last executing test programs: 19.682369239s ago: executing program 3 (id=1905): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(0x0, 0x0, 0x22) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) io_uring_setup(0x483b, &(0x7f0000002fc0)={0x0, 0x6d28, 0x2, 0x0, 0x11f}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 15.593311976s ago: executing program 3 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) io_setup(0x3, &(0x7f00000004c0)=0x0) io_getevents(r5, 0x5, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) r6 = timerfd_create(0x0, 0x800) io_cancel(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x7ff, r6, &(0x7f0000000300)="c14d7c0371257e50e7846289778933463e8304be9cc6bad6e371f78e88f9a45d27dfdb40031ea741912357cebce30ca2c5ce28fbe0e4eee28b0f3f3868bcb0e95aff78941f95118a27dc10de803e", 0x4e, 0x7, 0x0, 0x3, r3}, &(0x7f00000003c0)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) 14.127821406s ago: executing program 2 (id=1924): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60928, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 13.835357686s ago: executing program 2 (id=1927): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x290) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000040)) 10.976390301s ago: executing program 3 (id=1931): keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SLAVE(r3, 0x703, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10.610248894s ago: executing program 4 (id=1932): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x2b00, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 9.809771543s ago: executing program 0 (id=1934): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) accept4(r3, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4008010) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x1f4, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x0, 0xfffffffffffffff8}, {0xcf, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0xf6, 0x3, {{'deflate\x00'}, 0x570, "f9bd71297278f237b5f53646dbf7d8cd508a75ce5c5f3bfdb353621eccd96f31851e57a24925699f7a5269fe7b0b9c9845f4c067286173622078fd99056a0db82d22d4092bf7fa7a062b148c56f68ea0e15efc30342b491597b2065f7f4fa0761b574d6182769448b9a807263dedf095f5fa06a8711fd695e35f9d290fcc328540a2b6a8f98a569e08c88700d054b1a27ec131c3aef22dde8873867bc2fa26c80ac955fca6245df876538647c25b"}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) 9.730094824s ago: executing program 1 (id=1935): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000700)=[{&(0x7f0000000740)="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", 0x52a}, {0x0}], 0x2) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) close(r5) 9.008713209s ago: executing program 0 (id=1936): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000200)={0x12, {{0x29, 0x0, 0x3b000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000090000003c0003"], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x49, 0x8, 0x10, 0x0, {{0x16, 0x4, 0x2, 0x5, 0x58, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}, {[@generic={0x7, 0x5, "79c56a"}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x7, [0x5742, 0x2, 0x7]}, @end, @rr={0x7, 0xf, 0x2b, [@multicast2, @rand_addr=0x64010102, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x4, [{@local}, {@local, 0x2}]}, @generic={0x83, 0xb, "3dfc733b7c7b15a2d2"}]}}}}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r9, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x524}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x100}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd4, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8d4}, 0x40004) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000e8ffffffffff0b00000048000580080001"], 0x5c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0c0500c476c755f4a1d91dc57d00", @ANYRES16=r6, @ANYBLOB="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"], 0x50c}, 0x1, 0x0, 0x0, 0x811}, 0x4000004) 8.024601092s ago: executing program 4 (id=1937): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000040) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r8, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa0500130001"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r6, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) 7.721990841s ago: executing program 4 (id=1938): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 7.203266629s ago: executing program 3 (id=1939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000080)={0x4, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4a2ac067b1b99eeeaa1ae15a525115cc7198345652fd547f7ae8614532e7138f637f3513a5f2674185", {0x4}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) clock_nanosleep(0x8, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRES64=r5], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 7.135961146s ago: executing program 1 (id=1940): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60928, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 6.824718628s ago: executing program 1 (id=1941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) r2 = socket(0x2, 0x80805, 0x0) process_vm_writev(0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000180)=""/133, 0x85}, {0x0}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000340)={r3, 0x2}, &(0x7f0000000400)=0x8) r4 = memfd_secret(0x0) mmap(&(0x7f00002b7000/0x3000)=nil, 0x3000, 0x1000007, 0x11, r1, 0x0) ftruncate(r4, 0x51a9497) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x0, 0x4000, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000005180)={0x0, &(0x7f0000005140)=[&(0x7f0000000340)]}) 6.824444146s ago: executing program 2 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100faffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000104004e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020900000200000000700080"], 0x10}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(r2, &(0x7f0000000100), 0x12) mkdir(&(0x7f0000000300)='./bus\x00', 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x9, 0x4, 0x2}]}) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) r3 = io_uring_setup(0x4a8f, &(0x7f00000003c0)={0x0, 0x6c4f, 0x800, 0x3, 0x2f9}) r4 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x42000, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_off}, {@xino_auto}, {@nfs_export_off}, {@uuid_null}, {@uuid_null}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '#[{'}}, {@obj_role={'obj_role', 0x3d, '%\xd2^\xf6'}}]}) r6 = getuid() syslog(0x2, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r6, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@userxattr}, {@metacopy_on}], [{@uid_eq={'uid', 0x3d, r6}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r6}}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_type}, {@appraise}, {@euid_eq={'euid', 0x3d, r6}}]}) 6.064545787s ago: executing program 0 (id=1943): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80, 0x800) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.454219946s ago: executing program 2 (id=1944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0xf0f000, 0x4, @name="d45e3c8a1353875b1a8335bddb954fad04c784e9aae6aaae7102ffffffff3437"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x0, 0xfffffffc, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980928, 0x3, '\x00', @p_u32=&(0x7f0000000580)=0x800006}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="03"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) 5.39129479s ago: executing program 0 (id=1945): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000100)=0x808c) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4.5538571s ago: executing program 4 (id=1946): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$kcm(0x29, 0x6, 0x0) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)=[{0xc0, 0x10b, 0xf, "6324ca6adb4d0fc081b1d00fe108599a5162e8480a9475c9b4458016fe8aff1dacbdba7952371bbcd159256908324a6b35008ff0f2b8b5c2961a432021702d794a7c4d4d63c5302a277eb09a02f616aa02190d2f6c29145c6d6693a2f6461b43494f940002cd6dc34ec4124d2a51945cb88b907b69427a6dc11349094e5ca35033a4fec94093bef388a5ac823b89e4c38014c5db52bf10de1f6a1a84582aeb7596243b307f688d736d"}, {0x90, 0x101, 0x1, "6a6ae985cdb5ec204cf7bfa9155faba204c4ed01ff27bc843d569d421bce0a1f9d76806cbd8d94fa08131a8cfb08d7b3c5b7ecaa218eafd893584d997f84b8b4031d131a32081c7353d261371ed9a65bc4b6c8e88073a2ddf383d0a7da8338fc226aa7eb68ff47421d04eba9ba201d99060737479d855f3e46"}], 0x150}, 0x4000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r4, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r6, r6, 0x0, 0x101) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20c001, 0x143) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x32503e, 0x800}, 0x20) 4.481112119s ago: executing program 1 (id=1947): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 4.024784469s ago: executing program 3 (id=1948): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff800000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d61637365630000000002c008000500", @ANYRES32, @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) mremap(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000000c000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f00002f0000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x2000) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x101, 0x915c, {}, {}, 0xfffffffffffffea4, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffff30) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000005) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 2.977682078s ago: executing program 4 (id=1949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x9}, {0x28, 0x1, 0xf7, 0xfffff024}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_nanosleep(0x1, 0x1, &(0x7f0000000240), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000003c0)={0x18, 0x1, 0x0, {0x5}}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 2.960612014s ago: executing program 3 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000000c0)) 2.715589669s ago: executing program 2 (id=1951): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002940)='/dev/comedi4\x00', 0x22, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10114, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, 0x0, 0x0, 0x8, 0xfffffffe) setrlimit(0x9, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, 0x0, 0x0) memfd_create(0x0, 0x3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x2604c01c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000000)="1834ff1fcd", 0x5}], 0x1) 2.594327962s ago: executing program 0 (id=1952): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60928, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 2.16064228s ago: executing program 0 (id=1953): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x3, [@multicast1, @multicast1, @private=0xa010100]}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x80201) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000011c0)={0x0, {}, 0x0, {}, 0x9e, 0x3, 0x17, 0x8, "7c4c438854136e31f81d60425059120b85b990aab6a4eabda13790f83db490d6dda534cec9ab2c01fe88dfb8af124db979f9ccfe1af1561cabdd3421df1d342a", "a20755c7eb13ade75e7ee23006e895fefa1382a1151526ce97533fdde17f1dc9", [0x12, 0x2]}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 1.99422873s ago: executing program 1 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x6, 0x0, &(0x7f0000000000)="63eced8e46dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x20080, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000840)={0x5, @output={0x0, 0x1, {0x9, 0xfffffff9}, 0x101, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000a80), &(0x7f0000000ac0)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80004}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10001}, @ldst={0x3, 0x0, 0x6, 0x0, 0x2, 0x0, 0x110}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000700)='erofs\x00', 0x2319034, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 1.099077914s ago: executing program 2 (id=1955): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000"], 0x24}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x5, 0x50000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000240)="66baf80cb811836c8aef66bafc0cb000eef436aaf20f209cb805000000b9040000000f01d926f3a4c7442400f67f0000c744240200a00000c7442406000000000f011c24c4e2552c350c000000b986050000b8da500000ba000000000f30c4c3b55f5f0be53e0f01c4", 0x69}], 0x1, 0x4, 0x0, 0x0) 292.279767ms ago: executing program 1 (id=1956): unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xfffd, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x20, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1957): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 356.077121][ T9169] vlan2: entered allmulticast mode [ 356.082719][ T9169] bond0: entered allmulticast mode [ 356.087862][ T9169] bond_slave_0: entered allmulticast mode [ 356.096429][ T9169] bond_slave_1: entered allmulticast mode [ 356.154486][ T9173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.208735][ T9173] bond_slave_0: left allmulticast mode [ 356.242832][ T9173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.276003][ T9173] bond_slave_1: left allmulticast mode [ 356.284974][ T9160] capability: warning: `syz.3.865' uses deprecated v2 capabilities in a way that may be insecure [ 356.295202][ T9173] bond0 (unregistering): Released all slaves [ 356.654411][ T29] audit: type=1400 audit(1777556921.038:465): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 358.080783][ T5610] Bluetooth: hci1: command tx timeout [ 359.342442][ T29] audit: type=1400 audit(1777556923.728:466): avc: denied { append } for pid=9226 comm="syz.3.872" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 359.960798][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 360.324135][ T5610] Bluetooth: hci1: command tx timeout [ 360.614140][ T12] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 360.622485][ T12] bridge2 (unregistering): left promiscuous mode [ 361.144059][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.157350][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.167592][ T12] bond0 (unregistering): Released all slaves [ 361.178132][ T12] bond1 (unregistering): Released all slaves [ 361.199829][ T9243] netlink: 'syz.3.872': attribute type 27 has an invalid length. [ 361.214000][ T9243] bond1: left promiscuous mode [ 361.218786][ T9243] bridge1: left promiscuous mode [ 361.224779][ T9243] vlan2: left allmulticast mode [ 361.229627][ T9243] bond1: left allmulticast mode [ 361.235305][ T9243] bridge1: left allmulticast mode [ 361.240490][ T9243] bond2: left promiscuous mode [ 361.279154][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 