last executing test programs: 20m30.704357299s ago: executing program 32 (id=1448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x97, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 19m28.08342977s ago: executing program 33 (id=2055): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000004c0)={r3, 0xff}, 0x8) 18m13.61585975s ago: executing program 34 (id=3012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff020000004304b9c3374691b3776fa9332ad3a77da12609474f01e060cde8998dcdc9eadf6d4fc31cf0b9ce276d5d7a2abc643ba18bd3c330d830afc43374c73914ff716ccd6f64744c452580176c73be62050fa56fe3764e8cebe960fcb287160c03cfb21fbbcaa21e444d30f199d0c87eafb1d040084496a0c8d3d8faf7a58e2542b8715f99781760c1068b063e63fddde3b8f8a9a77e4e333da6e78438c8922aae7359774fcb0cdc06695f707c6b9c8456f4402793ea4c498d56de7d88435d8fe995658e6d9a0aa268d78433e81920"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) close(0x3) 17m22.4856196s ago: executing program 35 (id=3451): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 13m34.145681328s ago: executing program 5 (id=4836): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 13m31.657875433s ago: executing program 5 (id=4846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 13m31.284201537s ago: executing program 5 (id=4847): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 13m30.975128722s ago: executing program 5 (id=4851): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast2, 0xffff, 0x0, 0x4e22, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb403, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0xa, 0x200000, 0x7, 0x1}, {0x40000, 0x0, 0x80}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 13m29.2104162s ago: executing program 5 (id=4859): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) statx(r2, &(0x7f00000003c0)='./cgroup/../file0\x00', 0x1000, 0x8, &(0x7f0000000400)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 13m26.8989915s ago: executing program 5 (id=4868): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 13m11.694271299s ago: executing program 36 (id=4868): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 9m35.282106883s ago: executing program 2 (id=5660): mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x162) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) recvfrom$inet_nvme(r0, &(0x7f0000000080)=""/15, 0xf, 0x40, &(0x7f0000000340)=@ll={0x11, 0x17, r1, 0x1, 0xfd, 0x6, @random="b09b76f42d3b"}, 0x80) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0xa8282, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x25, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x200000) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = eventfd2(0x74a6, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x20400, 0x0) 9m32.671332593s ago: executing program 2 (id=5672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={0x1, 0x0, 0x0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff8000}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x11}, 0x1c) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100085060000", @ANYBLOB], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff8c, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x31}, 0x24004844) 9m29.392730617s ago: executing program 2 (id=5682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getpgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9m28.233131201s ago: executing program 2 (id=5688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800000}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x13}, @generic={0x5f}, @initr0, @alu={0x4, 0x1, 0x1, 0x8, 0x2, 0xffffffffffffffe0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b00"/24], 0x18}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r6) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8044) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x28, r10, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffff8000, 0x33}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) r12 = dup2(r0, r1) pidfd_send_signal(r12, 0xe, &(0x7f0000000200)={0x11, 0x7, 0xe21}, 0x0) 9m28.063889783s ago: executing program 2 (id=5690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'wlan1\x00', {}, 0x26}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 9m26.605618898s ago: executing program 2 (id=5694): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10000, 0x0, 0x59}, 0x0, &(0x7f0000000140), &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0xe1, 0x0, 0xb47, 0x9, 0x8, 0x80002001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, &(0x7f0000000180)}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 9m11.3266016s ago: executing program 37 (id=5694): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10000, 0x0, 0x59}, 0x0, &(0x7f0000000140), &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0xe1, 0x0, 0xb47, 0x9, 0x8, 0x80002001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, &(0x7f0000000180)}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 8m21.541002221s ago: executing program 3 (id=5841): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x58c}], 0x1}, 0x9cdc2384056f4939) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) syz_open_dev$sg(0x0, 0x0, 0x80041) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000540)={0x0, 0x3938700}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r3, &(0x7f00000001c0), 0x0, 0x6, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) close(r4) syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x100) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x27ed4f847164e2a, 0xa, 0x39, {0x39, 0xb, "663e91b2f0187ff0478fa22a61ac06299c374800000000000080000000000000000000000000fd6251530612e1c3c814d6b468c6d5d4b6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8m16.35929613s ago: executing program 3 (id=5855): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400007933772449ca858c0014100000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xa) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) r2 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x2048851}, 0x4800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xed, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, 0x0, 0x0, 0x79, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff1400050008e5000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bb4f03e94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e0af46221df7fd8ef145c3ef4206dcdf634c1f215ce3bb9ad809d50b694138", 0xd8}], 0x1}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000800) 8m8.163858321s ago: executing program 3 (id=5871): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001040), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x9, 0x651, 0x12c8000000000000, 0x8000009655, 0x80000001, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) 8m6.668071174s ago: executing program 3 (id=5876): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m55.957237334s ago: executing program 3 (id=5902): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) eventfd(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) lseek(0xffffffffffffffff, 0x38, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) 7m47.598475659s ago: executing program 3 (id=5929): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) r5 = io_uring_setup(0x7627, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x1, 0x1c9, 0x0, r4}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000000c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e287a89cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbdb1cdcb019dc2eab19e1ade2162d48ad90b5e46aeb1c0a5b7033ad302e4d31b7a823493cfb14c4") r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000fbdbff250a010900080012800400f88008001700", @ANYRES32, @ANYBLOB="82fa13082727ff09ff62da3eaa93d63e40c4763572ad8ce519c121e8f47cea68d068a83b8f0f8c072f71d67672cf40b763e24aaa64633ec91cebae87722bfba89257aed0559b81e64f9c281d006af0dfb5b98203a68fb2e3b4825d08826a744810bb38584d75b89228c97f665a2af9de79c4dce2e386624b9e"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r6}, 0x38) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000ef0f0000ff7f000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04ffffffff103d07000000f78a00000000e5ff0400000f0a7610aa44781d"], 0x50) clock_gettime(0xfeffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) fstatfs(r5, 0x0) 7m45.609682059s ago: executing program 9 (id=5935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7m35.574746096s ago: executing program 9 (id=5963): mount(0x0, 0x0, &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)='\x05\x00\x00\x00\x00\x00\x00\x00\x00\xf6 \xe2\xc3\x7f.,\xdc\xab\x83(\xc7\xd3\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b\x86\xe0\xe3#9b\x1f\x0e\xf8\xcd*qce\x96\xcfJw\x00'/134) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e5) r0 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x160, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101840) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r2, &(0x7f0000006540)={0x2020}, 0xfffffce2) 7m32.268672355s ago: executing program 38 (id=5929): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) r5 = io_uring_setup(0x7627, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x1, 0x1c9, 0x0, r4}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000000c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e287a89cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbdb1cdcb019dc2eab19e1ade2162d48ad90b5e46aeb1c0a5b7033ad302e4d31b7a823493cfb14c4") r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000fbdbff250a010900080012800400f88008001700", @ANYRES32, @ANYBLOB="82fa13082727ff09ff62da3eaa93d63e40c4763572ad8ce519c121e8f47cea68d068a83b8f0f8c072f71d67672cf40b763e24aaa64633ec91cebae87722bfba89257aed0559b81e64f9c281d006af0dfb5b98203a68fb2e3b4825d08826a744810bb38584d75b89228c97f665a2af9de79c4dce2e386624b9e"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r6}, 0x38) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000ef0f0000ff7f000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04ffffffff103d07000000f78a00000000e5ff0400000f0a7610aa44781d"], 0x50) clock_gettime(0xfeffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) fstatfs(r5, 0x0) 7m21.971147179s ago: executing program 9 (id=5997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) ioctl$COMEDI_CHANINFO(r2, 0x80306403, &(0x7f0000034e40)={0x0, 0x0, 0x0, &(0x7f0000000940)}) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0xffffffffffffffff, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000000) 7m18.061552907s ago: executing program 9 (id=6004): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0xea283) dup3(r2, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7m10.787409523s ago: executing program 9 (id=6026): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x7, 0x9, 0x0, {0xe, @sliced={0x1, [0x0, 0xd35c, 0x4, 0xb740, 0x7ee, 0x5, 0x92d, 0x3, 0x200, 0x0, 0x1800, 0x3, 0x3, 0x3ff, 0x0, 0x6, 0x1, 0x2, 0x8b, 0x2, 0x7, 0x4, 0x1, 0x7, 0x8, 0x7, 0x0, 0xba9, 0x3, 0x9, 0xffff, 0x6, 0xa, 0x1, 0xe, 0x5, 0x4, 0x7, 0x7, 0xf, 0xfffd, 0x1a2, 0x7, 0x7, 0x7, 0x2, 0x3, 0x7], 0x8}}, 0x1ff}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x4e60, 0x3, 'lc\x00', 0x20, 0x670f537f, 0x80000070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f28, 0x3, 'nq\x00', 0x25, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x0, 0x1}}, 0x44) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x452000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x60143, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004040) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSCTTY(r7, 0x540e, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x34, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7m6.848992662s ago: executing program 9 (id=6036): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffea6, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket(0x10, 0x803, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) gettid() 6m51.548581257s ago: executing program 39 (id=6036): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffea6, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket(0x10, 0x803, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) gettid() 2m39.548517874s ago: executing program 8 (id=6679): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b596e2fc59496e0e879997f964597aacc05792ab67cf827cb08efa5c5bd437de531d72f775265d29cfb0a33b436fd1ac72246a98f4305d1babfaf3a8fce40f1be2bda116b1d34e47473f39aa995a813a710dae914618c4d6fe5ba44aca3e0570dd32977ed521baedf6801196e24f18640f84add06d5a3d091db19c0afcfc4fe365e11e5c9b82d02b079c934b9324386f08f8f13b68e630f47ac96b480f"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) 2m33.297214877s ago: executing program 8 (id=6691): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@userptr={0x5f65, 0xb, 0x4, 0x2, 0x9, {}, {0x1, 0x1, 0x6, 0x9, 0xff, 0x7, "22ec6c62"}, 0x7fff, 0x2, {0x0}, 0x2}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r9, 0x38, 0x0) setsockopt$MRT6_TABLE(r9, 0x29, 0xcf, &(0x7f0000000140), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 2m32.090876385s ago: executing program 8 (id=6695): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0xee00, 0x0) r2 = io_uring_setup(0x3852, &(0x7f0000000640)={0x0, 0xbfffeffb, 0x800, 0x3, 0x2}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f0000000340)='o', 0x1) 2m32.063192961s ago: executing program 8 (id=6696): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 2m30.633167852s ago: executing program 8 (id=6701): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 2m28.831508676s ago: executing program 8 (id=6707): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x10, 0xf0, 0x4, 0x4}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x81, 0x0) lseek(r5, 0x7ffffffffffffffe, 0x2) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 2m13.559051454s ago: executing program 40 (id=6707): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x10, 0xf0, 0x4, 0x4}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x81, 0x0) lseek(r5, 0x7ffffffffffffffe, 0x2) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 57.492720872s ago: executing program 7 (id=6902): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) ioperm(0x6, 0x9, 0x824) syz_ublk_setup_io_uring(0x757b, &(0x7f00000016c0)={0x0, 0xed61, 0x40, 0x0, 0xe6}, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) 55.762316633s ago: executing program 7 (id=6907): ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x44}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffa, 0x1e0b82) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x2, 0x3fd]}}) r9 = dup(r8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r10, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x14, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001010800000000001b000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001240)={0x2, 0xc, 0x80000000, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001580)=[r6, r9], &(0x7f00000015c0)=[{0x5, 0x2, 0x1, 0x8}, {0x1, 0x3, 0x3, 0x5}], 0x10, 0x4000}, 0x94) 55.248048705s ago: executing program 7 (id=6909): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0) mq_timedreceive(r6, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 49.144117157s ago: executing program 7 (id=6919): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000101d5010000000000000000070000046fc39a114ea35de16ed59be5bc389d12ad485d84195a7274e7d1be947aa14b6395281ba8fe46"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="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", 0xfd}, {&(0x7f0000000980)="acb73eb1af664e93f3f456026f92569c28738d7b1a01187d2678aa744116be9c37ae033df6269475cd66ef4a14547d8fa1da1629e7c1eedf09087dc7c0068bb74bc6e6e1f2e480fc3df7ca105a66fd17fc624fb7c491ce38ad2cfce0b3bffc909d05ec7b5d6cb6a29052c7ade8b2941bb829a52bfe9fcb0cb848577df6c0f248c0ea3080e4cd6d0b72b6f9dbe763b1d5d5c1f574f5", 0x95}], 0x2, &(0x7f0000000a80)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x28}, 0x8000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888) write$tcp_mem(r1, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xff}, 0x3a, [0x8000, 0xc95b, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xe, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0xffffffff, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x4, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x5, 0x1000000a, 0x0, 0x5, 0x201c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93b, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x4fa, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x5, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 47.446378523s ago: executing program 7 (id=6923): mbind(&(0x7f0000ffd000/0x2000)=nil, 0xfaff, 0x4003, &(0x7f0000000000)=0x106, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0xd, 0x9, 0xc, 0xe, 0xf, 0x9, 0xc, 0x0, 0x7, 0xf, 0x8, 0x9, 0xe, 0xa, 0x1, 0x2], 0x1, [0x2, 0x5, 0x1, 0x8, 0x8, 0x200, 0xffff, 0x4, 0x7, 0x3402, 0x4, 0x6, 0x94, 0xff, 0x4, 0xff], [0x41, 0x10, 0x5, 0x1, 0x800, 0x6, 0xa9f, 0x3, 0x1, 0x98, 0xe, 0x3, 0x4, 0x40, 0x1, 0xc30b]}}]}}]}, 0x8c}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r6) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) r7 = open(0x0, 0x108843, 0x98) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000110003040300f9fffffff6ffffff5500", @ANYRES32=r4, @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) msgget(0x2, 0x12) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r7, @ANYRES8=r8], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) 46.057985983s ago: executing program 7 (id=6927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@getspdinfo={0x14, 0x25, 0x0, 0x70bd28, 0x25dfdbfd, 0x6, ["", "", "", ""]}, 