last executing test programs: 7m27.813292134s ago: executing program 1 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x1, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885) 7m25.095599702s ago: executing program 1 (id=106): socket$kcm(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 7m22.514278179s ago: executing program 1 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) 7m20.738369827s ago: executing program 1 (id=110): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) 7m13.370368426s ago: executing program 1 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x2, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 7m11.517495511s ago: executing program 1 (id=127): socket$nl_generic(0x10, 0x3, 0x10) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) gettimeofday(0x0, 0x0) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x1, 0x40, 0x8, 0x100, 0x6, 0x808082}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={0xffffffffffffffff, r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0xaa6ed000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3c9, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0x3, 0x89, 0x8, 0x3, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6m56.404368797s ago: executing program 32 (id=127): socket$nl_generic(0x10, 0x3, 0x10) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) gettimeofday(0x0, 0x0) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x1, 0x40, 0x8, 0x100, 0x6, 0x808082}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={0xffffffffffffffff, r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0xaa6ed000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3c9, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0x3, 0x89, 0x8, 0x3, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6m20.975960449s ago: executing program 4 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) read$dsp(r4, &(0x7f0000000280)=""/189, 0xbd) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0xa50003d1) 6m19.092363285s ago: executing program 4 (id=186): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008840) setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x4) 6m14.161923772s ago: executing program 4 (id=191): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(r0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x483) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000002240)={{r0}, "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"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f071, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) sync_file_range(r0, 0x8001, 0xe9, 0x3) r2 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x3f, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5dd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r3, &(0x7f0000002800)={0x2020}, 0x2020) fsmount(0xffffffffffffffff, 0x0, 0x0) 6m11.759514894s ago: executing program 4 (id=195): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) ioctl$TIOCSTI(r0, 0x5412, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000900) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6m3.207156112s ago: executing program 4 (id=206): socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x4221030) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x2270bd24, 0xa5dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4080) 6m1.205210368s ago: executing program 4 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r5}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5}) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) 5m45.474257713s ago: executing program 33 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r5}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5}) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) 5m11.260839175s ago: executing program 5 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 5m9.79992968s ago: executing program 5 (id=267): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 5m7.450050344s ago: executing program 5 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "413d6b300eff0399", "64018d5ff2b3450a337a0e02ff73fa00", "0f6ae197", "f116ff6dec88febb"}, 0x28) sendto$inet6(r3, &(0x7f0000000500)="00000000000000000012a15f3f2b40a3187ba90a5e88d47d804f4e85d0cce76a95ede1b0fb4cd20d500afbd31b4d1dc2e15dd616662a822db93d5bfc57025a1ccda9d78de9bc1a81e77157f6de0d838c3b31b8787f3b7057e9bdbd36de31d1b96cd507f44cf90f9896535b06084567625d4b904363e2857a12ac5b671808", 0x7e, 0xc000, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000000) 4m58.633460837s ago: executing program 5 (id=280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x80, 0x6}, 'port1\x00', 0x8c, 0x60c30, 0x6bf, 0xec, 0x56, 0xa6d7, 0x5, 0x0, 0x14ce44d3c4938c81, 0xb5}) syz_open_dev$vim2m(0x0, 0x6, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file1\x00', 0x0, 0x18, r3}, 0x18) read$FUSE(r4, &(0x7f0000002400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000040000000000000000003a120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x28004010}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) 4m55.828196275s ago: executing program 5 (id=282): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, 0x0) sched_setattr(r1, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000480)=0x4000000) read$dsp(r4, &(0x7f0000000280)=""/189, 0xbd) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, @timestamp={0xd, 0x0, 0x0, 0xac1, 0x5, 0x7, 0x7, 0x4}}}}}, 0x0) 4m53.954017631s ago: executing program 5 (id=283): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x67) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000018000000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010019000000950000000000000075090200020000007b9a00fe00000000b509000090000000c39a04fef1000000bf870000000001000708000008ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 4m36.466538421s ago: executing program 34 (id=283): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x67) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000018000000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010019000000950000000000000075090200020000007b9a00fe00000000b509000090000000c39a04fef1000000bf870000000001000708000008ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 1m2.271256914s ago: executing program 3 (id=490): syz_emit_ethernet(0x36, &(0x7f00000003c0)={@remote, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000640000000000019078ac1e4001ac1414aa0b009078032c00004200000000000000008900000a010101ac1414aa862800000002060d5e000000ff000000f5870000050404a60010960605390006fff5800000b61af9070b5705"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="9ddb", 0x2}], 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) flock(r2, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(r1, 0x0, 0x44054) 59.313330818s ago: executing program 3 (id=493): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x25, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) poll(0x0, 0x0, 0x9) 56.685484772s ago: executing program 3 (id=497): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_io_uring_setup(0x34b6, &(0x7f0000000040)={0x0, 0xd689, 0x80082, 0x3, 0x800000c5}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000300)) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, 0x0, 0x0) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x4, 0x6, 0xe30, 0x7ffe, "c2a0da871813beebb98f6cd3bde10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba80000012", 0x2d}], 0x1}, 0x24000040) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) 48.010348891s ago: executing program 3 (id=505): setns(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = syz_open_dev$mtd(&(0x7f00000000c0), 0xa, 0x200) ioctl$MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000480)={0xfffeffff, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e21, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x10, 0x2, 0x5, 0x8, 0x4}, 0x9c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={r2, 0xcb, "74dad006e1e4eacabcd02920490955b8b8cbb8f8e25075cc78579747cb474998b061bf1ff03619b6cb49a1666bd8862f8aae0eaded3f29047c088d4453b09075888ca69f4a5e276f62fefa0626089b149f728005f4a16ce9c212df1d6b3e0ec00d44c20e061407c6c9060e2232b4ebeef8b8361150a8297697611b48d8d1afc7c9fa2dfc5a196c1d8418836b0b9bb147529a0dea1fee674c2f16329af94f829c1b2822f19de0b99d644b3e0748853814cc2958ef450e5ec3ee009415f078254149137417c59e127f6a4cce"}, &(0x7f0000000500)=0xd3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000005c0)={r4, 0x78, &(0x7f0000000540)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, @in6={0xa, 0x4e20, 0x7fffffff, @empty, 0x400}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x800, @mcast2, 0x1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r5, 0x9cc}, 0x8) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0xffff8000, 0x3}]}, 0xc, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) 42.691190389s ago: executing program 3 (id=508): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000000700)=@rnullb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x3, 0x9032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 40.297384648s ago: executing program 3 (id=510): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2d, @remote, 0x6}]}, &(0x7f00000007c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 28.621709806s ago: executing program 2 (id=520): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x181a01, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0xfffffffffffffc00, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @multicast2}, "d850da37284d1872"}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/llc/core\x00') madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r6}) 25.007463639s ago: executing program 35 (id=510): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2d, @remote, 0x6}]}, &(0x7f00000007c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 22.991062068s ago: executing program 2 (id=525): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x2004000}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003ac0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84010001}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001) 20.176319407s ago: executing program 6 (id=527): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x8000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663", 0xb9) sendto$inet(r1, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 19.064209334s ago: executing program 2 (id=530): io_uring_setup(0x172e, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pivot_root(0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendfile(r5, r0, &(0x7f00000000c0)=0x58, 0xa) 17.020646323s ago: executing program 2 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) remap_file_pages(&(0x7f0000ef2000/0x4000)=nil, 0x4000, 0x0, 0x3fa, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r5}, 0x10) 16.379413337s ago: executing program 0 (id=533): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000104}, 0x4008880) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) open$dir(&(0x7f00000000c0)='./file0\x00', 0x8200, 0x14) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, 0x0}, 0x94) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x2d, 0x8000000, r5, 0x0) fcntl$lock(r4, 0x11, &(0x7f00000048c0)={0x0, 0x2, 0x1, 0x9f}) mkdirat(r4, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 16.025408451s ago: executing program 7 (id=534): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00'}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000002100)='smaps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 15.596945172s ago: executing program 7 (id=535): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf) syz_open_dev$usbmon(0x0, 0x0, 0x20120) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000000)={0x2, 0x3}, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000), 0x4) 15.415679176s ago: executing program 0 (id=536): r0 = socket(0x10, 0x3, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x2c, 0x0, 0x0, 0x0, 0x3}}) set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(0xc9, 0x0) setns(0xc9, 0x0) listen(r0, 0x4) r3 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$kcm(0x10, 0x2, 0x4) 14.246583099s ago: executing program 7 (id=537): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000140)="2700000014000707030e0000120f0a0011c178fbd1753056aebc9f46c4e829db96000100f5fe00", 0x27) 12.978442334s ago: executing program 6 (id=538): chmod(0x0, 0xba) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0xe) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r1, 0x400c0930, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100") pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 10.788333968s ago: executing program 6 (id=539): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x3) close(r0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008440) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) 10.786902627s ago: executing program 0 (id=548): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) sendfile(r0, r0, &(0x7f0000000040)=0x2623, 0x86) io_setup(0xfffffffd, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) 10.687938701s ago: executing program 2 (id=540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0xaf9f, 0x6, 0x1, 0x0, 0x53, "d9d3ddcc07cde276d624b939703976368e9ede", 0x1, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 8.183585035s ago: executing program 7 (id=541): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={0x0, 0x0, 0x3c, 0x0, 0x1, 0x1}, 0x28) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1000009, 0xb) 6.616193784s ago: executing program 0 (id=542): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket(0x2, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x42a80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 6.370424931s ago: executing program 6 (id=543): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 4.97434998s ago: executing program 0 (id=544): r0 = syz_open_dev$sg(&(0x7f0000002440), 0x0, 0x141000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62", 0x55, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000340)=0xc291) 4.862437709s ago: executing program 7 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) syz_emit_vhci(0x0, 0x22) socket$unix(0x1, 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3.002787786s ago: executing program 0 (id=546): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) userfaultfd(0x80001) gettid() r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040), 0x4) timer_create(0x8, 0x0, 0x0) 2.888936483s ago: executing program 6 (id=547): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) read$msr(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) 572.307646ms ago: executing program 2 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4c42bb4f92, 0x0) shutdown(r4, 0x0) 52.606416ms ago: executing program 7 (id=550): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) 0s ago: executing program 6 (id=551): syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) mknod$loop(0x0, 0x8, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) io_cancel(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x9, 0x7e, 0x2, 0x10001, 0xc, 0x7, 0x200, 0x99, 0x8, 