" name="PHONET" dev="sockfs" ino=41002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1030.861908][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.869867][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.053927][ T30] audit: type=1400 audit(1765661431.479:981): avc: denied { mount } for pid=14942 comm="syz.3.2152" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1031.449952][ T30] audit: type=1400 audit(1765661431.379:980): avc: denied { mounton } for pid=14720 comm="syz-executor" path="/root/syzkaller.n1tbSW/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1031.581195][ T30] audit: type=1400 audit(1765661431.899:982): avc: denied { mounton } for pid=14720 comm="syz-executor" path="/root/syzkaller.n1tbSW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1031.780572][ T30] audit: type=1400 audit(1765661431.899:983): avc: denied { mounton } for pid=14720 comm="syz-executor" path="/root/syzkaller.n1tbSW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1032.375457][ T30] audit: type=1400 audit(1765661431.999:984): avc: denied { mounton } for pid=14720 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1033.001347][T14959] block nbd4: not configured, cannot reconfigure [ 1033.049605][ T30] audit: type=1400 audit(1765661431.999:985): avc: denied { mounton } for pid=14720 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1033.178226][ T30] audit: type=1400 audit(1765661433.489:986): avc: denied { bind } for pid=14957 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1033.198485][ T30] audit: type=1400 audit(1765661433.489:987): avc: denied { node_bind } for pid=14957 comm="syz.3.2156" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1034.078464][ T30] audit: type=1400 audit(1765661434.179:988): avc: denied { write } for pid=14969 comm="syz.5.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1036.676899][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1036.676912][ T30] audit: type=1400 audit(1765661437.119:993): avc: denied { wake_alarm } for pid=15005 comm="syz.0.2165" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1036.996986][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 1037.069180][ T30] audit: type=1400 audit(1765661437.499:994): avc: denied { kexec_image_load } for pid=15005 comm="syz.0.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1037.258812][T15014] netlink: 'syz.3.2166': attribute type 17 has an invalid length. [ 1037.280156][T15014] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2166'. [ 1037.294355][T15014] macvtap0: entered allmulticast mode [ 1037.299841][ T30] audit: type=1400 audit(1765661437.749:995): avc: denied { read } for pid=15000 comm="syz.4.2164" lport=42241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1037.327874][T15014] veth0_macvtap: entered allmulticast mode [ 1037.385316][T15014] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1039.801317][T15033] netlink: 'syz.5.2170': attribute type 3 has an invalid length. [ 1039.812105][T15033] netlink: 'syz.5.2170': attribute type 3 has an invalid length. [ 1040.561267][ T30] audit: type=1400 audit(1765661440.999:996): avc: denied { read } for pid=15039 comm="syz.5.2174" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1040.586734][ T30] audit: type=1400 audit(1765661440.999:997): avc: denied { open } for pid=15039 comm="syz.5.2174" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1041.281428][ T30] audit: type=1326 audit(1765661441.699:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15040 comm="syz.2.2173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b9318f749 code=0x0 [ 1043.580893][T15071] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 1043.593720][T15071] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 1044.138174][ T30] audit: type=1400 audit(1765661444.049:999): avc: denied { firmware_load } for pid=15065 comm="syz.0.2179" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1044.199992][ T30] audit: type=1326 audit(1765661444.059:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15061 comm="syz.4.2178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59c6b8f749 code=0x0 [ 1044.668337][T15075] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1047.239752][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2184'. [ 1048.380997][ T30] audit: type=1326 audit(1765661448.829:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.3.2187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee6558f749 code=0x0 [ 1049.241307][ T5875] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1049.733247][ T5875] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1049.742174][ T5875] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1049.753494][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1050.206060][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1050.217461][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1050.230800][ T5875] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1050.240913][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1050.248974][ T5875] usb 5-1: Product: syz [ 1050.253557][ T5875] usb 5-1: Manufacturer: syz [ 1050.266285][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 1050.271953][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 1050.279734][ T5875] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1050.286068][ T5875] cdc_wdm 5-1:1.0: Unknown control protocol [ 1050.489767][ C0] cdc_wdm 5-1:1.0: unknown notification 141 received: index 35677 len 9321 [ 1050.498325][ T30] audit: type=1400 audit(1765661450.939:1002): avc: denied { read write } for pid=15099 comm="syz.4.2189" name="cdc-wdm0" dev="devtmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1051.088526][ T5936] usb 5-1: USB disconnect, device number 15 [ 1051.131541][ T30] audit: type=1400 audit(1765661450.939:1003): avc: denied { open } for pid=15099 comm="syz.4.2189" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1051.335961][ T30] audit: type=1400 audit(1765661451.029:1004): avc: denied { getopt } for pid=15120 comm="syz.2.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1054.156415][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.836322][ T30] audit: type=1400 audit(1765661455.089:1005): avc: denied { write } for pid=15160 comm="syz.0.2201" path="socket:[41509]" dev="sockfs" ino=41509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1055.182256][ T30] audit: type=1400 audit(1765661455.639:1006): avc: denied { append } for pid=15164 comm="syz.3.2203" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1055.216566][T15171] blktrace: Concurrent blktraces are not allowed on sg0 [ 1055.503070][ T30] audit: type=1400 audit(1765661455.669:1007): avc: denied { ioctl } for pid=15164 comm="syz.3.2203" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1055.641282][ T30] audit: type=1400 audit(1765661456.089:1008): avc: denied { read write } for pid=15161 comm="syz.4.2202" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1055.695418][ T30] audit: type=1400 audit(1765661456.089:1009): avc: denied { open } for pid=15161 comm="syz.4.2202" path="/433/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1056.312103][ T30] audit: type=1400 audit(1765661456.769:1010): avc: denied { append } for pid=15180 comm="syz.0.2207" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1057.746009][ T30] audit: type=1400 audit(1765661457.839:1011): avc: denied { mount } for pid=15186 comm="syz.4.2205" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1057.773181][ T30] audit: type=1400 audit(1765661457.849:1012): avc: denied { search } for pid=15186 comm="syz.4.2205" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1057.925208][ T30] audit: type=1400 audit(1765661457.849:1013): avc: denied { search } for pid=15186 comm="syz.4.2205" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1057.967769][ T30] audit: type=1400 audit(1765661457.859:1014): avc: denied { setattr } for pid=15186 comm="syz.4.2205" name="/" dev="configfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1058.515041][ T30] audit: type=1326 audit(1765661458.969:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15190 comm="syz.0.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab198f749 code=0x7ffc0000 [ 1058.780509][ T30] audit: type=1326 audit(1765661458.969:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15190 comm="syz.0.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab198f749 code=0x7ffc0000 [ 1059.723102][T15210] lo speed is unknown, defaulting to 1000 [ 1059.729075][T15210] lo speed is unknown, defaulting to 1000 [ 1059.736800][T15210] lo speed is unknown, defaulting to 1000 [ 1059.745674][T15210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1059.757766][T15210] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1059.780557][T15210] lo speed is unknown, defaulting to 1000 [ 1059.787373][T15210] lo speed is unknown, defaulting to 1000 [ 1059.794817][T15210] lo speed is unknown, defaulting to 1000 [ 1059.801746][T15210] lo speed is unknown, defaulting to 1000 [ 1059.810005][T15210] lo speed is unknown, defaulting to 1000 [ 1059.816871][T15210] lo speed is unknown, defaulting to 1000 [ 1059.823591][T15210] lo speed is unknown, defaulting to 1000 [ 1061.121299][ T30] audit: type=1400 audit(1765661461.509:1017): avc: denied { bind } for pid=15215 comm="syz.4.