0xfd47}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="0c31b0d3ddb0"}, 0x6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 'bridge0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x884c) 30.648092528s ago: executing program 41 (id=6927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@getspdinfo={0x14, 0x25, 0x0, 0x70bd28, 0x25dfdbfd, 0x6, ["", "", "", ""]}, 0xfd47}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="0c31b0d3ddb0"}, 0x6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 'bridge0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x884c) 14.311860455s ago: executing program 1 (id=6986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r5, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="110725bd7000f9dbdf2504000700"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) 12.214123469s ago: executing program 1 (id=6989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002"], 0x6c}, 0x1, 0x0, 0x0, 0x844}, 0x4000080) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000841) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) 10.747570135s ago: executing program 1 (id=6990): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x200000000000001a, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="ef2f90e66e932a0996b5581c4b57b1c84a6d6f11f3c72ff1c84f1c481361c39a062cf7156fd9dd64033546b671f45637a96e0fb550a4f1992a1bf8488c19c076f11918fd1dd87fc4552d1cad93ebec73c218e3a3286debf90fc7c88de511fc70010d18dc5835c8463c", @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d000000", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c010000100013072abd7000c1dbdf246401010200000000000000000000000020010000000000000000000000000001000000004e2101020a0000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x800000, @mcast1, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x18}, 0x20008000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r10, &(0x7f0000000900), &(0x7f0000000a00)=""/182}, 0x20) sendto$packet(r3, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.606562553s ago: executing program 6 (id=6991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 10.199912399s ago: executing program 1 (id=6992): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000010101020000000000000000020000003800028006000340000200000c000280050001003a0000000c000281050001000100a1b61400018008000100ac1414aa08000200ac1414bb0c001980080002009908"], 0x58}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r3 = dup(r2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x80, @local, 0x3}, {0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0xffffffffffffffff, 0x9}}, 0x48) sendto$inet6(r3, &(0x7f00000012c0)="a289445583de1175787b9850b1f9e2e911bc8f7ee22a8951b8750513fc6d2f22493c5d747cad28e9412432c95c71361edee4c673b35638b9424a89e42cfb355662f2dcb9d88ff1951a3701902a7112a1a5a5f813215bf59cf09e2522eed74908280ad417b53448645286187518d372f7bceefe9292738161c103deaf442dcacd0c273ab67297d8b5c23c003b2ebac3815c246d9bf63a8e73a178624b618b010112a20b88060ec49330002d5f535b2bfce8a3c4197b26ded292cd8d5b2e9d34a2bd5c4298fe46f4e8b8559b234ab643a7a46548b7f562e5c0d242b45a6e860902118fb014aa6d55b6476db80c0c09c77c9128", 0xf2, 0x14285f56aac09c48, &(0x7f00000013c0)={0xa, 0x4e21, 0x401, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xf7}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0xfffffffffffffde7, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000002840)={0x14, &(0x7f0000002700)={0x20, 0x11, 0xb8, {0xb8, 0xe, "3b9053b1a91e9f09a273f213a3f803ebbcdd98d3e53a468dc9fe14e3d98b8335f628f583bd4996be627b42cefd09235b3609762e992d0bc94ff96cfa7e29d37137e0dbbcfb2417758ecb6b63fb94a413ba4db9e6a07776098f06d5db379a0b4ec5f84b260b7bc18918dad996c52873e76e68b8e9cd2f00180b182608e9521ce548f6d9d37e33f5c19da87368fdd38e180335fa6a0449a056c39f715992a9736d155f5df4c89b400572b46f6f95403e87c40ca102a235"}}, &(0x7f0000002800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000002d40)={0x1c, &(0x7f0000002880)={0x40, 0x16, 0x2a, "aed4341f0be8faf249facb4c7c619569556ded448d8014eb3c917453448216cd337cf391804c01e3910e"}, &(0x7f00000028c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000002d00)={0x21, 0x0, 0x2, ' J'}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getdents64(r4, &(0x7f0000000240)=""/4096, 0x1000) add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 9.914838771s ago: executing program 0 (id=6993): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='10 1 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x14) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x0, 0x7fff, 0x2, 0x80, 0x1, 0x5e5, 0xd80000, {0x0, @in6={{0xa, 0x4e22, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}}, 0x6, 0xec, 0x33c, 0x2, 0x2}}, &(0x7f0000000480)=0xb0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 9.770304726s ago: executing program 4 (id=6994): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x20000000000000, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) close(r0) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 7.618910474s ago: executing program 4 (id=6995): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() capset(&(0x7f00000001c0)={0x19980330, r0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r4 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 6.169310575s ago: executing program 4 (id=6996): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) unshare(0x8040480) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000001100)="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", 0x53f, 0x14000800, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0x180000000]}, &(0x7f0000000180), &(0x7f0000000200)={0x0, 0x989680}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8010) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x21a3, 0x30}, &(0x7f0000000900)=0xc) 6.167906708s ago: executing program 6 (id=7005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() capset(&(0x7f00000001c0)={0x19980330, r0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r4 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 5.238137963s ago: executing program 6 (id=6997): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 5.237636289s ago: executing program 1 (id=6998): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pipe(&(0x7f0000002680)) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40102, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = msgget(0x0, 0x80) msgctl$MSG_INFO(r9, 0xc, &(0x7f0000000180)=""/8) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r10, r6, &(0x7f0000002080)=0x64, 0x23b) 4.994255573s ago: executing program 0 (id=6999): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x4c, 0x6, 0x8f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000340)={@multicast2, @loopback, @remote}, 0xc) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3.641322941s ago: executing program 0 (id=7000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002"], 0x6c}, 0x1, 0x0, 0x0, 0x844}, 0x4000080) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000841) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) 3.098190624s ago: executing program 6 (id=7001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xa0}}, 0x20050800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) dup3(r2, r1, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000002100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x10000000000000, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4) sendmmsg(r9, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x41) ioctl$sock_netdev_private(r8, 0x89fe, &(0x7f0000000040)="22e242") name_to_handle_at(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=@reiserfs_6={0x18, 0x6, {0x3, 0xffff, 0x5, 0x6, 0x8, 0x40}}, &(0x7f00000002c0), 0x1400) 3.055578954s ago: executing program 0 (id=7002): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x3, 0x0, 0x1, 0x3}}, 0x26) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "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"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="049040000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018", @ANYRES32, @ANYBLOB="00038600000040031800810000003b8000000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r4, 0x541b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000"], 0x0, 0x2a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYRES8=r2], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 2.913001559s ago: executing program 4 (id=7003): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000340)={0x0, 0x1, 0x8, 0x11, 0x200, &(0x7f0000000d80)="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"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="000600"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) uname(&(0x7f0000000080)=""/209) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r6}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 2.099493028s ago: executing program 6 (id=7004): socket$tipc(0x1e, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000680)=""/102395, 0x18ffb) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x9, 0x2a580) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x5, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioprio_set$pid(0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431903000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="c198e36116e2aaf62ff77197ffffffff16d14971fbdf7776cf2b5ea9580df1a6e1d5c7001a05b8cc4be1d0694966cc7efb9c926c334a43925ed9de2ccc482eb2cf13fcbed43faedc734a3d09317f8038e681c62e490639f7f1e34488652fb933ada488725bf99b21f93a5b69bd77bfece6aab4c3ab13ca3a96ba1ac39fb02948893f2322dec7fc7bb68496c37c94fda6ae9b"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.818723535s ago: executing program 4 (id=7006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x7}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000600)='U3', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x16b102, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 943.974057ms ago: executing program 0 (id=7007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() capset(&(0x7f00000001c0)={0x19980330, r0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r4 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 280.520147ms ago: executing program 4 (id=7008): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r2) socket(0x15, 0x5, 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)=""/165, 0x4b) socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x8, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x3, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) close_range(r1, 0xffffffffffffffff, 0x0) 193.862912ms ago: executing program 6 (id=7009): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_open_dev$video4linux(0x0, 0x100000000009, 0x80000) write$binfmt_script(r1, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7040000000080b8785d960001810600000000000000000000000000000000000000000000000c00", "2809e8dbe101000000224ad54afac11d875397bdb7819e02177d3d458dd4992861ac00000000ae00ffff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x10000000]}}) r2 = syz_open_dev$usbfs(0x0, 0xd93, 0x501b81) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r5 = gettid() r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x0, 0x2, 0x1}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000040)=0x2dff) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4}, 0xc) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 132.211266ms ago: executing program 1 (id=7010): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = eventfd2(0x0, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r10], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) writev(r11, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x441, 0x15001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 0s ago: executing program 0 (id=7011): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) kernel console output (not intermixed with test programs): ad write } for pid=28629 comm="syz.4.6584" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1217.009664][ T30] audit: type=1400 audit(2000000619.554:3677): avc: denied { open } for pid=28629 comm="syz.4.6584" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1217.037977][ T10] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1217.056756][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.060995][ T30] audit: type=1400 audit(2000000619.584:3678): avc: denied { ioctl } for pid=28629 comm="syz.4.6584" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1217.139607][ T30] audit: type=1400 audit(2000000620.114:3679): avc: denied { create } for pid=28633 comm="syz.8.6586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1217.193172][ T10] usb 5-1: config 0 descriptor?? [ 1217.228467][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1217.244926][ T30] audit: type=1400 audit(2000000620.114:3680): avc: denied { write } for pid=28633 comm="syz.8.6586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1217.632469][T13128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1217.643286][T13128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.301760][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1218.312464][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.410715][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.691362][ T10] gspca_cpia1: usb_control_msg 03, error -110 [ 1218.697840][ T10] gspca_cpia1: usb_control_msg 01, error -32 [ 1218.704432][ T10] gspca_cpia1: usb_control_msg 01, error -32 [ 1218.714217][ T10] gspca_cpia1: usb_control_msg 01, error -32 [ 1218.720549][ T10] gspca_cpia1: usb_control_msg 01, error -32 [ 1218.726540][ T10] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1218.815475][T28643] infiniband syz2: set down [ 1218.820220][T28643] infiniband syz2: added ipvlan0 [ 1218.830399][T28643] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1218.833929][T28643] infiniband syz2: Couldn't open port 1 [ 1218.848300][T28643] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1218.863333][T28643] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1218.880441][T28643] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1218.906035][T28643] RDS/IB: syz2: added [ 1218.910369][T28643] smc: adding ib device syz2 with port count 1 [ 1218.916855][T28643] smc: ib device syz2 port 1 has no pnetid [ 1219.548634][T13127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1219.559358][T13127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.679467][T24405] usb 5-1: USB disconnect, device number 31 [ 1220.791057][T28672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1221.095317][T28671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6593'. [ 1221.147026][T10498] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1221.396757][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1221.407538][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.479003][T10498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.682225][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1221.682235][ T30] audit: type=1400 audit(2000000624.664:3725): avc: denied { write } for pid=28652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.152011][ T30] audit: type=1400 audit(2000000624.684:3726): avc: denied { add_name } for pid=28652 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.176236][ T30] audit: type=1400 audit(2000000624.684:3727): avc: denied { create } for pid=28652 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1222.198964][ T30] audit: type=1400 audit(2000000624.684:3728): avc: denied { write } for pid=28652 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=15667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1222.270200][ T30] audit: type=1400 audit(2000000624.684:3729): avc: denied { append } for pid=28652 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=15667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1222.440748][ T30] audit: type=1400 audit(2000000624.784:3730): avc: denied { prog_run } for pid=28692 comm="syz.7.6596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1222.496433][T10498] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1223.059972][ T30] audit: type=1400 audit(2000000625.154:3731): avc: denied { create } for pid=28689 comm="syz.4.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1223.106514][T10498] usb 5-1: Using ep0 maxpacket: 16 [ 1223.146989][T10498] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1223.236635][ T30] audit: type=1400 audit(2000000625.154:3732): avc: denied { write } for pid=28689 comm="syz.4.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1223.302090][ T30] audit: type=1400 audit(2000000625.154:3733): avc: denied { nlmsg_write } for pid=28689 comm="syz.4.