0x7, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}}) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x100}, {0x4, 0x3, 0x1800}, {0x1, 0x80, 0x1800}, {0x0, 0x8}, {0x2, 0x4, 0x800}, {0x0, 0xff7f}], 0x6, 0x0) kernel console output (not intermixed with test programs): 2] ? __pfx_kfree_link+0x10/0x10 [ 273.271791][ T7092] ? _raw_spin_unlock+0x28/0x50 [ 273.271808][ T7092] ? alloc_fd+0x471/0x7a0 [ 273.271828][ T7092] do_sys_openat2+0x10f/0x1e0 [ 273.271851][ T7092] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.271875][ T7092] __x64_sys_openat+0x12d/0x210 [ 273.271895][ T7092] ? __pfx___x64_sys_openat+0x10/0x10 [ 273.271919][ T7092] do_syscall_64+0x123/0x790 [ 273.271933][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.271945][ T7092] RIP: 0033:0x7f48ee15e98e [ 273.271956][ T7092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.271973][ T7092] RSP: 002b:00007f48ef016ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 273.271993][ T7092] RAX: ffffffffffffffda RBX: 00007f48ef0176c0 RCX: 00007f48ee15e98e [ 273.272007][ T7092] RDX: 0000000000000002 RSI: 00007f48ef016f90 RDI: ffffffffffffff9c [ 273.272019][ T7092] RBP: 00007f48ee23506b R08: 0000000000000000 R09: 0000000000000000 [ 273.272031][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.272043][ T7092] R13: 00007f48ee426038 R14: 00007f48ee425fa0 R15: 00007ffd189c3f78 [ 273.272071][ T7092] [ 273.316990][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.609803][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.696326][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.696397][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.762150][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.762225][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.785868][ T30] audit: type=1400 audit(1790953167.950:448): avc: denied { create } for pid=7099 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 274.785916][ T30] audit: type=1400 audit(1790953167.980:449): avc: denied { bind } for pid=7099 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 274.947189][ T30] audit: type=1400 audit(1790953168.130:450): avc: denied { nlmsg_tty_audit } for pid=7099 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 277.622252][ T30] audit: type=1400 audit(1790953170.822:451): avc: denied { name_bind } for pid=7114 comm="syz.3.274" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 278.058440][ T30] audit: type=1400 audit(1790953171.252:452): avc: denied { write } for pid=7095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.447053][ T30] audit: type=1400 audit(1790953171.622:453): avc: denied { write } for pid=7130 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.812041][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 280.226330][ T7143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.626570][ T7150] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 281.659996][ T30] audit: type=1400 audit(1790953174.864:454): avc: denied { write } for pid=7146 comm="syz.3.278" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.946052][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 283.356138][ T7163] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.279'. [ 283.446333][ T6841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.668313][ T30] audit: type=1400 audit(1790953177.875:455): avc: denied { listen } for pid=7183 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.673582][ T30] audit: type=1400 audit(1790953177.875:456): avc: denied { accept } for pid=7183 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.441785][ T30] audit: type=1400 audit(1790953179.646:457): avc: denied { remount } for pid=7183 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 288.786636][ T6841] veth0_vlan: entered promiscuous mode [ 288.793059][ T6841] veth1_vlan: entered promiscuous mode [ 288.838508][ T6841] veth0_macvtap: entered promiscuous mode [ 288.850790][ T6841] veth1_macvtap: entered promiscuous mode [ 288.871962][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.893231][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.910249][ T30] audit: type=1400 audit(1790953182.107:458): avc: denied { watch_mount watch_reads } for pid=7191 comm="syz.2.284" path="/63" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 288.911660][ T30] audit: type=1400 audit(1790953182.107:459): avc: denied { watch } for pid=7191 comm="syz.2.284" path="/63" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 289.044290][ T6741] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.045059][ T6741] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.045094][ T6741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.045127][ T6741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.241273][ T30] audit: type=1400 audit(1790953184.439:460): avc: denied { write } for pid=7156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.458712][ T30] audit: type=1400 audit(1790953184.649:461): avc: denied { write } for pid=7208 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.237139][ T7213] overlayfs: missing 'lowerdir' [ 293.428990][ T5265] 8021q: adding VLAN 0 to HW filter on device eth8 [ 294.857415][ T7224] overlayfs: missing 'lowerdir' [ 296.079205][ T5839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.079228][ T5839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.177515][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.179304][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.179948][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.181121][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.181648][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.221504][ T52] Bluetooth: hci1: command tx timeout [ 299.371336][ T6741] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.626699][ T7236] lo speed is unknown, defaulting to 1000 [ 300.148402][ T30] audit: type=1400 audit(1790953193.353:462): avc: denied { write } for pid=7263 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 300.149492][ T7265] futex_wake_op: syz.3.288 tries to shift op by 144; fix this program [ 301.758859][ T52] Bluetooth: hci1: command tx timeout [ 301.817194][ T6741] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.776952][ T52] Bluetooth: hci1: command tx timeout [ 303.860295][ T7274] capability: warning: `syz.2.292' uses deprecated v2 capabilities in a way that may be insecure [ 304.061640][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.078677][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.083146][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.085337][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.111823][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.683124][ T30] audit: type=1400 audit(1790953198.025:463): avc: denied { watch } for pid=7280 comm="syz.0.296" path="/66/file1" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.683178][ T30] audit: type=1400 audit(1790953198.025:464): avc: denied { watch_sb watch_reads } for pid=7280 comm="syz.0.296" path="/66/file1" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 305.869438][ T5599] Bluetooth: hci1: command tx timeout [ 306.511975][ T30] audit: type=1400 audit(1790953199.696:465): avc: denied { map } for pid=7291 comm="syz.2.297" path="/66/dev/sda" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.971051][ T52] Bluetooth: hci0: command tx timeout [ 307.248457][ T6741] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.985415][ T52] Bluetooth: hci0: command tx timeout [ 310.188496][ T6741] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.055389][ T52] Bluetooth: hci0: command tx timeout [ 311.614882][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.614937][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.913281][ T30] audit: type=1800 audit(1790953205.109:466): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.298" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 312.376137][ T6741] bridge_slave_1: left allmulticast mode [ 312.376171][ T6741] bridge_slave_1: left promiscuous mode [ 312.376362][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.380786][ T6741] bridge_slave_0: left allmulticast mode [ 312.380810][ T6741] bridge_slave_0: left promiscuous mode [ 312.413970][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.434664][ T30] audit: type=1400 audit(1790953205.649:467): avc: denied { write } for pid=7311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.147336][ T5599] Bluetooth: hci0: command tx timeout [ 316.125182][ T30] audit: type=1400 audit(1790953209.341:468): avc: denied { write } for pid=7346 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.298668][ T30] audit: type=1400 audit(1790953209.501:469): avc: denied { setattr } for pid=7352 comm="syz.0.304" name="NETLINK" dev="sockfs" ino=15816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.667032][ T30] audit: type=1400 audit(1790953209.881:470): avc: denied { read } for pid=5265 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 316.853935][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.856966][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.865351][ T6741] bond0 (unregistering): Released all slaves [ 316.936809][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.936898][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.937007][ T7236] bridge_slave_0: entered allmulticast mode [ 316.958941][ T7236] bridge_slave_0: entered promiscuous mode [ 316.977712][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.977805][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.977922][ T7236] bridge_slave_1: entered allmulticast mode [ 317.018190][ T7236] bridge_slave_1: entered promiscuous mode [ 317.038694][ T7278] lo speed is unknown, defaulting to 1000 [ 317.333330][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.437739][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.154997][ T6741] hsr_slave_0: left promiscuous mode [ 318.158837][ T6741] hsr_slave_1: left promiscuous mode [ 318.161521][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.161543][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.190642][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.190663][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.233015][ T6741] veth1_macvtap: left promiscuous mode [ 318.233053][ T6741] veth0_macvtap: left promiscuous mode [ 318.233208][ T6741] veth1_vlan: left promiscuous mode [ 318.233267][ T6741] veth0_vlan: left promiscuous mode [ 318.241192][ T30] audit: type=1400 audit(1790953211.452:471): avc: denied { create } for pid=7370 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.304688][ T30] audit: type=1400 audit(1790953211.522:472): avc: denied { connect } for pid=7370 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.387980][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 318.485624][ T30] audit: type=1400 audit(1790953211.702:473): avc: denied { write } for pid=7358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.516433][ T7376] syz.3.303 uses obsolete (PF_INET,SOCK_PACKET) [ 319.553261][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 319.637388][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 319.734060][ T30] audit: type=1400 audit(1790953212.953:474): avc: denied { write } for pid=7386 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.988234][ T5715] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 320.167144][ T5715] usb 3-1: Using ep0 maxpacket: 8 [ 320.181439][ T5715] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 320.200211][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.200273][ T5715] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.200403][ T5715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 320.200481][ T5715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 320.200519][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.366686][ T5715] hub 3-1:1.0: bad descriptor, ignoring hub [ 320.366760][ T5715] hub 3-1:1.0: probe with driver hub failed with error -5 [ 320.368398][ T5715] cdc_wdm 3-1:1.0: skipping garbage [ 320.374706][ T5715] cdc_wdm 3-1:1.0: skipping garbage [ 320.722568][ T5715] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 320.722593][ T5715] cdc_wdm 3-1:1.0: Unknown control protocol [ 320.836565][ T5715] usb 3-1: USB disconnect, device number 9 [ 321.396977][ T7236] team0: Port device team_slave_0 added [ 321.529582][ T7236] team0: Port device team_slave_1 added [ 322.198201][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.198259][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.198318][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.441342][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.441360][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.441412][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.526532][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 324.698037][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 324.712901][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 324.723440][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 324.723490][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.723513][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.723536][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.723559][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.723598][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.875085][ T7236] hsr_slave_0: entered promiscuous mode [ 324.886895][ T7236] hsr_slave_1: entered promiscuous mode [ 324.887936][ T7236] debugfs: 'hsr0' already exists in 'hsr' [ 324.887978][ T7236] Cannot create hsr debugfs directory [ 324.972392][ T9] usb 3-1: usb_control_msg returned -32 [ 324.972437][ T9] usbtmc 3-1:16.0: can't read capabilities [ 325.148779][ T30] audit: type=1400 audit(1790953218.356:475): avc: denied { write } for pid=7402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.337564][ T9] usb 3-1: USB disconnect, device number 10 [ 325.806040][ T30] audit: type=1400 audit(1790953218.956:476): avc: denied { write } for pid=7426 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.109647][ T30] audit: type=1400 audit(1790953219.336:477): avc: denied { watch } for pid=7432 comm="syz.0.313" path="pipe:[15948]" dev="pipefs" ino=15948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 326.115373][ T7433] sctp: [Deprecated]: syz.0.313 (pid 7433) Use of int in max_burst socket option. [ 326.115373][ T7433] Use struct sctp_assoc_value instead [ 326.252667][ T30] audit: type=1400 audit(1790953219.476:478): avc: denied { read append } for pid=7432 comm="syz.0.313" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 326.255812][ T30] audit: type=1400 audit(1790953219.476:479): avc: denied { open } for pid=7432 comm="syz.0.313" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 326.301089][ T6741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.519311][ T6741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.648985][ T6741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.771607][ T30] audit: type=1400 audit(1790953219.996:480): avc: denied { write } for pid=7434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.931738][ T30] audit: type=1400 audit(1790953220.156:481): avc: denied { write } for pid=7453 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.978195][ T6741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.981980][ T7435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.982216][ T7435] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 327.034941][ T7433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 327.038320][ T7433] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 327.089480][ T30] audit: type=1400 audit(1790953220.317:482): avc: denied { block_suspend } for pid=7450 comm="syz.3.311" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.354119][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 328.505312][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 328.915059][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.930048][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.930198][ T7278] bridge_slave_0: entered allmulticast mode [ 328.931685][ T7278] bridge_slave_0: entered promiscuous mode [ 328.936004][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.936089][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.936193][ T7278] bridge_slave_1: entered allmulticast mode [ 329.012288][ T7435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.012540][ T7435] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 329.022897][ T7278] bridge_slave_1: entered promiscuous mode [ 329.151887][ T7459] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.152651][ T7435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.152710][ T7435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.156130][ T7433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.156149][ T7433] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 329.252531][ T7433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.252555][ T7433] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 329.310395][ T7435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.339491][ T7433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.339537][ T7433] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 329.361669][ T7433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.361691][ T7433] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 329.426698][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.438126][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.703413][ T7278] team0: Port device team_slave_0 added [ 329.777994][ T7278] team0: Port device team_slave_1 added [ 330.296064][ T30] audit: type=1400 audit(1790953223.508:483): avc: denied { mount } for pid=7466 comm="syz.0.316" name="/" dev="autofs" ino=15984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 333.392951][ T30] audit: type=1400 audit(1790953226.620:484): avc: denied { name_connect } for pid=7477 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 333.448102][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.448133][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.448172][ T7278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.451312][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.451341][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.451379][ T7278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.132989][ T30] audit: type=1400 audit(1790953227.360:485): avc: denied { write } for pid=7487 comm="syz.3.321" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 334.133195][ T7488] random: crng reseeded on system resumption [ 334.179125][ T30] audit: type=1400 audit(1790953227.400:486): avc: denied { bind } for pid=7484 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.180999][ T30] audit: type=1400 audit(1790953227.400:487): avc: denied { name_bind } for pid=7484 comm="syz.2.320" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 334.226563][ T30] audit: type=1400 audit(1790953227.450:488): avc: denied { node_bind } for pid=7484 comm="syz.2.320" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 334.256178][ T30] audit: type=1400 audit(1790953227.480:489): avc: denied { connect } for pid=7484 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.258596][ T30] audit: type=1400 audit(1790953227.480:490): avc: denied { write } for pid=7484 comm="syz.2.320" laddr=172.20.20.170 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.287985][ T7278] hsr_slave_0: entered promiscuous mode [ 334.295739][ T7278] hsr_slave_1: entered promiscuous mode [ 334.296283][ T7278] debugfs: 'hsr0' already exists in 'hsr' [ 334.296300][ T7278] Cannot create hsr debugfs directory [ 334.306876][ T30] audit: type=1400 audit(1790953227.510:491): avc: denied { create } for pid=7487 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.358986][ T30] audit: type=1400 audit(1790953227.580:492): avc: denied { bind } for pid=7487 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.053238][ T30] audit: type=1400 audit(1790953229.281:493): avc: denied { write } for pid=7487 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.325461][ T6741] bridge_slave_1: left allmulticast mode [ 336.325489][ T6741] bridge_slave_1: left promiscuous mode [ 336.325687][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.374494][ T6741] bridge_slave_0: left allmulticast mode [ 336.374521][ T6741] bridge_slave_0: left promiscuous mode [ 336.374705][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.506462][ T30] audit: type=1400 audit(1790953229.731:494): avc: denied { append } for pid=7503 comm="syz.3.324" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.644174][ T30] audit: type=1400 audit(1790953229.861:495): avc: denied { wake_alarm } for pid=7484 comm="syz.2.320" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.743790][ T30] audit: type=1400 audit(1790953229.971:496): avc: denied { create } for pid=7503 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.747503][ T30] audit: type=1400 audit(1790953229.971:497): avc: denied { setopt } for pid=7503 comm="syz.3.324" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.024880][ T30] audit: type=1400 audit(1790953230.252:498): avc: denied { write } for pid=7483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.191982][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.215303][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.221166][ T6741] bond0 (unregistering): Released all slaves [ 337.448911][ T30] audit: type=1400 audit(1790953230.672:499): avc: denied { write } for pid=7513 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.481347][ T6741] tipc: Left network mode [ 340.739576][ T30] audit: type=1326 audit(1790953233.973:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ad9e159 code=0x7ffc0000 [ 340.739629][ T30] audit: type=1326 audit(1790953233.973:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ad9e159 code=0x7ffc0000 [ 340.743954][ T30] audit: type=1326 audit(1790953233.973:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f915ad9e159 code=0x7ffc0000 [ 340.947223][ T6741] hsr_slave_0: left promiscuous mode [ 340.954008][ T6741] hsr_slave_1: left promiscuous mode [ 340.956776][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.956796][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.979875][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.979896][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.018180][ T5731] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 341.180767][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 341.180802][ T30] audit: type=1326 audit(1790953234.414:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.180934][ T30] audit: type=1326 audit(1790953234.414:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.182346][ T30] audit: type=1326 audit(1790953234.414:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.249235][ T30] audit: type=1326 audit(1790953234.484:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.328203][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 341.329511][ T30] audit: type=1326 audit(1790953234.564:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.330812][ T5731] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 341.331708][ T30] audit: type=1326 audit(1790953234.564:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.333278][ T30] audit: type=1326 audit(1790953234.564:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.334796][ T30] audit: type=1326 audit(1790953234.564:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.335841][ T30] audit: type=1326 audit(1790953234.564:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.336627][ T5731] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 341.337607][ T30] audit: type=1326 audit(1790953234.564:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7523 comm="syz.0.323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ad9ddeb code=0x7ffc0000 [ 341.561617][ T6741] veth1_macvtap: left promiscuous mode [ 341.561683][ T6741] veth0_macvtap: left promiscuous mode [ 341.561877][ T6741] veth1_vlan: left promiscuous mode [ 341.561979][ T6741] veth0_vlan: left promiscuous mode [ 341.633593][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.633620][ T5731] usb 1-1: Product: syz [ 341.633635][ T5731] usb 1-1: Manufacturer: syz [ 341.633650][ T5731] usb 1-1: SerialNumber: syz [ 341.636132][ T5731] usb 1-1: config 0 descriptor?? [ 341.648152][ T5731] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 341.649821][ T5731] usb 1-1: Detected FT232R [ 343.762374][ T5731] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 343.768492][ T5731] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 343.770748][ T5731] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 343.826303][ T5731] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 343.836179][ T5731] usb 1-1: USB disconnect, device number 7 [ 343.853792][ T5731] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 343.860924][ T5731] ftdi_sio 1-1:0.0: device disconnected [ 344.581696][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 344.620546][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 345.301084][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 345.960284][ T7545] lo speed is unknown, defaulting to 1000 [ 347.738536][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 347.738569][ T30] audit: type=1400 audit(1790953239.916:545): avc: denied { map } for pid=7549 comm="syz.3.333" path="/dev/sg0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 347.738635][ T30] audit: type=1400 audit(1790953239.916:546): avc: denied { execute } for pid=7549 comm="syz.3.333" path="/dev/sg0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 347.738701][ T30] audit: type=1400 audit(1790953239.916:547): avc: denied { ioctl } for pid=7549 comm="syz.3.333" path="/dev/sg0" dev="devtmpfs" ino=915 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 348.092003][ T7236] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.262243][ T7236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.263016][ T7236] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.298960][ T7236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.322025][ T7236] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.324679][ T30] audit: type=1400 audit(1790953241.547:548): avc: denied { attach_queue } for pid=7557 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 348.344363][ T1159] IPVS: starting estimator thread 0... [ 348.396518][ T30] audit: type=1400 audit(1790953241.627:549): avc: denied { create } for pid=7566 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.400451][ T7236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.401307][ T7236] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 348.404168][ T30] audit: type=1400 audit(1790953241.627:550): avc: denied { getopt } for pid=7566 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.418533][ T30] audit: type=1400 audit(1790953241.637:551): avc: denied { connect } for pid=7566 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.456017][ T7568] IPVS: using max 38 ests per chain, 91200 per kthread [ 348.475530][ T7236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.984400][ T30] audit: type=1400 audit(1790953242.157:552): avc: denied { write } for pid=7551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.417305][ T30] audit: type=1400 audit(1790953242.648:553): avc: denied { write } for pid=7579 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.433255][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.465344][ T30] audit: type=1400 audit(1790953242.698:554): avc: denied { read write } for pid=7580 comm="syz.2.337" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 349.535862][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.060386][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.060500][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.169169][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.169270][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.398793][ T7278] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.461236][ T7278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.477547][ T5265] 8021q: adding VLAN 0 to HW filter on device eth11 [ 352.483760][ T7278] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.514314][ T7278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.170105][ T7278] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 354.184765][ T7278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.191328][ T7278] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 354.674219][ T7278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.525512][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.576332][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.587154][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.587250][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.644998][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.645094][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.888961][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 355.888984][ T30] audit: type=1400 audit(1790953248.991:559): avc: denied { write } for pid=7608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.889022][ T30] audit: type=1400 audit(1790953249.061:560): avc: denied { write } for pid=7623 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.947267][ T5265] 8021q: adding VLAN 0 to HW filter on device eth12 [ 356.206125][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.210288][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.229173][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.238728][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.249354][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.328474][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.328769][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.329127][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.353332][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.374696][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.511170][ T52] Bluetooth: hci5: command tx timeout [ 359.450775][ T30] audit: type=1400 audit(1790953252.693:561): avc: denied { write } for pid=7625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.549298][ T5702] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 359.688257][ T7677] syzkaller0: entered promiscuous mode [ 359.688280][ T7677] syzkaller0: entered allmulticast