last executing test programs: 11.630889283s ago: executing program 4 (id=2845): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, 0x0, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.stat\x00', 0x26e1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) lseek(r0, 0x54, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x2400c040) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r5, &(0x7f0000000580)=""/174, 0xff56) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'8255\x00', [0x140, 0x0, 0xd, 0x6, 0x205, 0x4, 0x10001, 0x40000006, 0x7, 0x10, 0x5, 0x5, 0x3, 0xd, 0x4ce, 0x9e9b, 0x101, 0x8, 0x6, 0x9, 0xffffffff, 0x461, 0xa, 0x9, 0xffd, 0x80000005, 0x8, 0x3, 0x283, 0x8001, 0x5]}) close(r0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x8, &(0x7f0000000100)=r0, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x20000080) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x3402c096) 10.595501709s ago: executing program 2 (id=2849): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x45c, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0x10, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00"], 0x184}}, 0x20000844) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0xd7, 0x6, 0xa, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x20, 0x6, 0x3}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', r10, r1, 0x0, 0x3, 0x2}, 0x50) write(r8, &(0x7f0000000480)="1c0000001a009b8a140000003b0000000000000000", 0x15) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$FICLONE(r8, 0x40049409, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) 10.474065749s ago: executing program 4 (id=2850): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x1, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0x8000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB="040074abe713000a000600ffffffffffff000006001200fdff00006102bb9cceed4f60b176a3fa375a155935d0f52c06db1308062d3cb8ee93fe38c8fd12a4c09f1b75e1824b1c9861008b248738650f917269"], 0x34}}, 0x0) 10.371979041s ago: executing program 3 (id=2851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000300)=0x2414, 0x4) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 9.310525717s ago: executing program 4 (id=2852): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='hybla', 0x5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x3, 0x20000, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8000, 0x8, 0x8000, 0x80000000}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000600)={0x1d, r1, 0x1, {0x0, 0xf0, 0x1}, 0x2}, 0x18) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./file0\x00', 0x128) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xfffffeff, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000041c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0xfffffffe, 0x40004e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000001040)=@IORING_OP_RECVMSG={0xa, 0x4, 0x32, r3, 0x0, &(0x7f0000001000)={&(0x7f0000000900)=@tipc=@id, 0x80, &(0x7f0000000f40)=[{&(0x7f0000004280)=""/161, 0xa1}, {&(0x7f0000000a80)=""/172, 0xac}, {&(0x7f0000000b40)=""/207, 0xcf}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/218, 0xda}, {&(0x7f0000000ec0)=""/101, 0x65}], 0x7, &(0x7f0000000fc0)=""/10, 0xa}, 0x0, 0x120, 0x0, {0x2}}) syz_io_uring_submit(0x0, r8, r9, 0x0) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002264ffffff316b30d70c062f9c75db6d7e730992aa8ac493020080fd02ec0f3ec0020000002274210f334e5128e2b7e4fc50418698cc2dbd879ad34836eaaa946427ae001cfbcc6d31b88cda604ae8f710d12ff5d6b3c2eeef183e16a62e3dcefac90e"], 0x0}, 0x0) r10 = syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x200) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f00000002c0)={"55970900", 0x2003, 0x80, 0x5, 0x8000006, 0x1000002, "55003e00ead925ca61a17520000400", "5922b1fa", "0125ebde", '\'q6O', ["2f7984214422244777b5e8a7", "00000000000000deff00", '\x00', "00000000009608170200"]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0x2, &(0x7f00000003c0)=0x2, 0x4) 9.251589819s ago: executing program 3 (id=2853): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x40, 0x100, 0x8, 0x8, 0x101, 0xffffffff80000001, 0x64}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0xaa3a6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_tables_matches\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r5, 0x26, &(0x7f0000000200)={0x2, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000000), 0x0, 0x2, 0x1) 9.246475044s ago: executing program 2 (id=2854): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x9, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000400)={@mcast1, 