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1063.368972][T15244] bridge0: entered promiscuous mode [ 1063.390383][T15244] macsec1: entered promiscuous mode [ 1063.739620][T15247] lo speed is unknown, defaulting to 1000 [ 1063.976631][ T30] audit: type=1326 audit(1765661464.019:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1064.171743][ T30] audit: type=1326 audit(1765661464.019:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1064.642812][ T30] audit: type=1326 audit(1765661464.019:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1064.666467][ T30] audit: type=1326 audit(1765661464.029:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1064.897436][ T30] audit: type=1326 audit(1765661464.029:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1064.934651][ T30] audit: type=1326 audit(1765661464.029:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1065.040583][ T30] audit: type=1326 audit(1765661464.029:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1065.181390][ T30] audit: type=1326 audit(1765661464.039:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1065.221323][ T30] audit: type=1326 audit(1765661464.039:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1b9318f749 code=0x7ffc0000 [ 1067.348153][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1067.348168][ T30] audit: type=1400 audit(1765661467.799:1041): avc: denied { write } for pid=15269 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1067.394169][ T5935] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1067.524461][ T30] audit: type=1400 audit(1765661467.979:1042): avc: denied { ioctl } for pid=15277 comm="syz.0.2226" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1067.596444][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1067.609411][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1067.617855][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1067.628616][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1067.642989][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1067.651404][ T5935] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 1067.659820][ T5935] usb 4-1: config 16 has no interface number 0 [ 1067.669935][ T30] audit: type=1400 audit(1765661468.119:1043): avc: denied { read write } for pid=15277 comm="syz.0.2226" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1067.676383][ T5935] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1067.694326][T15287] random: crng reseeded on system resumption [ 1067.758215][ T5935] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1067.776826][ T5935] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 1067.786016][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.794849][ T5935] usb 4-1: Product: syz [ 1067.799463][ T5935] usb 4-1: Manufacturer: syz [ 1067.804455][ T5935] usb 4-1: SerialNumber: syz [ 1067.837718][ T30] audit: type=1400 audit(1765661468.149:1044): avc: denied { ioctl open } for pid=15277 comm="syz.0.2226" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1067.899651][T15285] lo speed is unknown, defaulting to 1000 [ 1068.293406][ T5935] usb 4-1: USB disconnect, device number 11 [ 1068.354179][T14725] udevd[14725]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.419244][T15285] chnl_net:caif_netlink_parms(): no params data found [ 1069.299391][ T30] audit: type=1400 audit(1765661469.749:1045): avc: denied { write } for pid=15300 comm="syz.3.2231" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1069.941341][T14721] Bluetooth: hci6: command tx timeout [ 1070.676885][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.702575][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.871507][T15285] bridge_slave_0: entered allmulticast mode [ 1070.879388][T15285] bridge_slave_0: entered promiscuous mode [ 1070.888091][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.895570][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.903001][T15285] bridge_slave_1: entered allmulticast mode [ 1070.910389][T15285] bridge_slave_1: entered promiscuous mode [ 1071.241486][ T30] audit: type=1326 audit(1765661471.669:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.2.2234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b9318f749 code=0x0 [ 1072.071837][T14721] Bluetooth: hci6: command tx timeout [ 1072.361685][ T30] audit: type=1400 audit(1765661472.819:1047): avc: denied { mount } for pid=15319 comm="syz.0.2235" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1073.381174][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.532782][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.905677][T15285] team0: Port device team_slave_0 added [ 1073.914733][T15285] team0: Port device team_slave_1 added [ 1074.033298][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.040509][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.074315][ T30] audit: type=1400 audit(1765661474.519:1048): avc: denied { create } for pid=15351 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1074.094975][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.107983][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.115225][ T30] audit: type=1400 audit(1765661474.519:1049): avc: denied { bind } for pid=15351 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1074.121296][ T5936] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1074.134899][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.170598][T14721] Bluetooth: hci6: command tx timeout [ 1074.198113][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.372137][T15285] hsr_slave_0: entered promiscuous mode [ 1074.378875][T15285] hsr_slave_1: entered promiscuous mode [ 1074.521454][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 1074.529882][T15285] debugfs: 'hsr0' already exists in 'hsr' [ 1074.535729][T15285] Cannot create hsr debugfs directory [ 1075.022669][ T5936] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1075.033963][ T5936] usb 4-1: config 0 has no interface number 0 [ 1075.059134][ T5936] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1075.080662][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.102168][ T5936] usb 4-1: Product: syz [ 1075.117115][ T5936] usb 4-1: Manufacturer: syz [ 1075.134374][ T5936] usb 4-1: SerialNumber: syz [ 1075.159668][ T5936] usb 4-1: config 0 descriptor?? [ 1075.272376][ T5936] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1075.321490][T14548] syz_tun (unregistering): left promiscuous mode [ 1075.487770][ T5936] gspca_spca1528: reg_w err -71 [ 1075.522289][ T5936] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1075.576265][T15285] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1075.592973][ T5936] usb 4-1: USB disconnect, device number 12 [ 1075.640996][T15285] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1076.242679][T14721] Bluetooth: hci6: command tx timeout [ 1076.384565][T15285] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1076.537350][ T36] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.582034][T15377] random: crng reseeded on system resumption [ 1076.597437][ T36] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.239568][T15285] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1077.277253][ T36] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.304033][ T36] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.658950][ T36] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1078.536169][ T36] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.097312][ T36] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.107470][ T36] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.362165][T14721] Bluetooth: hci0: unexpected event for opcode 0x0024 [ 1080.456687][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.642256][ T30] audit: type=1400 audit(1765661481.099:1050): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1080.688068][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.274466][ T36] tipc: Resetting bearer [ 1082.421676][ T36] ip6gretap0 (unregistering): left promiscuous mode [ 1082.460920][ T36] tipc: Disabling bearer [ 1082.737406][ T36] gretap0 (unregistering): left promiscuous mode [ 1082.739939][ T43] libceph: connect (1)[c::]:6789 error -22 [ 1082.761435][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1082.849415][T15438] ceph: No mds server is up or the cluster is laggy [ 1083.038303][ T43] libceph: connect (1)[c::]:6789 error -22 [ 1083.078071][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1083.390482][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 1083.420656][T15446] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2260'. [ 1084.481896][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.508643][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.533671][ T36] bond0 (unregistering): Released all slaves [ 1084.800626][ T30] audit: type=1400 audit(1765661485.249:1051): avc: denied { create } for pid=15458 comm="syz.4.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1085.241829][T15469] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2262'. [ 1085.251704][T15469] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2262'. [ 1085.898271][ T30] audit: type=1326 audit(1765661486.159:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.2265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ab198f749 code=0x0 [ 1086.081307][ T30] audit: type=1400 audit(1765661486.359:1053): avc: denied { bind } for pid=15458 comm="syz.4.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1086.458164][T15480] netlink: 'syz.2.2267': attribute type 23 has an invalid length. [ 1086.482587][ T30] audit: type=1400 audit(1765661486.359:1054): avc: denied { read } for pid=15458 comm="syz.4.2263" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1086.580049][ T30] audit: type=1400 audit(1765661486.359:1055): avc: denied { open } for pid=15458 comm="syz.4.2263" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1086.702598][ T30] audit: type=1400 audit(1765661486.849:1056): avc: denied { getopt } for pid=15475 comm="syz.3.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1087.203261][ T30] audit: type=1400 audit(1765661487.609:1057): avc: denied { write } for pid=15484 comm="syz.3.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1087.547259][ T30] audit: type=1400 audit(1765661487.679:1058): avc: denied { read } for pid=15484 comm="syz.3.