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1223.325759][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1223.406650][ T30] audit: type=1400 audit(2000000625.254:3734): avc: denied { read } for pid=28658 comm="syz.0.6590" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1223.453336][T10498] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1223.611343][T10498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.656944][T10498] usb 5-1: config 0 descriptor?? [ 1223.968453][T28730] serio: Serial port ttyS3 [ 1224.834752][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1225.239326][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1225.784331][T28739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28739 comm=syz.1.6604 [ 1226.132001][T10498] usbhid 5-1:0.0: can't add hid device: -71 [ 1226.173814][T10498] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1226.227022][T10498] usb 5-1: USB disconnect, device number 32 [ 1226.702371][T28769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1226.793153][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1226.793169][ T30] audit: type=1400 audit(2000000629.774:3775): avc: denied { bind } for pid=28766 comm="syz.8.6608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1226.827012][T28769] vcan0: tx drop: invalid sa for name 0x0010000000000000 [ 1226.881274][ T30] audit: type=1400 audit(2000000629.814:3776): avc: denied { write } for pid=28766 comm="syz.8.6608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1227.156905][ T9528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1227.318764][ T30] audit: type=1400 audit(2000000630.284:3777): avc: denied { name_bind } for pid=28792 comm="syz.8.6612" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1227.795534][T28801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1227.800545][ T30] audit: type=1400 audit(2000000630.384:3778): avc: denied { append } for pid=28786 comm="syz.4.6611" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1227.833215][T28801] batman_adv: batadv0: Adding interface: gretap3 [ 1227.857868][ T30] audit: type=1400 audit(2000000630.394:3779): avc: denied { name_bind } for pid=28786 comm="syz.4.6611" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1227.909978][ T30] audit: type=1400 audit(2000000630.394:3780): avc: denied { node_bind } for pid=28786 comm="syz.4.6611" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1228.026643][T28801] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.065983][T28801] batman_adv: batadv0: Interface activated: gretap3 [ 1228.081436][ T30] audit: type=1400 audit(2000000630.394:3781): avc: denied { name_bind } for pid=28786 comm="syz.4.6611" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1228.243795][ T30] audit: type=1400 audit(2000000630.814:3782): avc: denied { ioctl } for pid=28792 comm="syz.8.6612" path="socket:[107682]" dev="sockfs" ino=107682 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1229.106685][ T9528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.246442][ T30] audit: type=1400 audit(2000000632.184:3783): avc: denied { create } for pid=28822 comm="syz.8.6615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1229.605301][ T30] audit: type=1400 audit(2000000632.184:3784): avc: denied { setopt } for pid=28822 comm="syz.8.6615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1230.364655][ T9512] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1230.435643][ T9528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1231.312991][T28839] bond6: entered allmulticast mode [ 1231.330614][T28839] ip6gre1: entered allmulticast mode [ 1231.556212][T28839] dvmrp8: entered allmulticast mode [ 1231.712107][T28849] netlink: 'syz.4.6619': attribute type 4 has an invalid length. [ 1232.241378][T28832] bond6: left allmulticast mode [ 1232.247060][T28832] ip6gre1: left allmulticast mode [ 1232.844999][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1232.845035][ T30] audit: type=1400 audit(2000000635.824:3794): avc: denied { create } for pid=28865 comm="syz.1.6622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1232.916642][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1233.020947][ T30] audit: type=1400 audit(2000000635.824:3795): avc: denied { write } for pid=28865 comm="syz.1.6622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1233.304419][ T30] audit: type=1400 audit(2000000636.284:3796): avc: denied { setopt } for pid=28874 comm="syz.7.6624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1233.386386][ T5785] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1233.463948][ T30] audit: type=1400 audit(2000000636.444:3797): avc: denied { write } for pid=28852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.559324][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.576420][ T5785] usb 1-1: Using ep0 maxpacket: 8 [ 1233.587249][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1233.614948][ T5785] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1233.633263][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.650799][ T5785] usb 1-1: Product: syz [ 1233.659556][ T5785] usb 1-1: Manufacturer: syz [ 1233.667334][ T5785] usb 1-1: SerialNumber: syz [ 1233.675915][ T30] audit: type=1400 audit(2000000636.654:3798): avc: denied { write } for pid=28884 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1234.680852][ T30] audit: type=1400 audit(2000000637.664:3799): avc: denied { write } for pid=28867 comm="syz.0.6620" name="igmp6" dev="proc" ino=4026534342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1235.364671][T28899] bridge_slave_0: left allmulticast mode [ 1235.380460][T28899] bridge_slave_0: left promiscuous mode [ 1235.395492][T28899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.412573][T28907] vcan0: tx drop: invalid sa for name 0x0010000000000000 [ 1235.438631][T28899] bridge_slave_1: left allmulticast mode [ 1235.455910][T28899] bridge_slave_1: left promiscuous mode [ 1235.473635][T28899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.488227][ T9512] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1235.511021][T28899] bond0: (slave bond_slave_0): Releasing backup interface [ 1235.676223][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1236.116955][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1236.386409][T28899] bond0: (slave bond_slave_1): Releasing backup interface [ 1236.424618][ T30] audit: type=1400 audit(2000000639.404:3800): avc: denied { watch watch_reads } for pid=28911 comm="syz.7.6629" path="/806" dev="tmpfs" ino=4337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1236.426770][T28899] team0: Port device team_slave_0 removed [ 1236.507555][T28899] team0: Port device team_slave_1 removed [ 1236.512640][ T30] audit: type=1326 audit(2000000639.494:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28913 comm="syz.8.6631" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f866119e019 code=0x0 [ 1236.514201][T28899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.600246][ T30] audit: type=1400 audit(2000000639.574:3802): avc: denied { map_create } for pid=28913 comm="syz.8.6631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1236.600463][T28899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.658695][ T30] audit: type=1400 audit(2000000639.574:3803): avc: denied { map_read map_write } for pid=28913 comm="syz.8.6631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1236.694563][T28899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.721228][T28899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.764921][T28899] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1236.801535][T28904] team0: Mode changed to "activebackup" [ 1237.020841][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6633'. [ 1237.031653][T28923] netlink: 532 bytes leftover after parsing attributes in process `syz.8.6633'. [ 1237.927294][ T30] audit: type=1400 audit(2000000640.904:3804): avc: denied { read write } for pid=28936 comm="syz.8.6637" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1237.987925][ T30] audit: type=1400 audit(2000000640.904:3805): avc: denied { open } for pid=28936 comm="syz.8.6637" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1238.368138][T28945] ipip0: entered promiscuous mode [ 1238.373326][T28945] ipip0: entered allmulticast mode [ 1238.522559][ T5785] usb 1-1: USB disconnect, device number 39 [ 1238.662295][T24889] udevd[24889]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.692120][ T9510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1238.871191][ T30] audit: type=1400 audit(2000000641.834:3806): avc: denied { mount } for pid=28948 comm="syz.1.6640" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1239.353800][T28952] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[25710] was attempted by ""[28952] [ 1239.369289][T28952] netlink: 'syz.1.6640': attribute type 29 has an invalid length. [ 1239.380295][T28952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1239.431873][T28947] syz.0.6639 (28947): drop_caches: 2 [ 1239.460661][ T30] audit: type=1400 audit(2000000642.444:3807): avc: denied { nlmsg_read } for pid=28936 comm="syz.8.6637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1239.653280][ T30] audit: type=1400 audit(2000000642.624:3808): avc: denied { create } for pid=28956 comm="syz.4.6642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1239.765454][ T30] audit: type=1400 audit(2000000642.624:3809): avc: denied { bind } for pid=28956 comm="syz.4.6642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1240.048712][ T5785] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1240.235166][T28970] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1240.251294][ T30] audit: type=1400 audit(2000000643.204:3810): avc: denied { write } for pid=28963 comm="syz.0.6644" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1241.141627][ T30] audit: type=1400 audit(2000000643.204:3811): avc: denied { ioctl } for pid=28963 comm="syz.0.6644" path="/dev/video7" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1241.357435][ T9512] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1241.368683][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1241.397645][T28957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1241.461899][T28975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6647'. [ 1241.472667][T28975] netlink: 532 bytes leftover after parsing attributes in process `syz.7.6647'. [ 1241.595240][ T5785] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1241.625463][T28957] block device autoloading is deprecated and will be removed. [ 1241.648696][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.695238][ T5785] usb 5-1: config 0 descriptor?? [ 1241.880345][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1242.003607][ T30] audit: type=1400 audit(2000000644.964:3812): avc: denied { connect } for pid=28976 comm="syz.0.6648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1242.338353][ T30] audit: type=1400 audit(2000000644.974:3813): avc: denied { mount } for pid=28976 comm="syz.0.6648" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1243.843876][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1243.843887][ T30] audit: type=1400 audit(2000000646.824:3815): avc: denied { unmount } for pid=25710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1243.895694][ T30] audit: type=1400 audit(2000000646.874:3816): avc: denied { ioctl } for pid=28993 comm="syz.1.6653" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=107472 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1243.937535][T24954] usb 5-1: USB disconnect, device number 33 [ 1244.436711][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1244.564627][ T30] audit: type=1400 audit(2000000647.544:3817): avc: denied { create } for pid=29005 comm="syz.7.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1244.685854][ T30] audit: type=1400 audit(2000000647.574:3818): avc: denied { connect } for pid=29005 comm="syz.7.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1244.708334][ T30] audit: type=1400 audit(2000000647.574:3819): avc: denied { shutdown } for pid=29005 comm="syz.7.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1245.016578][T24954] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1245.867955][T24954] usb 1-1: Using ep0 maxpacket: 8 [ 1246.020073][T24954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.056637][T24954] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1246.110796][T24954] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1246.167392][T24954] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1246.299662][T24954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.449655][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1246.465516][T24954] usb 1-1: Product: syz [ 1246.474136][T24954] usb 1-1: Manufacturer: syz [ 1246.479129][T24954] usb 1-1: SerialNumber: syz [ 1246.637210][ T30] audit: type=1400 audit(2000000649.584:3820): avc: denied { create } for pid=28993 comm="syz.1.6653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1247.113259][ T9512] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1247.125908][ T9528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1247.177020][ T30] audit: type=1400 audit(2000000650.124:3821): avc: denied { read } for pid=28993 comm="syz.1.6653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1247.551649][ T30] audit: type=1400 audit(2000000650.534:3822): avc: denied { write } for pid=28993 comm="syz.1.6653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1247.681666][ T30] audit: type=1400 audit(2000000650.664:3823): avc: denied { read write } for pid=29008 comm="syz.0.6659" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1247.840623][ T30] audit: type=1400 audit(2000000650.694:3824): avc: denied { open } for pid=29008 comm="syz.0.6659" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1248.921333][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1248.921352][ T30] audit: type=1400 audit(2000000651.464:3827): avc: denied { remount } for pid=29037 comm="syz.4.6666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1249.035661][T29044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6663'. [ 1249.213049][ T30] audit: type=1400 audit(2000000652.194:3828): avc: denied { getopt } for pid=29045 comm="syz.1.6667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1249.863316][T29068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29068 comm=syz.1.6671 [ 1249.943275][T29070] /dev/nullb0: Can't lookup blockdev [ 1250.197027][ T9528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1250.252076][ T30] audit: type=1400 audit(2000000653.224:3829): avc: denied { read write } for pid=29075 comm="syz.1.6674" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1250.280506][T29078] input: syz1 as /devices/virtual/input/input36 [ 1250.544079][ T30] audit: type=1400 audit(2000000653.224:3830): avc: denied { open } for pid=29075 comm="syz.1.6674" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1250.848938][ T30] audit: type=1400 audit(2000000653.254:3831): avc: denied { ioctl } for pid=29075 comm="syz.1.6674" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1250.994426][ T30] audit: type=1400 audit(2000000653.334:3832): avc: denied { read } for pid=4960 comm="acpid" name="event2" dev="devtmpfs" ino=3755 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.069878][ T30] audit: type=1400 audit(2000000653.334:3833): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3755 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.197026][ T30] audit: type=1400 audit(2000000653.334:3834): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3755 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.456839][ T30] audit: type=1400 audit(2000000654.434:3835): avc: denied { write } for pid=29087 comm="syz.1.6676" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1251.605707][ T30] audit: type=1400 audit(2000000654.444:3836): avc: denied { read } for pid=29087 comm="syz.1.6676" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1252.125817][ T9510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1253.042112][ T9510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1253.047815][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1253.273954][T24954] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1253.359600][T24954] usb 1-1: USB disconnect, device number 40 [ 1253.452395][T24889] udevd[24889]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1253.530932][T29103] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6679'. [ 1254.677080][ T5785] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1254.701938][T25473] libceph: connect (1)[c::]:6789 error -101 [ 1254.720698][T25473] libceph: mon0 (1)[c::]:6789 connect error [ 1254.773600][T29116] ceph: No mds server is up or the cluster is laggy [ 1254.921560][ T5785] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1254.961114][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.084897][ T5785] usb 2-1: config 0 descriptor?? [ 1255.699711][ T5785] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1255.746156][T29111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6683'. [ 1255.957854][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1255.992744][T29124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29124 comm=syz.0.6684 [ 1256.036243][T29123] macsec1: entered promiscuous mode [ 1256.043410][T29123] macsec1: entered allmulticast mode [ 1256.053440][T29123] dummy0: entered allmulticast mode [ 1256.154586][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1256.154619][ T30] audit: type=1400 audit(2000000659.034:3844): avc: denied { append } for pid=29125 comm="syz.4.6686" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1256.198837][T29123] dummy0: left allmulticast mode [ 1256.711257][ T30] audit: type=1400 audit(2000000659.694:3845): avc: denied { mount } for pid=29121 comm="syz.7.6685" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1256.742652][T29127] netlink: 'syz.4.6686': attribute type 3 has an invalid length. [ 1256.750515][T29127] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6686'. [ 1256.998045][ T5785] gspca_cpia1: usb_control_msg 03, error -110 [ 1257.008793][ T5785] gspca_cpia1: usb_control_msg 01, error -32 [ 1257.015399][ T5785] gspca_cpia1: usb_control_msg 01, error -32 [ 1257.035865][ T5785] gspca_cpia1: usb_control_msg 01, error -32 [ 1257.053332][ T5785] gspca_cpia1: usb_control_msg 01, error -32 [ 1257.063048][ T5785] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1257.524906][ T30] audit: type=1400 audit(2000000660.484:3846): avc: denied { getopt } for