mode [ 359.703456][ T5702] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 359.705492][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.705586][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.741715][ T7630] lo speed is unknown, defaulting to 1000 [ 359.754448][ T30] audit: type=1400 audit(1790953252.983:562): avc: denied { write } for pid=7685 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.808465][ T5702] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 359.819046][ T5702] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 359.819170][ T5702] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 359.821919][ T5702] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 359.822052][ T5702] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 359.837185][ T30] audit: type=1400 audit(1790953253.073:563): avc: denied { setopt } for pid=7675 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 359.886801][ T5702] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 359.919098][ T5702] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 359.919232][ T5702] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 359.945792][ T5702] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 359.990122][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 361.684459][ T5599] Bluetooth: hci5: command tx timeout [ 361.693016][ T5702] usb 1-1: USB disconnect, device number 8 [ 361.700702][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 361.702083][ T5702] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 361.710344][ T5702] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 361.711480][ T5702] keyspan 1-1:1.0: device disconnected [ 361.730421][ T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0002, bcdDevice= 8.19 [ 361.760940][ T9] usb 4-1: config 3 has an invalid interface number: 75 but max is 0 [ 361.760972][ T9] usb 4-1: config 3 has no interface number 0 [ 361.761010][ T9] usb 4-1: config 3 interface 75 altsetting 5 endpoint 0x9 has invalid maxpacket 18027, setting to 1024 [ 361.761038][ T9] usb 4-1: config 3 interface 75 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 1024 [ 361.761061][ T9] usb 4-1: config 3 interface 75 has no altsetting 0 [ 361.765866][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.765893][ T9] usb 4-1: Product: syz [ 361.765907][ T9] usb 4-1: Manufacturer: syz [ 361.765923][ T9] usb 4-1: SerialNumber: syz [ 361.857037][ T7681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 362.023950][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.355428][ T9] kvaser_usb 4-1:3.75: error -EPROTO: Cannot get software info [ 362.355805][ T9] kvaser_usb 4-1:3.75: probe with driver kvaser_usb failed with error -71 [ 362.445635][ T9] usb 4-1: USB disconnect, device number 8 [ 362.498268][ T7704] warning: `syz.2.347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 363.748860][ T52] Bluetooth: hci5: command tx timeout [ 365.253225][ T30] audit: type=1400 audit(1790953258.496:564): avc: denied { read } for pid=7716 comm="syz.3.349" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 365.253555][ T30] audit: type=1400 audit(1790953258.496:565): avc: denied { open } for pid=7716 comm="syz.3.349" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 365.312680][ T30] audit: type=1400 audit(1790953258.556:566): avc: denied { ioctl } for pid=7716 comm="syz.3.349" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0xaea1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 365.439955][ T30] audit: type=1400 audit(1790953258.686:567): avc: denied { listen } for pid=7720 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 365.441583][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.441665][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.441780][ T7630] bridge_slave_0: entered allmulticast mode [ 365.478669][ T7630] bridge_slave_0: entered promiscuous mode [ 365.514073][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.514237][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.519904][ T7630] bridge_slave_1: entered allmulticast mode [ 365.537353][ T7630] bridge_slave_1: entered promiscuous mode [ 365.539677][ T7717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.603116][ T30] audit: type=1400 audit(1790953258.846:568): avc: denied { write } for pid=7720 comm="syz.2.350" name="subsystems" dev="configfs" ino=3290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.688150][ T30] audit: type=1400 audit(1790953258.936:569): avc: denied { write } for pid=7720 comm="syz.2.350" name="namespaces" dev="configfs" ino=18594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.714413][ T7721] nvmet: adding nsid 1 to subsystem testsubsys [ 365.826159][ T52] Bluetooth: hci5: command tx timeout [ 365.971204][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.988288][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.003202][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.014737][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.022954][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.160043][ T7630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.189950][ T7630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.286669][ T1114] bridge_slave_1: left allmulticast mode [ 366.286694][ T1114] bridge_slave_1: left promiscuous mode [ 366.286872][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.287743][ T30] audit: type=1400 audit(1790953259.536:570): avc: denied { write } for pid=7706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.292178][ T30] audit: type=1400 audit(1790953259.536:571): avc: denied { setopt } for pid=7732 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.368517][ T1114] bridge_slave_0: left allmulticast mode [ 366.368558][ T1114] bridge_slave_0: left promiscuous mode [ 366.383623][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.736307][ T30] audit: type=1400 audit(1790953260.987:572): avc: denied { listen } for pid=7736 comm="syz.2.352" lport=53642 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.738962][ T30] audit: type=1400 audit(1790953260.987:573): avc: denied { accept } for pid=7736 comm="syz.2.352" lport=53642 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 368.097091][ T52] Bluetooth: hci1: command tx timeout [ 371.663602][ T52] Bluetooth: hci1: command tx timeout [ 371.893583][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.901132][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.907614][ T1114] bond0 (unregistering): Released all slaves [ 371.990499][ T7630] team0: Port device team_slave_0 added [ 372.011472][ T7630] team0: Port device team_slave_1 added [ 372.278132][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.278150][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.278173][ T7630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.421505][ T1114] hsr_slave_0: left promiscuous mode [ 372.447980][ T1114] hsr_slave_1: left promiscuous mode [ 372.451349][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.479864][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.880106][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 372.913486][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 373.025661][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.025704][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.089820][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.089836][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.089860][ T7630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.376387][ T7630] hsr_slave_0: entered promiscuous mode [ 373.392082][ T7630] hsr_slave_1: entered promiscuous mode [ 373.392692][ T7630] debugfs: 'hsr0' already exists in 'hsr' [ 373.392711][ T7630] Cannot create hsr debugfs directory [ 373.742178][ T52] Bluetooth: hci1: command tx timeout [ 374.353679][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 374.353713][ T7727] lo speed is unknown, defaulting to 1000 [ 374.353710][ T30] audit: type=1400 audit(1790953267.600:577): avc: denied { write } for pid=7778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.990491][ T52] Bluetooth: hci1: command tx timeout [ 376.123128][ T30] audit: type=1800 audit(1790953269.361:578): pid=7821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.356" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 376.172061][ T30] audit: type=1400 audit(1790953269.421:579): avc: denied { write } for pid=7820 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.078505][ T5265] 8021q: adding VLAN 0 to HW filter on device eth13 [ 381.983621][ T30] audit: type=1400 audit(1790953275.234:580): avc: denied { mount } for pid=7844 comm="syz.0.363" name="/" dev="rpc_pipefs" ino=19503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 382.197632][ T5600] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 383.929484][ T5600] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 384.898721][ T5600] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 384.898755][ T5600] usb 1-1: config 1 has no interface number 0 [ 384.898797][ T5600] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 384.898822][ T5600] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 384.898844][ T5600] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 385.364304][ T5600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.367445][ T5600] usb 1-1: can't set config #1, error -71 [ 385.368799][ T5600] usb 1-1: USB disconnect, device number 9 [ 385.993171][ T1114] bridge_slave_1: left allmulticast mode [ 385.993198][ T1114] bridge_slave_1: left promiscuous mode [ 385.993388][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.012815][ T1114] bridge_slave_0: left allmulticast mode [ 386.012839][ T1114] bridge_slave_0: left promiscuous mode [ 386.013014][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.059291][ T30] audit: type=1400 audit(1790953279.316:581): avc: denied { write } for pid=7850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.094183][ T30] audit: type=1400 audit(1790953280.347:582): avc: denied { write } for pid=7880 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.959645][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.001892][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.008398][ T1114] bond0 (unregistering): Released all slaves [ 388.136856][ T5265] 8021q: adding VLAN 0 to HW filter on device eth14 [ 388.353986][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.354142][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.354344][ T7727] bridge_slave_0: entered allmulticast mode [ 388.357163][ T7727] bridge_slave_0: entered promiscuous mode [ 388.369144][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.369366][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.371477][ T7727] bridge_slave_1: entered allmulticast mode [ 388.385516][ T7727] bridge_slave_1: entered promiscuous mode [ 388.590542][ T30] audit: type=1400 audit(1790953281.847:583): avc: denied { write } for pid=7890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.625368][ T1114] hsr_slave_0: left promiscuous mode [ 388.640337][ T1114] hsr_slave_1: left promiscuous mode [ 388.641644][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.651529][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.735804][ T30] audit: type=1400 audit(1790953281.977:584): avc: denied { write } for pid=7905 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.744011][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 389.755480][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 389.782874][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 389.939374][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 389.943323][ T9] usb 1-1: config 255 has an invalid interface number: 97 but max is 0 [ 389.943360][ T9] usb 1-1: config 255 has no interface number 0 [ 389.943435][ T9] usb 1-1: config 255 interface 97 has no altsetting 0 [ 390.009611][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.009674][ T9] usb 1-1: Product: syz [ 390.009736][ T9] usb 1-1: Manufacturer: syz [ 390.009752][ T9] usb 1-1: SerialNumber: syz [ 390.599708][ T7926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.371'. [ 390.599869][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 390.961368][ T30] audit: type=1400 audit(1790953283.838:585): avc: denied { bind } for pid=7923 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 390.961427][ T30] audit: type=1400 audit(1790953283.838:586): avc: denied { setopt } for pid=7923 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.050543][ T30] audit: type=1400 audit(1790953284.959:587): avc: denied { bind } for pid=7928 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 392.050697][ T30] audit: type=1400 audit(1790953284.969:588): avc: denied { write } for pid=7928 comm="syz.3.372" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 392.539196][ T7630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.551898][ T7630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.560623][ T7630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.592174][ T9] rndis_host 1-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 392.613520][ T7630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.617812][ T7630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.660641][ T7630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.142266][ T30] audit: type=1800 audit(1790953286.099:589): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.373" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 393.219271][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.251351][ T9] usb 1-1: USB disconnect, device number 10 [ 393.266975][ T7630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.309784][ T7630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.344005][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.389278][ T30] audit: type=1400 audit(1790953288.531:590): avc: denied { write } for pid=7940 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 396.469478][ T7727] team0: Port device team_slave_0 added [ 396.485646][ T7727] team0: Port device team_slave_1 added [ 396.686549][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.686581][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.686632][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.746670][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.746702][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.746740][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.324885][ T7727] hsr_slave_0: entered promiscuous mode [ 397.326953][ T7727] hsr_slave_1: entered promiscuous mode [ 397.327893][ T7727] debugfs: 'hsr0' already exists in 'hsr' [ 397.327910][ T7727] Cannot create hsr debugfs directory [ 399.720789][ T7961] vlan2: entered promiscuous mode [ 399.720811][ T7961] bridge0: entered promiscuous mode [ 400.268338][ T30] audit: type=1400 audit(1790953293.523:591): avc: denied { write } for pid=7958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.319075][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 400.441658][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.469500][ T44] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 400.475701][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.475799][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.496129][ T7630] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.522095][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.522187][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.536601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.536691][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.564657][ T44] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 400.565067][ T44] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 400.565172][ T44] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 400.565568][ T30] audit: type=1400 audit(1790953293.823:592): avc: denied { write } for pid=7978 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.567823][ T44] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 400.567951][ T44] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 400.645658][ T44] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 400.648213][ T44] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 400.668214][ T44] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 400.705093][ T44] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 402.384315][ T44] usb 1-1: USB disconnect, device number 11 [ 402.456287][ T44] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 402.521581][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 402.547953][ T7983] loop5: detected capacity change from 0 to 7 [ 402.555980][ T44] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 402.556938][ T44] keyspan 1-1:1.0: device disconnected [ 402.658993][ T7983] Dev loop5: unable to read RDB block 7 [ 402.659024][ T7983] loop5: AHDI p1 p3 p4 [ 402.659044][ T7983] loop5: partition table partially beyond EOD, truncated [ 402.682226][ T7983] loop5: p1 size 100663296 extends beyond EOD, truncated [ 402.688172][ T7983] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 402.808106][ T30] audit: type=1400 audit(1790953296.064:593): avc: denied { map } for pid=7980 comm="syz.2.377" path="socket:[20005]" dev="sockfs" ino=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 402.808339][ T30] audit: type=1400 audit(1790953296.074:594): avc: denied { read } for pid=7980 comm="syz.2.377" path="socket:[20005]" dev="sockfs" ino=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 402.982072][ T7983] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-16) [ 403.636428][ T30] audit: type=1400 audit(1790953296.805:595): avc: denied { read } for pid=7997 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 405.168062][ T30] audit: type=1400 audit(1790953298.436:596): avc: denied { ioctl } for pid=7997 comm="syz.2.384" path="socket:[20101]" dev="sockfs" ino=20101 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 406.324931][ T30] audit: type=1400 audit(1790953299.586:597): avc: denied { write } for pid=7988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.550456][ T7727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 406.597745][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.701098][ T7727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 406.726907][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.730893][ T7727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 407.478856][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.480554][ T7727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 407.594898][ T30] audit: type=1400 audit(1790953300.827:598): avc: denied { write } for pid=8015 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.650211][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.941621][ T7630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.961963][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.990237][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.004023][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.004119][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.011553][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.011652][ T6140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.178864][ T8062] fuse: Bad value for 'fd' [ 410.336565][ T30] audit: type=1400 audit(1790953303.598:599): avc: denied { write } for pid=8038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.725858][ T30] audit: type=1400 audit(1790953304.989:600): avc: denied { read } for pid=8074 comm="syz.3.391" dev="sockfs" ino=20267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.540349][ T30] audit: type=1400 audit(1790953305.799:601): avc: denied { write } for pid=8082 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.544894][ T7630] veth0_vlan: entered promiscuous mode [ 416.604857][ T7630] veth1_vlan: entered promiscuous mode [ 417.518157][ T30] audit: type=1400 audit(1790953310.782:602): avc: denied { mount } for pid=8098 comm="syz.2.394" name="/" dev="ecryptfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 418.238860][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.992961][ T30] audit: type=1400 audit(1790953312.253:603): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 419.344845][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.350577][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.363928][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.367568][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.369597][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.846209][ T30] audit: type=1400 audit(1790953313.113:604): avc: denied { write } for pid=8091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.274854][ T8120] comedi comedi1: Minor 4 specified more than once! [ 420.769060][ T30] audit: type=1400 audit(1790953314.033:605): avc: denied { write } for pid=8134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.946784][ T30] audit: type=1400 audit(1790953314.153:606): avc: denied { getopt } for pid=8135 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 421.387004][ T30] audit: type=1400 audit(1790953314.654:607): avc: denied { bind } for pid=8142 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 421.581188][ T52] Bluetooth: hci0: command tx timeout [ 421.877784][ T30] audit: type=1400 audit(1790953315.134:608): avc: denied { read } for pid=8142 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 423.636954][ T52] Bluetooth: hci0: command tx timeout [ 423.839439][ T7727] veth0_vlan: entered promiscuous mode [ 424.292462][ T7727] veth1_vlan: entered promiscuous mode [ 424.927179][ T8116] lo speed is unknown, defaulting to 1000 [ 425.145139][ T30] audit: type=1400 audit(1790953318.416:609): avc: denied { write } for pid=8148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.757265][ T52] Bluetooth: hci0: command tx timeout [ 426.292554][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.308318][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.328912][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.334445][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.354737][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.956127][ T30] audit: type=1400 audit(1790953320.237:610): avc: denied { write } for pid=8183 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.795244][ T5599] Bluetooth: hci0: command tx timeout [ 427.830918][ T30] audit: type=1400 audit(1790953321.097:611): avc: denied { nlmsg_tty_audit } for pid=8190 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 427.904414][ T30] audit: type=1400 audit(1790953321.137:612): avc: denied { create } for pid=8190 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 427.904575][ T30] audit: type=1400 audit(1790953321.147:613): avc: denied { setopt } for pid=8190 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 428.751328][ T5599] Bluetooth: hci5: command tx timeout [ 429.937678][ T30] audit: type=1400 audit(1790953323.208:614): avc: denied { listen } for pid=8198 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 429.938661][ T30] audit: type=1400 audit(1790953323.208:615): avc: denied { accept } for pid=8198 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 430.803335][ T5599] Bluetooth: hci5: command tx timeout [ 431.181339][ T1104] bridge_slave_1: left allmulticast mode [ 431.181380][ T1104] bridge_slave_1: left promiscuous mode [ 431.181712][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.208981][ T1104] bridge_slave_0: left allmulticast mode [ 431.209008][ T1104] bridge_slave_0: left promiscuous mode [ 431.209151][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.464035][ T30] audit: type=1400 audit(1790953324.669:616): avc: denied { mount } for pid=8215 comm="syz.0.406" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 431.464129][ T30] audit: type=1800 audit(1790953324.669:617): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.406" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 433.332381][ T5599] Bluetooth: hci5: command tx timeout [ 433.379174][ T30] audit: type=1400 audit(1790953325.709:618): avc: denied { mount } for pid=8195 comm="syz.3.403" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 433.380983][ T30] audit: type=1400 audit(1790953326.650:619): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 433.390450][ T30] audit: type=1400 audit(1790953326.660:620): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 434.414650][ T30] audit: type=1400 audit(1790953327.690:621): avc: denied { setopt } for pid=8228 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 434.445726][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.445787][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.558063][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.580144][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.594365][ T1104] bond0 (unregistering): Released all slaves [ 434.763691][ T8235] /dev/sg0: Can't lookup blockdev [ 435.203147][ T30] audit: type=1400 audit(1790953328.481:622): avc: denied { ioctl } for pid=8228 comm="syz.0.408" path="socket:[20852]" dev="sockfs" ino=20852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.356034][ T30] audit: type=1400 audit(1790953328.631:623): avc: denied { bind } for pid=8228 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 435.389271][ T1104] hsr_slave_0: left promiscuous mode [ 435.391090][ T52] Bluetooth: hci5: command tx timeout [ 435.402026][ T1104] hsr_slave_1: left promiscuous mode [ 435.402835][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.405713][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.446825][ T8229] netlink: 14 bytes leftover after parsing attributes in process `syz.0.408'. [ 435.504519][ T1104] veth1_vlan: left promiscuous mode [ 435.517631][ T1104] veth0_vlan: left promiscuous mode [ 435.662750][ T30] audit: type=1400 audit(1790953328.941:624): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 435.714477][ T30] audit: type=1400 audit(1790953328.991:625): avc: denied { write } for pid=8211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.847149][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 437.490002][ T30] audit: type=1400 audit(1790953329.671:626): avc: denied { bind } for pid=8243 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.490056][ T30] audit: type=1400 audit(1790953330.161:627): avc: denied { listen } for pid=8243 comm="syz.2.411" laddr=172.20.20.170 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.976723][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 438.376113][ T8250] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 438.615180][ T8250] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 439.042046][ T30] audit: type=1400 audit(1790953332.323:628): avc: denied { write } for pid=8248 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.020584][ T30] audit: type=1800 audit(1790953333.213:629): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.413" name="syzkaller0" dev="sda1" ino=2059 res=0 errno=0 [ 440.375464][ T30] audit: type=1400 audit(1790953333.653:630): avc: denied { write } for pid=8255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.049189][ T30] audit: type=1400 audit(1790953334.324:631): avc: denied { write } for pid=8274 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.135585][ T8180] lo speed is unknown, defaulting to 1000 [ 441.856699][ T1114] IPVS: starting estimator thread 0... [ 441.948738][ T8287] IPVS: using max 64 ests per chain, 153600 per kthread [ 445.516047][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.516136][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.516283][ T8116] bridge_slave_0: entered allmulticast mode [ 445.521680][ T8116] bridge_slave_0: entered promiscuous mode [ 445.554352][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.554448][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.575265][ T8116] bridge_slave_1: entered allmulticast mode [ 445.586441][ T8116] bridge_slave_1: entered promiscuous mode [ 447.455596][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.741343][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.747206][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.646817][ T8116] team0: Port device team_slave_0 added [ 449.651558][ T8116] team0: Port device team_slave_1 added [ 449.830560][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.830590][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.830653][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.836675][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.836691][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.836726][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.961761][ T30] audit: type=1400 audit(1790953343.238:632): avc: denied { write } for pid=8298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.063797][ T30] audit: type=1400 audit(1790953343.338:633): avc: denied { write } for pid=8332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.227516][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 450.394626][ T8116] hsr_slave_0: entered promiscuous mode [ 450.395460][ T8116] hsr_slave_1: entered promiscuous mode [ 450.396028][ T8116] debugfs: 'hsr0' already exists in 'hsr' [ 450.396045][ T8116] Cannot create hsr debugfs directory [ 450.997217][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.997877][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.997987][ T8180] bridge_slave_0: entered allmulticast mode [ 451.001074][ T8180] bridge_slave_0: entered promiscuous mode [ 451.958509][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.022960][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.025609][ T8180] bridge_slave_1: entered allmulticast mode [ 452.084055][ T8180] bridge_slave_1: entered promiscuous mode [ 452.568543][ T30] audit: type=1400 audit(1790953345.789:634): avc: denied { write } for pid=8358 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 453.049124][ T8180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.633798][ T8180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.776307][ T8381] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 456.838274][ T8180] team0: Port device team_slave_0 added [ 456.894786][ T8180] team0: Port device team_slave_1 added [ 456.982030][ T30] audit: type=1400 audit(1790953350.262:635): avc: denied { write } for pid=8354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.221509][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.221931][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.224557][ T6741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.568583][ T30] audit: type=1800 audit(1790953350.842:636): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.430" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 457.989742][ T30] audit: type=1400 audit(1790953351.272:637): avc: denied { write } for pid=8395 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.032880][ T8180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.032912][ T8180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.032964][ T8180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.045507][ T8180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.045539][ T8180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.045576][ T8180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.304905][ T30] audit: type=1400 audit(1790953353.593:638): avc: denied { append } for pid=8410 comm="syz.3.432" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 460.503210][ T30] audit: type=1400 audit(1790953353.783:639): avc: denied { write } for pid=8402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.546979][ T8180] hsr_slave_0: entered promiscuous mode [ 460.547776][ T8180] hsr_slave_1: entered promiscuous mode [ 460.564347][ T8180] debugfs: 'hsr0' already exists in 'hsr' [ 460.564370][ T8180] Cannot create hsr debugfs directory [ 460.647841][ T30] audit: type=1400 audit(1790953353.933:640): avc: denied { checkpoint_restore } for pid=8417 comm="syz.0.434" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 460.710944][ T1104] bridge_slave_1: left allmulticast mode [ 460.710985][ T1104] bridge_slave_1: left promiscuous mode [ 460.711340][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.751080][ T30] audit: type=1400 audit(1790953354.033:641): avc: denied { write } for pid=8417 comm="syz.0.434" name="sg0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 460.753894][ T1104] bridge_slave_0: left allmulticast mode [ 460.753929][ T1104] bridge_slave_0: left promiscuous mode [ 460.754105][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.079933][ T30] audit: type=1400 audit(1790953354.374:642): avc: denied { write } for pid=8421 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.702392][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.724569][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.741384][ T1104] bond0 (unregistering): Released all slaves [ 462.761899][ T6741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.405664][ T8431] netlink: 'syz.2.435': attribute type 11 has an invalid length. [ 465.067586][ T1104] hsr_slave_0: left promiscuous mode [ 465.070183][ T1104] hsr_slave_1: left promiscuous mode [ 465.070956][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.071485][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.088131][ T1104] veth1_vlan: left promiscuous mode [ 465.088193][ T1104] veth0_vlan: left promiscuous mode [ 465.549206][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 465.564340][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 465.643487][ T30] audit: type=1400 audit(1790953358.936:643): avc: denied { write } for pid=8439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.784631][ T30] audit: type=1400 audit(1790953359.076:644): avc: denied { write } for pid=8450 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.991268][ T8116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 466.023188][ T8116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.023928][ T8116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 466.047231][ T8116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.049702][ T8116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 466.062459][ T8116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.063628][ T8116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 466.072876][ T8116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.358743][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.373095][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.382057][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.382147][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.389836][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.389931][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.512045][ T30] audit: type=1400 audit(1790953359.806:645): avc: denied { write } for pid=8452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.612459][ T30] audit: type=1400 audit(1790953359.906:646): avc: denied { write } for pid=8472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.944456][ T8180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.965197][ T8180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.966533][ T8180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 466.991112][ T8180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.998714][ T8180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.009617][ T8180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.012008][ T8180] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.032368][ T8180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.184130][ T8180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.201640][ T8180] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.209771][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.209868][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.220601][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.220692][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.340218][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.361152][ T30] audit: type=1400 audit(1790953360.657:647): avc: denied { write } for pid=8477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.509188][ T30] audit: type=1400 audit(1790953360.807:648): avc: denied { write } for pid=8504 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.856148][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.863238][ T8116] veth0_vlan: entered promiscuous mode [ 467.877144][ T8116] veth1_vlan: entered promiscuous mode [ 467.932062][ T8116] veth0_macvtap: entered promiscuous mode [ 467.939339][ T8116] veth1_macvtap: entered promiscuous mode [ 467.952583][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.969991][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.995093][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.996171][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.996208][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.996241][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.170636][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.170657][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.241021][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.241043][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.318180][ T30] audit: type=1400 audit(1790953361.617:649): avc: denied { write } for pid=8508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.323448][ T8180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.604765][ T30] audit: type=1400 audit(1790953361.867:650): avc: denied { write } for pid=8535 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.753809][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.098144][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.439'. [ 474.571993][ T8560] syzkaller0: entered promiscuous mode [ 474.572031][ T8560] syzkaller0: entered allmulticast mode [ 474.991527][ T30] audit: type=1400 audit(1790953368.070:651): avc: denied { write } for pid=8566 comm="syz.6.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 476.628210][ T8180] veth0_vlan: entered promiscuous mode [ 476.724032][ T8180] veth1_vlan: entered promiscuous mode [ 476.751392][ T30] audit: type=1400 audit(1790953370.051:652): avc: denied { ioctl } for pid=8575 comm="syz.0.443" path="socket:[22220]" dev="sockfs" ino=22220 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 476.897010][ T5715] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.471811][ T6140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.349546][ T8180] veth0_macvtap: entered promiscuous mode [ 480.371957][ T8180] veth1_macvtap: entered promiscuous mode [ 480.433798][ T8180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.475309][ T8180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.562114][ T30] audit: type=1400 audit(1790953373.863:653): avc: denied { read } for pid=8588 comm="syz.0.450" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 480.562718][ T30] audit: type=1400 audit(1790953373.863:654): avc: denied { open } for pid=8588 comm="syz.0.450" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 480.598538][ T6140] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.599050][ T6140] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.599196][ T6140] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.599720][ T6140] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.741275][ T30] audit: type=1400 audit(1790953374.043:655): avc: denied { read } for pid=8594 comm="syz.3.451" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.741841][ T30] audit: type=1400 audit(1790953374.043:656): avc: denied { open } for pid=8594 comm="syz.3.451" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 482.063197][ T30] audit: type=1400 audit(1790953375.364:657): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 482.970509][ T6140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.970727][ T6140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.385494][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.385520][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.607065][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.799610][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 487.405528][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.407148][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.408757][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.409748][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.410532][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.884878][ T8637] kAFS: bad VL server IP address [ 489.424548][ T8624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.534049][ T52] Bluetooth: hci1: command tx timeout [ 489.611119][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.528428][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.788493][ T6140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.957219][ T8663] siw: device registration error -23 [ 491.290334][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.336481][ T8620] lo speed is unknown, defaulting to 1000 [ 491.555347][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 491.604254][ T52] Bluetooth: hci1: command tx timeout [ 491.662713][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.821319][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 493.688362][ T52] Bluetooth: hci1: command tx timeout [ 495.923554][ T52] Bluetooth: hci1: command tx timeout [ 495.926082][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.926169][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.421444][ T6741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.923604][ T6653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.094461][ T30] audit: type=1400 audit(1790953390.402:658): avc: denied { write } for pid=8662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.543489][ T30] audit: type=1400 audit(1790953390.852:659): avc: denied { open } for pid=8697 comm="syz.2.465" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 498.168323][ T30] audit: type=1400 audit(1790953390.892:660): avc: denied { cmd } for pid=8697 comm="iou-wrk-8701" path="socket:[25400]" dev="sockfs" ino=25400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 501.643227][ T30] audit: type=1400 audit(1790953394.954:661): avc: denied { write } for pid=8712 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.732468][ T13] bridge_slave_1: left allmulticast mode [ 501.732508][ T13] bridge_slave_1: left promiscuous mode [ 501.732815][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.847428][ T13] bridge_slave_0: left allmulticast mode [ 501.847468][ T13] bridge_slave_0: left promiscuous mode [ 501.861977][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.118609][ T30] audit: type=1400 audit(1790953395.434:662): avc: denied { listen } for pid=8715 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 502.246783][ T6741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.508559][ T8723] futex_wake_op: syz.2.469 tries to shift op by 144; fix this program [ 502.631721][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.661753][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.689272][ T13] bond0 (unregistering): Released all slaves [ 503.350591][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.350867][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.384092][ T8620] bridge_slave_0: entered allmulticast mode [ 503.413597][ T8620] bridge_slave_0: entered promiscuous mode [ 503.503134][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.503460][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.504015][ T8620] bridge_slave_1: entered allmulticast mode [ 503.585606][ T8620] bridge_slave_1: entered promiscuous mode [ 503.823427][ T8723] futex_wake_op: syz.2.469 tries to shift op by 144; fix this program [ 504.344594][ T30] audit: type=1400 audit(1790953397.525:663): avc: denied { lock } for pid=8736 comm="syz.6.474" path="socket:[25509]" dev="sockfs" ino=25509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 504.838709][ T8620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.318962][ T30] audit: type=1400 audit(1790953398.626:664): avc: denied { write } for pid=8732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.386710][ T8748] lo speed is unknown, defaulting to 1000 [ 505.548628][ T8620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.640316][ T30] audit: type=1400 audit(1790953398.946:665): avc: denied { write } for pid=8759 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.015834][ T5600] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 506.215628][ T5600] usb 3-1: Using ep0 maxpacket: 8 [ 506.221439][ T5600] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 506.225274][ T5600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.225331][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.269494][ T5600] usb 3-1: config 0 descriptor?? [ 506.503449][ T5600] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 506.643466][ T13] hsr_slave_0: left promiscuous mode [ 506.653188][ T13] hsr_slave_1: left promiscuous mode [ 506.657964][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.657984][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.666372][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.666391][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.711808][ T13] veth1_macvtap: left promiscuous mode [ 506.713044][ T13] veth0_macvtap: left promiscuous mode [ 506.713953][ T13] veth1_vlan: left promiscuous mode [ 506.714021][ T13] veth0_vlan: left promiscuous mode [ 507.881337][ T5715] usb 3-1: USB disconnect, device number 11 [ 508.014363][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.081757][ T13] team0 (unregistering): Port device team_slave_1 removed [ 509.232943][ T13] team0 (unregistering): Port device team_slave_0 removed [ 509.757974][ T8620] team0: Port device team_slave_0 added [ 509.760508][ T8620] team0: Port device team_slave_1 added [ 509.803477][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.803493][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.803516][ T8620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.192068][ T1159] IPVS: starting estimator thread 0... [ 510.200932][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.200948][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.200971][ T8620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.313830][ T8787] IPVS: using max 34 ests per chain, 81600 per kthread [ 510.367764][ T8620] hsr_slave_0: entered promiscuous mode [ 510.368652][ T8620] hsr_slave_1: entered promiscuous mode [ 510.369275][ T8620] debugfs: 'hsr0' already exists in 'hsr' [ 510.369294][ T8620] Cannot create hsr debugfs directory [ 510.989170][ T8801] FAULT_INJECTION: forcing a failure. [ 510.989170][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 510.989223][ T8801] CPU: 0 UID: 0 PID: 8801 Comm: syz.6.