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1087.873325][T15495] overlayfs: failed to clone lowerpath [ 1089.984336][T15513] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2273'. [ 1090.052543][T15514] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2273'. [ 1091.390432][ T30] audit: type=1400 audit(1765661491.839:1059): avc: denied { ioctl } for pid=15520 comm="syz.0.2275" path="socket:[43437]" dev="sockfs" ino=43437 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1091.601548][T15285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1091.612295][T15285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1091.634556][ T36] tipc: Disabling bearer [ 1091.659189][ T36] tipc: Left network mode [ 1091.665847][T14223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.673001][T14223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.698010][T14223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.705207][T14223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.003959][T15527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1093.101658][ T30] audit: type=1400 audit(1765661493.159:1060): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.166034][T15536] netlink: 'syz.4.2279': attribute type 10 has an invalid length. [ 1093.188021][ T36] IPVS: stopping master sync thread 10781 ... [ 1095.316737][ T30] audit: type=1400 audit(1765661493.159:1061): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.338957][ T30] audit: type=1400 audit(1765661493.159:1062): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.360959][ T30] audit: type=1400 audit(1765661493.159:1063): avc: denied { read } for pid=5482 comm="dhcpcd" name="n104" dev="tmpfs" ino=5658 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1095.382718][ T30] audit: type=1400 audit(1765661493.159:1064): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=5658 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1095.405774][ T30] audit: type=1400 audit(1765661493.159:1065): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=5658 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1095.504097][ T30] audit: type=1400 audit(1765661495.259:1066): avc: denied { accept } for pid=15541 comm="syz.2.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1095.589253][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.616262][ T30] audit: type=1400 audit(1765661496.069:1067): avc: denied { read open } for pid=15558 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.729330][ T30] audit: type=1400 audit(1765661496.129:1068): avc: denied { getattr } for pid=15558 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.778060][T15562] tls_set_device_offload: netdev not found [ 1096.541433][T15568] netlink: 'syz.2.2283': attribute type 3 has an invalid length. [ 1097.579806][T15582] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2287'. [ 1097.595304][T15582] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2287'. [ 1098.444245][ T30] audit: type=1400 audit(1765661498.869:1069): avc: denied { add_name } for pid=15556 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.543611][T15601] vivid-004: disconnect [ 1098.561710][T15601] vivid-004: reconnect [ 1099.073407][ T30] audit: type=1400 audit(1765661498.879:1070): avc: denied { create } for pid=15556 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1099.793071][T15285] veth0_vlan: entered promiscuous mode [ 1099.795802][ T30] audit: type=1400 audit(1765661498.879:1071): avc: denied { write } for pid=15556 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=5708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1099.869673][ T30] audit: type=1400 audit(1765661498.879:1072): avc: denied { append } for pid=15556 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=5708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1099.961411][ T30] audit: type=1400 audit(1765661499.509:1073): avc: denied { connect } for pid=15602 comm="syz.3.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1099.984484][ T30] audit: type=1400 audit(1765661499.949:1074): avc: denied { shutdown } for pid=15602 comm="syz.3.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1100.007383][ T30] audit: type=1400 audit(1765661500.419:1075): avc: denied { remove_name } for pid=15616 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.034061][ T30] audit: type=1400 audit(1765661500.419:1076): avc: denied { unlink } for pid=15616 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1100.113578][T15285] veth1_vlan: entered promiscuous mode [ 1100.205896][T15285] veth0_macvtap: entered promiscuous mode [ 1100.248321][T15285] veth1_macvtap: entered promiscuous mode [ 1100.677870][T15285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.934730][T15285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.074728][ T5992] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.111335][ T5826] Bluetooth: hci6: command 0x0405 tx timeout [ 1101.140777][ T5992] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.190597][ T5992] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.237241][ T5992] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.704252][ T30] audit: type=1400 audit(1765661502.159:1077): avc: denied { append } for pid=15617 comm="syz.0.2292" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1101.780220][T15630] sctp: [Deprecated]: syz.3.2294 (pid 15630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1101.780220][T15630] Use struct sctp_sack_info instead [ 1102.341843][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.371117][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.443082][ T6461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.455000][T15636] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1102.473241][ T6461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.920895][ T30] audit: type=1400 audit(1765661503.369:1078): avc: denied { accept } for pid=15641 comm="syz.2.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1102.921950][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'. [ 1105.697028][ T30] audit: type=1400 audit(1765661506.099:1079): avc: denied { map } for pid=15669 comm="syz.4.2303" path="socket:[43803]" dev="sockfs" ino=43803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1105.904818][ T30] audit: type=1400 audit(1765661506.099:1080): avc: denied { read accept } for pid=15669 comm="syz.4.2303" path="socket:[43803]" dev="sockfs" ino=43803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1106.130079][ T30] audit: type=1400 audit(1765661506.419:1081): avc: denied { lock } for pid=15669 comm="syz.4.2303" path="socket:[43803]" dev="sockfs" ino=43803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1106.316406][T15661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1106.476189][ T30] audit: type=1400 audit(1765661506.929:1082): avc: denied { ioctl } for pid=15683 comm="syz.3.2305" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1106.758155][ T30] audit: type=1400 audit(1765661507.209:1083): avc: denied { write } for pid=15683 comm="syz.3.2305" path="socket:[43850]" dev="sockfs" ino=43850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1107.247968][ T30] audit: type=1400 audit(1765661507.279:1084): avc: denied { read } for pid=15688 comm="syz.4.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1108.220225][ T30] audit: type=1400 audit(1765661508.669:1085): avc: denied { write } for pid=15708 comm="syz.3.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1108.234707][T15711] trusted_key: encrypted_key: insufficient parameters specified [ 1108.390888][ T36] hsr_slave_0: left promiscuous mode [ 1108.432496][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.463671][T15711] Bluetooth: MGMT ver 1.23 [ 1108.474820][ T36] batadv0: mtu less than device minimum [ 1108.635029][ T36] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1108.646851][ T36] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1108.657826][ T36] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1108.668774][ T36] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1108.680336][ T36] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1108.691399][ T36] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1108.702346][ T36] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1108.713288][ T36] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1108.977954][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.723871][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.063180][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.075815][ T36] batman_adv: batadv0: Interface deactivated: dummy0 [ 1110.083153][ T36] batman_adv: batadv0: Removing interface: dummy0 [ 1110.177900][ T36] veth0_macvtap: left promiscuous mode [ 1110.186682][ T36] veth1_vlan: left promiscuous mode [ 1110.200191][ T36] veth0_vlan: left promiscuous mode [ 1110.825718][ T30] audit: type=1400 audit(1765661511.209:1086): avc: denied { map } for pid=15738 comm="syz.3.2317" path="socket:[44875]" dev="sockfs" ino=44875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1111.663376][ T30] audit: type=1326 audit(1765661512.109:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.3.2318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee6558f749 code=0x0 [ 1114.032035][T15764] net_ratelimit: 31 callbacks suppressed [ 1114.032069][T15764] openvswitch: netlink: Message has 2712 unknown bytes. [ 1115.375326][ T30] audit: type=1326 audit(1765661515.689:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15766 comm="syz.3.2324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee6558f749 code=0x0 [ 1115.452780][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1115.597163][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.702070][ T30] audit: type=1400 audit(1765661516.589:1089): avc: denied { listen } for pid=15769 comm="syz.6.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1116.909249][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1117.191535][ T5936] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1117.702806][ T5936] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1117.716596][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.136832][ T30] audit: type=1326 audit(1765661518.289:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.0.2330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ab198f749 code=0x0 [ 1118.219784][ T5936] usb 4-1: config 0 descriptor?? [ 1118.622486][ T30] audit: type=1326 audit(1765661519.069:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.6.2331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88838f749 code=0x0 [ 1119.701713][ T30] audit: type=1400 audit(1765661520.109:1092): avc: denied { create } for pid=15788 comm="syz.3.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1120.233093][ T30] audit: type=1400 audit(1765661520.119:1093): avc: denied { getopt } for pid=15788 comm="syz.3.