0x0}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008200500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="68020000", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf251900000028000180140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300030000000800030003000000140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000700000008000100", @ANYRES32=r4, @ANYBLOB="08000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="3800018008000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000300000000001400020073797a6b616c6c65723100000000000008000300030000006800018008000300010000001400020069703665727370616e3000000000000008000100", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000000000000000080003000100000008000300000000001400020064766d7270310000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="040001802c0001801400020070696d3672656731000000000000000014000200776732000000000000000000000000007c0001801400020069703667726574617030000000000000140002007663616e3000000000000000000000001400020076657468305f746f5f626174616476000800030002000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100000000000000cbdc472937d6a10400f394ecf894d30c3772fff898ebafe2429daddbbc6a067f1d147fbc627f8a9621ba4b937322c66db1f8155c40854582cac1bef51c9ff2e03b8f0e852f16cac4a9432474000000000000", @ANYRES32=r11, @ANYBLOB="140002006d6163766c616e310000000000000000"], 0x268}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.956229968s ago: executing program 3 (id=2855): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f0000000240), 0x756e, 0x301080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf257000000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result={0x0, 0xfffffffe}}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x70) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000000)=0xa, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r9, r9, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r12, 0x3, 0x1}, 0x50) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3a, 0x229, 0x8000, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 8.947311318s ago: executing program 1 (id=2856): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r2, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) semctl$GETZCNT(r2, 0x2, 0xf, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000004000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='source', 0x0, r5) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="48efcf001000", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf250f0000000a000900bbbbbbbbbbbb000008000b0008000000050033000000000008003a00b700000008003b00040000000600280004000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x2000c000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) tkill(r6, 0xb) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000140)=""/34, 0x22, 0x0, &(0x7f0000000180)=""/3, 0x3}}, 0x10) sendmmsg$inet6(r1, &(0x7f0000008c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfd4e, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x20000800) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000032c0)={0x28, 0x0, 0x0, {{0xff, 0x5, 0x1, r6}}}, 0x28) 8.577435867s ago: executing program 0 (id=2857): socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004040)=@newtfilter={0x1390, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0x0, 0x5}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1360, 0x2, [@TCA_BASIC_ACT={0x135c, 0x3, [@m_tunnel_key={0x144, 0x15, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}]}, {0xf4, 0x6, "1dad4d4a7b5795b386b4653f40cf0f11f8876e8392939c03b04791a527ea6002cca8e98a68320c00dcf8f514b07749473cd544ccac3c1253775358a6f5f87a14c5455438f853445dd8a13e64c5157029ce5f67578375b3acca34309c123fc8b137460cc0aa85f8d948215a86f44d267a889cc1efd21c04c94d719f5f5b1d418373647b642bcd58e2ef5907a63569d1232c27c8745b6b47f6cbbfacc2b15ac68e5974f7deeeb56a81c08e07cd3a9842b11810d049f99f02598836d1251a84efda4b16d5141c0e3f9a49c8909af6d43be7ce10363eb15c5811096bded277ebf675cb2e9be0f474c1476544b74a405b52f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x1084, 0x18, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26a1, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb6, 0x2, 0xffffffffffffffff, 0x3, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x192b, 0xa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x1, 0x4, 0x800, 0xb}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf16, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x190, 0x19, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x401, 0xfc, 0x8, 0x4}, {0x1000, 0x8, 0x9, 0x2}, {0x1ff, 0x9, 0xf, 0xfffffffd}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xe, 0x8, 0x7f, 0x5}, {0x1ff, 0x4, 0x8, 0x3}, {0xf692, 0xfa, 0xd5}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa, 0x9, 0x6, 0xa1b}, {0x6, 0x3c, 0x5, 0xff}, {0x3, 0x6, 0x4, 0x80}, {0x9, 0x1, 0xe, 0xe26c}]}]}, {0xfc, 0x6, "b2e9725847e22290a86c9f23353bc4f95e8f8f2217e0afe7ec55cefd8d5b862ce921930b5610a877fde65544ee37f43b6a1a9eeffebe19d3186930fb75f122111a1422681b62d3c6533324a8d3d01c0b9d37e2cd96203ba020fd39419df51825a2721836cbdef580e2965f7f85f066d1f754eefb744b637d615d98e01ecc3e221aa57a1dde7facc882493e2d1ef2ba53206d9b489cc9a1217c04ea6b8846be0929d9ec1c8154469d342b0252715c27063c28d4b56be96d7c1c163ab79db41359e7dc9512a1565549faa33dcf43875014fde5682766790080a293a87d8a84f113193e26a86707d990f1f67fd714699ff2f922d437c249e016"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1390}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r3, 0x541b, 0x20000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r4, 