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.989255][ T8801] Tainted: [L]=SOFTLOCKUP [ 510.989264][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 510.989282][ T8801] Call Trace: [ 510.989290][ T8801] [ 510.989299][ T8801] dump_stack_lvl+0x100/0x190 [ 510.989345][ T8801] should_fail_ex.cold+0x5/0xa [ 510.989377][ T8801] should_failslab+0xc2/0x120 [ 510.989406][ T8801] __kmalloc_noprof+0xfc/0x840 [ 510.989431][ T8801] ? trace_kmem_cache_alloc+0xdd/0x100 [ 510.989461][ T8801] ? tnode_new+0x2f7/0x350 [ 510.989492][ T8801] tnode_new+0x2f7/0x350 [ 510.989522][ T8801] fib_insert_alias+0x6e7/0xe30 [ 510.989550][ T8801] ? lockdep_rtnl_is_held+0x26/0x40 [ 510.989579][ T8801] fib_trie_unmerge+0x289/0xbd0 [ 510.989615][ T8801] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 510.989651][ T8801] ? lock_acquire+0x1d1/0x380 [ 510.989679][ T8801] fib_unmerge+0xee/0x510 [ 510.989708][ T8801] ? fib_nl2rule_locked+0x3ef/0x740 [ 510.989734][ T8801] fib4_rule_configure+0xaba/0x1160 [ 510.989758][ T8801] ? fib_nl2rule_locked+0x3fe/0x740 [ 510.989782][ T8801] fib_newrule+0x3c3/0x1e50 [ 510.989806][ T8801] ? psi_cgroup_restart+0x411/0x6f0 [ 510.989829][ T8801] ? avc_has_perm_noaudit+0x11e/0x470 [ 510.989859][ T8801] ? avc_has_perm_noaudit+0x11e/0x470 [ 510.989895][ T8801] ? __pfx_fib_newrule+0x10/0x10 [ 510.989918][ T8801] ? avc_has_perm_noaudit+0xf0/0x470 [ 510.989976][ T8801] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 510.990007][ T8801] ? find_held_lock+0x2b/0x80 [ 510.990035][ T8801] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 510.990064][ T8801] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 510.990095][ T8801] ? __pfx_fib_nl_newrule+0x10/0x10 [ 510.990118][ T8801] rtnetlink_rcv_msg+0x95e/0xe90 [ 510.990151][ T8801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 510.990190][ T8801] ? ref_tracker_free+0x37e/0x6c0 [ 510.990223][ T8801] netlink_rcv_skb+0x159/0x420 [ 510.990250][ T8801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 510.990283][ T8801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.990327][ T8801] ? netlink_deliver_tap+0x1ae/0xcc0 [ 510.990360][ T8801] netlink_unicast+0x585/0x850 [ 510.990391][ T8801] ? __pfx_netlink_unicast+0x10/0x10 [ 510.990425][ T8801] netlink_sendmsg+0x8b0/0xda0 [ 510.990456][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.990485][ T8801] ? selinux_socket_sendmsg+0x198/0x2f0 [ 510.990515][ T8801] ____sys_sendmsg+0xa4d/0xbe0 [ 510.990535][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.990564][ T8801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.990599][ T8801] ___sys_sendmsg+0x190/0x1e0 [ 510.990624][ T8801] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.990647][ T8801] ? futex_wait+0x11e/0x370 [ 510.990680][ T8801] ? find_held_lock+0x2b/0x80 [ 510.990728][ T8801] __sys_sendmsg+0x160/0x210 [ 510.990757][ T8801] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.990802][ T8801] do_syscall_64+0x123/0x790 [ 510.990828][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.990850][ T8801] RIP: 0033:0x7f51ba59e159 [ 510.990869][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.990889][ T8801] RSP: 002b:00007f51bb3c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.990918][ T8801] RAX: ffffffffffffffda RBX: 00007f51ba825fa0 RCX: 00007f51ba59e159 [ 510.990933][ T8801] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 510.990947][ T8801] RBP: 00007f51ba63506b R08: 0000000000000000 R09: 0000000000000000 [ 510.990960][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.990973][ T8801] R13: 00007f51ba826038 R14: 00007f51ba825fa0 R15: 00007ffc8685a568 [ 510.991005][ T8801] [ 511.583752][ T30] audit: type=1400 audit(1790953404.899:666): avc: denied { write } for pid=8785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.447741][ T30] audit: type=1400 audit(1790953405.759:667): avc: denied { write } for pid=8809 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.141047][ T7810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.417561][ T8825] overlayfs: missing 'lowerdir' [ 516.492696][ T5886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.990657][ T5702] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 517.311414][ T5702] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 517.314265][ T5702] usb 4-1: config 0 interface 0 has no altsetting 0 [ 517.314328][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.706870][ T5702] usb 4-1: config 0 descriptor?? [ 517.809590][ T5702] usb 4-1: can't set config #0, error -71 [ 517.818646][ T5702] usb 4-1: USB disconnect, device number 9 [ 517.872635][ T8620] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 517.890877][ T8620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.891877][ T8620] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 517.896559][ T8620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.923547][ T8620] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 518.097183][ T8620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.122406][ T8620] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 518.230655][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.278138][ T8620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.339332][ T30] audit: type=1400 audit(1790953411.652:668): avc: denied { write } for pid=8816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.472251][ T30] audit: type=1400 audit(1790953413.793:669): avc: denied { write } for pid=8863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.712337][ T30] audit: type=1400 audit(1790953414.033:670): avc: denied { setopt } for pid=8868 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 520.850300][ T8620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.055595][ T8620] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.157090][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.157187][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.343756][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.343856][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.562675][ T8878] ima: policy update failed [ 523.437234][ T30] audit: type=1802 audit(1790953415.884:671): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.493" res=0 errno=0 [ 523.453311][ T84] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.443672][ T6741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.081468][ T8899] netlink: 'syz.6.486': attribute type 49 has an invalid length. [ 526.810726][ T8897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 526.813383][ T8897] block device autoloading is deprecated and will be removed. [ 527.456423][ T8904] ip_tables: iptables: counters copy to user failed while replacing table [ 529.851390][ T5839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.941671][ T8620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.350632][ T30] audit: type=1400 audit(1790953423.668:672): avc: denied { bind } for pid=8917 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 530.385051][ T30] audit: type=1400 audit(1790953423.708:673): avc: denied { setopt } for pid=8917 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 530.417597][ T30] audit: type=1400 audit(1790953423.738:674): avc: denied { listen } for pid=8917 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 530.487855][ T30] audit: type=1400 audit(1790953423.808:675): avc: denied { accept } for pid=8917 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 530.588771][ T30] audit: type=1400 audit(1790953423.908:676): avc: denied { write } for pid=8917 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 530.634847][ T30] audit: type=1400 audit(1790953423.958:677): avc: denied { read } for pid=8917 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 530.743171][ T30] audit: type=1400 audit(1790953424.058:678): avc: denied { sqpoll } for pid=8922 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 530.998915][ T8620] veth0_vlan: entered promiscuous mode [ 531.024419][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.046530][ T8620] veth1_vlan: entered promiscuous mode [ 531.177351][ T8620] veth0_macvtap: entered promiscuous mode [ 531.195548][ T8620] veth1_macvtap: entered promiscuous mode [ 531.411726][ T8620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.176558][ T8620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.504646][ T8936] comedi comedi0: dt2815: I/O base address or length out of range [ 532.514098][ T1159] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.547375][ T5886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.548733][ T5886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.549943][ T5886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.229759][ T8942] sctp: [Deprecated]: syz.3.505 (pid 8942) Use of int in max_burst socket option. [ 534.229759][ T8942] Use struct sctp_assoc_value instead [ 534.258617][ T30] audit: type=1400 audit(1790953427.410:679): avc: denied { read write } for pid=8939 comm="syz.3.505" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 534.260287][ T30] audit: type=1400 audit(1790953427.410:680): avc: denied { open } for pid=8939 comm="syz.3.505" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 534.272256][ T30] audit: type=1400 audit(1790953427.440:681): avc: denied { ioctl } for pid=8939 comm="syz.3.505" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 536.111788][ T529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.713681][ T8942] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 536.785023][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.909980][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.910001][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.166518][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.166555][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.988551][ T30] audit: type=1400 audit(1790953432.022:682): avc: denied { read } for pid=8955 comm="syz.3.508" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 539.988719][ T30] audit: type=1400 audit(1790953432.022:683): avc: denied { open } for pid=8955 comm="syz.3.508" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 540.572240][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 540.960458][ T8966] syz.0.509 (8966) used greatest stack depth: 19632 bytes left [ 541.054649][ T30] audit: type=1400 audit(1790953434.243:684): avc: denied { firmware_load } for pid=8959 comm="syz.0.509" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 541.507242][ T84] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.941775][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.977854][ T8973] Bluetooth: hci0: command 0x0406 tx timeout [ 544.679814][ T8988] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 544.753635][ T8988] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 547.016944][ T8944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.255902][ T8992] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 65545 (only 8 groups) [ 547.369487][ T30] audit: type=1800 audit(1790953440.577:685): pid=8992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.516" name="tls" dev="sda1" ino=2064 res=0 errno=0 [ 547.681821][ T1159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.838671][ T9005] random: crng reseeded on system resumption [ 553.901921][ T5839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.903241][ T529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.220977][ T30] audit: type=1400 audit(1790953448.551:686): avc: denied { bind } for pid=9016 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 556.796243][ T30] audit: type=1400 audit(1790953450.131:687): avc: denied { ioctl } for pid=9016 comm="syz.0.521" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 557.271760][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.271848][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.560033][ T5600] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 557.720006][ T5600] usb 8-1: Using ep0 maxpacket: 8 [ 558.099007][ T5600] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 558.138771][ T5600] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 558.138808][ T5600] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 558.138844][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 558.138872][ T5600] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.138897][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 558.138923][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.138949][ T5600] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 558.138975][ T5600] usb 8-1: config 168 interface 0 has no altsetting 0 [ 558.211290][ T5600] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 558.211329][ T5600] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 558.211365][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 558.211392][ T5600] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.211417][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 558.211440][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.211465][ T5600] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 558.211490][ T5600] usb 8-1: config 168 interface 0 has no altsetting 0 [ 558.264220][ T5600] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 558.264260][ T5600] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 558.264323][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 558.264352][ T5600] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.264377][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 558.264404][ T5600] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.264430][ T5600] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 558.264455][ T5600] usb 8-1: config 168 interface 0 has no altsetting 0 [ 558.403794][ T5600] usb 8-1: string descriptor 0 read error: -22 [ 558.403909][ T5600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.442173][ T5600] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 560.129866][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.169048][ T1159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.254934][ T5600] usb 8-1: USB disconnect, device number 2 [ 560.435442][ T8973] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 560.452716][ T8973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 560.455239][ T8973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 560.479337][ T8973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 560.480094][ T8973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 563.161230][ T52] Bluetooth: hci5: command tx timeout [ 564.288884][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.533'. [ 564.350419][ T9043] lo speed is unknown, defaulting to 1000 [ 565.955213][ T52] Bluetooth: hci5: command tx timeout [ 565.972327][ T8944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.973251][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.527838][ T30] audit: type=1400 audit(1790953459.876:688): avc: denied { create } for pid=9087 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 566.560164][ T30] audit: type=1400 audit(1790953459.906:689): avc: denied { ioctl } for pid=9087 comm="syz.0.536" path="socket:[27506]" dev="sockfs" ino=27506 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 567.964693][ T52] Bluetooth: hci5: command tx timeout [ 568.297503][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.297592][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.297724][ T9043] bridge_slave_0: entered allmulticast mode [ 568.304223][ T9043] bridge_slave_0: entered promiscuous mode [ 568.423133][ T9099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 568.499827][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.499931][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.500069][ T9043] bridge_slave_1: entered allmulticast mode [ 568.509547][ T9043] bridge_slave_1: entered promiscuous mode [ 569.282586][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.297492][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.362031][ T9043] team0: Port device team_slave_0 added [ 569.363248][ T12] bridge_slave_1: left allmulticast mode [ 569.363419][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.373170][ T12] bridge_slave_0: left allmulticast mode [ 569.373342][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.135412][ T52] Bluetooth: hci5: command tx timeout [ 571.341982][ T1104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.769729][ T30] audit: type=1400 audit(1790953467.110:690): avc: denied { write } for pid=9108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.945417][ T30] audit: type=1400 audit(1790953467.290:691): avc: denied { write } for pid=9131 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.215123][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.221084][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.185910][ T5839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.187558][ T12] bond0 (unregistering): Released all slaves [ 575.237883][ T9043] team0: Port device team_slave_1 added [ 575.494943][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.494960][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.494981][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.498708][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 575.499966][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.499979][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.500009][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.314113][ T8943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.785690][ T9043] hsr_slave_0: entered promiscuous mode [ 578.788885][ T9043] hsr_slave_1: entered promiscuous mode [ 578.812106][ T9043] debugfs: 'hsr0' already exists in 'hsr' [ 578.812141][ T9043] Cannot create hsr debugfs directory [ 685.338180][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 685.345147][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5602/1:b..l P8116/1:b..l [ 685.354192][ C0] rcu: (detected by 0, t=10506 jiffies, g=43413, q=448 ncpus=2) [ 685.361898][ C0] task:syz-executor state:R running task stack:23864 pid:8116 tgid:8116 ppid:8101 task_flags:0x400140 flags:0x00080000 [ 685.375378][ C0] Call Trace: [ 685.378644][ C0] [ 685.381568][ C0] __schedule+0x1259/0x6920 [ 685.386090][ C0] ? irqentry_exit+0x24d/0xa10 [ 685.390855][ C0] ? __pfx___schedule+0x10/0x10 [ 685.395715][ C0] preempt_schedule_irq+0x4e/0x90 [ 685.400729][ C0] irqentry_exit+0x205/0xa10 [ 685.405315][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.411290][ C0] RIP: 0010:__kasan_check_read+0x8/0x20 [ 685.416832][ C0] Code: fe 90 0f 0b 90 48 83 c4 60 5b 5d 41 5c e9 c0 fe 55 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f6 31 d2 e9 0f f3 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 685.436426][ C0] RSP: 0018:ffffc9000427f660 EFLAGS: 00000293 [ 685.442485][ C0] RAX: 0000000000000000 RBX: ffffea0001a4b380 RCX: ffffffff824dcded [ 685.450445][ C0] RDX: ffff888032f54b00 RSI: 0000000000000008 RDI: ffffea0001a4b380 [ 685.458403][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 685.466361][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000000000c2 [ 685.474322][ C0] R13: 0000000000000001 R14: ffffea0001a4b388 R15: dffffc0000000000 [ 685.482289][ C0] ? find_lock_entries+0xcdd/0x1190 [ 685.487496][ C0] find_lock_entries+0xcdd/0x1190 [ 685.492529][ C0] ? __pfx_find_lock_entries+0x10/0x10 [ 685.497994][ C0] ? __pfx___might_resched+0x10/0x10 [ 685.503272][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 685.509597][ C0] shmem_undo_range+0x212/0x1570 [ 685.514538][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 685.519938][ C0] ? kernel_text_address+0x8d/0x100 [ 685.525155][ C0] ? __kernel_text_address+0xd/0x30 [ 685.530351][ C0] ? unwind_get_return_address+0x59/0xa0 [ 685.535987][ C0] ? arch_stack_walk+0xa6/0xf0 [ 685.540777][ C0] ? kasan_save_stack+0x3f/0x50 [ 685.545626][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 685.551001][ C0] shmem_evict_inode+0x3b1/0xca0 [ 685.555938][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 685.561389][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 685.567448][ C0] ? lock_acquire+0x1d1/0x380 [ 685.572121][ C0] ? find_held_lock+0x2b/0x80 [ 685.576798][ C0] ? evict+0x37e/0xad0 [ 685.580855][ C0] ? evict+0x37e/0xad0 [ 685.584917][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 685.590369][ C0] evict+0x3c2/0xad0 [ 685.594259][ C0] ? __pfx_evict+0x10/0x10 [ 685.598665][ C0] ? lock_acquire+0x1d1/0x380 [ 685.603339][ C0] ? iput.part.0+0x981/0x1050 [ 685.608013][ C0] iput.part.0+0x989/0x1050 [ 685.612516][ C0] iput+0x35/0x40 [ 685.616144][ C0] filename_unlinkat+0x466/0x730 [ 685.621084][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 685.626555][ C0] ? do_getname+0x191/0x390 [ 685.631050][ C0] __x64_sys_unlink+0x46/0x70 [ 685.635728][ C0] do_syscall_64+0x123/0x790 [ 685.640316][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.646200][ C0] RIP: 0033:0x7f51ba59d247 [ 685.650606][ C0] RSP: 002b:00007ffc868597d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 685.659008][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f51ba59d247 [ 685.666967][ C0] RDX: 00007ffc86859800 RSI: 00007ffc86859890 RDI: 00007ffc86859890 [ 685.674931][ C0] RBP: 00007ffc86859890 R08: 00007ffc8685a890 R09: 00000000ffffffff [ 685.682888][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc8685a920 [ 685.690846][ C0] R13: 00007f51ba6344bb R14: 000000000008db7e R15: 00007ffc8685a960 [ 685.698822][ C0] [ 685.701828][ C0] task:syz-executor state:R running task stack:22856 pid:5602 tgid:5602 ppid:5592 task_flags:0x400140 flags:0x00080001 [ 685.715303][ C0] Call Trace: [ 685.718571][ C0] [ 685.721495][ C0] __schedule+0x1259/0x6920 [ 685.726018][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 685.730957][ C0] ? __pfx___schedule+0x10/0x10 [ 685.735809][ C0] ? mark_held_locks+0x40/0x70 [ 685.740567][ C0] preempt_schedule_irq+0x4e/0x90 [ 685.745584][ C0] irqentry_exit+0x205/0xa10 [ 685.750168][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.756143][ C0] RIP: 0010:find_lock_entries+0x225/0x1190 [ 685.761949][ C0] Code: be ff 31 ff 44 89 e6 45 89 e5 e8 a6 7f be ff 45 85 e4 0f 84 c9 02 00 00 e8 28 85 be ff 41 8d 54 24 01 44 89 e0 f0 0f b1 55 00 <41> 0f 94 c6 31 ff 41 89 c4 44 89 f6 e8 1a 7f be ff 45 84 f6 74 bd [ 685.781541][ C0] RSP: 0018:ffffc90003b67668 EFLAGS: 00000246 [ 685.787595][ C0] RAX: 0000000000000001 RBX: ffffea0000e8c440 RCX: 0000000000000000 [ 685.795552][ C0] RDX: 0000000000000002 RSI: ffffffff824dc328 RDI: ffff888031310000 [ 685.803515][ C0] RBP: ffffea0000e8c474 R08: 0000000000000005 R09: 0000000000000000 [ 685.811473][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 685.819434][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 685.827401][ C0] ? find_lock_entries+0x218/0x1190 [ 685.832605][ C0] ? find_lock_entries+0x218/0x1190 [ 685.837812][ C0] ? __pfx_find_lock_entries+0x10/0x10 [ 685.843277][ C0] ? __pfx___might_resched+0x10/0x10 [ 685.848553][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 685.854878][ C0] shmem_undo_range+0x212/0x1570 [ 685.859817][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 685.865204][ C0] ? kernel_text_address+0x8d/0x100 [ 685.870399][ C0] ? __kernel_text_address+0xd/0x30 [ 685.875584][ C0] ? unwind_get_return_address+0x59/0xa0 [ 685.881214][ C0] ? arch_stack_walk+0xa6/0xf0 [ 685.885996][ C0] ? kasan_save_stack+0x3f/0x50 [ 685.890841][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 685.896212][ C0] shmem_evict_inode+0x3b1/0xca0 [ 685.901147][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 685.906597][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 685.912659][ C0] ? lock_acquire+0x1d1/0x380 [ 685.917331][ C0] ? find_held_lock+0x2b/0x80 [ 685.922007][ C0] ? evict+0x37e/0xad0 [ 685.926065][ C0] ? evict+0x37e/0xad0 [ 685.930127][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 685.935575][ C0] evict+0x3c2/0xad0 [ 685.939466][ C0] ? __pfx_evict+0x10/0x10 [ 685.943878][ C0] ? lock_acquire+0x1d1/0x380 [ 685.948556][ C0] ? iput.part.0+0x981/0x1050 [ 685.953231][ C0] iput.part.0+0x989/0x1050 [ 685.957733][ C0] iput+0x35/0x40 [ 685.961359][ C0] filename_unlinkat+0x466/0x730 [ 685.966305][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 685.971776][ C0] ? do_getname+0x191/0x390 [ 685.976273][ C0] __x64_sys_unlink+0x46/0x70 [ 685.980949][ C0] do_syscall_64+0x123/0x790 [ 685.985535][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.991419][ C0] RIP: 0033:0x7f915ad9d247 [ 685.995823][ C0] RSP: 002b:00007ffce941e378 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 686.004225][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f915ad9d247 [ 686.012185][ C0] RDX: 00007ffce941e3a0 RSI: 00007ffce941e430 RDI: 00007ffce941e430 [ 686.020143][ C0] RBP: 00007ffce941e430 R08: 00007ffce941f430 R09: 00000000ffffffff [ 686.028100][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffce941f4c0 [ 686.036069][ C0] R13: 00007f915ae344bb R14: 000000000008c979 R15: 00007ffce941f500 [ 686.044063][ C0] [ 686.047087][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g43413 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 686.058101][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 686.068056][ C0] rcu: RCU grace-period kthread stack dump: [ 686.073923][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 686.087408][ C0] Call Trace: [ 686.090679][ C0] [ 686.093602][ C0] __schedule+0x1259/0x6920 [ 686.098109][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 686.103056][ C0] ? __pfx___schedule+0x10/0x10 [ 686.107906][ C0] ? find_held_lock+0x2b/0x80 [ 686.112581][ C0] ? schedule+0x225/0x2c0 [ 686.116916][ C0] schedule+0xdd/0x2c0 [ 686.120983][ C0] schedule_timeout+0x127/0x280 [ 686.125835][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 686.131204][ C0] ? __pfx_process_timeout+0x10/0x10 [ 686.136484][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 686.142290][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 686.147749][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 686.152506][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 686.157801][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 686.163190][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 686.168140][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 686.173332][ C0] ? rcu_is_watching+0x13/0xc0 [ 686.178097][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 686.183910][ C0] rcu_gp_kthread+0x17a/0x220 [ 686.188585][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 686.193777][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 686.199589][ C0] ? __kthread_parkme+0x18f/0x230 [ 686.204612][ C0] ? kthread+0x13a/0x450 [ 686.208852][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 686.214040][ C0] kthread+0x373/0x450 [ 686.218106][ C0] ? __pfx_kthread+0x10/0x10 [ 686.222697][ C0] ret_from_fork+0x730/0xd60 [ 686.227287][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 686.232394][ C0] ? __switch_to+0x800/0x10f0 [ 686.237074][ C0] ? __pfx_kthread+0x10/0x10 [ 686.241663][ C0] ret_from_fork_asm+0x1a/0x30 [ 686.246434][ C0] [ 686.249438][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 686.255753][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.266241][ C0] Tainted: [L]=SOFTLOCKUP [ 686.270548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 686.280594][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 686.286219][ C0] Code: 47 93 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 38 19 00 fb f4 0c 50 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 686.305818][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000242 [ 686.311876][ C0] RAX: 00000000017c740b RBX: ffffffff8ea91580 RCX: ffffffff8bd28215 [ 686.319834][ C0] RDX: 0000000000000001 RSI: ffffffff8e38e858 RDI: ffffffff8c623980 [ 686.327795][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed10170867bd [ 686.335752][ C0] R10: ffff8880b8433deb R11: 0000000000000001 R12: 0000000000000000 [ 686.343709][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 686.351673][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 686.360592][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.367165][ C0] CR2: 0000001b32c01ff8 CR3: 000000005c235000 CR4: 00000000003526f0 [ 686.375124][ C0] Call Trace: [ 686.378390][ C0] [ 686.381311][ C0] default_idle+0x9/0x10 [ 686.385549][ C0] default_idle_call+0x6c/0xb0 [ 686.390304][ C0] do_idle+0x3ae/0x5b0 [ 686.394371][ C0] ? __pfx_do_idle+0x10/0x10 [ 686.398953][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 686.404864][ C0] cpu_startup_entry+0x4f/0x60 [ 686.409629][ C0] rest_init+0x2d3/0x2e0 [ 686.413867][ C0] ? __pfx_rest_init+0x10/0x10 [ 686.418625][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 686.424506][ C0] ? lock_acquire+0x1d1/0x380 [ 686.429192][ C0] ? __pfx_kernel_init+0x10/0x10 [ 686.434126][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 686.439404][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 686.444684][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 686.450136][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 686.455680][ C0] start_kernel+0x48e/0x490 [ 686.460180][ C0] x86_64_start_reservations+0x24/0x30 [ 686.465635][ C0] x86_64_start_kernel+0x12b/0x130 [ 686.470739][ C0] common_startup_64+0x13e/0x158 [ 686.475688][ C0]