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1120.388838][T15818] netlink: 'syz.6.2333': attribute type 39 has an invalid length. [ 1121.855042][ T30] audit: type=1400 audit(1765661522.299:1094): avc: denied { mount } for pid=15820 comm="syz.3.2334" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1122.741071][T15793] sit1: entered allmulticast mode [ 1122.749032][ T5936] usbhid 4-1:0.0: can't add hid device: -71 [ 1122.757202][ T5936] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1122.785654][ T5936] usb 4-1: USB disconnect, device number 13 [ 1123.012292][T15811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.044432][T15811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1124.029967][T15847] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1124.029967][T15847] program syz.6.2340 not setting count and/or reply_len properly [ 1124.978767][T15854] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2339'. [ 1125.023463][T15811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.054054][T15811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1126.078542][ T30] audit: type=1326 audit(1765661526.399:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.3.2343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee6558f749 code=0x0 [ 1126.171548][T15811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.281373][T15811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1127.952693][ T1108] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1128.052677][T14223] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1128.101976][ T1108] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1128.150980][T15811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.234393][T15811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1128.265636][ T3919] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1128.341454][T14223] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1128.453228][ T36] IPVS: stop unused estimator thread 0... [ 1128.491093][T14223] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1128.844261][ T30] audit: type=1326 audit(1765661529.289:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.2.2349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b9318f749 code=0x0 [ 1129.644435][T14223] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1129.756389][ T3487] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1129.764613][ T3487] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1129.803660][ T1108] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1129.845323][ T1108] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1129.947730][ T1108] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1129.967164][ T1108] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1130.017302][ T30] audit: type=1400 audit(1765661530.469:1097): avc: denied { write } for pid=15911 comm="syz.3.2353" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1130.152957][T15910] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1130.162741][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.238929][T14721] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1130.310693][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1130.352903][ T60] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1130.460611][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.551463][ T1305] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1130.861355][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.102354][ T3487] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1131.260927][T15925] tipc: Enabled bearer , priority 10 [ 1131.819714][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.901321][ T1108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1132.347937][ T43] tipc: Node number set to 1566156050 [ 1133.001451][ T1108] net_ratelimit: 4 callbacks suppressed [ 1133.001467][ T1108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1133.261329][ T3487] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1135.107620][ T36] bridge_slave_1: left allmulticast mode [ 1135.137020][ T36] bridge_slave_1: left promiscuous mode [ 1135.178816][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.186319][ T30] audit: type=1400 audit(1765661535.639:1098): avc: denied { connect } for pid=15983 comm="syz.2.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1135.413151][ T36] bridge_slave_0: left allmulticast mode [ 1135.872500][ T36] bridge_slave_0: left promiscuous mode [ 1135.879923][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.878079][ T30] audit: type=1400 audit(1765661535.699:1099): avc: denied { write } for pid=15983 comm="syz.2.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1138.175027][T16000] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1138.203009][ T30] audit: type=1326 audit(1765661538.209:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.6.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1138.274838][ T30] audit: type=1326 audit(1765661538.209:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.6.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1138.304615][ T30] audit: type=1326 audit(1765661538.229:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.6.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1139.989894][T16017] netlink: 'syz.3.2370': attribute type 17 has an invalid length. [ 1139.998077][T16017] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2370'. [ 1140.777616][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.791881][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.803545][ T36] bond0 (unregistering): Released all slaves [ 1140.865613][T16001] lo speed is unknown, defaulting to 1000 [ 1140.900494][T15432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1140.963044][T16026] mac80211_hwsim hwsim3 4: renamed from wlan1 (while UP) [ 1141.013789][ T5992] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.043557][T16039] netlink: 'syz.0.2374': attribute type 15 has an invalid length. [ 1141.663401][ T1305] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.704323][T16046] overlayfs: failed to clone upperpath [ 1141.792694][T16046] bridge2: entered promiscuous mode [ 1141.813705][ T3919] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.853964][ T5950] libceph: connect (1)[c::]:6789 error -101 [ 1141.971976][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 1142.006296][T16052] block nbd0: shutting down sockets [ 1142.015286][T16048] ceph: No mds server is up or the cluster is laggy [ 1142.101560][ T1305] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1142.419884][ T30] audit: type=1400 audit(1765661542.859:1103): avc: denied { write } for pid=16056 comm="syz.6.2378" name="mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1142.594632][T16062] input: syz1 as /devices/virtual/input/input16 [ 1142.719521][ T30] audit: type=1400 audit(1765661543.159:1104): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=3042 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1142.761688][ T1023] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1142.951463][ T1023] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.004631][ T30] audit: type=1400 audit(1765661543.159:1105): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3042 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.163531][ T3919] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.374134][ T6081] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.828541][ T30] audit: type=1400 audit(1765661543.169:1106): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3042 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.961308][ T1023] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1145.618087][ T36] hsr_slave_0: left promiscuous mode [ 1145.656107][ T36] hsr_slave_1: left promiscuous mode [ 1145.808046][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.817213][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.841868][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.091391][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.360144][ T36] veth1_macvtap: left promiscuous mode [ 1146.568336][ T30] audit: type=1400 audit(1765661547.009:1107): avc: denied { write } for pid=16089 comm="syz.6.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1146.693860][ T36] veth0_macvtap: left promiscuous mode [ 1146.704720][ T36] veth1_vlan: left promiscuous mode [ 1146.713200][ T36] veth0_vlan: left promiscuous mode [ 1147.371678][ T5935] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1147.985712][ T5935] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 1148.015413][ T5935] usb 7-1: config 8 has no interface number 0 [ 1148.048386][ T5935] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1148.079977][ T5935] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1148.098397][ T5935] usb 7-1: config 8 interface 177 has no altsetting 0 [ 1148.125605][ T5935] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1148.161296][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.471653][T16099] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1148.732302][ T5935] usb 7-1: string descriptor 0 read error: -71 [ 1148.800750][ T5935] ir_toy 7-1:8.177: required endpoints not found [ 1148.922290][T16120] overlayfs: missing 'lowerdir' [ 1149.445563][ T5935] usb 7-1: USB disconnect, device number 2 [ 1149.731647][ T30] audit: type=1400 audit(1765661550.189:1108): avc: denied { bind } for pid=16123 comm="syz.0.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1150.480865][ T30] audit: type=1400 audit(1765661550.929:1109): avc: denied { write } for pid=16123 comm="syz.0.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1150.830004][T16132] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 1153.622950][T16155] netlink: 'syz.2.2398': attribute type 10 has an invalid length. [ 1154.107171][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1154.178993][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1154.288891][ T30] audit: type=1326 audit(1765661554.709:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.6.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1154.346948][ T30] audit: type=1326 audit(1765661554.709:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.6.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1154.374023][ T30] audit: type=1326 audit(1765661554.709:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.6.