361.480024][ T9250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.876'. [ 361.491045][ T9232] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.501895][ T9232] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 361.616848][ T9241] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 361.651483][ T9244] macvlan2: entered promiscuous mode [ 361.656823][ T9244] macvlan2: entered allmulticast mode [ 361.662882][ T12] tipc: Left network mode [ 361.708590][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.717414][ T9245] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.742502][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.807124][ T9245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.817636][ T9245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.830873][ T9245] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 361.969720][ T9170] virt_wifi0 speed is unknown, defaulting to 1000 [ 362.169266][ T12] hsr_slave_0: left promiscuous mode [ 362.176098][ T12] hsr_slave_1: left promiscuous mode [ 362.183122][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.193147][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.203592][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.211348][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.230117][ T12] veth1_macvtap: left promiscuous mode [ 362.237013][ T12] veth0_macvtap: left promiscuous mode [ 362.243527][ T12] veth1_vlan: left promiscuous mode [ 362.248940][ T12] veth0_vlan: left promiscuous mode [ 362.432970][ T50] Bluetooth: hci1: command tx timeout [ 363.601506][ T29] audit: type=1400 audit(1777556927.978:467): avc: denied { bind } for pid=9268 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 364.480819][ T50] Bluetooth: hci1: command tx timeout [ 365.038557][ T12] team0 (unregistering): Port device team_slave_1 removed [ 365.087449][ T12] team0 (unregistering): Port device team_slave_0 removed [ 366.312890][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 367.061873][ T6961] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 367.523896][ T6961] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 367.541041][ T6961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.550985][ T6961] usb 4-1: Product: syz [ 367.556531][ T6961] usb 4-1: Manufacturer: syz [ 367.564387][ T6961] usb 4-1: SerialNumber: syz [ 367.584475][ T6961] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.647104][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 368.153995][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.171335][ T42] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 368.184039][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.211444][ T9170] bridge_slave_0: entered allmulticast mode [ 368.235413][ T9170] bridge_slave_0: entered promiscuous mode [ 368.262317][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.287392][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.308273][ T9170] bridge_slave_1: entered allmulticast mode [ 368.336144][ T9170] bridge_slave_1: entered promiscuous mode [ 368.445621][ T9170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.479040][ T9170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.496968][ T5737] usb 4-1: USB disconnect, device number 15 [ 368.527540][ T29] audit: type=1400 audit(1777556932.908:468): avc: denied { read } for pid=9351 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.595472][ T9170] team0: Port device team_slave_0 added [ 368.617121][ T9170] team0: Port device team_slave_1 added [ 368.703296][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.717171][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.783511][ T9170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.865018][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.970707][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.017705][ T9170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.106289][ T9375] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 369.114147][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.893'. [ 369.488928][ T42] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 369.497757][ T42] ath9k_htc: Failed to initialize the device [ 369.519722][ T5737] usb 4-1: ath9k_htc: USB layer deinitialized [ 369.539402][ T9375] team0: entered promiscuous mode [ 369.544812][ T9375] team_slave_0: entered promiscuous mode [ 369.555688][ T9375] team_slave_1: entered promiscuous mode [ 369.561439][ T9375] team0: entered allmulticast mode [ 369.566527][ T9375] team_slave_0: entered allmulticast mode [ 369.572245][ T9375] team_slave_1: entered allmulticast mode [ 369.578420][ T9375] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 369.673235][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 369.925102][ T9170] hsr_slave_0: entered promiscuous mode [ 369.965699][ T29] audit: type=1400 audit(1777556934.348:469): avc: denied { mounton } for pid=9382 comm="syz.0.896" path="/proc/596/task" dev="proc" ino=23222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 369.989026][ T9170] hsr_slave_1: entered promiscuous mode [ 370.005011][ T9170] debugfs: 'hsr0' already exists in 'hsr' [ 370.012352][ T9170] Cannot create hsr debugfs directory [ 371.497727][ T9409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.667635][ T29] audit: type=1400 audit(1777556937.028:470): avc: denied { ioctl } for pid=9417 comm="syz.2.903" path="socket:[22179]" dev="sockfs" ino=22179 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.681779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 372.956045][ T9170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.967998][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.137276][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.169788][ T9170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.244399][ T9436] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 373.647576][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.659369][ T9170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.708134][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.733650][ T9170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.785629][ T9170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.103297][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.125310][ T9170] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.608177][ T7133] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.615299][ T7133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.627238][ T7133] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.634334][ T7133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.657192][ T9170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.668660][ T9170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.943178][ T9170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.410564][ T9170] veth0_vlan: entered promiscuous mode [ 382.485077][ T9170] veth1_vlan: entered promiscuous mode [ 382.741014][ T5737] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 382.964934][ T9170] veth0_macvtap: entered promiscuous mode [ 383.001989][ T9170] veth1_macvtap: entered promiscuous mode [ 383.076524][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.100763][ T5737] usb 2-1: Using ep0 maxpacket: 16 [ 383.137601][ T5737] usb 2-1: config 0 has no interfaces? [ 383.160702][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.178974][ T5737] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 383.196676][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.220730][ T909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.235638][ T5737] usb 2-1: config 0 descriptor?? [ 383.274482][ T909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.510409][ T909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.626366][ T909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.838952][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.880838][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.977500][ T909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.995886][ T29] audit: type=1400 audit(1777556948.368:471): avc: denied { ioctl } for pid=9581 comm="syz.0.925" path="socket:[22471]" dev="sockfs" ino=22471 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 384.040996][ T909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.402517][ T29] audit: type=1400 audit(1777556948.378:472): avc: denied { bind } for pid=9581 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 384.497992][ T29] audit: type=1400 audit(1777556948.378:473): avc: denied { connect } for pid=9581 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 384.623591][ T29] audit: type=1400 audit(1777556948.378:474): avc: denied { setopt } for pid=9581 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 384.650014][ T29] audit: type=1400 audit(1777556948.408:475): avc: denied { write } for pid=9581 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 385.244640][ T6707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.276134][ T6707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.327411][ T29] audit: type=1400 audit(1777556949.708:476): avc: denied { mounton } for pid=9170 comm="syz-executor" path="/root/syzkaller.9pMfOk/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 385.572660][ T29] audit: type=1400 audit(1777556949.828:477): avc: denied { mounton } for pid=9170 comm="syz-executor" path="/root/syzkaller.9pMfOk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 386.080040][ T29] audit: type=1400 audit(1777556949.828:478): avc: denied { mounton } for pid=9170 comm="syz-executor" path="/root/syzkaller.9pMfOk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 386.110620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 386.124977][ T6972] usb 2-1: USB disconnect, device number 8 [ 386.168289][ T29] audit: type=1400 audit(1777556949.938:479): avc: denied { mounton } for pid=9170 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 387.731308][ T29] audit: type=1400 audit(1777556952.118:480): avc: denied { bind } for pid=9619 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 390.241370][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 390.241386][ T29] audit: type=1400 audit(1777556954.538:484): avc: denied { write } for pid=9644 comm="syz.4.935" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 390.431746][ T29] audit: type=1400 audit(1777556954.538:485): avc: denied { open } for pid=9644 comm="syz.4.935" path="/2/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 390.455409][ T29] audit: type=1400 audit(1777556954.538:486): avc: denied { ioctl } for pid=9644 comm="syz.4.935" path="/2/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 391.382982][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 391.394425][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 391.404416][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 391.413392][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 392.589211][ T29] audit: type=1800 audit(1777556956.758:487): pid=9692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.943" name="file0" dev="overlay" ino=1062 res=0 errno=0 [ 393.534275][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.945'. [ 395.711613][ T29] audit: type=1400 audit(1777556960.028:488): avc: denied { read } for pid=9727 comm="syz.0.953" path="socket:[25070]" dev="sockfs" ino=25070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 396.049808][ T29] audit: type=1400 audit(1777556960.428:489): avc: denied { append } for pid=9734 comm="syz.2.956" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 396.696005][ T5737] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 396.897068][ T5737] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.138661][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.166326][ T5737] usb 4-1: Product: syz [ 397.178935][ T5737] usb 4-1: Manufacturer: syz [ 397.348871][ T5737] usb 4-1: SerialNumber: syz [ 397.359868][ T5737] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 397.398860][ T6961] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 398.960921][ T6961] usb 4-1: Service connection timeout for: 256 [ 399.118806][ T5710] usb 4-1: USB disconnect, device number 16 [ 399.179003][ T6961] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 399.834986][ T6961] ath9k_htc: Failed to initialize the device [ 399.869895][ T5710] usb 4-1: ath9k_htc: USB layer deinitialized [ 405.311741][ T9824] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 405.324691][ T9824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 405.373073][ T9824] veth1_virt_wifi: entered promiscuous mode [ 405.398764][ T9824] veth1_virt_wifi: entered allmulticast mode [ 405.898889][ T9834] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 405.898889][ T9834] program syz.4.980 not setting count and/or reply_len properly [ 405.953086][ T9834] openvswitch: netlink: IPv6 tunnel dst address is zero [ 406.339053][ T9837] syzkaller0: entered promiscuous mode [ 406.366652][ T9837] syzkaller0: entered allmulticast mode [ 406.502839][ T9831] x_tables: duplicate underflow at hook 4 [ 406.920889][ T9849] snd_dummy snd_dummy.0: control 2:6:7:syz1:2047 is already present [ 407.980719][ T5801] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 409.012086][ T9871] Set syz1 is full, maxelem 0 reached [ 409.603332][ T5801] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 409.625379][ T5801] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 409.659355][ T5801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 409.687403][ T5801] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 409.714105][ T5801] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 409.728901][ T29] audit: type=1400 audit(1777556974.098:490): avc: denied { mounton } for pid=9876 comm="syz.0.992" path="/194/file0" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 409.769053][ T5801] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 409.806317][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 409.840430][ T5801] usb 3-1: Product: syz [ 409.855287][ T5801] usb 3-1: Manufacturer: syz [ 409.888361][ T5801] cdc_wdm 3-1:1.0: skipping garbage [ 409.924101][ T5801] cdc_wdm 3-1:1.0: skipping garbage [ 409.947368][ T5801] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 409.962790][ T5801] cdc_wdm 3-1:1.0: Unknown control protocol [ 410.182047][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 410.182127][ T5710] usb 3-1: USB disconnect, device number 7 [ 410.188804][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 410.200530][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 410.473015][ T29] audit: type=1400 audit(1777556974.858:491): avc: denied { read } for pid=9887 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 410.632631][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 412.155560][ T29] audit: type=1326 audit(1777556976.508:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.2.999" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd48d9cdd9 code=0x0 [ 412.870843][ T29] audit: type=1400 audit(1777556976.948:493): avc: denied { append } for pid=9909 comm="syz.3.1001" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 413.800671][ T5737] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 413.942803][ T9922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1005'. [ 413.997856][ T5801] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 414.482076][ T5737] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.513341][ T5737] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 414.536044][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.560023][ T5737] usb 4-1: config 0 descriptor?? [ 414.622579][ T5801] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 414.643675][ T5801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.657412][ T5801] usb 1-1: config 0 has no interfaces? [ 414.663829][ T5801] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 414.673651][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.692619][ T5801] usb 1-1: config 0 descriptor?? [ 414.922485][ T6972] usb 1-1: USB disconnect, device number 11 [ 417.420749][ T5737] usbhid 4-1:0.0: can't add hid device: -71 [ 417.430054][ T5737] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 417.553762][ T5737] usb 4-1: USB disconnect, device number 17 [ 418.120319][ T9960] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 418.156204][ T9960] batadv1: entered promiscuous mode [ 418.166009][ T9960] batadv1: entered allmulticast mode [ 418.183272][ T9960] team0: Port device batadv1 added [ 419.633713][ T29] audit: type=1800 audit(1777556984.008:494): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1015" name="/" dev="fuse" ino=4 res=0 errno=0 [ 419.822553][ T9975] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 419.830390][ T9975] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 419.838205][ T9975] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1018'. [ 419.859071][ T9975] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 419.866961][ T9975] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 419.875398][ T9975] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1018'. [ 420.678482][ T29] audit: type=1800 audit(1777556985.058:495): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1020" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 421.791371][ T29] audit: type=1400 audit(1777556986.068:496): avc: denied { accept } for pid=9988 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 422.188785][ T29] audit: type=1400 audit(1777556986.568:497): avc: denied { mounton } for pid=9997 comm="syz.3.1024" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 422.391418][T10002] IPVS: Unknown mcast interface: bond0 [ 423.202385][T10006] kAFS: unable to lookup cell '(,c¾ûL' [ 423.383219][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.390570][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.698708][T10013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.733316][T10013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.953158][ T7133] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.968682][ T7133] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.978042][ T7133] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.986573][ T7133] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.005690][ T7133] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.029051][ T7133] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.075200][ T7133] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.158138][ T7133] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.246074][T10061] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 427.274436][T10061] team0: Port device batadv1 added [ 428.457741][T10073] serio: Serial port ttyS3 [ 429.217657][T10080] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 430.112782][ T29] audit: type=1400 audit(1777556994.458:498): avc: denied { listen } for pid=10083 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 430.448307][ T29] audit: type=1400 audit(1777556994.458:499): avc: denied { accept } for pid=10083 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 431.515459][T10105] netlink: 'syz.1.1051': attribute type 21 has an invalid length. [ 431.608432][ T77] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.618901][ T77] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.622037][T10105] netlink: 'syz.1.1051': attribute type 21 has an invalid length. [ 432.752098][ T77] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.779090][ T77] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.852833][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'. [ 432.936428][ T29] audit: type=1400 audit(1777556997.248:500): avc: denied { write } for pid=10115 comm="syz.0.1053" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 433.283966][T10133] kAFS: unable to lookup cell 'ÿ' [ 433.287798][T10133] kAFS: unable to lookup cell '(,c¾Ì' [ 434.002027][ T29] audit: type=1400 audit(1777556998.388:501): avc: denied { create } for pid=10143 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 434.004778][ T29] audit: type=1400 audit(1777556998.388:502): avc: denied { write } for pid=10143 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 434.415968][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.928619][T10158] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1062'. [ 440.089559][T10193] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1071'. [ 440.099182][T10193] unsupported nlmsg_type 40 [ 440.351687][ T29] audit: type=1400 audit(1777557004.738:503): avc: denied { map } for pid=10179 comm="syz.0.1068" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 440.885995][ T29] audit: type=1400 audit(1777557005.078:504): avc: denied { map } for pid=10179 comm="syz.0.1068" path="/dev/swradio0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.573362][ T29] audit: type=1400 audit(1777557005.958:505): avc: denied { create } for pid=10203 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 441.653480][T10206] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 441.660391][T10206] netlink: 'syz.3.1077': attribute type 12 has an invalid length. [ 441.735532][T10207] comedi comedi3: dt2801: I/O base address or length out of range [ 442.218278][ T29] audit: type=1400 audit(1777557006.528:506): avc: denied { write } for pid=10205 comm="syz.1.1076" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 442.616743][ T29] audit: type=1400 audit(1777557006.538:507): avc: denied { ioctl } for pid=10205 comm="syz.1.1076" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 443.908930][ T29] audit: type=1400 audit(1777557008.178:508): avc: denied { append } for pid=10237 comm="syz.1.1082" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 444.265052][T10245] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 444.293801][ T29] audit: type=1400 audit(1777557008.678:509): avc: denied { shutdown } for pid=10244 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 444.526192][T10252] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 444.541174][T10252] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 444.573280][T10252] tipc: Resetting bearer [ 446.211918][T10269] PKCS7: Unknown OID: [4] 0.0 [ 446.216646][T10269] PKCS7: Only support pkcs7_signedData type [ 448.180725][ T6961] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 449.458143][ T29] audit: type=1400 audit(1777557013.838:510): avc: denied { write } for pid=10290 comm="syz.3.1096" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 449.520677][ T6961] usb 1-1: Using ep0 maxpacket: 8 [ 449.527543][ T6961] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 449.539245][ T6961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.578347][ T6961] pvrusb2: Hardware description: Terratec Grabster AV400 [ 449.580802][ T29] audit: type=1400 audit(1777557013.868:511): avc: denied { create } for pid=10290 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 449.591874][ T6961] pvrusb2: ********** [ 449.652888][ T6961] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 449.976790][ T6961] pvrusb2: Important functionality might not be entirely working. [ 450.065058][ T6961] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 450.101664][ T6961] pvrusb2: ********** [ 450.119412][ T2357] pvrusb2: Invalid write control endpoint [ 450.407883][T10276] netlink: 'syz.0.1091': attribute type 21 has an invalid length. [ 450.445020][T10276] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1091'. [ 450.456861][ T2357] pvrusb2: Invalid write control endpoint [ 450.462824][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 450.472863][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 450.481623][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 450.491629][ T2357] pvrusb2: Device being rendered inoperable [ 450.500703][ T2357] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 450.508497][ T2357] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 450.669347][ T29] audit: type=1400 audit(1777557014.978:512): avc: denied { getopt } for pid=10296 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 450.950492][ T2357] pvrusb2: Attached sub-driver cx25840 [ 450.956266][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 450.966731][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 450.982279][ T5737] usb 1-1: USB disconnect, device number 12 [ 450.990321][ T29] audit: type=1400 audit(1777557014.978:513): avc: denied { listen } for pid=10296 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 451.313899][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 451.350722][ T29] audit: type=1400 audit(1777557015.728:514): avc: denied { connect } for pid=10301 comm="syz.1.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 451.414556][T10311] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1098'. [ 454.291067][ T5737] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 455.380752][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 455.395292][ T5737] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.362289][ T5737] usb 4-1: config 1 interface 0 has no altsetting 0 [ 456.448302][ T5737] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.40 [ 456.554955][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.593157][ T5737] usb 4-1: Product: ᚰ뫺༠వ箠兪Θ踪雥㓓멋虫ᠽ鹉ä´à³…㾚㭟ﳳ뚢ïšîµ¥ìˆŸï¿‘喯婱ે銌ꤨç¢ï ‡ä©·å½ºâ‹‰ä½´î›ƒîŒ‡í‡›ë¾„ހ뺆粋㡽ﾆڠçžå§’⃡쪌 [ 456.872530][ T5737] usb 4-1: Manufacturer: Г [ 456.877305][ T5737] usb 4-1: SerialNumber: 㮕꫊➊∀僀 [ 457.264895][ T5737] usb 4-1: can't set config #1, error -71 [ 457.289975][ T5737] usb 4-1: USB disconnect, device number 18 [ 458.722944][T10372] binder: 10369:10372 ioctl c018620c 200000000240 returned -22 [ 459.836600][T10404] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 460.351185][ T29] audit: type=1400 audit(1777557024.718:515): avc: denied { read } for pid=10406 comm="syz.2.1118" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 461.021639][ T29] audit: type=1400 audit(1777557024.718:516): avc: denied { open } for pid=10406 comm="syz.2.1118" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 461.069452][T10417] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 461.619493][ T29] audit: type=1800 audit(1777557025.798:517): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1119" name="file0" dev="overlay" ino=1156 res=0 errno=0 [ 462.955298][ T29] audit: type=1400 audit(1777557027.338:518): avc: denied { write } for pid=10435 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 463.200896][ T6972] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 463.650778][ T6972] usb 2-1: Using ep0 maxpacket: 16 [ 463.671590][ T6972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.759976][ T29] audit: type=1400 audit(1777557028.128:519): avc: denied { ioctl } for pid=10441 comm="syz.2.1126" path="socket:[27404]" dev="sockfs" ino=27404 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 464.128469][ T6972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.646053][ T6972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 464.659066][ T6972] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 464.668301][ T6972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.679424][ T6972] usb 2-1: config 0 descriptor?? [ 465.310771][ T5737] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 465.325238][ T6972] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 465.349011][ T6972] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 465.501240][ T5737] usb 3-1: Using ep0 maxpacket: 8 [ 465.507796][ T5737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.520247][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 465.532064][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.565544][ T5737] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 465.568082][ T6972] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 465.578843][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 465.595551][ T6972] microsoft 0003:045E:07DA.0002: no inputs found [ 465.604557][ T6972] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 465.619180][ T6972] usb 2-1: USB disconnect, device number 9 [ 465.684855][ T5737] usb 3-1: Product: syz [ 465.690882][ T5737] usb 3-1: Manufacturer: syz [ 465.701317][ T5737] usb 3-1: SerialNumber: syz [ 465.717622][ T5737] usb 3-1: config 0 descriptor?? [ 465.724711][T10462] fido_id[10462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 465.890649][ T5737] rc_core: IR keymap rc-imon-rsc not found [ 465.898787][ T5737] Registered IR keymap rc-empty [ 465.912719][ T5737] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 465.930523][ T5737] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 466.269334][ T29] audit: type=1400 audit(1777557030.608:520): avc: denied { read } for pid=10450 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 466.700347][ T10] usb 3-1: USB disconnect, device number 8 [ 467.785001][T10486] input: syz1 as /devices/virtual/input/input12 [ 468.440179][T10500] Illegal XDP return value 4294967274 on prog (id 111) dev N/A, expect packet loss! [ 469.419974][ T29] audit: type=1400 audit(1777557033.778:521): avc: denied { setattr } for pid=10509 comm="syz.3.1143" name="SCTP" dev="sockfs" ino=27540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 471.778807][T10524] netlink: 'syz.0.1146': attribute type 4 has an invalid