pid=29141 comm="syz.7.6698" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1257.560464][T29142] syz.4.6688 (29142): drop_caches: 2 [ 1257.643378][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.653763][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.664122][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.674512][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.684853][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.695581][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.705922][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.716227][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.726810][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.737126][T29145] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1257.779605][ T5785] usb 2-1: USB disconnect, device number 27 [ 1258.173920][ T30] audit: type=1400 audit(2000000661.024:3847): avc: denied { map } for pid=29150 comm="syz.4.6690" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=108263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1258.308219][ T30] audit: type=1400 audit(2000000661.024:3848): avc: denied { read write } for pid=29150 comm="syz.4.6690" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=108263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1258.434331][ T30] audit: type=1400 audit(2000000661.094:3849): avc: denied { connect } for pid=29150 comm="syz.4.6690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1258.508662][ T30] audit: type=1400 audit(2000000661.484:3850): avc: denied { map } for pid=29159 comm="syz.8.6691" path="socket:[108269]" dev="sockfs" ino=108269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1258.535879][T13127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1258.769089][ T30] audit: type=1400 audit(2000000661.754:3851): avc: denied { create } for pid=29168 comm="syz.7.6692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1259.195060][ T30] audit: type=1400 audit(2000000661.784:3852): avc: denied { write } for pid=29168 comm="syz.7.6692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1259.341123][ T30] audit: type=1400 audit(2000000661.874:3853): avc: denied { cmd } for pid=29168 comm="iou-wrk-29169" path="socket:[108279]" dev="sockfs" ino=108279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1259.950465][T29195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29195 comm=syz.1.6697 [ 1260.449021][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1260.476501][ T5785] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1260.639672][ T5785] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1260.660773][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.702515][ T5785] usb 2-1: config 0 descriptor?? [ 1260.724382][ T5785] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1260.945194][T29203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1261.107957][T29210] netlink: 'syz.4.6703': attribute type 1 has an invalid length. [ 1261.127122][T29210] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6703'. [ 1261.149797][T29210] netlink: 'syz.4.6703': attribute type 1 has an invalid length. [ 1261.178770][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1261.178785][ T30] audit: type=1400 audit(2000000664.164:3861): avc: denied { read } for pid=29209 comm="syz.4.6703" name="fn_play" dev="configfs" ino=108994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1261.313792][ T30] audit: type=1400 audit(2000000664.194:3862): avc: denied { open } for pid=29209 comm="syz.4.6703" path="/186/config/usb_gadget/g1/functions/uac1_legacy.usb0/fn_play" dev="configfs" ino=108994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1261.384564][ T30] audit: type=1800 audit(2000000664.194:3863): pid=29213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.6703" name="fn_play" dev="configfs" ino=108994 res=0 errno=0 [ 1261.439983][T29218] bond7: (slave macvlan2): Releasing backup interface [ 1261.448332][ T30] audit: type=1400 audit(2000000664.264:3864): avc: denied { unmount } for pid=23876 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1261.471006][ T30] audit: type=1400 audit(2000000664.364:3865): avc: denied { create } for pid=29221 comm="syz.4.6706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1261.491871][ T30] audit: type=1400 audit(2000000664.394:3866): avc: denied { read } for pid=29207 comm="syz.8.6701" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1261.538149][ T30] audit: type=1400 audit(2000000664.394:3867): avc: denied { open } for pid=29207 comm="syz.8.6701" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1261.619343][T29224] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1261.628394][T29224] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1261.652467][T29224] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1261.765096][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.864494][T29222] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1262.208779][ T30] audit: type=1400 audit(2000000664.404:3868): avc: denied { recv } for pid=25092 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.145 dest=35472 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1262.276045][ T5785] gspca_cpia1: usb_control_msg 03, error -110 [ 1262.312824][ T5785] gspca_cpia1: usb_control_msg 01, error -32 [ 1262.363134][ T30] audit: type=1400 audit(2000000664.404:3869): avc: denied { create } for pid=29216 comm="syz.7.6705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1262.409688][ T5785] gspca_cpia1: usb_control_msg 01, error -32 [ 1262.431266][ T5785] gspca_cpia1: usb_control_msg 01, error -32 [ 1262.473924][ T5785] gspca_cpia1: usb_control_msg 01, error -32 [ 1262.482345][ T30] audit: type=1400 audit(2000000664.414:3870): avc: denied { bind } for pid=29216 comm="syz.7.6705" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1262.522145][ T5785] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1262.664946][T29218] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1262.751921][T29218] bond0 (unregistering): Released all slaves [ 1264.232231][T24954] usb 2-1: USB disconnect, device number 28 [ 1264.286485][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.707186][T29241] xt_CT: No such helper "netbios-ns" [ 1266.197457][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1266.719051][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1266.719063][ T30] audit: type=1400 audit(2000000669.694:3922): avc: denied { write } for pid=29232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.828475][ T30] audit: type=1400 audit(2000000669.694:3923): avc: denied { add_name } for pid=29232 comm="dhcpcd-run-hook" name="resolv.conf.bond_slave_0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.896816][ T30] audit: type=1400 audit(2000000669.694:3924): avc: denied { create } for pid=29232 comm="dhcpcd-run-hook" name="resolv.conf.bond_slave_0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1267.009154][ T30] audit: type=1400 audit(2000000669.694:3925): avc: denied { write } for pid=29232 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.bond_slave_0.link" dev="tmpfs" ino=15955 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1267.177742][ T30] audit: type=1400 audit(2000000669.704:3926): avc: denied { append } for pid=29232 comm="dhcpcd-run-hook" name="resolv.conf.bond_slave_0.link" dev="tmpfs" ino=15955 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1267.299857][ T30] audit: type=1400 audit(2000000670.044:3927): avc: denied { create } for pid=29280 comm="syz.4.6714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1267.364197][ T30] audit: type=1400 audit(2000000670.044:3928): avc: denied { setopt } for pid=29280 comm="syz.4.6714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1267.471776][ T30] audit: type=1400 audit(2000000670.054:3929): avc: denied { write } for pid=29280 comm="syz.4.6714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1267.530104][ T30] audit: type=1400 audit(2000000670.134:3930): avc: denied { write } for pid=29281 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.593961][ T30] audit: type=1400 audit(2000000670.134:3931): avc: denied { remove_name } for pid=29281 comm="rm" name="resolv.conf.bond_slave_0.link" dev="tmpfs" ino=15955 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.822614][T29294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6715'. [ 1267.833826][T29294] netlink: 532 bytes leftover after parsing attributes in process `syz.1.6715'. [ 1267.875874][T29296] netlink: 'syz.4.6716': attribute type 1 has an invalid length. [ 1267.902329][T29296] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6716'. [ 1267.943792][T29296] netlink: 'syz.4.6716': attribute type 1 has an invalid length. [ 1268.117669][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1268.649749][T29320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1268.669179][T29322] team0: Unable to change to the same mode the team is in [ 1268.846885][T10478] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1269.027841][T10478] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1269.073690][T10478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.123242][T10478] usb 1-1: config 0 descriptor?? [ 1269.216552][T24405] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1269.387659][T24405] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1269.420994][T24405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.868797][T24405] usb 2-1: config 0 descriptor?? [ 1269.910004][T24405] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1270.038417][ T9528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1270.176924][T29332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6721'. [ 1270.729820][T29363] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1271.317262][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1271.396852][T24405] gspca_cpia1: usb_control_msg 03, error -110 [ 1271.409792][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1271.422419][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1271.438823][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1271.458698][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1271.476370][T24405] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1271.509483][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6731'. [ 1271.523399][T24405] usb 1-1: USB disconnect, device number 41 [ 1271.678005][T29374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6730'. [ 1271.688829][T29374] netlink: 532 bytes leftover after parsing attributes in process `syz.4.6730'. [ 1271.784430][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1271.784453][ T30] audit: type=1400 audit(2000000674.764:3984): avc: denied { mmap_zero } for pid=29372 comm="syz.0.6732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1271.910996][ T30] audit: type=1400 audit(2000000674.894:3985): avc: denied { create } for pid=29372 comm="syz.0.6732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1271.948478][ T30] audit: type=1400 audit(2000000674.914:3986): avc: denied { setopt } for pid=29372 comm="syz.0.6732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1271.994822][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1272.186843][ T5752] usb 2-1: USB disconnect, device number 29 [ 1272.515631][ T30] audit: type=1400 audit(2000000675.494:3987): avc: denied { getopt } for pid=29372 comm="syz.0.6732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1272.695270][ T30] audit: type=1400 audit(2000000675.594:3988): avc: denied { read write } for pid=29377 comm="syz.1.6733" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1272.847748][T29378] netlink: 'syz.1.6733': attribute type 10 has an invalid length. [ 1272.879241][ T30] audit: type=1400 audit(2000000675.594:3989): avc: denied { open } for pid=29377 comm="syz.1.6733" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1273.170859][T29378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6733'. [ 1273.220953][T29387] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1273.230189][T29387] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1273.242103][T13127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1273.254933][T29387] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1273.324479][ T30] audit: type=1400 audit(2000000676.304:3990): avc: denied { mount } for pid=29382 comm="syz.4.6735" name="/" dev="hugetlbfs" ino=109223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1273.730942][T29385] wg1: entered promiscuous mode [ 1273.735826][T29385] wg1: entered allmulticast mode [ 1274.930157][ T30] audit: type=1400 audit(2000000676.394:3991): avc: denied { create } for pid=29383 comm="syz.7.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1274.997825][ T30] audit: type=1400 audit(2000000676.674:3992): avc: denied { ioctl } for pid=29377 comm="syz.1.6733" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1275.023277][ T30] audit: type=1400 audit(2000000676.694:3993): avc: denied { getopt } for pid=29383 comm="syz.7.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1275.502906][T29413] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6743'. [ 1275.798623][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1276.321552][ T5752] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1276.847083][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1276.847100][ T30] audit: type=1400 audit(2000000679.424:4008): avc: denied { watch } for pid=29421 comm="syz.7.6746" path="/844/file0" dev="tmpfs" ino=4548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1276.882868][ T30] audit: type=1400 audit(2000000679.424:4009): avc: denied { watch_sb watch_reads } for pid=29421 comm="syz.7.6746" path="/844/file0" dev="tmpfs" ino=4548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1276.936358][ T5752] usb 5-1: Using ep0 maxpacket: 8 [ 1276.943000][ T5752] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.961256][ T5752] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1276.974438][ T30] audit: type=1400 audit(2000000679.424:4010): avc: denied { map } for pid=29421 comm="syz.7.6746" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=109321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1277.003459][ T5752] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1277.037302][ T5752] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1277.047682][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.055697][ T5752] usb 5-1: Product: syz [ 1277.938711][T13127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1277.940854][ T5752] usb 5-1: Manufacturer: syz [ 1277.958996][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1278.027792][ T5752] usb 5-1: SerialNumber: syz [ 1278.063979][ T30] audit: type=1400 audit(2000000679.424:4011): avc: denied { read write } for pid=29421 comm="syz.7.6746" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=109321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1278.210468][ T30] audit: type=1400 audit(2000000679.434:4012): avc: denied { map } for pid=29421 comm="syz.7.6746" path="socket:[109320]" dev="sockfs" ino=109320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1278.401425][ T30] audit: type=1400 audit(2000000681.384:4013): avc: denied { setopt } for pid=29416 comm="syz.4.6744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1278.450857][ T30] audit: type=1400 audit(2000000681.404:4014): avc: denied { read write } for pid=29416 comm="syz.4.6744" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1278.530496][T29439] overlayfs: failed to clone lowerpath [ 1278.592534][ T30] audit: type=1400 audit(2000000681.404:4015): avc: denied { open } for pid=29416 comm="syz.4.6744" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1278.666437][ T30] audit: type=1400 audit(2000000681.414:4016): avc: denied { mount } for pid=29416 comm="syz.4.6744" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1278.741606][ T30] audit: type=1400 audit(2000000681.564:4017): avc: denied { read write } for pid=29440 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1278.788182][T29441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1278.838111][T29441] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1278.857034][T29441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1278.873231][T29441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1278.895310][T29441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1279.026160][T22469] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1279.036794][T22469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1279.048974][T22469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1279.067535][T22469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1279.079954][T22469] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1280.126626][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1280.279106][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1280.308086][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1280.329545][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.358237][ T10] usb 2-1: config 0 descriptor?? [ 1280.471296][T29462] tmpfs: Unknown parameter 'grpquo' [ 1280.814870][T29473] sctp: [Deprecated]: syz.7.6756 (pid 29473) Use of int in max_burst socket option deprecated. [ 1280.814870][T29473] Use struct sctp_assoc_value instead [ 1280.857103][ T5752] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1280.888884][ T5752] usb 5-1: USB disconnect, device number 34 [ 1280.980168][T24889] udevd[24889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.252230][T29441] Bluetooth: hci5: command tx timeout [ 