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1154.398981][ T30] audit: type=1326 audit(1765661554.709:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.6.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1154.424001][ T30] audit: type=1326 audit(1765661554.709:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.6.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1154.448895][ T30] audit: type=1326 audit(1765661554.709:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.6.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1154.501956][ T30] audit: type=1326 audit(1765661554.709:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.6.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1154.526498][ T30] audit: type=1326 audit(1765661554.709:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.6.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1154.714779][T16167] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1154.763237][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1154.763266][ T30] audit: type=1400 audit(1765661555.129:1135): avc: denied { mount } for pid=16163 comm="syz.0.2400" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1155.036715][ T30] audit: type=1400 audit(1765661555.159:1136): avc: denied { remount } for pid=16163 comm="syz.0.2400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1155.092190][ T30] audit: type=1400 audit(1765661555.169:1137): avc: denied { mounton } for pid=16163 comm="syz.0.2400" path="/431/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1155.166483][T16167] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1155.269546][ T30] audit: type=1400 audit(1765661555.669:1138): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1155.686709][T16155] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1155.793648][ T1108] net_ratelimit: 4 callbacks suppressed [ 1155.793663][ T1108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.672767][T16086] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.842168][ T3919] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1156.924457][T16086] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.595021][T11130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1157.640540][T16086] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.741328][T11130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1157.861403][ T6167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1158.335970][T16086] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.737190][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1158.999656][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1159.112863][T15432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1159.158334][T16217] ceph: No mds server is up or the cluster is laggy [ 1159.352409][T16226] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1159.399759][T15432] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1159.411770][ T30] audit: type=1400 audit(1765661559.829:1139): avc: denied { getopt } for pid=16224 comm="syz.2.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1160.091280][ T30] audit: type=1326 audit(1765661560.369:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.6.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1160.179800][T16231] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1160.288369][ T30] audit: type=1326 audit(1765661560.369:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.6.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1160.341109][ T6167] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.401106][ T3919] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.451312][ T3919] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.696573][ T30] audit: type=1326 audit(1765661560.379:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.6.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa88838f749 code=0x7ffc0000 [ 1161.211264][T12183] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.219560][T12183] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.232176][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.313333][T16182] kexec: Could not allocate control_code_buffer [ 1161.401266][T12183] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.551291][ T3487] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.664244][ T3487] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.679262][T14721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1161.703521][T14721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1161.711567][T14721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1161.721943][T14721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1161.731012][T14721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1161.761634][ T30] audit: type=1800 audit(1765661562.219:1143): pid=16252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2413" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1161.882635][T16253] IPv6: NLM_F_CREATE should be specified when creating new route [ 1161.929483][T16249] lo speed is unknown, defaulting to 1000 [ 1161.951222][T11130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1162.344414][ T30] audit: type=1400 audit(1765661562.779:1144): avc: denied { write } for pid=16254 comm="syz.3.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1162.547605][T16260] veth0: entered promiscuous mode [ 1162.734816][ T3059] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.831192][T16254] veth0: left promiscuous mode [ 1162.894664][T14223] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1162.973064][ T3059] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.065029][ T3059] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.212106][ T3059] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.245509][T16249] chnl_net:caif_netlink_parms(): no params data found [ 1163.425729][T16249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.434600][T16249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.442051][T16249] bridge_slave_0: entered allmulticast mode [ 1163.449431][T16249] bridge_slave_0: entered promiscuous mode [ 1163.460839][T16249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.468331][T16249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.475712][T16249] bridge_slave_1: entered allmulticast mode [ 1163.482734][T16249] bridge_slave_1: entered promiscuous mode [ 1163.516056][T16249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.528025][T16249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.558985][T16249] team0: Port device team_slave_0 added [ 1163.566781][T16249] team0: Port device team_slave_1 added [ 1163.598949][T16249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.606005][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.632831][T16249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.645009][T16249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.652352][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.678740][T16249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.720780][T16249] hsr_slave_0: entered promiscuous mode [ 1163.727260][T16249] hsr_slave_1: entered promiscuous mode [ 1163.733672][T16249] debugfs: 'hsr0' already exists in 'hsr' [ 1163.739397][T16249] Cannot create hsr debugfs directory [ 1163.831824][ T5826] Bluetooth: hci4: command tx timeout [ 1163.892485][ T6167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1163.962684][T16249] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1163.974504][T16249] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1163.986640][T16249] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1163.997646][T16249] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1164.078968][T16249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.101635][T11130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.112526][T16249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.127541][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.134700][T11130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.152865][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.160022][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.232982][ T6081] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.351807][ T6081] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.404614][T16249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.579279][T16249] veth0_vlan: entered promiscuous mode [ 1164.590130][T16249] veth1_vlan: entered promiscuous mode [ 1164.616012][T16249] veth0_macvtap: entered promiscuous mode [ 1164.625051][T16249] veth1_macvtap: entered promiscuous mode [ 1164.642231][T16249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.655717][T16249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.669498][ T1023] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.680525][ T1023] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.689417][ T1023] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.701991][ T1023] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.768419][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.784001][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.807262][ T3919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.815272][ T3919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.974546][ T5826] Bluetooth: hci4: command tx timeout [ 1166.023716][T16331] Process accounting resumed [ 1166.428592][T14223] net_ratelimit: 6 callbacks suppressed [ 1166.428604][T14223] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.451800][ T30] audit: type=1400 audit(1765661566.909:1145): avc: denied { connect } for pid=16325 comm="syz.3.