0xc008aec1, &(0x7f0000000380)={0x5, 0x0, [{0x80000007, 0x8, 0x7, 0x8, 0x4256, 0xc3, 0x1}, {0x4, 0x6, 0x6, 0x700000, 0x110, 0xffffffff, 0x1ff}, {0x6, 0x56454c21, 0x2, 0x800009, 0x81, 0x9, 0x8003}, {0x6, 0x0, 0x6, 0xe, 0x200040, 0x71f, 0x3cc3}, {0x40000001, 0x5, 0x0, 0xecb6, 0x3, 0x9, 0x3ff}]}) syz_io_uring_setup(0x11ca, &(0x7f0000000300)={0x0, 0xe1d6, 0xfc5e9f2fe3969a4d, 0x0, 0x142}, 0x0, 0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @isdn={0x22, 0x10, 0x2, 0x2, 0x59}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0xe2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='veth1\x00', 0x1, 0x4, 0x81}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x4) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') getpid() r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000140)=ANY=[], 0x18) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYRES64=r1], 0x0) 8.576910845s ago: executing program 1 (id=2858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x13, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5000000}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x60}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006928875b909b9160affab41e6a77905a70156b9207f3ddd7e71042cfbbed629421d9b408bde764701a1cbae24227030d74ea23b78d665f3c71deafa5e12e0b4f8d93f4f7d4f04cd4aac4605b7475978010527f4b13f0d3cc4436a7dea2"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8001, 0x8, 0x0, 0x410, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000210085000000", @ANYRES32=r9, @ANYRES16=r8], 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) 7.920050967s ago: executing program 3 (id=2859): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x1, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0x8000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB="040074abe713000a000600ffffffffffff000006001200fdff00006102bb9cceed4f60b176a3fa375a155935d0f52c06db1308062d3cb8ee93fe38c8fd12a4c09f1b75e1824b1c9861008b248738650f917269"], 0x34}}, 0x0) 6.845486764s ago: executing program 4 (id=2860): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x6, 0x5, 0x2c0, 0x1, 0xfff, '\x00', 0x0, r0, 0x3e, 0x2, 0x4, 0xc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x1000000}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3d, &(0x7f0000000340), 0x4) 6.60404552s ago: executing program 0 (id=2861): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c06010000", 0x6, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x640b1}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000e0000002000000000000000000003730e3ccd3f7aaa877550000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001000000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) 5.396248831s ago: executing program 4 (id=2862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x13, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5000000}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x60}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006928875b909b9160affab41e6a77905a70156b9207f3ddd7e71042cfbbed629421d9b408bde764701a1cbae24227030d74ea23b78d665f3c71deafa5e12e0b4f8d93f4f7d4f04cd4aac4605b7475978010527f4b13f0d3cc4436a7dea2"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8001, 0x8, 0x0, 0x410, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000210085000000", @ANYRES32=r9, @ANYRES16=r8], 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) 5.016646805s ago: executing program 3 (id=2863): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x45c, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0x10, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00"], 0x184}}, 0x20000844) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0xd7, 0x6, 0xa, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x20, 0x6, 0x3}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', r10, r1, 0x0, 0x3, 0x2}, 0x50) write(r8, &(0x7f0000000480), 0x0) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$FICLONE(r8, 0x40049409, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) 5.016193598s ago: executing program 0 (id=2864): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x45c, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0x10, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00"], 0x184}}, 0x20000844) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0xd7, 0x6, 0xa, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x20, 0x6, 0x3}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', r10, r1, 0x0, 0x3, 0x2}, 0x50) write(r8, &(0x7f0000000480)="1c0000001a009b8a140000003b0000000000000000", 0x15) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$FICLONE(r8, 0x40049409, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) 4.939152363s ago: executing program 1 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) getpeername(r3, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000440)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x100) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008811) socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4ede, 0x0, 