1281.304035][T29440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.331397][T29440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.361872][T29440] bridge_slave_0: entered allmulticast mode [ 1281.437454][T29440] bridge_slave_0: entered promiscuous mode [ 1281.452130][T29440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.464371][T29440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.476789][T29440] bridge_slave_1: entered allmulticast mode [ 1281.486024][T29440] bridge_slave_1: entered promiscuous mode [ 1281.573385][ T9512] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1282.295429][T29440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.351020][T29440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.396698][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1282.396712][ T30] audit: type=1400 audit(2000000685.384:4028): avc: denied { getopt } for pid=29490 comm="syz.0.6759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1282.824264][T29440] team0: Port device team_slave_0 added [ 1282.837285][T29440] team0: Port device team_slave_1 added [ 1282.871614][T29440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.879469][T29440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.972669][T29500] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1283.244365][T29440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.257531][T29440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.264485][T29440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.309090][T25473] usb 2-1: USB disconnect, device number 30 [ 1283.319541][T29441] Bluetooth: hci5: command tx timeout [ 1283.390352][T29440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.394463][ T30] audit: type=1400 audit(2000000686.374:4029): avc: denied { setopt } for pid=29503 comm="syz.1.6761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1283.471584][ T30] audit: type=1400 audit(2000000686.414:4030): avc: denied { sqpoll } for pid=29503 comm="syz.1.6761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1283.521665][ T6317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1283.521693][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1283.558474][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1283.618252][ T30] audit: type=1400 audit(2000000686.594:4031): avc: denied { getopt } for pid=29503 comm="syz.1.6761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1283.649321][T29515] netlink: 'syz.0.6762': attribute type 1 has an invalid length. [ 1283.658253][T29515] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1283.667678][T29515] netlink: 'syz.0.6762': attribute type 1 has an invalid length. [ 1283.682385][ T30] audit: type=1800 audit(2000000686.664:4032): pid=29515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6762" name="fn_play" dev="configfs" ino=109926 res=0 errno=0 [ 1283.715628][T29440] hsr_slave_0: entered promiscuous mode [ 1283.729235][ T10] usb 5-1: too many configurations: 97, using maximum allowed: 8 [ 1283.754911][T29440] hsr_slave_1: entered promiscuous mode [ 1283.769180][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1283.778663][ T10] usb 5-1: can't read configurations, error -61 [ 1283.797875][T29440] debugfs: 'hsr0' already exists in 'hsr' [ 1283.898521][T29440] Cannot create hsr debugfs directory [ 1283.927247][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1284.011381][ T30] audit: type=1400 audit(2000000686.984:4033): avc: denied { accept } for pid=29518 comm="syz.1.6763" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1284.488247][ T10] usb 5-1: too many configurations: 97, using maximum allowed: 8 [ 1284.497637][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1284.506737][ T10] usb 5-1: can't read configurations, error -61 [ 1284.513778][ T10] usb usb5-port1: attempt power cycle [ 1284.632174][T24405] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1284.738323][T29531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6766'. [ 1284.792579][ T30] audit: type=1400 audit(2000000687.774:4034): avc: denied { write } for pid=29530 comm="syz.1.6766" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1284.830056][T24405] usb 1-1: Using ep0 maxpacket: 32 [ 1284.859893][T24405] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1284.897071][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1284.951021][T24405] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1284.963571][T24405] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1284.964003][ T10] usb 5-1: too many configurations: 97, using maximum allowed: 8 [ 1284.972968][T24405] usb 1-1: Product: syz [ 1285.018465][T24405] usb 1-1: Manufacturer: syz [ 1285.036454][T24405] usb 1-1: SerialNumber: syz [ 1285.060931][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1285.065012][T24405] usb 1-1: config 0 descriptor?? [ 1285.094840][T29528] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1285.117629][ T10] usb 5-1: can't read configurations, error -61 [ 1285.276508][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1285.286039][ T30] audit: type=1400 audit(2000000688.264:4035): avc: denied { unmount } for pid=25710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1285.340767][ T30] audit: type=1400 audit(2000000688.324:4036): avc: denied { read } for pid=29542 comm="syz.1.6768" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1285.368031][ T10] usb 5-1: too many configurations: 97, using maximum allowed: 8 [ 1285.379511][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1285.389829][ T10] usb 5-1: can't read configurations, error -61 [ 1285.397851][T29441] Bluetooth: hci5: command tx timeout [ 1285.403023][ T30] audit: type=1400 audit(2000000688.324:4037): avc: denied { open } for pid=29542 comm="syz.1.6768" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1285.432161][ T10] usb usb5-port1: unable to enumerate USB device [ 1286.037070][T29517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1287.321181][T28353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1287.477279][T29441] Bluetooth: hci5: command tx timeout [ 1287.588089][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1287.588106][ T30] audit: type=1400 audit(2000000690.574:4039): avc: denied { setopt } for pid=29556 comm="syz.7.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1287.783940][ T30] audit: type=1400 audit(2000000690.604:4040): avc: denied { write } for pid=29557 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.821787][T24405] usb 1-1: USB disconnect, device number 42 [ 1287.922757][ T30] audit: type=1400 audit(2000000690.894:4041): avc: denied { read } for pid=5270 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1288.316951][T24405] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1288.414278][T29579] overlayfs: overlapping lowerdir path [ 1288.432007][ T30] audit: type=1400 audit(2000000691.414:4042): avc: denied { write } for pid=29565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.494161][T24405] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1288.503742][T24405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.522559][T24405] usb 1-1: config 0 descriptor?? [ 1288.537608][ T30] audit: type=1400 audit(2000000691.504:4043): avc: denied { write } for pid=29582 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.607038][T13123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1288.619684][T24405] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1288.783348][T29567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6771'. [ 1288.982768][T29594] netlink: 'syz.1.6774': attribute type 1 has an invalid length. [ 1289.037306][T29594] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6774'. [ 1289.061646][ T30] audit: type=1800 audit(2000000692.034:4044): pid=29596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6774" name="fn_play" dev="configfs" ino=110879 res=0 errno=0 [ 1289.105012][T29594] netlink: 'syz.1.6774': attribute type 1 has an invalid length. [ 1289.141881][T29440] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1289.190121][T29440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.202432][T29440] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1289.224220][T29586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1289.238729][ T6317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1289.271894][T29440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.274999][T29440] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1289.314703][T29440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.321696][T29440] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1289.346705][T29440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1289.379333][ T30] audit: type=1400 audit(2000000692.344:4045): avc: denied { write } for pid=29587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.617650][ T30] audit: type=1400 audit(2000000692.604:4046): avc: denied { write } for pid=29619 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.727877][T29440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.867179][T29440] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.881880][T24405] gspca_cpia1: usb_control_msg 03, error -110 [ 1289.922502][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1289.936074][T28353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.943161][T28353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.959248][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1289.978647][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1289.988228][T12025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.995366][T12025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.003074][ T30] audit: type=1400 audit(2000000692.984:4047): avc: denied { egress } for pid=27325 comm="kworker/1:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1290.038367][ T30] audit: type=1400 audit(2000000692.984:4048): avc: denied { sendto } for pid=27325 comm="kworker/1:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1290.072481][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1290.194549][T24405] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1290.996970][T27325] usb 1-1: USB disconnect, device number 43 [ 1291.007032][T24405] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1291.651086][T24405] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1291.667336][T24405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.689199][T24405] usb 5-1: config 0 descriptor?? [ 1291.711769][T24405] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1291.797458][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1292.318646][T29440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.231430][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1293.252244][T24405] gspca_cpia1: usb_control_msg 03, error -110 [ 1293.259889][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1293.266784][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1293.280353][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1293.394352][T24405] gspca_cpia1: usb_control_msg 01, error -32 [ 1293.425253][T24405] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1293.716925][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1293.716942][ T30] audit: type=1400 audit(2000000696.614:4057): avc: denied { write } for pid=29663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.768072][ T30] audit: type=1400 audit(2000000696.684:4058): avc: denied { write } for pid=29695 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.774221][T29517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1295.004328][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.044895][T13123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1295.333712][T29703] sctp_transport_update_pmtu: 33 callbacks suppressed [ 1295.333803][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.353434][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.375810][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.388827][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.401402][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.413839][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.426746][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.439416][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.453201][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.466088][T29703] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1295.666973][T25473] usb 5-1: USB disconnect, device number 39 [ 1297.016437][ T30] audit: type=1400 audit(2000000699.974:4059): avc: denied { getopt } for pid=29706 comm="syz.4.6786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1297.559236][ T6317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1297.800941][ T30] audit: type=1400 audit(2000000700.784:4060): avc: denied { write } for pid=29702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.933999][T29726] netlink: 532 bytes leftover after parsing attributes in process `syz.7.6788'. [ 1298.255415][T29440] veth0_vlan: entered promiscuous mode [ 1298.296417][ T5752] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1298.331496][T29729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6789'. [ 1298.332627][T29440] veth1_vlan: entered promiscuous mode [ 1298.413383][ T30] audit: type=1400 audit(2000000701.394:4061): avc: denied { write } for pid=29730 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.464195][ T30] audit: type=1400 audit(2000000701.444:4062): avc: denied { create } for pid=29728 comm="syz.4.6789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1298.497146][ T5752] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.517245][ T5752] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1298.529259][T29440] veth0_macvtap: entered promiscuous mode [ 1298.553462][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.564128][ T30] audit: type=1400 audit(2000000701.524:4063): avc: denied { ioctl } for pid=29732 comm="syz.0.6790" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1298.603409][T29440] veth1_macvtap: entered promiscuous mode [ 1298.614184][ T5752] usb 2-1: config 0 descriptor?? [ 1298.631950][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6790'. [ 1298.650035][T29440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.660057][ T30] audit: type=1400 audit(2000000701.544:4064): avc: denied { ioctl } for pid=29728 comm="syz.4.6789" path="socket:[110141]" dev="sockfs" ino=110141 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1298.691615][T29440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.837721][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1298.897284][T29514] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.940872][T13127] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.012718][T29750] netlink: 'syz.7.6793': attribute type 1 has an invalid length. [ 1299.119551][T29756] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6793'. [ 1299.122757][T29719] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1299.158795][ T30] audit: type=1400 audit(2000000702.134:4065): avc: denied { write } for pid=29736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1299.250341][T29753] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 1299.273676][T29753] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 1299.329610][ T30] audit: type=1400 audit(2000000702.314:4066): avc: denied { write } for pid=29765 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1299.396722][T13127] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.129122][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1300.223164][T29755] bond0: (slave geneve2): making interface the new active one [ 1300.248794][T29755] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1300.277621][T29756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.307837][T29761] tipc: Resetting bearer [ 1300.366581][T28353] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1300.408270][T28353] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.541299][ T9523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.549414][T13123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1300.586253][ T9523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.657549][T13123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1300.698315][ T5752] usb 2-1: string descriptor 0 read error: -71 [ 1300.720971][T13123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1300.726438][ T5752] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 1300.780561][ T5752] earthmate ttyUSB0: required endpoint is missing [ 1300.946222][ T5752] usb 2-1: USB disconnect, device number 31 [ 1301.035423][T29793] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1301.153305][ T30] audit: type=1400 audit(2000000704.014:4067): avc: denied { ioctl } for pid=29786 comm="syz.1.6798" path="/dev/video8" dev="devtmpfs" ino=954 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1301.329049][ T5752] cypress_m8 2-1:0.0: device disconnected [ 1301.350778][T13123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.370320][T13123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.549720][ T30] audit: type=1400 audit(2000000704.534:4068): avc: denied { mounton } for pid=29440 comm="syz-executor" path="/root/syzkaller.rQPtyP/syz-tmp" dev="sda1" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1301.584161][ T30] audit: type=1400 audit(2000000704.534:4069): avc: denied { mount } for pid=29440 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1301.653136][ T30] audit: type=1400 audit(2000000704.564:4070): avc: denied { mounton } for pid=29440 comm="syz-executor" path="/root/syzkaller.rQPtyP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1301.706972][ T30] audit: type=1400 audit(2000000704.564:4071): avc: denied { mounton } for pid=29440 comm="syz-executor" path="/root/syzkaller.rQPtyP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=110473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1302.076701][ T30] audit: type=1400 audit(2000000705.044:4072): avc: denied { write } for pid=29782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.134959][ T30] audit: type=1400 audit(2000000705.114:4073): avc: denied { create } for pid=29807 comm="syz.4.6799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1302.235145][ T30] audit: type=1400 audit(2000000705.214:4074): avc: denied { setopt } for pid=29807 comm="syz.4.6799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1302.677030][ T9523] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1302.688393][T29514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1303.046201][T29823] netlink: 532 bytes leftover after parsing attributes in process `syz.0.6800'. [ 1303.971005][T29511] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1305.976373][T12025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1306.362180][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1306.362201][ T30] audit: type=1400 audit(2000000709.334:4082): avc: denied { write } for pid=29813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.050144][ T30] audit: type=1400 audit(2000000710.034:4083): avc: denied { write } for pid=29854 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.116653][T29874] netlink: 'syz.0.6807': attribute type 10 has an invalid length. [ 1308.125735][T29874] dummy0: left promiscuous mode [ 1308.140678][T29874] team0: Port device dummy0 added [ 1308.176619][T29869] netlink: 'syz.0.6807': attribute type 10 has an invalid length. [ 1308.184865][ T30] audit: type=1400 audit(2000000710.984:4084): avc: denied { bind } for pid=29866 comm="syz.0.6807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1308.365682][ T30] audit: type=1400 audit(2000000711.324:4085): avc: denied { create } for pid=29871 comm="syz.1.6809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1308.599994][ T9510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1308.612881][ T9528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1309.050387][ T30] audit: type=1400 audit(2000000712.034:4086): avc: denied { checkpoint_restore } for pid=29880 comm="syz.4.6810" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1309.732629][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1309.851409][T29869] team0: Port device dummy0 removed [ 1309.870605][ T30] audit: type=1400 audit(2000000712.844:4087): avc: denied { getopt } for pid=29868 comm="syz.6.6808" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1310.402820][ T30] audit: type=1400 audit(2000000713.384:4088): avc: denied { create } for pid=29896 comm="syz.0.6813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1310.673490][ T30] audit: type=1400 audit(2000000713.654:4089): avc: denied { write } for pid=29861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.738238][T29892] wg1: left promiscuous mode [ 1310.776435][T29892] wg1: left allmulticast mode [ 1310.884542][T29906] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6815'. [ 1310.982989][ T30] audit: type=1400 audit(2000000713.934:4090): avc: denied { read write } for pid=29903 comm="syz.0.6814" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1311.755848][ T30] audit: type=1400 audit(2000000713.934:4091): avc: denied { open } for pid=29903 comm="syz.0.6814" path="/141/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1311.824083][T29892] tipc: Resetting bearer [ 1311.928286][ T30] audit: type=1400 audit(2000000713.944:4092): avc: denied { ioctl } for pid=29903 comm="syz.0.6814" path="/141/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1312.022641][T29892] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 1312.048168][T29892] mac80211_hwsim hwsim20 wlan0: left allmulticast mode [ 1312.074770][ T30] audit: type=1400 audit(2000000713.954:4093): avc: denied { remount } for pid=29903 comm="syz.0.6814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1312.100520][T29892] bond1: left allmulticast mode [ 1312.110965][T29892] bridge1: left promiscuous mode [ 1312.123388][T29892] bond4: left allmulticast mode [ 1312.138481][T29892] bond8: left promiscuous mode [ 1312.146442][ T30] audit: type=1400 audit(2000000714.734:4094): avc: denied { write } for pid=29907 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.174797][T29892] bond8: left allmulticast mode [ 1312.188072][T29892] bond9: left promiscuous mode [ 1312.197888][T29892] bond9: left allmulticast mode [ 1312.210110][T29892] gretap3: left promiscuous mode [ 1312.226735][T29892] macvtap1: left allmulticast mode [ 1312.239654][T29892] macvtap2: left allmulticast mode [ 1312.254734][T29892] bridge6: left promiscuous mode [ 1312.272225][T29892] bond14: left promiscuous mode [ 1312.285760][T29892] bridge7: left promiscuous mode [ 1312.305505][T29892] bond14: left allmulticast mode [ 1312.320608][T29892] bridge7: left allmulticast mode [ 1312.346568][T29892] bond16: left promiscuous mode [ 1312.411040][T29517] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1312.573176][T29906] team0 (unregistering): Port device team_slave_0 removed [ 1312.628817][T29906] team0 (unregistering): Port device team_slave_1 removed [ 1313.038280][ T9510] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1313.074041][ T9510] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1313.499445][ T9510] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1313.855821][ T30] audit: type=1400 audit(2000000716.834:4095): avc: denied { unlink } for pid=29922 comm="syz.0.6817" name="#56" dev="tmpfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1313.999578][ T30] audit: type=1400 audit(2000000716.974:4096): avc: denied { read write } for pid=29936 comm="syz.4.6822" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1314.075809][ T30] audit: type=1400 audit(2000000716.974:4097): avc: denied { open } for pid=29936 comm="syz.4.6822" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1314.145806][ T30] audit: type=1400 audit(2000000717.104:4098): avc: denied { unmount } for pid=25092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1314.283520][ T30] audit: type=1400 audit(2000000717.254:4099): avc: denied { unmount } for pid=29936 comm="syz.4.6822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1314.395385][ T30] audit: type=1400 audit(2000000717.374:4100): avc: denied { map } for pid=29936 comm="syz.4.6822" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1315.923528][T29965] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 1316.582636][T29964] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1316.667469][T29968] netlink: 'syz.6.6828': attribute type 1 has an invalid length. [ 1316.691959][T29968] netlink: 232 bytes leftover after parsing attributes in process `syz.6.6828'. [ 1316.745466][T29968] netlink: 'syz.6.6828': attribute type 1 has an invalid length. [ 1317.307433][T29980] ceph: No mds server is up or the cluster is laggy [ 1317.409735][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1317.659281][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1317.703332][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1317.703389][ T30] audit: type=1400 audit(2000000720.684:4112): avc: denied { write } for pid=29929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.076792][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 1318.089328][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 1318.161097][T29987] bridge_slave_0: left allmulticast mode [ 1318.203006][T29987] bridge_slave_0: left promiscuous mode [ 1318.227650][T29990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1318.240163][T29987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.531547][T29987] bridge_slave_1: left allmulticast mode [ 1318.763198][T29987] bridge_slave_1: left promiscuous mode [ 1319.064381][T29987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.392741][T29999] vcan0: tx drop: invalid sa for name 0x0010000000000000 [ 1319.592602][T29987] bond0: (slave bond_slave_0): Releasing backup interface [ 1319.741911][T30004] loop5: detected capacity change from 0 to 7 [ 1319.932583][ T30] audit: type=1400 audit(2000000722.914:4113): avc: denied { write } for pid=29989 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.005304][T29987] bond0: (slave bond_slave_1): Releasing backup interface [ 1320.054397][T29987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1320.100564][T29987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.375558][T29987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1320.407390][T29987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.586586][ T30] audit: type=1400 audit(2000000723.464:4114): avc: denied { write } for pid=30010 comm="syz.7.6833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1320.706226][T30005] support for cryptoloop has been removed. Use dm-crypt instead. [ 1320.719774][T30004] Dev loop5: unable to read RDB block 7 [ 1320.725498][T30004] loop5: unable to read partition table [ 1320.732135][T30004] loop5: partition table beyond EOD, truncated [ 1320.738501][T30004] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1321.038189][T29987] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1321.135303][T29990] team0 (unregistering): Port device netdevsim1 removed [ 1321.285173][T30014] netlink: 'syz.7.6833': attribute type 4 has an invalid length. [ 1321.294237][T30015] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6833'. [ 1321.615727][ T30] audit: type=1400 audit(2000000724.594:4115): avc: denied { create } for pid=30025 comm="syz.1.6835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1322.780579][ T30] audit: type=1400 audit(2000000724.634:4116): avc: denied { connect } for pid=30025 comm="syz.1.6835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1322.800443][ T30] audit: type=1400 audit(2000000725.494:4117): avc: denied { write } for pid=30025 comm="syz.1.6835" path="socket:[111790]" dev="sockfs" ino=111790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1323.196605][ T30] audit: type=1400 audit(2000000726.174:4118): avc: denied { write } for pid=30017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1323.664863][ T30] audit: type=1400 audit(2000000726.624:4120): avc: denied { write } for pid=30053 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1323.960251][ T30] audit: type=1400 audit(2000000726.534:4119): avc: denied { create } for pid=30052 comm="syz.6.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1324.403601][T30064] netlink: 532 bytes leftover after parsing attributes in process `syz.1.6840'. [ 1325.482125][ T30] audit: type=1400 audit(2000000728.464:4121): avc: denied { connect } for pid=30074 comm="syz.1.6844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1325.631543][ T30] audit: type=1400 audit(2000000728.614:4122): avc: denied { write } for pid=30074 comm="syz.1.6844" laddr=fe80::c01e:80ff:fe87:5b76 lport=52848 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1326.021827][T30087] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1326.313946][T30092] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1326.847790][T30097] virtio-fs: tag <48 [ 1326.847790][T30097] ivsize : 16 [ 1326.847790][T30097] chunksize : 16 [ 1326.847790][T30097] walksize : 16 [ 1326.847790][T30097] statesize : 0 [ 1326.847790][T30097] [ 1326.847790][T30097] name : essiv(cbc(aes),sha256) [ 1326.847790][T30097] driver : essiv(cbc-aes-aesni,sha256-lib) [ 1326.847790][T30097] module : kernel [ 1326.847790][T30097] priority : 400 [ 1326.847790][T30097] refcnt : 1 [ 1326.847790][T30097] selftest : passed [ 1326.847790][T30097] internal : no [ 1326.847790][T30097] type : skcipher [ 1326.847790][T30097] async : no [ 1326.847790][T30097] blocksize : 16 [ 1326.847790][T30097] min keysize : 16 [ 1326.847790][T30097] max keysize : 32 [ 1326.847790][T30097] ivsize : 16 [ 1326.847790][T30097] chunksize : 16 [ 1326.847790][T30097] walksize : 16 [ 1326.847790][T30097] statesize : 0 [ 1326.847790][T30097] [ 1326.847790][T30097] name : cbcmac(camellia) [ 1326.847790][T30097] driver : cbcmac(camellia-generic) [ 1326.847790][T30097] module : kernel [ 1326.847790][T30097] priority : 100 [ 1326.847790][T30097] refcnt : 1 [ 1326.847790][T30097] selftest : passed [ 1326.847790][T30097] internal : no [ 1326.847790][T30097] type : shash [ 1326.847790][T30097] blocksize : 16 [ 1326.847790][T30097] digestsize : 16 [ 1326.847790][T30097] [ 1326.847790][T30097] name : gcm(aes) [ 1326.847790][T30097] driver : pcrypt(generic-gcm-aesni-avx) [ 1326.847790][T30097] module : kernel [ 1326.847790][T30097] priority : 600 [ 1326.847790][T30097] refcnt : 13 [ 1326.847790][T30097] selftest : passed [ 1326.847790][T30097] internal : no [ 1326.847790][T30097] type : aead [ 1326.847790][T30097] async : yes [ 1326.847790][T30097] blocksize : 1 [ 1326.847790][T30097] ivsize : 12 [ 1326.847790][T30097] maxauthsize : 16 [ 1326.847790][T30097] geniv : [ 1326.854150][T30097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=30097 comm=syz.4.6846 [ 1327.450095][ T30] audit: type=1400 audit(2000000730.434:4123): avc: denied { write } for pid=30066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1327.655119][T30110] netlink: 'syz.0.6847': attribute type 4 has an invalid length. [ 1328.552983][ T30] audit: type=1400 audit(2000000731.534:4124): avc: denied { write } for pid=30112 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1330.473265][T30126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30126 comm=syz.4.6851 [ 1334.213408][T30166] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1335.105776][ T30] audit: type=1400 audit(2000000738.084:4125): avc: denied { relabelto } for pid=30173 comm="syz.7.6863" name="sequencer" dev="tmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_exec_t:s0" [ 1335.268586][ T30] audit: type=1400 audit(2000000738.084:4126): avc: denied { associate } for pid=30173 comm="syz.7.6863" name="sequencer" dev="tmpfs" ino=3030 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_exec_t:s0" [ 1335.624017][T30193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30193 comm=syz.6.6865 [ 1338.340627][ T30] audit: type=1400 audit(2000000741.324:4127): avc: denied { shutdown } for pid=30204 comm="syz.6.6868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1339.176869][ T30] audit: type=1400 audit(2000000742.154:4128): avc: denied { wake_alarm } for pid=30204 comm="syz.6.6868" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1339.222752][ T30] audit: type=1400 audit(2000000742.204:4129): avc: denied { read write } for pid=30213 comm="syz.4.6869" name="sg0" dev="devtmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1339.258495][ T30] audit: type=1400 audit(2000000742.204:4130): avc: denied { open } for pid=30213 comm="syz.4.6869" path="/dev/sg0" dev="devtmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1339.644576][T30229] netlink: 532 bytes leftover after parsing attributes in process `syz.0.6871'. [ 1339.987372][ T30] audit: type=1400 audit(2000000742.974:4131): avc: denied { create } for pid=30234 comm="syz.7.6875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1341.712086][T30242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6877'. [ 1341.721241][T30242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6877'. [ 1342.172095][ T30] audit: type=1400 audit(2000000744.994:4132): avc: denied { ioctl } for pid=30246 comm="syz.0.6878" path="socket:[112050]" dev="sockfs" ino=112050 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1342.302372][ T30] audit: type=1400 audit(2000000745.104:4133): avc: denied { write } for pid=30246 comm="syz.0.