length. [ 471.806023][T10524] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 471.813837][T10524] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 472.056527][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 477.070766][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 477.309976][ T29] audit: type=1326 audit(1777557041.688:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 477.337761][ T29] audit: type=1326 audit(1777557041.688:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 477.637225][ T29] audit: type=1326 audit(1777557041.688:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 477.668551][ T29] audit: type=1326 audit(1777557041.688:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 478.220647][ T29] audit: type=1326 audit(1777557041.688:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 478.743922][ T29] audit: type=1326 audit(1777557041.688:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 478.777560][ T29] audit: type=1326 audit(1777557041.688:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 479.074797][ T29] audit: type=1326 audit(1777557041.688:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 479.371783][T10573] lo speed is unknown, defaulting to 1000 [ 479.377741][T10573] lo speed is unknown, defaulting to 1000 [ 479.386979][T10573] lo speed is unknown, defaulting to 1000 [ 479.396753][T10573] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 479.410975][T10573] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 479.428019][T10573] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 479.484316][T10573] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 479.510380][ T29] audit: type=1326 audit(1777557041.688:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 479.563188][T10573] lo speed is unknown, defaulting to 1000 [ 479.582123][T10573] lo speed is unknown, defaulting to 1000 [ 479.589135][T10573] lo speed is unknown, defaulting to 1000 [ 479.596673][T10573] lo speed is unknown, defaulting to 1000 [ 479.600778][ T29] audit: type=1326 audit(1777557043.508:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.1.1153" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 479.603849][T10573] lo speed is unknown, defaulting to 1000 [ 479.794469][ T50] Bluetooth: hci1: unexpected event 0x30 length: 255 > 3 [ 481.797003][T10593] syzkaller0: entered promiscuous mode [ 481.877410][T10593] syzkaller0: entered allmulticast mode [ 482.110521][T10600] 0: reclassify loop, rule prio 0, protocol 800 [ 482.991367][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 482.991383][ T29] audit: type=1400 audit(1777557047.318:533): avc: denied { read } for pid=10602 comm="syz.3.1164" path="socket:[28831]" dev="sockfs" ino=28831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 483.066848][ T29] audit: type=1400 audit(1777557047.318:534): avc: denied { setopt } for pid=10602 comm="syz.3.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.065904][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'. [ 485.129622][T10628] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 485.565373][T10635] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 485.798387][T10648] hugetlbfs: syz.3.1172 (10648): Using mlock ulimits for SHM_HUGETLB is obsolete [ 486.147832][ T8001] Bluetooth: hci5: Frame reassembly failed (-84) [ 486.603300][T10662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10662 comm=syz.4.1173 [ 487.230360][T10671] overlay: ./file0 is not a directory [ 487.235834][ T29] audit: type=1400 audit(1777557051.608:535): avc: denied { mounton } for pid=10665 comm="syz.2.1175" path="/247/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 488.165707][ T5610] Bluetooth: hci5: command 0x1003 tx timeout [ 488.173198][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 488.301290][T10688] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 488.309376][T10688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1177'. [ 488.331014][T10688] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 490.013510][ T29] audit: type=1400 audit(1777557054.398:536): avc: denied { wake_alarm } for pid=10699 comm="syz.3.1181" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 490.377070][T10708] comedi comedi1: pcl818: I/O base address or length out of range [ 491.671345][T10722] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 493.675213][T10739] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 493.711914][T10739] ftl_cs: FTL header not found. [ 494.544897][T10747] netlink: 'syz.1.1192': attribute type 39 has an invalid length. [ 495.819159][ T29] audit: type=1400 audit(1777557060.118:537): avc: denied { watch watch_reads } for pid=10748 comm="syz.4.1193" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 495.861003][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.951006][T10754] kAFS: unable to lookup cell '(,c¾ûL' [ 497.127769][ T29] audit: type=1326 audit(1777557061.508:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 497.412366][ T29] audit: type=1326 audit(1777557061.508:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 497.439334][ T29] audit: type=1326 audit(1777557061.508:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 497.473172][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 497.482610][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 497.489418][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 497.637485][T10771] infiniband syz2: set down [ 497.643160][T10771] infiniband syz2: added vxcan1 [ 497.653354][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 498.506277][T10771] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 498.521376][T10771] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 498.538780][T10771] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 498.572217][ T29] audit: type=1326 audit(1777557061.508:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 498.603114][ T29] audit: type=1326 audit(1777557061.508:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 498.631221][T10771] RDS/IB: syz2: added [ 498.635617][T10771] smc: adding ib device syz2 with port count 1 [ 498.639814][ T29] audit: type=1326 audit(1777557061.508:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 498.642923][T10771] smc: ib device syz2 port 1 has no pnetid [ 498.689952][ T5737] vxcan1 speed is unknown, defaulting to 1000 [ 498.734287][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 498.816339][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 498.899307][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 498.980386][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 499.062091][T10771] vxcan1 speed is unknown, defaulting to 1000 [ 500.262028][ T29] audit: type=1326 audit(1777557061.508:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 500.623462][ T29] audit: type=1326 audit(1777557061.508:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 500.931749][ T42] IPVS: starting estimator thread 0... [ 501.002235][ T29] audit: type=1326 audit(1777557061.508:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 501.029203][ T29] audit: type=1326 audit(1777557061.508:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 501.055898][T10798] IPVS: using max 75 ests per chain, 180000 per kthread [ 501.063539][ T29] audit: type=1326 audit(1777557061.508:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="syz.1.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74db9cdd9 code=0x7ffc0000 [ 501.090773][ T29] audit: type=1400 audit(1777557063.078:549): avc: denied { ioctl } for pid=10775 comm="syz.0.1199" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 501.179094][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1205'. [ 501.961826][ T29] audit: type=1404 audit(1777557066.338:550): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 501.970944][T10815] virt_wifi0 speed is unknown, defaulting to 1000 [ 502.175457][T10824] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 503.032476][T10822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.047832][ T29] audit: type=1400 audit(1777557067.428:551): avc: denied { getattr } for pid=10814 comm="syz.0.1210" path="socket:[28100]" dev="sockfs" ino=28100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 503.318421][T10815] lo speed is unknown, defaulting to 1000 [ 503.327462][ T29] audit: type=1400 audit(1777557067.558:552): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 503.354232][T10815] vxcan1 speed is unknown, defaulting to 1000 [ 503.364270][ T29] audit: type=1400 audit(1777557067.748:553): avc: denied { create } for pid=10821 comm="syz.3.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 503.393199][ T5737] lo speed is unknown, defaulting to 1000 [ 503.497229][ T29] audit: type=1400 audit(1777557067.748:554): avc: denied { setopt } for pid=10821 comm="syz.3.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 503.522748][T10834] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 503.610748][ T29] audit: type=1400 audit(1777557067.748:555): avc: denied { read write } for pid=9170 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 503.635219][T10834] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 506.026002][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 506.026019][ T29] audit: type=1400 audit(1777557070.408:658): avc: denied { create } for pid=10890 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 506.136620][ T29] audit: type=1400 audit(1777557070.518:659): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 506.219727][ T29] audit: type=1400 audit(1777557070.598:660): avc: denied { create } for pid=10893 comm="syz.0.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 506.278364][ T29] audit: type=1400 audit(1777557070.648:661): avc: denied { read } for pid=10893 comm="syz.0.1236" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 506.341475][ T29] audit: type=1400 audit(1777557070.718:662): avc: denied { create } for pid=10893 comm="syz.0.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 506.422856][ T29] audit: type=1400 audit(1777557070.808:663): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 506.498722][ T29] audit: type=1400 audit(1777557070.838:664): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 506.548626][ T29] audit: type=1400 audit(1777557070.908:665): avc: denied { execmem } for pid=10895 comm="syz.0.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 506.633678][ T29] audit: type=1400 audit(1777557070.928:666): avc: denied { read } for pid=10896 comm="syz.2.1239" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 506.675129][ T29] audit: type=1400 audit(1777557070.958:667): avc: denied { read } for pid=10895 comm="syz.0.1238" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 506.738656][T10904] netlink: 'syz.3.1240': attribute type 10 has an invalid length. [ 506.773303][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1237'. [ 506.789443][T10905] netlink: 'syz.3.1240': attribute type 10 has an invalid length. [ 506.807745][T10904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.887614][T10904] team0: Port device netdevsim1 added [ 506.960117][T10905] team0: Port device netdevsim1 removed [ 506.998512][T10905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.043868][T10905] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 507.470361][ T5710] libceph: connect (1)[c::]:6789 error -101 [ 507.479018][ T5710] libceph: mon0 (1)[c::]:6789 connect error [ 507.506355][T10931] ceph: No mds server is up or the cluster is laggy [ 508.128758][T10942] kAFS: unable to lookup cell '(,c¾ûL' [ 508.542496][T10951] xt_SECMARK: invalid mode: 2 [ 511.240609][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 511.240625][ T29] audit: type=1400 audit(1777557075.618:760): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 511.311381][T10984] xt_l2tp: unknown flags: 17 [ 511.316085][ T29] audit: type=1400 audit(1777557075.678:761): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 511.389561][ T29] audit: type=1400 audit(1777557075.688:762): avc: denied { create } for pid=10983 comm="syz.2.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 511.436798][ T29] audit: type=1400 audit(1777557075.738:763): avc: denied { create } for pid=10983 comm="syz.2.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 511.476730][ T29] audit: type=1400 audit(1777557075.738:764): avc: denied { mounton } for pid=10983 comm="syz.2.1264" path="/263/file0" dev="tmpfs" ino=1392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 511.531936][ T29] audit: type=1400 audit(1777557075.738:765): avc: denied { read write } for pid=10983 comm="syz.2.1264" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 511.576089][ T29] audit: type=1400 audit(1777557075.738:766): avc: denied { create } for pid=10983 comm="syz.2.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 511.616375][ T29] audit: type=1400 audit(1777557075.758:767): avc: denied { map_create } for pid=10985 comm="syz.3.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 511.656168][ T29] audit: type=1400 audit(1777557075.758:768): avc: denied { prog_load } for pid=10985 comm="syz.3.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 511.695849][ T29] audit: type=1400 audit(1777557075.758:769): avc: denied { prog_load } for pid=10985 comm="syz.3.