0xec6}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$poke(0x5, r1, &(0x7f0000000100), 0xa) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500008002100010027bd7000fefffffffe880000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000090000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000060000000030a01020000000000000000020000060900010073797a30000000003e000300fd02b21edf8b721e23f2"], 0xa8}}, 0x0) 4.88121295s ago: executing program 2 (id=2867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xa, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a134f5233b701e88159e0bb959df0c63255f9eaf6f2fa366417a4377b0cb3095291ca4c3e36ba27139cf6a2dcd5bd776f665a8a9bd3e73cef1c3d93de8aba5d1cc408c561ef55707cd77710bcd210de41606cf524c7e10636534b2929fa7215ae39309d38a8b947946"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="80004b9776ca5aad4a0ea06c675f48d9"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) lsm_set_self_attr(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="6500000000000000ca0f000001000000200000000000000000dfe90000ff0000"], 0x20, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) 4.004852828s ago: executing program 4 (id=2868): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @private2, 0x2}, 0x1c) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.258451698s ago: executing program 0 (id=2869): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r1, 0x6, &(0x7f0000000240)={&(0x7f0000000140)=""/210, 0xd2}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x130, 0x198, 0x0, {0xff0f000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x40, 0x2c, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {0x0, 0xb}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0xfffffff9, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000004e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00'], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x3afc0, 0x1d1, 0x6}, 0x18) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') 3.255723519s ago: executing program 1 (id=2870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x140a, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x20}}, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0x4, 0x0, &(0x7f0000000600)="c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB]) 3.153026252s ago: executing program 2 (id=2871): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) getdents(0xffffffffffffffff, &(0x7f0000001000)=""/4085, 0xff5) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x42c2c0, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ac0)={'#! ', '', [], 0xa, "8bb8325f24f6890dac867c595f5eb30d90f68ad8a75c0278a9145497e6c208a6968a160cd42d57d93f913ee2c82aa5d2301dd0a65101af527f206f678df9384b2ccc28586c7a00003fd996"}, 0x4f) 3.143168647s ago: executing program 3 (id=2872): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) futex_waitv(&(0x7f0000005a00)=[{0x7, &(0x7f0000000000)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110cb000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x573}, 0x94) rmdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/gser.usb0\x00') symlink(&(0x7f0000000100)='./config\x00', &(0x7f0000000140)='./config\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) socket$inet(0x2, 0x1, 0x100) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) pselect6(0x40, &(0x7f0000000100)={0x7fffffffffffffff, 0x8, 0x10001, 0x10001, 0x9, 0x2b2, 0x8, 0xffffffffffffffff}, &(0x7f00000001c0)={0x6, 0x9, 0xfffffffffffffff8, 0x9, 0x1, 0x0, 0x400, 0x5}, &(0x7f0000000240)={0x9, 0x0, 0x4, 0x4d, 0x4, 0x400, 0x800, 0x8}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x3]}, 0x8}) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x166) ioctl$TCXONC(r1, 0x540a, 0x2) 1.705021277s ago: executing program 0 (id=2873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"/28, @ANYRES32=r0, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4014) unshare(0x100000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/177, 0xb1) getdents(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd20, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) ioprio_get$pid(0x1, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) 1.694892769s ago: executing program 2 (id=2874): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @private2, 0x2}, 0x1c) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.618198809s ago: executing program 1 (id=2875): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000400)="2f040020ca1f", 0x0, 0x42, 0x10023, 0xfffffffd, 0x0}) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000200), &(0x7f00000000c0)=""/221}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 325.054418ms ago: executing program 2 (id=2876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x13, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5000000}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x60}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006928875b909b9160affab41e6a77905a70156b9207f3ddd7e71042cfbbed629421d9b408bde764701a1cbae24227030d74ea23b78d665f3c71deafa5e12e0b4f8d93f4f7d4f04cd4aac4605b7475978010527f4b13f0d3cc4436a7dea2"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8001, 