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1342.909660][ T30] audit: type=1400 audit(2000000745.874:4134): avc: denied { append } for pid=30252 comm="syz.0.6880" name="cec0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1344.280278][T30261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1344.522071][T30261] vcan0: tx drop: invalid sa for name 0x0010000000000000 [ 1345.396584][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1346.170409][ T24] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1346.246560][T27325] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1346.390156][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.428658][ T24] usb 5-1: config 0 descriptor?? [ 1346.457959][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1346.558117][T27325] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1346.576768][T27325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.603670][T27325] usb 7-1: config 0 descriptor?? [ 1346.624894][T30284] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1346.640535][T27325] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1347.815169][T30300] netlink: 532 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1347.999904][ T24] gspca_cpia1: usb_control_msg 03, error -110 [ 1348.017616][ T24] gspca_cpia1: usb_control_msg 01, error -32 [ 1348.037647][T27325] gspca_cpia1: usb_control_msg 03, error -110 [ 1348.045600][ T24] gspca_cpia1: usb_control_msg 01, error -32 [ 1348.059391][T27325] gspca_cpia1: usb_control_msg 01, error -32 [ 1348.069506][ T24] gspca_cpia1: usb_control_msg 01, error -32 [ 1348.081544][T27325] gspca_cpia1: usb_control_msg 01, error -32 [ 1348.090263][ T24] gspca_cpia1: usb_control_msg 01, error -32 [ 1348.108649][T27325] gspca_cpia1: usb_control_msg 01, error -32 [ 1348.115429][ T24] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1348.143285][T27325] gspca_cpia1: usb_control_msg 01, error -32 [ 1348.164812][T27325] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1348.494800][T27325] usb 5-1: USB disconnect, device number 40 [ 1349.440164][T24954] usb 7-1: USB disconnect, device number 10 [ 1349.577603][T30306] syz.4.6891 (30306): drop_caches: 2 [ 1349.616524][ T30] audit: type=1400 audit(2000000752.594:4135): avc: denied { ioctl } for pid=30312 comm="syz.6.6893" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1349.630571][T30313] binder: 30312:30313 ioctl c0306201 0 returned -14 [ 1350.079039][ T30] audit: type=1400 audit(2000000752.604:4136): avc: denied { set_context_mgr } for pid=30312 comm="syz.6.6893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1350.126373][ T30] audit: type=1400 audit(2000000752.604:4137): avc: denied { map } for pid=30312 comm="syz.6.6893" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1350.585092][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1350.747171][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1351.112088][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.488506][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.505060][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1351.516398][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.707410][ T24] usb 5-1: config 0 descriptor?? [ 1351.737476][ T24] hub 5-1:0.0: USB hub found [ 1352.492985][ T24] hub 5-1:0.0: 1 port detected [ 1352.997977][ T30] audit: type=1400 audit(2000000755.984:4138): avc: denied { create } for pid=30336 comm="syz.6.6899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1353.225046][T27325] hub 5-1:0.0: activate --> -90 [ 1353.436887][ T30] audit: type=1400 audit(2000000756.364:4139): avc: denied { name_bind } for pid=30345 comm="syz.7.6900" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1354.253416][ T30] audit: type=1400 audit(2000000757.144:4140): avc: denied { write } for pid=30336 comm="syz.6.6899" path="socket:[112140]" dev="sockfs" ino=112140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1354.363509][T27325] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1354.371730][T10478] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1354.443976][ T10] usb 5-1: USB disconnect, device number 41 [ 1354.501072][ T30] audit: type=1400 audit(2000000757.464:4141): avc: denied { open } for pid=30336 comm="syz.6.6899" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1354.667504][ T30] audit: type=1400 audit(2000000757.464:4142): avc: denied { ioctl } for pid=30336 comm="syz.6.6899" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1354.693868][T10478] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1354.723092][T10478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.059463][T10478] usb 2-1: config 0 descriptor?? [ 1355.071895][T10478] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1355.959086][ T30] audit: type=1400 audit(2000000758.944:4143): avc: denied { ioctl } for pid=30365 comm="syz.0.6905" path="socket:[112173]" dev="sockfs" ino=112173 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1355.959318][T30378] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6907'. [ 1356.041759][T30380] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6907'. [ 1356.212701][ T30] audit: type=1400 audit(2000000759.194:4144): avc: denied { setopt } for pid=30365 comm="syz.0.6905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1356.394581][T30388] syz.4.6906 (30388): /proc/30363/oom_adj is deprecated, please use /proc/30363/oom_score_adj instead. [ 1356.438733][T10478] gspca_cpia1: usb_control_msg 03, error -110 [ 1356.449734][T10478] gspca_cpia1: usb_control_msg 01, error -32 [ 1356.459104][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.467532][T10478] gspca_cpia1: usb_control_msg 01, error -32 [ 1356.490998][T10478] gspca_cpia1: usb_control_msg 01, error -32 [ 1356.505728][T30391] pim6reg: entered allmulticast mode [ 1356.514551][T10478] gspca_cpia1: usb_control_msg 01, error -32 [ 1356.524874][T10478] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1358.459457][ T5813] usb 2-1: USB disconnect, device number 32 [ 1358.566412][ T30] audit: type=1400 audit(2000000761.534:4145): avc: denied { create } for pid=30399 comm="syz.4.6912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1358.670880][T30401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1358.946843][ T30] audit: type=1400 audit(2000000761.924:4146): avc: denied { create } for pid=30392 comm="syz.0.6910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1358.980229][T30404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1359.035949][T30404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1359.062994][ T30] audit: type=1400 audit(2000000762.034:4147): avc: denied { sys_admin } for pid=30392 comm="syz.0.6910" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1359.088808][T30401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1359.302507][T30404] bond0: left promiscuous mode [ 1359.355064][T30404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.651232][T30404] bond2: (slave bond0): Enslaving as an active interface with a down link [ 1359.674947][T30410] openvswitch: netlink: IP tunnel dst address not specified [ 1359.689961][ T30] audit: type=1400 audit(2000000762.654:4148): avc: denied { read write } for pid=30403 comm="syz.1.6913" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1359.898040][ T30] audit: type=1400 audit(2000000762.654:4149): avc: denied { open } for pid=30403 comm="syz.1.6913" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1360.566306][T30417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6915'. [ 1360.620521][ T30] audit: type=1400 audit(2000000763.544:4150): avc: denied { write } for pid=30414 comm="syz.4.6915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1367.606021][ T30] audit: type=1400 audit(2000000770.584:4151): avc: denied { connect } for pid=30465 comm="syz.1.6926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1367.645144][T30470] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input40 [ 1367.723247][ T30] audit: type=1400 audit(2000000770.704:4152): avc: denied { read } for pid=4960 comm="acpid" name="event2" dev="devtmpfs" ino=3793 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1367.795407][ T30] audit: type=1400 audit(2000000770.704:4153): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3793 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1367.821088][ T5752] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1367.911111][ T30] audit: type=1400 audit(2000000770.704:4154): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3793 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1367.943945][ T30] audit: type=1400 audit(2000000770.714:4155): avc: denied { ioctl } for pid=30465 comm="syz.1.6926" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1367.972846][ T30] audit: type=1400 audit(2000000770.854:4156): avc: denied { nlmsg_read } for pid=30463 comm="syz.7.6927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1367.997717][ T30] audit: type=1400 audit(2000000770.854:4157): avc: denied { ioctl } for pid=30463 comm="syz.7.6927" path="socket:[113702]" dev="sockfs" ino=113702 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1368.056289][ T5752] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 1368.084663][ T5752] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 1368.126802][ T5752] usb 1-1: Product: syz [ 1368.143733][ T5752] usb 1-1: Manufacturer: syz [ 1368.184635][ T5752] usb 1-1: config 0 descriptor?? [ 1368.229403][ T5752] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1368.693698][ T5752] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 1370.026667][T30494] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1370.051874][ T30] audit: type=1400 audit(2000000773.034:4158): avc: denied { append } for pid=30496 comm="syz.6.6932" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1370.151258][T10498] usb 1-1: USB disconnect, device number 44 [ 1370.181220][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6932'. [ 1370.586739][T10498] ftdi_sio 1-1:0.0: device disconnected [ 1372.288418][T30471] ipip0: entered promiscuous mode [ 1372.293481][T30471] ipip0: entered allmulticast mode [ 1373.049979][T30521] No source specified [ 1373.098769][T30520] netlink: 'syz.0.6937': attribute type 1 has an invalid length. [ 1373.747233][T30520] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6937'. [ 1373.761661][T30520] netlink: 'syz.0.6937': attribute type 1 has an invalid length. [ 1374.281777][ T30] audit: type=1400 audit(2000000777.264:4159): avc: denied { mount } for pid=30533 comm="syz.0.6941" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1374.776883][ T30] audit: type=1400 audit(2000000777.694:4160): avc: denied { create } for pid=30533 comm="syz.0.6941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1374.859934][ T30] audit: type=1400 audit(2000000777.724:4161): avc: denied { search } for pid=30533 comm="syz.0.6941" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1374.931593][ T30] audit: type=1400 audit(2000000777.724:4162): avc: denied { write } for pid=30533 comm="syz.0.6941" name="dynamic_events" dev="tracefs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1374.988046][ T30] audit: type=1400 audit(2000000777.734:4163): avc: denied { open } for pid=30533 comm="syz.0.6941" path="/168/tracing/dynamic_events" dev="tracefs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1375.214666][ T30] audit: type=1400 audit(2000000778.124:4164): avc: denied { unmount } for pid=25092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1375.426474][T30545] netlink: 'syz.0.6943': attribute type 13 has an invalid length. [ 1376.064411][T30546] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 1376.882201][T30555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6945'. [ 1378.113659][T30575] netlink: 'syz.6.6949': attribute type 10 has an invalid length. [ 1378.123263][T30575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6949'. [ 1378.168009][T30575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6949'. [ 1380.161295][ T30] audit: type=1800 audit(2000000783.144:4165): pid=30578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6950" name="fn_play" dev="configfs" ino=112480 res=0 errno=0 [ 1380.538812][ T30] audit: type=1400 audit(2000000783.524:4166): avc: denied { connect } for pid=30579 comm="syz.4.6951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1380.570655][ T30] audit: type=1400 audit(2000000783.524:4167): avc: denied { accept } for pid=30579 comm="syz.4.6951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1380.598419][ T30] audit: type=1400 audit(2000000783.524:4168): avc: denied { write } for pid=30579 comm="syz.4.6951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1381.490102][T30596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30596 comm=syz.6.6954 [ 1381.546010][T22469] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1381.574006][T22469] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1381.585186][T22469] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1381.596023][T22469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1381.603861][T22469] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1381.884109][T30588] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 1381.975787][T30588] macsec1: left promiscuous mode [ 1382.043980][ T9528] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.059025][ T9528] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.081350][ T9528] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.092310][ T9528] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.042042][T22469] Bluetooth: hci7: command tx timeout [ 1384.505026][T30626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1384.641105][T30626] vcan0: tx drop: invalid sa for name 0x0010000000000000 [ 1385.039259][ T30] audit: type=1400 audit(2000000788.024:4169): avc: denied { name_connect } for pid=30637 comm="syz.0.6962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1385.109698][ T30] audit: type=1400 audit(2000000788.074:4170): avc: denied { accept } for pid=30637 comm="syz.0.6962" lport=43631 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1385.216088][ T30] audit: type=1400 audit(2000000788.074:4171): avc: denied { getopt } for pid=30637 comm="syz.0.6962" lport=43631 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1385.322846][ T30] audit: type=1400 audit(2000000788.074:4172): avc: denied { connect } for pid=30637 comm="syz.0.6962" lport=43631 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1385.446898][ T30] audit: type=1400 audit(2000000788.074:4173): avc: denied { name_connect } for pid=30637 comm="syz.0.6962" dest=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1385.644581][ T30] audit: type=1400 audit(2000000788.624:4174): avc: denied { write } for pid=30637 comm="syz.0.6962" lport=43631 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1386.206467][T29441] Bluetooth: hci7: command tx timeout [ 1387.296541][T30654] netlink: 'syz.4.6964': attribute type 4 has an invalid length. [ 1388.279800][T29441] Bluetooth: hci7: command tx timeout [ 1389.207056][T30662] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1389.227263][T30662] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1389.449110][T30594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.460430][T30594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.468582][T30594] bridge_slave_0: entered allmulticast mode [ 1389.478354][T30594] bridge_slave_0: entered promiscuous mode [ 1389.721728][T30594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.736741][T30594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.743844][T30662] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1389.761972][T30662] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1389.771174][T30594] bridge_slave_1: entered allmulticast mode [ 1389.794009][T30594] bridge_slave_1: entered promiscuous mode [ 1389.928062][T30594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.973566][ T30] audit: type=1400 audit(2000000792.954:4175): avc: denied { unmount } for pid=25710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1390.000383][T30594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.118671][T30594] team0: Port device team_slave_0 added [ 1390.140320][T30594] team0: Port device team_slave_1 added [ 1390.234903][T30594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.266510][T30594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.344095][T30594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.586264][T30701] netlink: 'syz.1.6972': attribute type 1 has an invalid length. [ 1390.852493][T30697] bridge0: left promiscuous mode [ 1390.882698][T30697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.922688][T30697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.382124][T30697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1391.444135][T30697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1391.564645][T30697] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1391.761739][T30594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.781513][T30594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.868739][T30594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.084892][T30594] hsr_slave_0: entered promiscuous mode [ 1392.119183][T30594] hsr_slave_1: entered promiscuous mode [ 1392.137469][T30594] debugfs: 'hsr0' already exists in 'hsr' [ 1392.160824][T30594] Cannot create hsr debugfs directory [ 1393.996366][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1394.464113][ T24] usb 7-1: config 255 has an invalid interface number: 97 but max is 0 [ 1394.657725][ T24] usb 7-1: config 255 has no interface number 0 [ 1394.673013][ T24] usb 7-1: config 255 interface 97 has no altsetting 0 [ 1394.803336][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1394.819072][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.869665][ T24] usb 7-1: Product: syz [ 1394.888409][ T24] usb 7-1: Manufacturer: syz [ 1394.906665][ T24] usb 7-1: SerialNumber: syz [ 1395.308766][ T24] rndis_host 7-1:255.97: ACM capabilities 01, not really RNDIS? [ 1395.543204][ T24] usb 7-1: USB disconnect, device number 11 [ 1395.914511][T30755] ceph: No mds server is up or the cluster is laggy [ 1396.004920][T10498] libceph: connect (1)[c::]:6789 error -101 [ 1396.329433][T10498] libceph: mon0 (1)[c::]:6789 connect error [ 1399.536524][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1399.553831][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1399.702635][T30782] ceph: No mds server is up or the cluster is laggy [ 1400.519470][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1400.541803][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1400.916290][T30793] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6990'. [ 1401.206521][T12025] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.276698][ T9510] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.467534][ T9510] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.521215][ T9510] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.756666][T10498] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1401.918558][T10498] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1402.566439][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1403.609290][T10498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.645502][ T30] audit: type=1400 audit(2000000806.624:4176): avc: denied { read } for pid=30804 comm="syz.4.6994" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1403.672371][T10498] usb 2-1: config 0 descriptor?? [ 1403.688849][T10498] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1403.695957][T30805] netlink: 