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.685844][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.693153][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.930251][T11016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.985654][T11016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.477019][T11029] xt_socket: unknown flags 0xc [ 513.539519][ T7125] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.563393][ T7125] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.593390][ T7125] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.625792][ T7125] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.598917][T11057] kAFS: unable to lookup cell '(,c¾ûL' [ 515.719014][T11057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.733490][T11057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.831311][T11057] tipc: Resetting bearer [ 515.839023][T11057] virt_wifi0: left promiscuous mode [ 515.958453][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.972466][ T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.008084][ T57] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.038402][ T57] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.134876][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 516.146320][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 516.154820][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 516.163843][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 516.271934][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 516.271947][ T29] audit: type=1400 audit(1777557080.658:915): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 516.371723][ T29] audit: type=1400 audit(1777557080.738:916): avc: denied { create } for pid=11077 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 516.412152][ T29] audit: type=1400 audit(1777557080.748:917): avc: denied { create } for pid=11077 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 516.522247][ T29] audit: type=1400 audit(1777557080.908:918): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 516.600757][ T29] audit: type=1400 audit(1777557080.968:919): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 516.625973][ T29] audit: type=1400 audit(1777557080.978:920): avc: denied { read write } for pid=11080 comm="syz.0.1299" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 516.660414][T11084] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 516.704410][ T29] audit: type=1400 audit(1777557080.978:921): avc: denied { create } for pid=11080 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 516.733341][T11081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.741689][ T29] audit: type=1400 audit(1777557080.988:922): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 516.766298][ T29] audit: type=1400 audit(1777557081.058:923): avc: denied { read } for pid=11083 comm="syz.3.1301" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 516.831435][ T29] audit: type=1400 audit(1777557081.068:924): avc: denied { execmem } for pid=11083 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 516.981586][T11100] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 516.988124][T11100] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 517.056991][T11100] vhci_hcd vhci_hcd.0: Device attached [ 517.090452][T11101] vhci_hcd: connection closed [ 517.090826][ T7125] vhci_hcd vhci_hcd.0: stop threads [ 517.122168][ T7125] vhci_hcd vhci_hcd.0: release socket [ 517.142346][ T7125] vhci_hcd vhci_hcd.0: disconnect device [ 517.984915][T11115] virt_wifi0 speed is unknown, defaulting to 1000 [ 517.992730][T11115] lo speed is unknown, defaulting to 1000 [ 517.994051][T11117] kAFS: unable to lookup cell '(,c¾ûL' [ 517.999533][T11115] vxcan1 speed is unknown, defaulting to 1000 [ 518.159242][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 518.195617][ T7125] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.204787][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 518.223618][ T7125] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.238890][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 518.249329][ T7125] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.262177][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 518.271296][ T7125] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.880041][T11144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.133698][T11153] kAFS: unable to lookup cell '(,c¾ûL' [ 520.191776][T11181] kAFS: unable to lookup cell '(,c¾ûL' [ 520.308382][T11181] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.315891][T11181] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.454975][T11181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.480479][T11181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.638810][T11181] batman_adv: batadv0: Interface deactivated: bridge1 [ 520.742538][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1333'. [ 520.761810][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1333'. [ 520.788887][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.823559][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.853275][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.883732][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.912249][T11193] can0: slcan on ttyS3. [ 520.912263][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.912290][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.980845][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.013294][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.202638][T11194] can0 (unregistered): slcan off ttyS3. [ 521.281165][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 521.281184][ T29] audit: type=1400 audit(1777557085.658:1587): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 521.335726][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 521.342424][T11204] audit: audit_backlog=65 > audit_backlog_limit=64 [ 521.356378][ T5271] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 521.365979][T11204] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 521.377653][ T5271] audit: backlog limit exceeded [ 521.381233][T11206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 521.387101][ T29] audit: type=1400 audit(1777557085.658:1588): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 521.393473][T11206] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 521.410501][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 521.888632][T11222] kAFS: unable to lookup cell '(,c¾ûL' [ 522.131950][T11226] virt_wifi0 speed is unknown, defaulting to 1000 [ 522.138004][T11226] lo speed is unknown, defaulting to 1000 [ 522.159425][T11226] vxcan1 speed is unknown, defaulting to 1000 [ 525.158652][T11267] kAFS: unable to lookup cell '(,c¾ûL' [ 525.654065][T11287] netlink: 'syz.4.1366': attribute type 39 has an invalid length. [ 525.902603][T11291] kAFS: unable to lookup cell '(,c¾ûL' [ 526.292315][ T29] kauditd_printk_skb: 7542 callbacks suppressed [ 526.292331][ T29] audit: type=1400 audit(1777557090.668:9040): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 526.380434][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 526.397930][ T29] audit: type=1400 audit(1777557090.678:9041): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 526.399333][ T5271] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 526.479143][ T29] audit: type=1400 audit(1777557090.678:9042): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 526.503737][ T6972] lo speed is unknown, defaulting to 1000 [ 526.528176][ T6972] syz0: Port: 1 Link DOWN [ 526.553658][ T5612] audit: audit_backlog=65 > audit_backlog_limit=64 [ 526.563976][ T5271] audit: backlog limit exceeded [ 526.584007][ T29] audit: type=1400 audit(1777557090.678:9043): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 526.666937][ T5612] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 526.668384][ T29] audit: type=1400 audit(1777557090.678:9044): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 527.149332][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 527.230263][T11309] kAFS: unable to lookup cell '(,c¾ûL' [ 527.265994][T11309] tipc: Resetting bearer [ 527.394460][ T7133] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.424260][ T7133] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 527.492848][ T7133] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.524960][ T7133] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 527.552879][ T7133] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.587870][ T7133] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 527.624869][ T7133] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.648253][T11315] kAFS: unable to lookup cell '(,c¾ûL' [ 527.662139][ T7133] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 530.515562][T11356] kAFS: unable to lookup cell '(,c¾ûL' [ 530.824177][T11358] kAFS: unable to lookup cell '(,c¾ûL' [ 530.832549][T11360] netlink: 'syz.4.1395': attribute type 10 has an invalid length. [ 530.890779][T11360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.927075][T11360] team0: Port device netdevsim1 added [ 531.075422][T11366] netlink: 'syz.3.1397': attribute type 33 has an invalid length. [ 531.103554][T11366] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1397'. [ 531.300706][ T29] kauditd_printk_skb: 7138 callbacks suppressed [ 531.300717][ T29] audit: type=1400 audit(1777557095.678:15465): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 531.329950][ T29] audit: type=1400 audit(1777557095.678:15466): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 531.369450][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 531.376508][ T5271] audit: audit_lost=275 audit_rate_limit=0 audit_backlog_limit=64 [ 531.386353][ T5271] audit: backlog limit exceeded [ 531.391483][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 531.398053][ T5271] audit: audit_lost=276 audit_rate_limit=0 audit_backlog_limit=64 [ 531.406168][ T5271] audit: backlog limit exceeded [ 531.411362][ T29] audit: type=1400 audit(1777557095.678:15467): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 531.432736][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 532.107532][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 532.159771][T11387] ipvlan2: entered allmulticast mode [ 532.164667][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1403'. [ 532.183532][T11387] syz_tun: entered allmulticast mode [ 532.809013][T11402] kAFS: unable to lookup cell '(,c¾ûL' [ 533.280688][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 533.287508][ T5610] Bluetooth: hci5: command 0x1003 tx timeout [ 533.861212][T11409] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 535.516945][T11431] kAFS: unable to lookup cell '(,c¾ûL' [ 536.210048][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 536.311693][ T29] kauditd_printk_skb: 12640 callbacks suppressed [ 536.311708][ T29] audit: type=1400 audit(1777557100.688:27443): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 536.361006][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 536.377837][ T5271] audit: audit_lost=499 audit_rate_limit=0 audit_backlog_limit=64 [ 536.390294][ T5271] audit: backlog limit exceeded [ 536.396826][ T29] audit: type=1400 audit(1777557100.688:27444): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 536.422804][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 536.438200][ T5271] audit: audit_lost=500 audit_rate_limit=0 audit_backlog_limit=64 [ 536.449173][ T5271] audit: backlog limit exceeded [ 536.459252][ T29] audit: type=1400 audit(1777557100.688:27445): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 536.480721][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 537.163575][T11454] batman_adv: batadv0: Adding interface: gretap2 [ 537.201693][T11454] batman_adv: batadv0: The MTU of interface gretap2 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.347496][T11454] batman_adv: batadv0: Interface activated: gretap2 [ 541.320769][ T29] kauditd_printk_skb: 11142 callbacks suppressed [ 541.320785][ T29] audit: type=1400 audit(1777557105.698:37938): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 541.371256][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.385786][ T5271] audit: audit_lost=718 audit_rate_limit=0 audit_backlog_limit=64 [ 541.413201][ T5271] audit: backlog limit exceeded [ 541.418145][ T29] audit: type=1400 audit(1777557105.698:37939): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 541.443160][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.454224][ T5271] audit: audit_lost=719 audit_rate_limit=0 audit_backlog_limit=64 [ 541.475611][ T5271] audit: backlog limit exceeded [ 541.491622][ T29] audit: type=1400 audit(1777557105.698:37940): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 541.513926][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 542.790490][T11510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11510 comm=syz.1.1444 [ 543.023019][ T50] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 545.411391][T11555] kAFS: unable to lookup cell '(,c¾ûL' [ 546.332105][ T29] kauditd_printk_skb: 11973 callbacks suppressed [ 546.332116][ T29] audit: type=1400 audit(1777557110.718:47545): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 546.374692][T11575] xt_hashlimit: max too large, truncated to 1048576 [ 546.445491][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 546.448366][ T29] audit: type=1400 audit(1777557110.768:47546): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 546.506611][ T5271] audit: audit_lost=1510 audit_rate_limit=0 audit_backlog_limit=64 [ 546.539662][T11582] audit: audit_backlog=65 > audit_backlog_limit=64 [ 546.547131][T11582] audit: audit_lost=1511 audit_rate_limit=0 audit_backlog_limit=64 [ 546.550066][ T5271] audit: backlog limit exceeded [ 546.555495][ T29] audit: type=1400 audit(1777557110.778:47547): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 546.586699][T11582] audit: backlog limit exceeded [ 546.594869][T11582] audit: audit_backlog=65 > audit_backlog_limit=64 [ 546.742192][T11585] kAFS: unable to lookup cell '(,c¾ûL' [ 546.889099][T11588] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 546.954061][T11588] ALSA: mixer_oss: invalid index 1374389 [ 547.461168][T11596] macsec1: entered promiscuous mode [ 547.480326][T11596] virt_wifi0: entered promiscuous mode [ 548.369731][T11609] netlink: 'syz.2.1477': attribute type 1 has an invalid length. [ 548.439076][T11612] bond4: entered promiscuous mode [ 548.478086][T11612] bond4: entered allmulticast mode [ 548.515333][T11612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.600428][T11609] bridge3: entered promiscuous mode [ 548.622741][T11609] bridge3: entered allmulticast mode [ 548.650778][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 548.699068][T11609] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 548.798634][T11612] bridge4: entered promiscuous mode [ 548.805569][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 548.821174][T11612] bridge4: entered allmulticast mode [ 548.851255][T11612] bond4: (slave bridge4): Enslaving as a backup interface with a down link [ 548.938898][T11612] bridge5: entered promiscuous mode [ 548.965607][T11612] bridge5: entered allmulticast mode [ 548.984586][T11612] bond4: (slave bridge5): Enslaving as a backup interface with a down link [ 549.254661][T11624] kAFS: unable to lookup cell '(,c¾ûL' [ 549.277794][T11624] virt_wifi0: left promiscuous mode [ 549.558022][T11632] veth1_virt_wifi: left promiscuous mode [ 549.576165][T11632] veth1_virt_wifi: left allmulticast mode [ 549.622221][T11632] macsec1: left promiscuous mode [ 549.837451][T11638] netlink: 'syz.4.1487': attribute type 39 has an invalid length. [ 550.917408][T11653] bridge_slave_0: left allmulticast mode [ 550.951123][T11653] bridge_slave_0: left promiscuous mode [ 550.980810][T11653] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.031519][T11653] bridge_slave_1: left allmulticast mode [ 551.047385][T11640] syz.2.1488 (11640): drop_caches: 2 [ 551.056625][T11653] bridge_slave_1: left promiscuous mode [ 551.079446][T11653] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.163269][T11653] bond0: (slave bond_slave_0): Releasing backup interface [ 551.210223][T11653] bond0: (slave bond_slave_1): Releasing backup interface [ 551.248028][T11653] team0: Port device team_slave_0 removed [ 551.266956][T11653] team0: Port device team_slave_1 removed [ 551.293733][T11653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.332682][T11653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.342144][ T29] kauditd_printk_skb: 8815 callbacks suppressed [ 551.342156][ T29] audit: type=1400 audit(1777557115.728:55614): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 551.401406][T11660] kAFS: unable to lookup cell '(,c¾ûL' [ 551.404172][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 551.419881][ T5612] audit: audit_backlog=65 > audit_backlog_limit=64 [ 551.431837][ T5612] audit: audit_lost=1762 audit_rate_limit=0 audit_backlog_limit=64 [ 551.439874][ T5271] audit: audit_lost=1763 audit_rate_limit=0 audit_backlog_limit=64 [ 551.439889][ T5271] audit: backlog limit exceeded [ 551.440013][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 551.440025][ T5271] audit: audit_lost=1764 audit_rate_limit=0 audit_backlog_limit=64 [ 551.440037][ T5271] audit: backlog limit exceeded [ 551.440084][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 551.484732][T11653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.657467][T11671] bridge_slave_0: Caught tx_queue_len zero misconfig [ 553.675326][ T50] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 553.823050][T11703] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 553.873733][T11703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1509'. [ 553.886169][T11705] kAFS: unable to lookup cell '(,c¾ûL' [ 553.965514][T11703] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 554.290596][T11717] kAFS: unable to lookup cell '(,c¾ûL' [ 554.317169][ T42] libceph: connect (1)[c::]:6789 error -101 [ 554.338729][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 554.610810][ T42] libceph: connect (1)[c::]:6789 error -101 [ 554.635832][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 555.047822][T11714] ceph: No mds server is up or the cluster is laggy [ 555.719238][T11750] kAFS: unable to lookup cell '(,c¾ûL' [ 555.858204][T11754] netlink: 'syz.3.1527': attribute type 4 has an invalid length. [ 555.908076][T11754] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1527'. [ 555.999249][T11754] .`: renamed from bond0 [ 556.149997][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1530'. [ 556.245838][T11761] virt_wifi0 speed is unknown, defaulting to 1000 [ 556.269714][T11761] lo speed is unknown, defaulting to 1000 [ 556.344447][T11761] vxcan1 speed is unknown, defaulting to 1000 [ 556.352100][ T29] kauditd_printk_skb: 8425 callbacks suppressed [ 556.352114][ T29] audit: type=1400 audit(1777557120.738:63995): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 556.406981][ T29] audit: type=1400 audit(1777557120.738:63996): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 556.429909][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 556.460111][ T5271] audit: audit_lost=1780 audit_rate_limit=0 audit_backlog_limit=64 [ 556.461284][ T29] audit: type=1400 audit(1777557120.738:63997): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 556.497427][ T5271] audit: backlog limit exceeded [ 556.507399][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 556.515694][ T5271] audit: audit_lost=1781 audit_rate_limit=0 audit_backlog_limit=64 [ 556.516450][ T29] audit: type=1400 audit(1777557120.738:63998): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 556.548801][T11767] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.225761][T11773] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 557.282227][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.454472][T11778] Cannot find del_set index 2 as target [ 557.764032][T11786] kAFS: unable to lookup cell '(,c¾ûL' [ 559.682230][T11821] kAFS: unable to lookup cell '(,c¾ûL' [ 559.697786][T11821] tipc: Resetting bearer [ 560.656128][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 561.303655][T11853] x_tables: ip_tables: osf match: only valid for protocol 6 [ 561.363404][ T29] kauditd_printk_skb: 9247 callbacks suppressed [ 561.363418][ T29] audit: type=1400 audit(1777557125.738:73243): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 561.410899][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.417527][ T5271] audit: audit_lost=1783 audit_rate_limit=0 audit_backlog_limit=64 [ 561.426821][T11853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.434493][ T5271] audit: backlog limit exceeded [ 561.439559][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.447193][T11853] audit: audit_lost=1784 audit_rate_limit=0 audit_backlog_limit=64 [ 561.462094][ T5271] audit: audit_lost=1785 audit_rate_limit=0 audit_backlog_limit=64 [ 561.474461][T11853] audit: backlog limit exceeded [ 561.481060][ T5271] audit: backlog limit exceeded [ 563.032247][T11868] kAFS: unable to lookup cell '(,c¾ûL' [ 563.866226][T11886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1572'. [ 563.907506][T11886] bridge6: entered promiscuous mode [ 563.920876][T11886] bridge6: entered allmulticast mode [ 564.899046][T11902] kAFS: unable to lookup cell '(,c¾ûL' [ 566.370833][ T29] kauditd_printk_skb: 10249 callbacks suppressed [ 566.370849][ T29] audit: type=1400 audit(1777557130.748:81888): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 566.446044][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 566.459301][T11939] audit: audit_backlog=65 > audit_backlog_limit=64 [ 566.475769][ T5271] audit: audit_lost=2321 audit_rate_limit=0 audit_backlog_limit=64 [ 566.490391][T11940] audit: audit_backlog=65 > audit_backlog_limit=64 [ 566.497569][ T29] audit: type=1400 audit(1777557130.788:81889): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 566.518768][T11939] audit: audit_lost=2322 audit_rate_limit=0 audit_backlog_limit=64 [ 566.526771][ T5271] audit: backlog limit exceeded [ 566.531759][T11940] audit: audit_lost=2323 audit_rate_limit=0 audit_backlog_limit=64 [ 566.540170][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 566.604924][T11942] batman_adv: batadv0: Interface deactivated: gretap2 [ 568.655503][T11972] netlink: 'syz.4.1604': attribute type 4 has an invalid length. [ 568.894613][T11980] syzkaller0: entered promiscuous mode [ 568.913940][T11980] syzkaller0: entered allmulticast mode [ 568.966600][T11980] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1607'. [ 569.610629][T11961] Bluetooth: hci1: command 0x0406 tx timeout [ 570.813360][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1623'. [ 571.261724][T12028] batadv_slave_0: Caught tx_queue_len zero misconfig [ 571.381374][ T29] kauditd_printk_skb: 8087 callbacks suppressed [ 571.381387][ T29] audit: type=1400 audit(1777557135.768:89832): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 571.440908][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 571.457295][ T5271] audit: audit_lost=2372 audit_rate_limit=0 audit_backlog_limit=64 [ 571.474665][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 571.476360][ T5271] audit: backlog limit exceeded [ 571.489143][ T29] audit: type=1400 audit(1777557135.798:89833): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 571.518099][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 571.524641][ T5609] audit: audit_lost=2373 audit_rate_limit=0 audit_backlog_limit=64 [ 571.524672][ T5609] audit: backlog limit exceeded [ 571.558925][ T29] audit: type=1400 audit(1777557135.798:89834): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 572.026739][T12038] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.054864][T12038] lo speed is unknown, defaulting to 1000 [ 572.124448][T12038] vxcan1 speed is unknown, defaulting to 1000 [ 573.288329][T12051] kAFS: unable to lookup cell '(,c¾ûL' [ 573.967262][ T42] libceph: connect (1)[c::]:6789 error -101 [ 573.997118][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 574.254355][T12074] kAFS: unable to lookup cell '(,c¾ûL' [ 574.281345][ T42] libceph: connect (1)[c::]:6789 error -101 [ 574.309288][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 574.719674][T12064] ceph: No mds server is up or the cluster is laggy [ 574.843399][ T42] libceph: connect (1)[c::]:6789 error -101 [ 574.889281][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 574.952862][T12090] kAFS: unable to lookup cell '(,c¾ûL' [ 574.983781][T12091] batadv_slave_0: Caught tx_queue_len zero misconfig [ 575.436398][T12101] virt_wifi0 speed is unknown, defaulting to 1000 [ 575.474791][T12106] kAFS: unable to lookup cell '(,c¾ûL' [ 575.498494][T12101] lo speed is unknown, defaulting to 1000 [ 575.550363][T12101] vxcan1 speed is unknown, defaulting to 1000 [ 575.907126][T12081] syz.0.1643 (12081): drop_caches: 2 [ 576.391014][ T29] kauditd_printk_skb: 6611 callbacks suppressed [ 576.391024][ T29] audit: type=1400 audit(1777557140.778:95742): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 576.474517][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 576.486225][ T29] audit: type=1400 audit(1777557140.808:95743): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 576.514406][ T5271] audit: audit_lost=2609 audit_rate_limit=0 audit_backlog_limit=64 [ 576.525370][ T5271] audit: backlog limit exceeded [ 576.535638][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 576.547901][ T5271] audit: audit_lost=2610 audit_rate_limit=0 audit_backlog_limit=64 [ 576.558670][ T29] audit: type=1400 audit(1777557140.808:95744): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 576.592949][ T5271] audit: backlog limit exceeded [ 576.607200][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 577.162228][T12128] xt_cgroup: invalid path, errno=-2 [ 577.466183][T12133] kAFS: unable to lookup cell '(,c¾ûL' [ 577.576413][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 577.624384][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1663'. [ 577.670942][ T5610] Bluetooth: hci3: unexpected event for opcode 0x041c [ 577.839904][T12144] kAFS: unable to lookup cell '(,c¾ûL' [ 577.843283][T12143] kAFS: unable to lookup cell '(,c¾ûL' [ 577.994788][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 578.011481][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.025716][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1663'. [ 578.036644][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.120078][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.148659][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.342271][T12150] IPv6: NLM_F_CREATE should be specified when creating new route [ 579.000459][T12164] netlink: 'syz.4.1672': attribute type 10 has an invalid length. [ 579.079732][T12164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1672'. [ 579.187946][T12170] kAFS: unable to lookup cell '(,c¾ûL' [ 579.206556][T12167] virt_wifi0 speed is unknown, defaulting to 1000 [ 579.280354][T12167] lo speed is unknown, defaulting to 1000 [ 579.281380][ T8001] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.323816][ T8001] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.356789][ T8001] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.391656][ T8001] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.426061][T12167] vxcan1 speed is unknown, defaulting to 1000 [ 579.476022][T12175] kAFS: unable to lookup cell '(,c¾ûL' [ 579.876155][T12181] kAFS: unable to lookup cell '(,c¾ûL' [ 581.401854][ T29] kauditd_printk_skb: 6016 callbacks suppressed [ 581.401869][ T29] audit: type=1400 audit(1777557145.788:101696): avc: denied { map_create } for pid=12191 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 581.483704][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 581.494956][ T29] audit: type=1400 audit(1777557145.818:101697): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 581.521432][ T5271] audit: audit_lost=2633 audit_rate_limit=0 audit_backlog_limit=64 [ 581.554194][ T5271] audit: backlog limit exceeded [ 581.571638][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 581.587955][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 581.596996][ T5271] audit: audit_lost=2634 audit_rate_limit=0 audit_backlog_limit=64 [ 581.613052][ T5271] audit: backlog limit exceeded [ 581.623638][ T5609] audit: audit_lost=2635 audit_rate_limit=0 audit_backlog_limit=64 [ 582.357536][T12205] kAFS: unable to lookup cell '(,c¾ûL' [ 582.719934][T12199] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 582.767172][T12212] kAFS: unable to lookup cell '(,c¾ûL' [ 582.831518][T12199] bond2 (unregistering): Released all slaves [ 583.351417][T12217] kAFS: unable to lookup cell '(,c¾ûL' [ 583.626065][ T10] IPVS: starting estimator thread 0... [ 583.730663][T12222] IPVS: using max 45 ests per chain, 108000 per kthread [ 583.784825][T12221] can0: slcan on ttyS3. [ 583.931567][T12224] can0 (unregistered): slcan off ttyS3. [ 586.303192][T12251] kAFS: unable to lookup cell '(,c¾ûL' [ 586.411195][ T29] kauditd_printk_skb: 6792 callbacks suppressed [ 586.411225][ T29] audit: type=1400 audit(1777557150.788:108168): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 586.472999][ T29] audit: type=1400 audit(1777557150.788:108169): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 586.500675][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 586.514142][ T5271] audit: audit_lost=2743 audit_rate_limit=0 audit_backlog_limit=64 [ 586.536995][ T5271] audit: backlog limit exceeded [ 586.547771][T12253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 586.554791][T12255] audit: audit_backlog=65 > audit_backlog_limit=64 [ 586.554807][T12255] audit: audit_lost=2744 audit_rate_limit=0 audit_backlog_limit=64 [ 586.554821][T12255] audit: backlog limit exceeded [ 586.567015][T12255] kAFS: unable to lookup cell '(,c¾ûL' [ 586.583361][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 588.948802][T12279] x_tables: duplicate underflow at hook 1 [ 589.051830][T12279] vlan0: entered allmulticast mode [ 589.086452][T12279] macsec0: entered allmulticast mode [ 589.446418][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 589.501464][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 589.557393][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 589.648145][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 589.693011][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 590.290052][T12293] kAFS: unable to lookup cell '(,c¾ûL' [ 591.421065][ T29] kauditd_printk_skb: 5122 callbacks suppressed [ 591.421080][ T29] audit: type=1400 audit(1777557155.808:113288): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 591.482564][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 591.496486][ T5271] audit: audit_lost=2747 audit_rate_limit=0 audit_backlog_limit=64 [ 591.514921][ T5271] audit: backlog limit exceeded [ 591.521348][ T29] audit: type=1400 audit(1777557155.838:113289): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 591.561339][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 591.570893][ T5271] audit: audit_lost=2748 audit_rate_limit=0 audit_backlog_limit=64 [ 591.586290][ T5271] audit: backlog limit exceeded [ 591.594306][ T29] audit: type=1400 audit(1777557155.838:113290): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 591.624281][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 592.179114][T12308] netlink: 'syz.3.1718': attribute type 4 has an invalid length. [ 592.234727][T12308] netlink: 'syz.3.1718': attribute type 4 has an invalid length. [ 592.276779][ T42] lo speed is unknown, defaulting to 1000 [ 592.282663][ T42] syz0: Port: 1 Link ACTIVE [ 592.765193][T12316] PKCS7: Unknown OID: [4] 0.0 [ 592.804420][T12316] PKCS7: Only support pkcs7_signedData type [ 592.895818][T12316] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1721'. [ 593.836680][T12319] kAFS: unable to lookup cell '(,c¾ûL' [ 594.760638][T12333] bond1: Unable to set down delay as MII monitoring is disabled [ 594.848342][T12333] bond1 (unregistering): Released all slaves [ 596.443365][ T29] kauditd_printk_skb: 7725 callbacks suppressed [ 596.443381][ T29] audit: type=1400 audit(1777557160.828:120663): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 596.509221][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.513965][T12351] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.538426][T12351] audit: audit_lost=2867 audit_rate_limit=0 audit_backlog_limit=64 [ 596.543299][ T5271] audit: audit_lost=2868 audit_rate_limit=0 audit_backlog_limit=64 [ 596.552753][ T29] audit: type=1400 audit(1777557160.828:120664): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 596.574533][T12353] kAFS: unable to lookup cell '(,c¾ûL' [ 596.585723][T12354] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.592540][ T5271] audit: backlog limit exceeded [ 596.602901][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.603451][T12351] audit: backlog limit exceeded [ 597.674502][T12370] kAFS: unable to lookup cell '(,c¾ûL' [ 597.910907][T12375] xt_NFQUEUE: number of total queues is 0 [ 598.963305][T12386] virt_wifi0 speed is unknown, defaulting to 1000 [ 598.992826][T12386] lo speed is unknown, defaulting to 1000 [ 599.043495][T12386] vxcan1 speed is unknown, defaulting to 1000 [ 601.451108][ T29] kauditd_printk_skb: 6706 callbacks suppressed [ 601.451137][ T29] audit: type=1400 audit(1777557165.828:127367): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 601.475223][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.538629][T12415] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.546791][ T5608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.556625][ T5271] audit: audit_lost=2871 audit_rate_limit=0 audit_backlog_limit=64 [ 601.564811][T12415] audit: audit_lost=2872 audit_rate_limit=0 audit_backlog_limit=64 [ 601.564844][T12415] audit: backlog limit exceeded [ 601.566613][ T5608] audit: audit_lost=2873 audit_rate_limit=0 audit_backlog_limit=64 [ 601.592879][ T29] audit: type=1400 audit(1777557165.828:127368): avc: denied { execmem } for pid=12410 comm="syz.2.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 601.641755][ T5271] audit: backlog limit exceeded [ 602.612207][T12428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 602.659583][T12428] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 602.734449][T12428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 602.772343][T12428] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 602.833997][T12428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.875464][T12428] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 602.922014][T12428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 602.950744][T12428] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 603.012180][T12428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 603.040824][T12428] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 603.360555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 605.008697][T12460] kAFS: unable to lookup cell '(,c¾ûL' [ 606.084906][T12453] syz.2.1765 (12453): drop_caches: 2 [ 606.463322][ T29] kauditd_printk_skb: 6871 callbacks suppressed [ 606.463338][ T29] audit: type=1400 audit(1777557170.838:133609): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 606.556581][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 606.577371][T12481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 606.595717][ T5271] audit: audit_lost=3084 audit_rate_limit=0 audit_backlog_limit=64 [ 606.617429][ T5271] audit: backlog limit exceeded [ 606.631231][ T29] audit: type=1400 audit(1777557170.848:133610): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 606.635481][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 606.663146][T12483] audit: audit_backlog=65 > audit_backlog_limit=64 [ 606.711518][T12481] audit: audit_lost=3085 audit_rate_limit=0 audit_backlog_limit=64 [ 606.733109][ T5271] audit: audit_lost=3086 audit_rate_limit=0 audit_backlog_limit=64 [ 606.875892][T12484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1774'. [ 607.726673][T12491] syz.4.1776 (12491): /proc/12489/oom_adj is deprecated, please use /proc/12489/oom_score_adj instead. [ 608.220878][T12497] kAFS: unable to lookup cell '(,c¾ûL' [ 608.233251][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1777'. [ 608.376937][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1777'. [ 610.340038][T12523] bond0: option xmit_hash_policy: invalid value (6) [ 610.352833][T12523] bond0 (unregistering): Released all slaves [ 610.512754][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 610.615786][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 611.470709][ T29] kauditd_printk_skb: 5522 callbacks suppressed [ 611.470726][ T29] audit: type=1400 audit(1777557175.848:139126): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 611.530550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 611.563841][ T29] audit: type=1400 audit(1777557175.858:139127): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 611.639987][ T29] audit: type=1400 audit(1777557175.858:139128): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 611.701858][ T29] audit: type=1400 audit(1777557175.858:139129): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 611.725324][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.746168][ T5271] audit: audit_lost=3089 audit_rate_limit=0 audit_backlog_limit=64 [ 611.747931][T12547] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.754855][ T5271] audit: backlog limit exceeded [ 611.772550][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.779891][ T5271] audit: audit_lost=3090 audit_rate_limit=0 audit_backlog_limit=64 [ 613.172753][T12564] kAFS: unable to lookup cell '(,c¾ûL' [ 613.218263][ T42] lo speed is unknown, defaulting to 1000 [ 613.235388][ T42] syz0: Port: 1 Link DOWN [ 614.660813][T12575] kAFS: unable to lookup cell '(,c¾ûL' [ 616.483988][ T29] kauditd_printk_skb: 4670 callbacks suppressed [ 616.484003][ T29] audit: type=1400 audit(1777557180.858:143776): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 616.557587][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 616.574120][ T5608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 616.590994][ T5271] audit: audit_lost=3099 audit_rate_limit=0 audit_backlog_limit=64 [ 616.606537][ T5271] audit: backlog limit exceeded [ 616.624497][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 616.652505][ T5271] audit: audit_lost=3100 audit_rate_limit=0 audit_backlog_limit=64 [ 616.665036][ T5608] audit: audit_lost=3101 audit_rate_limit=0 audit_backlog_limit=64 [ 616.679446][ T29] audit: type=1400 audit(1777557180.868:143777): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 616.706642][ T5271] audit: backlog limit exceeded [ 616.781688][T12589] virt_wifi0 speed is unknown, defaulting to 1000 [ 616.878950][T12589] lo speed is unknown, defaulting to 1000 [ 616.963398][T12589] vxcan1 speed is unknown, defaulting to 1000 [ 618.680905][T12617] kAFS: unable to lookup cell '(,c¾ûL' [ 618.726381][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.496441][T12625] syzkaller0: entered promiscuous mode [ 619.523388][T12625] syzkaller0: entered allmulticast mode [ 621.454980][T12655] kAFS: unable to lookup cell '(,c¾ûL' [ 621.491794][ T29] kauditd_printk_skb: 9585 callbacks suppressed [ 621.491818][ T29] audit: type=1400 audit(1777557186.853:150011): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.491874][ T29] audit: type=1400 audit(1777557186.863:150012): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.491914][ T29] audit: type=1400 audit(1777557186.863:150013): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.491971][ T29] audit: type=1400 audit(1777557186.863:150014): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.492019][ T29] audit: type=1400 audit(1777557186.863:150015): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.492083][ T29] audit: type=1400 audit(1777557186.863:150016): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.492147][ T29] audit: type=1400 audit(1777557186.863:150017): avc: denied { execmem } for pid=12654 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 621.492208][ T29] audit: type=1400 audit(1777557186.863:150018): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.492273][ T29] audit: type=1400 audit(1777557186.863:150019): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.492338][ T29] audit: type=1400 audit(1777557186.863:150020): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 621.738107][T12660] batman_adv: batadv0: Adding interface: gretap2 [ 621.738134][T12660] batman_adv: batadv0: The MTU of interface gretap2 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 621.738169][T12660] batman_adv: batadv0: Interface activated: gretap2 [ 624.005511][T12689] kAFS: unable to lookup cell '(,c¾ûL' [ 624.291712][T12691] virt_wifi0 speed is unknown, defaulting to 1000 [ 624.323532][T12691] lo speed is unknown, defaulting to 1000 [ 624.360555][T12691] vxcan1 speed is unknown, defaulting to 1000 [ 624.573900][T12694] kAFS: unable to lookup cell '(,c¾ûL' [ 624.994810][T12696] virt_wifi0 speed is unknown, defaulting to 1000 [ 625.056856][T12696] lo speed is unknown, defaulting to 1000 [ 625.246050][T12696] vxcan1 speed is unknown, defaulting to 1000 [ 626.076822][T12700] kAFS: unable to lookup cell '(,c¾ûL' [ 626.497003][T12715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65308 sclass=netlink_route_socket pid=12715 comm=syz.1.1847 [ 626.521007][ T29] kauditd_printk_skb: 7916 callbacks suppressed [ 626.521020][ T29] audit: type=1400 audit(1777557191.893:157937): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 626.618037][ T29] audit: type=1400 audit(1777557191.893:157938): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 626.640605][ T29] audit: type=1400 audit(1777557191.893:157939): avc: denied { read } for pid=12707 comm="syz.2.1848" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 626.738432][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 626.747748][T12715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 626.757979][T12712] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 626.767681][ T5271] audit: audit_lost=4219 audit_rate_limit=0 audit_backlog_limit=64 [ 626.778242][ T5271] audit: backlog limit exceeded [ 626.780177][ T29] audit: type=1400 audit(1777557191.933:157940): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 626.806224][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 626.813951][ T5271] audit: audit_lost=4220 audit_rate_limit=0 audit_backlog_limit=64 [ 626.818725][T12720] kAFS: unable to lookup cell '(,c¾ûL' [ 627.151051][T12724] kAFS: unable to lookup cell '(,c¾ûL' [ 627.186368][T12724] batman_adv: batadv0: Interface deactivated: gretap2 [ 627.716495][T12737] kAFS: unable to lookup cell '(,c¾ûL' [ 628.085599][T12740] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 628.230833][T12742] kAFS: unable to lookup cell '(,c¾ûL' [ 628.381918][T12746] x_tables: ip_tables: osf match: only valid for protocol 6 [ 628.754282][T12751] batman_adv: batadv0: Adding interface: gretap2 [ 628.837645][T12751] batman_adv: batadv0: The MTU of interface gretap2 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 629.101029][T12751] batman_adv: batadv0: Interface activated: gretap2 [ 629.550995][T12764] kAFS: unable to lookup cell '(,c¾ûL' [ 629.769486][T12766] kAFS: unable to lookup cell '(,c¾ûL' [ 630.839521][T12780] kAFS: unable to lookup cell '(,c¾ûL' [ 631.185571][T12784] kAFS: unable to lookup cell '(,c¾ûL' [ 631.532788][ T29] kauditd_printk_skb: 7458 callbacks suppressed [ 631.532818][ T29] audit: type=1400 audit(1777557196.903:164535): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 631.555526][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.579193][ T9170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.586575][T12787] audit: audit_backlog=65 > audit_backlog_limit=64 [ 631.596309][ T9170] audit: audit_lost=4509 audit_rate_limit=0 audit_backlog_limit=64 [ 631.608583][ T5271] audit: audit_lost=4510 audit_rate_limit=0 audit_backlog_limit=64 [ 631.629760][ T29] audit: type=1400 audit(1777557196.913:164536): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 631.634411][ T9170] audit: backlog limit exceeded [ 631.665358][ T5271] audit: backlog limit exceeded [ 631.678116][T12787] audit: audit_lost=4511 audit_rate_limit=0 audit_backlog_limit=64 [ 631.758704][T12788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 632.806241][T12802] kAFS: unable to lookup cell '(,c¾ûL' [ 634.284868][T12821] kAFS: unable to lookup cell '(,c¾ûL' [ 634.307569][T12821] batman_adv: batadv0: Interface deactivated: gretap2 [ 635.623276][T12835] kAFS: unable to lookup cell '(,c¾ûL' [ 636.534555][T12843] kAFS: unable to lookup cell '(,c¾ûL' [ 636.550614][ T29] kauditd_printk_skb: 7701 callbacks suppressed [ 636.550642][ T29] audit: type=1400 audit(1777557201.923:172237): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 636.597480][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 636.603814][ T29] audit: type=1400 audit(1777557201.923:172238): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 636.643671][ T5271] audit: audit_lost=4512 audit_rate_limit=0 audit_backlog_limit=64 [ 636.678253][ T5271] audit: backlog limit exceeded [ 636.690813][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 636.695810][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 636.706076][ T5271] audit: audit_lost=4513 audit_rate_limit=0 audit_backlog_limit=64 [ 636.716052][ T29] audit: type=1400 audit(1777557201.923:172239): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 636.754621][ T5609] audit: audit_lost=4514 audit_rate_limit=0 audit_backlog_limit=64 [ 637.872900][T12855] kAFS: unable to lookup cell '(,c¾ûL' [ 638.294699][T12867] kAFS: unable to lookup cell '(,c¾ûL' [ 640.015600][T12898] kAFS: unable to lookup cell '(,c¾ûL' [ 640.088778][T12899] SET target dimension over the limit! [ 640.976670][T12912] kAFS: unable to lookup cell '(,c¾ûL' [ 641.560601][ T29] kauditd_printk_skb: 7292 callbacks suppressed [ 641.560616][ T29] audit: type=1400 audit(1777557206.933:179530): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 641.627974][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 641.644088][ T5271] audit: audit_lost=4515 audit_rate_limit=0 audit_backlog_limit=64 [ 641.678944][ T29] audit: type=1400 audit(1777557206.963:179531): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 641.702680][ T5271] audit: backlog limit exceeded [ 641.718209][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 641.737311][ T5271] audit: audit_lost=4516 audit_rate_limit=0 audit_backlog_limit=64 [ 641.770667][ T5271] audit: backlog limit exceeded [ 641.778120][ T29] audit: type=1400 audit(1777557206.963:179532): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 641.809717][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 644.240640][T11961] Bluetooth: hci5: command 0x1003 tx timeout [ 644.243118][ T5610] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 644.701723][T12941] kAFS: unable to lookup cell '(,c¾ûL' [ 644.901650][T12944] kAFS: unable to lookup cell '(,c¾ûL' [ 645.117340][T12950] kAFS: unable to lookup cell '(,c¾ûL' [ 646.582248][ T29] kauditd_printk_skb: 6303 callbacks suppressed [ 646.582265][ T29] audit: type=1400 audit(1777557211.943:185225): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 646.690061][ T29] audit: type=1400 audit(1777557211.963:185226): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 646.750342][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 646.789392][ T29] audit: type=1400 audit(1777557211.963:185227): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 646.832802][ T5271] audit: audit_lost=4721 audit_rate_limit=0 audit_backlog_limit=64 [ 646.866210][ T29] audit: type=1400 audit(1777557211.963:185228): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 646.951099][ T29] audit: type=1400 audit(1777557211.963:185229): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 647.002829][ T5271] audit: backlog limit exceeded [ 647.027177][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 647.064051][ T29] audit: type=1400 audit(1777557211.963:185230): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 648.221319][T12972] bond2: Unable to set down delay as MII monitoring is disabled [ 648.307004][T12972] bond2 (unregistering): Released all slaves [ 648.768856][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1932'. [ 648.917054][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1932'. [ 649.587195][T12991] x_tables: ip_tables: osf match: only valid for protocol 6 [ 651.591610][ T29] kauditd_printk_skb: 4876 callbacks suppressed [ 651.591639][ T29] audit: type=1400 audit(1777557216.973:189580): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 651.699484][ T29] audit: type=1400 audit(1777557217.023:189581): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 651.761903][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.769072][ T5271] audit: audit_lost=4898 audit_rate_limit=0 audit_backlog_limit=64 [ 651.786845][ T29] audit: type=1400 audit(1777557217.023:189582): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 651.817457][T13004] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.825958][ T5271] audit: backlog limit exceeded [ 651.832519][ T5612] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.845273][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.860545][ T5612] audit: audit_lost=4899 audit_rate_limit=0 audit_backlog_limit=64 [ 652.055409][T13007] kAFS: unable to lookup cell '(,c¾ûL' [ 652.240621][ T5610] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 652.241220][T11961] Bluetooth: hci5: command 0x1003 tx timeout [ 655.142375][T13039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1948'. [ 655.247180][T13037] trusted_key: encrypted_key: key user:syz not found [ 656.601497][ T29] kauditd_printk_skb: 7377 callbacks suppressed [ 656.601530][ T29] audit: type=1400 audit(1777557221.973:196355): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 656.603896][T13049] kAFS: unable to lookup cell '(,c¾ûL' [ 656.673170][ T29] audit: type=1400 audit(1777557222.053:196356): avc: denied { create } for pid=13046 comm="syz.2.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 656.722230][ T29] audit: type=1400 audit(1777557222.053:196357): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 656.788531][ T29] audit: type=1400 audit(1777557222.053:196358): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 656.866532][ T29] audit: type=1400 audit(1777557222.053:196359): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 656.937449][ T29] audit: type=1400 audit(1777557222.053:196360): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 656.994351][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 657.026798][ T5271] audit: audit_lost=5102 audit_rate_limit=0 audit_backlog_limit=64 [ 657.028288][ T29] audit: type=1400 audit(1777557222.053:196361): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 657.069370][ T5271] audit: backlog limit exceeded [ 657.382975][T13058] 8021q: adding VLAN 0 to HW filter on device .` [ 657.439011][T13058] team0: left promiscuous mode [ 657.448296][T13058] team_slave_0: left promiscuous mode [ 657.462157][T13058] team_slave_1: left promiscuous mode [ 657.500927][T13058] batadv1: left promiscuous mode [ 657.524056][T13058] team0: left allmulticast mode [ 657.530139][T13058] team_slave_0: left allmulticast mode [ 657.535932][T13058] team_slave_1: left allmulticast mode [ 657.541671][T13058] batadv1: left allmulticast mode [ 657.592459][T13058] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.714505][T13058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.968851][T13058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.018090][T13058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 658.106775][T13058] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 658.260359][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 764.300490][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 764.307447][ C1] rcu: 0-...!: (0 ticks this GP) idle=7804/1/0x4000000000000000 softirq=67952/67952 fqs=25 [ 764.318679][ C1] rcu: (detected by 1, t=10502 jiffies, g=72337, q=189 ncpus=2) [ 764.326394][ C1] Sending NMI from CPU 1 to CPUs 0: [ 764.326417][ C0] NMI backtrace for cpu 0 [ 764.326430][ C0] CPU: 0 UID: 0 PID: 5271 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 764.326449][ C0] Tainted: [L]=SOFTLOCKUP [ 764.326454][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.326462][ C0] RIP: 0010:__lock_acquire+0xdad/0x2630 [ 764.326483][ C0] Code: ff ff ff ff c7 44 24 08 01 00 00 00 41 b8 ff ff ff ff e9 81 f7 ff ff 0f b7 43 f8 66 25 ff 1f 0f b7 c0 48 0f a3 05 f3 dd 2c 14 <0f> 83 e1 02 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 3b 11 96 [ 764.326496][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00000003 [ 764.326508][ C0] RAX: 0000000000000007 RBX: ffff88802b178bb8 RCX: 0000000000000001 [ 764.326516][ C0] RDX: 000000002fb7c93b RSI: 0000000088db2a28 RDI: 00000000fc46e35c [ 764.326525][ C0] RBP: ffff88802b178000 R08: 00000000736bb934 R09: 0000000000000edf [ 764.326533][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 764.326541][ C0] R13: 0000000000000edf R14: 0000000000000000 R15: fed91bbc2fb7c93b [ 764.326550][ C0] FS: 00007f10cbb43780(0000) GS:ffff888124379000(0000) knlGS:0000000000000000 [ 764.326564][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.326573][ C0] CR2: 00007f9188fbb437 CR3: 0000000075ffe000 CR4: 00000000003526f0 [ 764.326582][ C0] Call Trace: [ 764.326587][ C0] [ 764.326594][ C0] ? do_raw_spin_lock+0x128/0x260 [ 764.326614][ C0] ? do_raw_spin_lock+0x128/0x260 [ 764.326633][ C0] lock_acquire+0x1b1/0x370 [ 764.326649][ C0] ? advance_sched+0xe5/0xd20 [ 764.326667][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 764.326687][ C0] _raw_spin_lock+0x2e/0x40 [ 764.326707][ C0] ? advance_sched+0xe5/0xd20 [ 764.326723][ C0] advance_sched+0xe5/0xd20 [ 764.326746][ C0] ? find_held_lock+0x2b/0x80 [ 764.326758][ C0] ? __hrtimer_run_queues+0x383/0xa00 [ 764.326779][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 764.326797][ C0] ? __pfx_advance_sched+0x10/0x10 [ 764.326815][ C0] __hrtimer_run_queues+0x470/0xa00 [ 764.326838][ C0] hrtimer_interrupt+0x3e5/0x940 [ 764.326855][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 764.326875][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 764.326890][ C0] [ 764.326895][ C0] [ 764.326899][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.326915][ C0] RIP: 0010:__task_pid_nr_ns+0x428/0x510 [ 764.326931][ C0] Code: 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 9c 00 00 00 44 8b 6b 04 <49> 8d 45 0f 48 c1 e0 04 48 8d 7c 03 08 48 b8 00 00 00 00 00 fc ff [ 764.326943][ C0] RSP: 0018:ffffc9000357fed8 EFLAGS: 00000246 [ 764.326954][ C0] RAX: 0000000000000007 RBX: ffff88802db41640 RCX: ffffffff81d01f91 [ 764.326962][ C0] RDX: 0000000000000000 RSI: ffffffff81d02046 RDI: ffff88802db41644 [ 764.326971][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 764.326978][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b178000 [ 764.326986][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000027 [ 764.326996][ C0] ? __task_pid_nr_ns+0x341/0x510 [ 764.327011][ C0] ? __task_pid_nr_ns+0x3f6/0x510 [ 764.327027][ C0] ? __task_pid_nr_ns+0x3f6/0x510 [ 764.327042][ C0] __do_sys_getpid+0x1d/0x30 [ 764.327061][ C0] do_syscall_64+0x10b/0xf80 [ 764.327075][ C0] ? clear_bhb_loop+0x40/0x90 [ 764.327090][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.327104][ C0] RIP: 0033:0x7f10cbc1d917 [ 764.327115][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 6f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 764.327127][ C0] RSP: 002b:00007ffc2e714de8 EFLAGS: 00000202 ORIG_RAX: 0000000000000027 [ 764.327140][ C0] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 00007f10cbc1d917 [ 764.327149][ C0] RDX: 0000000000000001 RSI: 00007f10cbb40000 RDI: 0000000000000003 [ 764.327158][ C0] RBP: 00007ffc2e715310 R08: 00007f10cbb34960 R09: 00007f10cbb3339a [ 764.327166][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc2e715760 [ 764.327175][ C0] R13: 0000557a0360fd40 R14: 000000000000000d R15: 00007ffc2e715900 [ 764.327188][ C0] [ 764.327412][ C1] rcu: rcu_preempt kthread starved for 10452 jiffies! g72337 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 764.745854][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 764.755812][ C1] rcu: RCU grace-period kthread stack dump: [ 764.761692][ C1] task:rcu_preempt state:R running task stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 764.775236][ C1] Call Trace: [ 764.778516][ C1] [ 764.781446][ C1] __schedule+0x10e9/0x6820 [ 764.785974][ C1] ? __pfx___schedule+0x10/0x10 [ 764.790814][ C1] ? find_held_lock+0x2b/0x80 [ 764.795484][ C1] ? schedule+0x2bf/0x390 [ 764.799818][ C1] schedule+0xdd/0x390 [ 764.803888][ C1] schedule_timeout+0x127/0x280 [ 764.808737][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 764.814111][ C1] ? __pfx_process_timeout+0x10/0x10 [ 764.819394][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 764.825194][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 764.830659][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 764.835422][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 764.840706][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 764.846169][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 764.851101][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 764.856290][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 764.862088][ C1] rcu_gp_kthread+0x179/0x230 [ 764.866775][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 764.871962][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 764.877767][ C1] ? __kthread_parkme+0x18c/0x230 [ 764.882783][ C1] ? kthread+0x13a/0x450 [ 764.887018][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 764.892207][ C1] kthread+0x370/0x450 [ 764.896265][ C1] ? __pfx_kthread+0x10/0x10 [ 764.900847][ C1] ret_from_fork+0x72b/0xd50 [ 764.905433][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 764.910538][ C1] ? __switch_to+0x800/0x1100 [ 764.915211][ C1] ? __pfx_kthread+0x10/0x10 [ 764.919792][ C1] ret_from_fork_asm+0x1a/0x30 [ 764.924566][ C1] [ 764.927578][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 764.933888][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.944375][ C1] Tainted: [L]=SOFTLOCKUP [ 764.948680][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.958726][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 764.964347][ C1] Code: 96 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 e0 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 764.983940][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 764.989995][ C1] RAX: 0000000001fcf6f7 RBX: ffff88801e2ba500 RCX: ffffffff8b89b045 [ 764.997962][ C1] RDX: 0000000000000000 RSI: ffffffff8df1e81e RDI: ffffffff8c1c3500 [ 765.005917][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 765.013872][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 765.021827][ C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d78950 [ 765.029785][ C1] FS: 0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 765.038704][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.045278][ C1] CR2: 0000200000033030 CR3: 000000007cf62000 CR4: 00000000003526f0 [ 765.053238][ C1] Call Trace: [ 765.056504][ C1] [ 765.059421][ C1] default_idle+0x9/0x10 [ 765.063657][ C1] default_idle_call+0x6c/0xb0 [ 765.068413][ C1] do_idle+0x464/0x590 [ 765.072469][ C1] ? __pfx_do_idle+0x10/0x10 [ 765.077051][ C1] ? do_idle+0x30d/0x590 [ 765.081286][ C1] cpu_startup_entry+0x4f/0x60 [ 765.086037][ C1] start_secondary+0x21d/0x2d0 [ 765.090791][ C1] ? __pfx_start_secondary+0x10/0x10 [ 765.096069][ C1] common_startup_64+0x13e/0x148 [ 765.101012][ C1]