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1166.795398][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1167.752458][ T3059] gretap0: left allmulticast mode [ 1167.774688][ T3059] gretap0: left promiscuous mode [ 1167.863726][ T3059] bridge0: port 3(gretap0) entered disabled state [ 1167.880773][ T3059] bridge_slave_1: left allmulticast mode [ 1167.899672][ T3059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.971764][ T5935] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1167.991336][ T5826] Bluetooth: hci4: command tx timeout [ 1167.999408][ T3059] bridge_slave_0: left allmulticast mode [ 1168.020789][ T3059] bridge_slave_0: left promiscuous mode [ 1168.027008][ T3059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.301258][ T5935] usb 7-1: Using ep0 maxpacket: 32 [ 1169.432207][ T3059] bond_slave_0: left promiscuous mode [ 1169.438172][ T3059] bond_slave_1: left promiscuous mode [ 1169.450061][ T3059] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1169.752877][ T5935] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1169.820573][ T5935] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1170.073890][ T5826] Bluetooth: hci4: command tx timeout [ 1170.109016][ T5935] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1170.161429][ T5935] usb 7-1: can't read configurations, error -71 [ 1170.910908][ T3059] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1170.943438][ T3059] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - a2:0e:e6:5e:b2:f4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1171.954888][ T3059] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1171.971698][ T30] audit: type=1400 audit(1765661572.429:1146): avc: denied { write } for pid=16401 comm="syz.6.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1172.029433][ T30] audit: type=1400 audit(1765661572.429:1147): avc: denied { ioctl } for pid=16401 comm="syz.6.2428" path="socket:[47691]" dev="sockfs" ino=47691 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1172.925279][ T3059] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1173.073024][ T3059] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1173.082406][ T3059] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1173.167998][ T3059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.184957][ T3059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.210458][ T3059] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1173.234604][ T3059] bond0 (unregistering): Released all slaves [ 1173.344393][ T3059] bond1 (unregistering): Released all slaves [ 1173.355699][ T3059] bond2 (unregistering): Released all slaves [ 1173.367562][ T30] audit: type=1400 audit(1765661573.819:1148): avc: denied { ioctl } for pid=16420 comm="syz.3.2433" path="socket:[47720]" dev="sockfs" ino=47720 ioctlcmd=0x6601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1173.639583][ T3059] tipc: Left network mode [ 1174.502221][T16444] policy can only be matched on NF_INET_PRE_ROUTING [ 1174.502615][T16444] unable to load match [ 1174.798674][ T3059] IPVS: stopping master sync thread 7839 ... [ 1174.972487][T16444] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1174.979113][T16444] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1174.987014][T16444] vhci_hcd vhci_hcd.0: Device attached [ 1175.399086][ T10] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1175.425908][T16446] vhci_hcd: connection closed [ 1175.431597][ T4025] vhci_hcd vhci_hcd.0: stop threads [ 1175.608568][ T4025] vhci_hcd vhci_hcd.0: release socket [ 1175.717330][ T4025] vhci_hcd vhci_hcd.0: disconnect device [ 1176.501016][ T30] audit: type=1400 audit(1765661576.939:1149): avc: denied { bind } for pid=16463 comm="syz.0.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1177.036806][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.274551][ T3059] hsr_slave_0: left promiscuous mode [ 1177.280394][ T3059] hsr_slave_1: left promiscuous mode [ 1177.304132][ T3059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.346027][ T3059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.394709][ T3059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.439189][ T3059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.465420][T16475] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1177.580095][ T3059] veth1_macvtap: left promiscuous mode [ 1177.597208][ T3059] veth0_macvtap: left promiscuous mode [ 1177.615758][ T3059] veth1_vlan: left promiscuous mode [ 1177.632375][ T3059] veth0_vlan: left promiscuous mode [ 1179.068305][ T3059] pimreg (unregistering): left allmulticast mode [ 1180.841532][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1181.631198][ T30] audit: type=1326 audit(1765661582.069:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16502 comm="syz.2.2451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b9318f749 code=0x0 [ 1182.142244][T16518] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2449'. [ 1182.193345][T16519] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2449'. [ 1183.103758][ T30] audit: type=1400 audit(1765661583.189:1151): avc: denied { map } for pid=16521 comm="syz.2.2453" path="socket:[48762]" dev="sockfs" ino=48762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1183.176075][ T30] audit: type=1400 audit(1765661583.189:1152): avc: denied { read } for pid=16521 comm="syz.2.2453" path="socket:[48762]" dev="sockfs" ino=48762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1183.417353][ T30] audit: type=1400 audit(1765661583.849:1153): avc: denied { listen } for pid=16526 comm="syz.6.2454" lport=48483 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1183.616957][ T30] audit: type=1400 audit(1765661584.069:1154): avc: denied { accept } for pid=16526 comm="syz.6.2454" lport=48483 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1183.688465][ T30] audit: type=1400 audit(1765661584.109:1155): avc: denied { write } for pid=16526 comm="syz.6.2454" lport=48483 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1184.415874][ T3059] team0 (unregistering): Port device team_slave_1 removed [ 1184.690548][T16549] overlayfs: failed to clone upperpath [ 1185.366316][ T3059] team0 (unregistering): Port device team_slave_0 removed [ 1185.662773][T16558] netlink: 'syz.2.2460': attribute type 2 has an invalid length. [ 1186.741310][ T5875] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1187.161356][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 1187.310532][ T30] audit: type=1326 audit(1765661587.759:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm="syz.0.2463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ab198f749 code=0x0 [ 1187.676408][ T5875] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1187.732606][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.755963][ T5875] usb 7-1: Product: syz [ 1187.780813][ T5875] usb 7-1: Manufacturer: syz [ 1187.795444][ T5875] usb 7-1: SerialNumber: syz [ 1187.893525][ T5875] usb 7-1: config 0 descriptor?? [ 1187.911845][ T5875] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1188.396816][ T3059] IPVS: stop unused estimator thread 0... [ 1188.498097][T16598] Device name cannot be null; rc = [-22] [ 1188.749003][ T5875] ssu100 7-1:0.0: probe with driver ssu100 failed with error -32 [ 1188.953870][ T30] audit: type=1400 audit(1765661589.399:1157): avc: denied { mount } for pid=16591 comm="syz.3.2466" name="/" dev="ramfs" ino=47961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1189.388762][T16601] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1189.534817][T16609] rdma_op ffff88801ff2f1f0 conn xmit_rdma 0000000000000000 [ 1189.950071][T16611] SELinux: Context Ï is not valid (left unmapped). [ 1190.051382][T16611] affs: No valid root block on device nullb0 [ 1190.074036][T16615] netlink: 'syz.0.2470': attribute type 10 has an invalid length. [ 1190.969014][ T5820] usb 7-1: USB disconnect, device number 5 [ 1192.031422][T16645] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2474'. [ 1192.074205][T16646] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2474'. [ 1192.464953][ T30] audit: type=1326 audit(1765661592.919:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.2.2475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b9318f749 code=0x0 [ 1193.095245][T16654] tipc: Started in network mode [ 1193.104514][T16654] tipc: Node identity ac1414aa, cluster identity 4711 [ 1193.115585][T16654] tipc: Enabled bearer , priority 10 [ 1194.301704][ T5937] tipc: Node number set to 2886997162 [ 1194.472138][T14721] Bluetooth: hci6: command 0x0405 tx timeout [ 1195.154984][T16675] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1195.918948][T16695] rdma_op ffff88807952b1f0 conn xmit_rdma 0000000000000000 [ 1197.136759][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.152982][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.160134][T16714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.211374][ T30] audit: type=1400 audit(1765661597.659:1159): avc: denied { ioctl } for pid=16713 comm="syz.6.2487" path="socket:[49037]" dev="sockfs" ino=49037 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1197.339397][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2487'. [ 1198.104220][T16730] veth0: entered promiscuous mode [ 1198.632604][T16724] veth0: left promiscuous mode [ 1198.773605][ T30] audit: type=1326 audit(1765661599.189:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.3.2489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee6558f749 code=0x0 [ 1201.782958][ T30] audit: type=1400 audit(1765661601.999:1161): avc: denied { write } for pid=16755 comm="syz.0.2494" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1202.241222][ T30] audit: type=1400 audit(1765661601.999:1162): avc: denied { ioctl } for pid=16755 comm="syz.0.2494" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1202.776557][T16784] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2496'. [ 1202.794988][T16784] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2496'. [ 1204.982963][ T30] audit: type=1326 audit(1765661605.409:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.6.2503" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88838f749 code=0x0 [ 1206.251658][T16822] rdma_op ffff8880669179f0 conn xmit_rdma 0000000000000000 [ 1206.401532][T16824] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1206.490160][T16827] binder: 16826:16827 ioctl c0306201 0 returned -14 [ 1208.890882][T16847] ªªªªª2: renamed from veth0_vlan (while UP) [ 1210.029089][ T30] audit: type=1400 audit(1765661610.479:1164): avc: denied { create } for pid=16864 comm="syz.2.2513" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1210.581240][ T30] audit: type=1400 audit(1765661610.489:1165): avc: denied { write } for pid=16864 