'syz.4.6994': attribute type 23 has an invalid length. [ 1403.786448][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1403.804745][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1403.832988][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.888866][ T24] usb 1-1: Product: syz [ 1403.908512][ T24] usb 1-1: Manufacturer: syz [ 1403.923413][ T24] usb 1-1: SerialNumber: syz [ 1403.964950][ T24] usb 1-1: config 0 descriptor?? [ 1403.994612][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1404.032103][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 1404.032103][ T24] [ 1404.065497][ T24] usb 1-1: selecting invalid altsetting 3 [ 1404.089320][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1404.089320][ T24] [ 1404.119077][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 1404.199688][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1404.229538][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1404.258975][ T24] usb 1-1: media controller created [ 1404.280768][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 1404.305631][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1404.346675][ T24] dvb-usb: MAC address reading failed. [ 1404.410630][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1404.653782][ T24] DVB: Unable to find symbol stb0899_attach() [ 1404.679358][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1404.860328][ T24] rc_core: IR keymap rc-tt-1500 not found [ 1404.884914][ T24] Registered IR keymap rc-empty [ 1404.904476][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1404.917386][T30594] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1404.917388][T10498] gspca_cpia1: usb_control_msg 03, error -110 [ 1404.934128][T10498] gspca_cpia1: usb_control_msg 01, error -32 [ 1404.937817][T30594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1404.953441][T10498] gspca_cpia1: usb_control_msg 01, error -32 [ 1404.962766][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input43 [ 1404.978717][T30594] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1404.992077][T10498] gspca_cpia1: usb_control_msg 01, error -32 [ 1405.005826][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 1405.012592][T10498] gspca_cpia1: usb_control_msg 01, error -32 [ 1405.013394][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 1405.013394][ T24] [ 1405.026124][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1405.028996][T10498] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1405.037631][T30594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1405.055210][ T24] usb 1-1: USB disconnect, device number 45 [ 1405.080380][T30594] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1405.160268][T30594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1405.178930][T30594] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1405.213983][T30594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1405.253644][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1405.375123][T30594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.420337][T30594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.438273][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.445619][ T9523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.474231][T27325] usb 2-1: USB disconnect, device number 33 [ 1406.343600][T28353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.350778][T28353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.211105][T30855] netlink: 'syz.0.6999': attribute type 4 has an invalid length. [ 1408.599794][ T30] audit: type=1400 audit(2000000811.584:4177): avc: denied { connect } for pid=30869 comm="syz.0.7002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1408.652733][T30844] syz.1.6998 (30844): drop_caches: 2 [ 1408.659221][T30870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1409.238551][ T30] audit: type=1400 audit(2000000812.084:4178): avc: denied { mount } for pid=30876 comm="syz.4.7003" name="/" dev="rpc_pipefs" ino=115092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1409.626825][T30594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.818220][T30889] vxcan0: tx address claim with different name [ 1411.196752][T30885] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 1411.425276][T30594] veth0_vlan: entered promiscuous mode [ 1411.571106][ T30] audit: type=1400 audit(2000000814.554:4179): avc: denied { write } for pid=30907 comm="syz.1.7010" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1411.610289][T30594] veth1_vlan: entered promiscuous mode [ 1411.614328][T30908] 9p: Bad value for 'rfdno' [ 1411.671484][ T30] audit: type=1400 audit(2000000814.584:4180): avc: denied { append } for pid=30907 comm="syz.1.7010" name="usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1411.771313][ T30] audit: type=1400 audit(2000000814.584:4181): avc: denied { open } for pid=30907 comm="syz.1.7010" path="/dev/usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1411.884681][T30910] batman_adv: batadv0: Adding interface: ip6gretap0 [ 1411.916518][T30910] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.015749][T30910] batman_adv: batadv0: Interface activated: ip6gretap0 [ 1412.117117][ T31] INFO: task syz.8.6707:29242 blocked for more than 143 seconds. [ 1412.128502][ T31] Tainted: G L syzkaller #0 [ 1412.135282][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1412.169672][ T31] task:syz.8.6707 state:D stack:25672 pid:29242 tgid:29233 ppid:15832 task_flags:0x400140 flags:0x00080002 [ 1412.192278][ T30] audit: type=1400 audit(2000000815.164:4182): avc: denied { write } for pid=5605 comm="syz-executor" path="pipe:[4555]" dev="pipefs" ino=4555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1412.238978][ T31] Call Trace: [ 1412.255300][ T31] [ 1412.255864][T30594] veth0_macvtap: entered promiscuous mode [ 1412.280330][ T31] __schedule+0x125c/0x6730 [ 1412.310563][ T31] ? __pfx___schedule+0x10/0x10 [ 1412.315627][ T30] audit: type=1400 audit(2000000815.174:4183): avc: denied { recv } for pid=9530 comm="kworker/u8:31" saddr=10.128.0.169 src=41212 daddr=10.128.0.145 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1412.361703][ T31] ? find_held_lock+0x2b/0x80 [ 1412.385076][ T31] ? schedule+0x225/0x2c0 [ 1412.410324][ T31] schedule+0xdd/0x2c0 [ 1412.433325][ T31] cgroup_lock_and_drain_offline+0x383/0x800 [ 1412.469903][ T31] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1412.501775][T30917] pim6reg: entered allmulticast mode [ 1412.521240][ T31] ? kernfs_root+0xee/0x2a0 [ 1412.540105][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1412.573539][ T31] ? cgroup_kn_lock_live+0xf4/0x520 [ 1412.600471][ T31] ? kernfs_root+0xf8/0x2a0 [ 1412.623902][ T31] cgroup_kn_lock_live+0x188/0x520 [ 1412.658520][ T31] ? irqentry_exit+0x24d/0xa00 [ 1412.675018][ T31] cgroup_subtree_control_write+0x3dd/0xe90 [ 1412.694207][ T31] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1412.720708][ T31] ? cgroup_file_write+0xd1/0x8a0 [ 1412.739640][ T31] cgroup_file_write+0x1e6/0x8a0 [ 1412.766414][ T31] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1412.772998][ T31] ? __pfx_cgroup_file_write+0x10/0x10 [ 1412.778806][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1412.784123][ T31] ? __pfx_cgroup_file_write+0x10/0x10 [ 1412.790295][ T31] vfs_write+0x6ac/0x1050 [ 1412.794654][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1412.800953][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1412.805756][ T31] ksys_write+0x12a/0x250 [ 1412.810633][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1412.815513][ T31] do_syscall_64+0x115/0x870 [ 1412.820449][ T31] ? clear_bhb_loop+0x40/0x90 [ 1412.825151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.831497][ T31] RIP: 0033:0x7f866119e019 [ 1412.835933][ T31] RSP: 002b:00007f8662010028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1412.844710][ T31] RAX: ffffffffffffffda RBX: 00007f8661426270 RCX: 00007f866119e019 [ 1412.854146][ T31] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 000000000000000c [ 1412.862363][ T31] RBP: 00007f866123500c R08: 0000000000000000 R09: 0000000000000000 [ 1412.870718][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.879046][ T31] R13: 00007f8661426308 R14: 00007f8661426270 R15: 00007ffc29d6e308 [ 1412.887318][ T31] [ 1412.890573][ T31] INFO: task syz.8.6707:29244 blocked for more than 144 seconds. [ 1412.898903][ T31] Tainted: G L syzkaller #0 [ 1412.905418][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1412.914465][ T31] task:syz.8.6707 state:D stack:28856 pid:29244 tgid:29233 ppid:15832 task_flags:0x400040 flags:0x00080002 [ 1412.927277][ T31] Call Trace: [ 1412.930573][ T31] [ 1412.933500][ T31] __schedule+0x125c/0x6730 [ 1412.938602][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1412.943825][ T31] ? __pfx___schedule+0x10/0x10 [ 1412.949027][ T31] ? find_held_lock+0x2b/0x80 [ 1412.953722][ T31] ? schedule+0x225/0x2c0 [ 1412.958354][ T31] schedule+0xdd/0x2c0 [ 1412.962442][ T31] schedule_preempt_disabled+0x13/0x30 [ 1412.968332][ T31] __mutex_lock+0xccc/0x1bd0 [ 1412.972941][ T31] ? fdget_pos+0x2aa/0x380 [ 1412.977613][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1412.982660][ T31] ? __fget_files+0x215/0x3d0 [ 1412.987605][ T31] ? __fget_files+0x21f/0x3d0 [ 1412.992299][ T31] ? fdget_pos+0x2aa/0x380 [ 1412.997039][ T31] fdget_pos+0x2aa/0x380 [ 1413.001306][ T31] ksys_write+0x71/0x250 [ 1413.005594][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1413.011342][ T31] ? kcov_ioctl+0x17a/0x750 [ 1413.015887][ T31] do_syscall_64+0x115/0x870 [ 1413.020826][ T31] ? clear_bhb_loop+0x40/0x90 [ 1413.025531][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.032069][ T31] RIP: 0033:0x7f866119e019 [ 1413.036684][ T31] RSP: 002b:00007f8661fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1413.045291][ T31] RAX: ffffffffffffffda RBX: 00007f8661426360 RCX: 00007f866119e019 [ 1413.056638][ T31] RDX: 000000000000000b RSI: 0000200000000180 RDI: 000000000000000c [ 1413.064641][ T31] RBP: 00007f866123500c R08: 0000000000000000 R09: 0000000000000000 [ 1413.072949][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1413.081500][ T31] R13: 00007f86614263f8 R14: 00007f8661426360 R15: 00007ffc29d6e308 [ 1413.089834][ T31] [ 1413.222746][ T31] [ 1413.222746][ T31] Showing all locks held in the system: [ 1413.296460][ T31] 3 locks held by kworker/0:1/10: [ 1413.322643][ T31] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1413.363026][ T31] #1: ffffc900000f7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1413.423637][ T31] #2: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1413.489311][ T31] 1 lock held by khungtaskd/31: [ 1413.507764][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1413.539755][ T31] 2 locks held by getty/5363: [ 1413.566028][ T31] #0: ffff8880374bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1413.606393][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1413.651762][ T31] 3 locks held by kworker/0:6/5813: [ 1413.676304][ T31] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1413.704682][ T31] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 1413.732509][ T31] #2: ffffffff90ca9898 (&tbl->lock){+.-.}-{3:3}, at: neigh_managed_work+0x39/0x260 [ 1413.766221][ T31] 5 locks held by kworker/u8:24/9523: [ 1413.821192][ T31] #0: ffff88801ce90940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1413.832007][ T31] #1: ffffc9000246fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1413.842263][ T31] #2: ffffffff90a87008 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1413.857946][ T31] #3: ffff8880337b2128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 1413.876351][ T31] #4: ffff8880337b6258 (&devlink->lock_key#11){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 1413.890335][ T31] 3 locks held by syz.8.6707/29242: [ 1413.906349][ T31] #0: ffff88807ab8d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1413.915454][ T31] #1: ffff8880368b6450 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1413.933275][ T31] #2: ffff888052c25080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1413.956630][ T31] 1 lock held by syz.8.6707/29244: [ 1413.966318][ T31] #0: ffff88807ab8d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1413.996328][ T31] 1 lock held by syz.7.6927/30471: [ 1414.001484][ T31] 1 lock held by syz-executor/30594: [ 1414.006906][ T31] #0: ffff888059908ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1414.026629][ T31] 1 lock held by syz.6.7009/30917: [ 1414.031787][ T31] #0: ffff88807b000ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1414.041515][ T31] 1 lock held by syz.1.7010/30907: [ 1414.046769][ T31] #0: ffff88808c2c4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1414.056461][ T31] [ 1414.091207][ T31] ============================================= [ 1414.091207][ T31] [ 1414.099820][ T31] NMI backtrace for cpu 1 [ 1414.099840][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.099864][ T31] Tainted: [L]=SOFTLOCKUP [ 1414.099871][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1414.099880][ T31] Call Trace: [ 1414.099887][ T31] [ 1414.099894][ T31] dump_stack_lvl+0x100/0x190 [ 1414.099922][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1414.099945][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1414.099969][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1414.099998][ T31] sys_info+0x141/0x190 [ 1414.100021][ T31] watchdog+0xcb1/0x1030 [ 1414.100046][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1414.100065][ T31] ? __pfx_watchdog+0x10/0x10 [ 1414.100086][ T31] ? __kthread_parkme+0x18c/0x230 [ 1414.100113][ T31] ? kthread+0x13a/0x450 [ 1414.100128][ T31] ? __pfx_watchdog+0x10/0x10 [ 1414.100147][ T31] kthread+0x370/0x450 [ 1414.100162][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.100180][ T31] ret_from_fork+0x72b/0xd50 [ 1414.100204][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.100229][ T31] ? __switch_to+0x800/0x10f0 [ 1414.100247][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.100265][ T31] ret_from_fork_asm+0x1a/0x30 [ 1414.100300][ T31] [ 1414.100307][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1414.234270][ C0] NMI backtrace for cpu 0 [ 1414.234289][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.234309][ C0] Tainted: [L]=SOFTLOCKUP [ 1414.234314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1414.234323][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1414.234344][ C0] Code: 66 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 ef 0f 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1414.234361][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 1414.234374][ C0] RAX: 0000000003d01487 RBX: ffffffff8e891480 RCX: ffffffff8bbbb2d5 [ 1414.234383][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a76e9 RDI: ffffffff8c402680 [ 1414.234392][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1414.234401][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1414.234410][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1414.234419][ C0] FS: 0000000000000000(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000 [ 1414.234433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1414.234442][ C0] CR2: 0000001b34800ff8 CR3: 00000000893e6000 CR4: 00000000003526f0 [ 1414.234451][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000000b [ 1414.234459][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1414.234468][ C0] Call Trace: [ 1414.234473][ C0] [ 1414.234479][ C0] default_idle+0x9/0x10 [ 1414.234495][ C0] default_idle_call+0x6c/0xb0 [ 1414.234513][ C0] do_idle+0x3a7/0x5b0 [ 1414.234532][ C0] ? __pfx_do_idle+0x10/0x10 [ 1414.234553][ C0] cpu_startup_entry+0x4f/0x60 [ 1414.234572][ C0] rest_init+0x251/0x260 [ 1414.234589][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1414.234610][ C0] start_kernel+0x48e/0x490 [ 1414.234628][ C0] x86_64_start_reservations+0x24/0x30 [ 1414.234646][ C0] x86_64_start_kernel+0x12b/0x130 [ 1414.234665][ C0] common_startup_64+0x13e/0x158 [ 1414.234691][ C0] [ 1414.457135][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1414.464025][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.474717][ T31] Tainted: [L]=SOFTLOCKUP [ 1414.479049][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1414.489130][ T31] Call Trace: [ 1414.492404][ T31] [ 1414.495321][ T31] dump_stack_lvl+0x100/0x190 [ 1414.499992][ T31] vpanic+0x552/0x970 [ 1414.503973][ T31] ? __pfx_vpanic+0x10/0x10 [ 1414.508464][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1414.514612][ T31] panic+0xd1/0xe0 [ 1414.518315][ T31] ? __pfx_panic+0x10/0x10 [ 1414.522729][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1414.528873][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1414.535021][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1414.541163][ T31] ? watchdog.cold+0x1ec/0x234 [ 1414.545911][ T31] ? watchdog+0xcc1/0x1030 [ 1414.550317][ T31] watchdog.cold+0x1fd/0x234 [ 1414.554893][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1414.560687][ T31] ? __pfx_watchdog+0x10/0x10 [ 1414.565352][ T31] ? __kthread_parkme+0x18c/0x230 [ 1414.570368][ T31] ? kthread+0x13a/0x450 [ 1414.574593][ T31] ? __pfx_watchdog+0x10/0x10 [ 1414.579255][ T31] kthread+0x370/0x450 [ 1414.583319][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.587891][ T31] ret_from_fork+0x72b/0xd50 [ 1414.592471][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1414.597573][ T31] ? __switch_to+0x800/0x10f0 [ 1414.602233][ T31] ? __pfx_kthread+0x10/0x10 [ 1414.606816][ T31] ret_from_fork_asm+0x1a/0x30 [ 1414.611577][ T31] [ 1414.614781][ T31] Kernel Offset: disabled [ 1414.619092][ T31] Rebooting in 86400 seconds..