comm="syz.2.2513" name="file0" dev="tmpfs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1210.695433][ T30] audit: type=1400 audit(1765661610.489:1166): avc: denied { open } for pid=16864 comm="syz.2.2513" path="/557/file0" dev="tmpfs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1211.204470][ T30] audit: type=1400 audit(1765661610.719:1167): avc: denied { ioctl } for pid=16864 comm="syz.2.2513" path="/557/file0" dev="tmpfs" ino=2950 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1211.501407][ T30] audit: type=1400 audit(1765661611.929:1168): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1211.944923][T16894] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1213.067799][T16912] netlink: 'syz.3.2521': attribute type 6 has an invalid length. [ 1216.292298][T16956] wireguard2: entered promiscuous mode [ 1216.299648][T16956] wireguard2: entered allmulticast mode [ 1216.383552][T16956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.404990][T16956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.561071][T16956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.577341][T16956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.013932][T16993] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1219.237661][T16993] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1219.248092][T16993] overlayfs: failed to look up (tracing) for ino (-66) [ 1220.382784][ T30] audit: type=1400 audit(1765661620.839:1169): avc: denied { read } for pid=16998 comm="syz.0.2534" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1220.471865][ T30] audit: type=1400 audit(1765661620.839:1170): avc: denied { open } for pid=16998 comm="syz.0.2534" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1221.238272][T17008] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1221.250757][T17008] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1221.403637][T17008] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1221.414201][T17008] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1222.474747][T17008] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1222.484627][T17008] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1222.925322][T17008] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1222.935425][T17008] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1223.835652][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1223.874072][ T50] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1223.891568][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1223.899666][ T50] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1223.936821][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1224.011485][ T50] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1224.019696][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1224.081852][ T50] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1224.501068][T17061] hfs: can't find a HFS filesystem on dev nullb0 [ 1330.881122][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1330.888088][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5816/1:b..l P17077/1:b..l P17083/1:b..l P16249/1:b..l [ 1330.900241][ C1] rcu: (detected by 1, t=10504 jiffies, g=62345, q=520 ncpus=2) [ 1330.907945][ C1] task:syz-executor state:R running task stack:24184 pid:16249 tgid:16249 ppid:16237 task_flags:0x400140 flags:0x00080000 [ 1330.922471][ C1] Call Trace: [ 1330.925754][ C1] [ 1330.928679][ C1] ? __schedule+0x10b9/0x6150 [ 1330.933348][ C1] __schedule+0x1139/0x6150 [ 1330.937860][ C1] ? __pfx___schedule+0x10/0x10 [ 1330.942701][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1330.948067][ C1] preempt_schedule_common+0x44/0xc0 [ 1330.953345][ C1] preempt_schedule_thunk+0x16/0x30 [ 1330.958540][ C1] _raw_spin_unlock+0x3e/0x50 [ 1330.963216][ C1] copy_page_range+0x22d0/0x6780 [ 1330.968190][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1330.973489][ C1] ? __pfx___might_resched+0x10/0x10 [ 1330.978763][ C1] ? __pfx_mas_store+0x10/0x10 [ 1330.983525][ C1] ? dup_mmap+0xba4/0x20e0 [ 1330.987936][ C1] ? down_write+0x14d/0x200 [ 1330.992436][ C1] ? up_write+0x282/0x4e0 [ 1330.996768][ C1] dup_mmap+0xbea/0x20e0 [ 1331.001019][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1331.005714][ C1] copy_process+0x3b9f/0x7430 [ 1331.010392][ C1] ? do_wp_page+0x1c04/0x5010 [ 1331.015076][ C1] ? __pfx_copy_process+0x10/0x10 [ 1331.020101][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1331.025137][ C1] kernel_clone+0xfc/0x910 [ 1331.029546][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1331.034580][ C1] __do_sys_clone+0xce/0x120 [ 1331.039157][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1331.044347][ C1] ? count_memcg_events+0x122/0x290 [ 1331.049554][ C1] ? do_user_addr_fault+0x843/0x1370 [ 1331.054843][ C1] do_syscall_64+0xcd/0xf80 [ 1331.059340][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.065229][ C1] RIP: 0033:0x7f8921985e93 [ 1331.069639][ C1] RSP: 002b:00007ffd27a70268 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1331.078038][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8921985e93 [ 1331.085997][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1331.093954][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1331.101911][ C1] R10: 000055556df567d0 R11: 0000000000000246 R12: 0000000000000000 [ 1331.109874][ C1] R13: 00000000000927c0 R14: 000000000012b16e R15: 00007ffd27a70400 [ 1331.117851][ C1] [ 1331.120857][ C1] task:syz-executor state:R running task stack:28488 pid:17083 tgid:17083 ppid:5810 task_flags:0x400040 flags:0x00080000 [ 1331.134347][ C1] Call Trace: [ 1331.137609][ C1] [ 1331.140526][ C1] ? __schedule+0x10b9/0x6150 [ 1331.145191][ C1] __schedule+0x1139/0x6150 [ 1331.149697][ C1] ? __lock_acquire+0x436/0x2890 [ 1331.154635][ C1] ? __pfx___schedule+0x10/0x10 [ 1331.159486][ C1] preempt_schedule_irq+0x51/0x90 [ 1331.164499][ C1] irqentry_exit+0x1d8/0x8c0 [ 1331.169084][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1331.175055][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 1331.180247][ C1] Code: 66 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 82 88 ee 0e 0f 82 74 02 00 00 8b 35 1a b9 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 99 66 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1331.199839][ C1] RSP: 0018:ffffc90003e875b8 EFLAGS: 00000206 [ 1331.205895][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 0000000068c1bacb [ 1331.213851][ C1] RDX: 0000000000000000 RSI: ffffffff8daa5ce7 RDI: ffffffff8bf2a880 [ 1331.221808][ C1] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff [ 1331.229764][ C1] R10: 0000000000000002 R11: ffff888083500b30 R12: 0000000000000000 [ 1331.237720][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1331.245698][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1331.250905][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1331.257051][ C1] unwind_next_frame+0xd1/0x20a0 [ 1331.261985][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1331.267095][ C1] ? kasan_save_stack+0x33/0x60 [ 1331.271943][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1331.278091][ C1] arch_stack_walk+0x94/0x100 [ 1331.282766][ C1] ? kasan_save_stack+0x33/0x60 [ 1331.287615][ C1] stack_trace_save+0x8e/0xc0 [ 1331.292286][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1331.297656][ C1] ? __lock_acquire+0x436/0x2890 [ 1331.302585][ C1] ? ksys_read+0x12a/0x250 [ 1331.306994][ C1] ? do_syscall_64+0xcd/0xf80 [ 1331.311661][ C1] kasan_save_stack+0x33/0x60 [ 1331.316337][ C1] ? kasan_save_stack+0x33/0x60 [ 1331.321226][ C1] kasan_save_track+0x14/0x30 [ 1331.325895][ C1] kasan_save_free_info+0x3b/0x60 [ 1331.330918][ C1] __kasan_slab_free+0x5f/0x80 [ 1331.335676][ C1] kmem_cache_free+0x2d8/0x770 [ 1331.340430][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1331.345110][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1331.349779][ C1] kfree_skbmem+0x1a4/0x1f0 [ 1331.354285][ C1] consume_skb+0xcc/0x100 [ 1331.358604][ C1] tun_do_read+0xd31/0x1d00 [ 1331.363107][ C1] ? __lock_acquire+0x436/0x2890 [ 1331.368048][ C1] ? __pfx_tun_do_read+0x10/0x10 [ 1331.372982][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1331.378447][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1331.384257][ C1] ? tun_get+0x191/0x370 [ 1331.388506][ C1] tun_chr_read_iter+0x101/0x290 [ 1331.393440][ C1] vfs_read+0x8bf/0xcf0 [ 1331.397599][ C1] ? __pfx_vfs_read+0x10/0x10 [ 1331.402270][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1331.407488][ C1] ksys_read+0x12a/0x250 [ 1331.411733][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1331.416496][ C1] do_syscall_64+0xcd/0xf80 [ 1331.420995][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.426880][ C1] RIP: 0033:0x7f1b9318e15c [ 1331.431286][ C1] RSP: 002b:00007ffc8acbe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1331.439685][ C1] RAX: ffffffffffffffda RBX: 00007ffc8acbe060 RCX: 00007f1b9318e15c [ 1331.447641][ C1] RDX: 00000000000003e8 RSI: 00007ffc8acbe060 RDI: 00000000000000c8 [ 1331.455601][ C1] RBP: 00007ffc8acbe49c R08: 0000000000000000 R09: 0000000000000000 [ 1331.463560][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000236 [ 1331.471517][ C1] R13: 00000000000927c0 R14: 000000000012b308 R15: 00007ffc8acbe4f0 [ 1331.479491][ C1] [ 1331.482494][ C1] task:modprobe state:R running task stack:24936 pid:17077 tgid:17077 ppid:14223 task_flags:0x400000 flags:0x00080000 [ 1331.495975][ C1] Call Trace: [ 1331.499237][ C1] [ 1331.502155][ C1] ? __schedule+0x10b9/0x6150 [ 1331.506819][ C1] __schedule+0x1139/0x6150 [ 1331.511309][ C1] ? post_alloc_hook+0x19e/0x220 [ 1331.516261][ C1] ? __pfx___schedule+0x10/0x10 [ 1331.521109][ C1] preempt_schedule_irq+0x51/0x90 [ 1331.526125][ C1] irqentry_exit+0x1d8/0x8c0 [ 1331.530710][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1331.536680][ C1] RIP: 0010:lock_release+0x183/0x2d0 [ 1331.541957][ C1] Code: 0f c1 05 58 b3 18 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 ed 6b 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1331.561551][ C1] RSP: 0018:ffffc90003247890 EFLAGS: 00000206 [ 1331.567605][ C1] RAX: 6cc116e8ad9b1900 RBX: ffffffff8e3c9620 RCX: ffffc9000324789c [ 1331.575562][ C1] RDX: 0000000000000000 RSI: ffffffff8daa5ce7 RDI: ffffffff8bf2a880 [ 1331.583522][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 00000000ffffffff [ 1331.591478][ C1] R10: 0000000000000002 R11: 0000000000013ef5 R12: ffffffff816cb9a4 [ 1331.599444][ C1] R13: 0000000000000206 R14: ffff88802c9a4980 R15: 0000000000000001 [ 1331.607405][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1331.612622][ C1] unwind_next_frame+0x3f9/0x20a0 [ 1331.617642][ C1] ? getname_flags.part.0+0x4c/0x550 [ 1331.622918][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1331.629062][ C1] arch_stack_walk+0x94/0x100 [ 1331.633739][ C1] ? getname_flags+0x93/0xf0 [ 1331.638326][ C1] stack_trace_save+0x8e/0xc0 [ 1331.642996][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1331.648362][ C1] ? filemap_map_pages+0x1260/0x1e00 [ 1331.653653][ C1] kasan_save_stack+0x33/0x60 [ 1331.658319][ C1] ? kasan_save_stack+0x33/0x60 [ 1331.663171][ C1] ? kasan_save_track+0x14/0x30 [ 1331.668026][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1331.673051][ C1] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1331.678682][ C1] ? getname_flags.part.0+0x4c/0x550 [ 1331.684010][ C1] kasan_save_track+0x14/0x30 [ 1331.688682][ C1] __kasan_slab_alloc+0x89/0x90 [ 1331.693531][ C1] kmem_cache_alloc_noprof+0x25e/0x770 [ 1331.698980][ C1] ? __lock_acquire+0x436/0x2890 [ 1331.703908][ C1] ? getname_flags.part.0+0x4c/0x550 [ 1331.709186][ C1] ? getname_flags.part.0+0x4c/0x550 [ 1331.714459][ C1] getname_flags.part.0+0x4c/0x550 [ 1331.719566][ C1] getname_flags+0x93/0xf0 [ 1331.723978][ C1] do_sys_openat2+0xb9/0x290 [ 1331.728570][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1331.733787][ C1] __x64_sys_openat+0x174/0x210 [ 1331.738647][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 1331.744025][ C1] do_syscall_64+0xcd/0xf80 [ 1331.748525][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.754415][ C1] RIP: 0033:0x7fd21401a0ba [ 1331.758815][ C1] RSP: 002b:00007ffc400e33e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1331.767216][ C1] RAX: ffffffffffffffda RBX: 00007ffc400e3460 RCX: 00007fd21401a0ba [ 1331.775175][ C1] RDX: 0000000000080000 RSI: 00007ffc400e3460 RDI: 00000000ffffff9c [ 1331.783148][ C1] RBP: 00007ffc400e3450 R08: 00007ffc400e3657 R09: 0000000000000000 [ 1331.791122][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000017 [ 1331.799088][ C1] R13: 00007fd213fee000 R14: 00007ffc400e3670 R15: 0000000000000000 [ 1331.807073][ C1] [ 1331.810081][ C1] task:syz-executor state:R running task stack:23864 pid:5816 tgid:5816 ppid:5808 task_flags:0x400140 flags:0x00080000 [ 1331.823575][ C1] Call Trace: [ 1331.826842][ C1] [ 1331.829762][ C1] ? __schedule+0x10b9/0x6150 [ 1331.834459][ C1] __schedule+0x1139/0x6150 [ 1331.838981][ C1] ? __pfx___schedule+0x10/0x10 [ 1331.843827][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1331.849196][ C1] preempt_schedule_common+0x44/0xc0 [ 1331.854478][ C1] preempt_schedule_thunk+0x16/0x30 [ 1331.859673][ C1] _raw_spin_unlock+0x3e/0x50 [ 1331.864353][ C1] copy_page_range+0x22d0/0x6780 [ 1331.869330][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1331.874626][ C1] ? __pfx___might_resched+0x10/0x10 [ 1331.879900][ C1] ? __pfx_mas_store+0x10/0x10 [ 1331.884672][ C1] ? dup_mmap+0xba4/0x20e0 [ 1331.889097][ C1] ? down_write+0x14d/0x200 [ 1331.893604][ C1] ? up_write+0x282/0x4e0 [ 1331.897942][ C1] dup_mmap+0xbea/0x20e0 [ 1331.902196][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1331.906888][ C1] copy_process+0x3b9f/0x7430 [ 1331.911568][ C1] ? do_wp_page+0x1c04/0x5010 [ 1331.916263][ C1] ? __pfx_copy_process+0x10/0x10 [ 1331.921307][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1331.926351][ C1] kernel_clone+0xfc/0x910 [ 1331.930763][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1331.935797][ C1] __do_sys_clone+0xce/0x120 [ 1331.940381][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1331.945568][ C1] ? count_memcg_events+0x122/0x290 [ 1331.950777][ C1] ? do_user_addr_fault+0x843/0x1370 [ 1331.956068][ C1] do_syscall_64+0xcd/0xf80 [ 1331.960566][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.966451][ C1] RIP: 0033:0x7fee65585e93 [ 1331.970855][ C1] RSP: 002b:00007fff0bf77ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1331.979260][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee65585e93 [ 1331.987218][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1331.995183][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1332.003137][ C1] R10: 0000555593bf77d0 R11: 0000000000000246 R12: 0000000000000000 [ 1332.011091][ C1] R13: 00000000000927c0 R14: 000000000012b2ea R15: 00007fff0bf77c50 [ 1332.019067][ C1] [ 1332.022069][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g62345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1332.033250][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1332.043198][ C1] rcu: RCU grace-period kthread stack dump: [ 1332.049066][ C1] task:rcu_preempt state:R running task stack:27512 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1332.062552][ C1] Call Trace: [ 1332.065815][ C1] [ 1332.068732][ C1] ? __schedule+0x10b9/0x6150 [ 1332.073394][ C1] __schedule+0x1139/0x6150 [ 1332.077884][ C1] ? __lock_acquire+0x436/0x2890 [ 1332.082824][ C1] ? __mod_timer+0x8f2/0xd30 [ 1332.087425][ C1] ? __pfx___schedule+0x10/0x10 [ 1332.092263][ C1] ? find_held_lock+0x2b/0x80 [ 1332.096938][ C1] ? schedule+0x2d7/0x3a0 [ 1332.101262][ C1] schedule+0xe7/0x3a0 [ 1332.105319][ C1] schedule_timeout+0x123/0x290 [ 1332.110173][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1332.115544][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1332.120825][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1332.126629][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1332.132083][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1332.136844][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1332.142124][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1332.147310][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1332.152246][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1332.157096][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1332.162907][ C1] rcu_gp_kthread+0x26d/0x380 [ 1332.167580][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1332.172771][ C1] ? rcu_is_watching+0x12/0xc0 [ 1332.177525][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1332.182714][ C1] ? __kthread_parkme+0x19e/0x250 [ 1332.187737][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1332.192927][ C1] kthread+0x3c5/0x780 [ 1332.196990][ C1] ? __pfx_kthread+0x10/0x10 [ 1332.201575][ C1] ? rcu_is_watching+0x12/0xc0 [ 1332.206323][ C1] ? __pfx_kthread+0x10/0x10 [ 1332.210907][ C1] ret_from_fork+0x983/0xb10 [ 1332.215490][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1332.220593][ C1] ? __switch_to+0x7af/0x10d0 [ 1332.225266][ C1] ? __pfx_kthread+0x10/0x10 [ 1332.229849][ C1] ret_from_fork_asm+0x1a/0x30 [ 1332.234627][ C1] [ 1332.237632][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1332.243956][ C1] CPU: 1 UID: 0 PID: 4413 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.255054][ C1] Tainted: [L]=SOFTLOCKUP [ 1332.259356][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1332.269396][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1332.275895][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x15e0 [ 1332.282565][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 b5 5a 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 [ 1332.302162][ C1] RSP: 0018:ffffc9000eb87808 EFLAGS: 00000293 [ 1332.308214][ C1] RAX: 0000000000000000 RBX: ffff8880b84431e0 RCX: ffffffff81b28971 [ 1332.316171][ C1] RDX: ffff888035574980 RSI: ffffffff81b2894b RDI: 0000000000000005 [ 1332.324126][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1332.332084][ C1] R10: 0000000000000001 R11: ffff8880355754b0 R12: dffffc0000000000 [ 1332.340039][ C1] R13: ffffed101708863d R14: 0000000000000001 R15: 0000000000000000 [ 1332.347995][ C1] FS: 0000000000000000(0000) GS:ffff8881249fa000(0000) knlGS:0000000000000000 [ 1332.356913][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1332.363481][ C1] CR2: 0000200000002000 CR3: 000000000e184000 CR4: 00000000003526f0 [ 1332.371438][ C1] Call Trace: [ 1332.374708][ C1] [ 1332.377630][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1332.382656][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0 [ 1332.389153][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1332.395471][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1332.400849][ C1] ? __pfx___text_poke+0x10/0x10 [ 1332.405782][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1332.410800][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1332.415907][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0 [ 1332.422399][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 1332.428383][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1332.434634][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1332.440870][ C1] ? find_held_lock+0x2b/0x80 [ 1332.445553][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1332.451531][ C1] jump_label_update+0x376/0x550 [ 1332.456467][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 1332.462353][ C1] static_key_enable+0x1a/0x20 [ 1332.467108][ C1] toggle_allocation_gate+0xfa/0x280 [ 1332.472386][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1332.478276][ C1] ? rcu_is_watching+0x12/0xc0 [ 1332.483031][ C1] process_one_work+0x9ba/0x1b20 [ 1332.487972][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1332.494117][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1332.499493][ C1] ? assign_work+0x1a0/0x250 [ 1332.504078][ C1] worker_thread+0x6c8/0xf10 [ 1332.508669][ C1] ? __kthread_parkme+0x19e/0x250 [ 1332.513683][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1332.518790][ C1] kthread+0x3c5/0x780 [ 1332.522854][ C1] ? __pfx_kthread+0x10/0x10 [ 1332.527437][ C1] ? rcu_is_watching+0x12/0xc0 [ 1332.532192][ C1] ? __pfx_kthread+0x10/0x10 [ 1332.536773][ C1] ret_from_fork+0x983/0xb10 [ 1332.541354][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1332.546462][ C1] ? __switch_to+0x7af/0x10d0 [ 1332.551131][ C1] ? __pfx_kthread+0x10/0x10 [ 1332.555714][ C1] ret_from_fork_asm+0x1a/0x30 [ 1332.560491][ C1]