0x8, 0x0, 0x410, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000210085000000", @ANYRES32=r9, @ANYRES16=r8], 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) 136.910399ms ago: executing program 0 (id=2877): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1e5) socket$inet(0x2, 0x0, 0x5) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f000004a000/0x2000)=nil, 0x2000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES8=0x0, @ANYRESHEX=r1], 0x54}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000530000001801000020207525000000000020202def054d208dc3e700bfa100000000000007010000f8ffffffb7e2ffff07000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000000c0)) 0s ago: executing program 1 (id=2878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x13, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5000000}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x60}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006928875b909b9160affab41e6a77905a70156b9207f3ddd7e71042cfbbed629421d9b408bde764701a1cbae24227030d74ea23b78d665f3c71deafa5e12e0b4f8d93f4f7d4f04cd4aac4605b7475978010527f4b13f0d3cc4436a7dea2"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8001, 0x8, 0x0, 0x410, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000210085000000", @ANYRES32=r9, @ANYRES16=r8], 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) kernel console output (not intermixed with test programs): pe=1326 audit(2000000050.620:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.3.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 820.424470][ T30] audit: type=1326 audit(2000000050.620:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.3.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 820.489132][ T30] audit: type=1326 audit(2000000050.620:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.3.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 820.542747][ T30] audit: type=1326 audit(2000000050.770:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.3.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 820.612472][ T30] audit: type=1326 audit(2000000050.770:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.3.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 820.708348][ T30] audit: type=1326 audit(2000000050.770:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.3.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 820.753201][ T30] audit: type=1326 audit(2000000050.770:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.3.1690" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 821.826667][T13447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.735137][ T5610] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 823.175839][ T5610] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 823.184771][ T5610] usb 5-1: config 0 has no interface number 0 [ 823.196829][ T5610] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 823.206110][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 823.214994][ T5610] usb 5-1: Product: syz [ 823.229890][ T5610] usb 5-1: config 0 descriptor?? [ 823.251278][ T5610] ftdi_sio 5-1:0.197: FTDI USB Serial Device converter detected [ 823.295098][ T5610] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 823.724632][T13471] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 823.734105][T13471] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 823.879666][T13471] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 824.044301][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 824.044681][ T30] audit: type=1400 audit(2000000054.320:1408): avc: denied { firmware_load } for pid=13469 comm="syz.1.1699" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 825.476525][T13478] atomic_op ffff888075339198 conn xmit_atomic 0000000000000000 [ 825.708822][ T5610] usb 5-1: USB disconnect, device number 38 [ 825.716801][ T5610] ftdi_sio 5-1:0.197: device disconnected [ 826.161932][ T5610] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 826.300904][ T30] audit: type=1800 audit(2000000056.740:1409): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1705" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 826.321992][ T5610] usb 5-1: Using ep0 maxpacket: 8 [ 826.965544][ T5610] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 826.974992][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.983099][ T5610] usb 5-1: Product: syz [ 826.987389][ T5610] usb 5-1: Manufacturer: syz [ 826.994087][ T5610] usb 5-1: SerialNumber: syz [ 828.642675][T13484] 9p: Bad value for 'msize' [ 828.778812][ T30] audit: type=1400 audit(2000000059.220:1410): avc: denied { read write } for pid=13483 comm="syz.4.1701" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 828.814697][T13506] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1701'. [ 828.960127][ T30] audit: type=1400 audit(2000000059.250:1411): avc: denied { open } for pid=13483 comm="syz.4.1701" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 829.054723][ T30] audit: type=1400 audit(2000000059.490:1412): avc: denied { ioctl } for pid=13483 comm="syz.4.1701" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 829.228846][T13511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1708'. [ 829.667065][ T30] audit: type=1400 audit(2000000060.100:1413): avc: denied { ioctl } for pid=13507 comm="syz.0.1707" path="socket:[35094]" dev="sockfs" ino=35094 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 829.909304][T13517] hub 8-0:1.0: USB hub found [ 829.930291][T13517] hub 8-0:1.0: 1 port detected [ 830.091712][ T5610] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 830.113465][ T5610] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 830.240728][ T5610] usb 5-1: USB disconnect, device number 39 [ 832.514811][T13552] atomic_op ffff888049391998 conn xmit_atomic 0000000000000000 [ 832.999947][T13561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1719'. [ 833.792709][T13567] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1721'. [ 834.127020][T13570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.783673][T13573] bond3: option xmit_hash_policy: invalid value (6) [ 834.934941][T13573] bond3 (unregistering): Released all slaves [ 838.093388][T13599] atomic_op ffff888030fd5198 conn xmit_atomic 0000000000000000 [ 839.942469][T13619] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1734'. [ 841.620034][T13641] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1737'. [ 842.410673][T13644] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 842.891594][T13653] atomic_op ffff88804b6ee198 conn xmit_atomic 0000000000000000 [ 843.785723][ T30] audit: type=1400 audit(2000000074.230:1414): avc: denied { mount } for pid=13649 comm="syz.3.1740" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 845.731974][T13675] bridge0: port 3(erspan0) entered blocking state [ 845.738772][T13675] bridge0: port 3(erspan0) entered disabled state [ 845.748885][T13675] erspan0: entered allmulticast mode [ 845.759841][T13675] erspan0: entered promiscuous mode [ 845.766844][T13675] bridge0: port 3(erspan0) entered blocking state [ 845.774699][T13675] bridge0: port 3(erspan0) entered forwarding state [ 847.708019][T13683] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1749'. [ 847.941917][ T5610] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 849.132846][ T5610] usb 2-1: Using ep0 maxpacket: 8 [ 849.151101][ T5610] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 849.296237][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.324624][ T5610] usb 2-1: Product: syz [ 850.094790][ T5610] usb 2-1: Manufacturer: syz [ 850.117284][ T5610] usb 2-1: SerialNumber: syz [ 850.157770][ T804] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 850.370525][T13716] atomic_op ffff88802adcd198 conn xmit_atomic 0000000000000000 [ 851.812021][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 852.516847][ T5610] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 852.534600][ T5610] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 852.548274][ T5610] mxuport 2-1:254.0: probe with driver mxuport failed with error -71 [ 852.604539][ T5610] usb 2-1: USB disconnect, device number 44 [ 852.619926][ T804] usb 5-1: device descriptor read/all, error -71 [ 852.903287][T13720] bond4: entered allmulticast mode [ 854.137654][ T30] audit: type=1400 audit(2000000083.910:1415): avc: denied { create } for pid=13731 comm="syz.4.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 855.124309][ T30] audit: type=1400 audit(2000000083.920:1416): avc: denied { sys_admin } for pid=13731 comm="syz.4.1760" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 855.642417][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 860.330155][T13782] overlayfs: failed to clone upperpath [ 860.445748][T13785] Failed to initialize the IGMP autojoin socket (err -2) [ 860.935178][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 860.945389][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 860.954484][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 860.963889][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 860.973449][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 861.118457][T13771] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 862.161092][T13803] overlayfs: unescaped trailing colons in lowerdir mount option. [ 863.436382][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 864.569183][T13817] wireguard: wireguard0: Could not create IPv4 socket [ 867.170383][T13840] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 867.268737][T13848] SELinux: policydb version 0 does not match my version range 15-35 [ 867.277583][T13848] SELinux: failed to load policy [ 867.361171][ T30] audit: type=1400 audit(2000000007.520:1417): avc: denied { load_policy } for pid=13844 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 868.354366][T13855] atomic_op ffff88807a427998 conn xmit_atomic 0000000000000000 [ 869.299398][T13870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1790'. [ 871.714040][ T30] audit: type=1400 audit(2000000011.970:1418): avc: denied { write } for pid=13894 comm="syz.1.1797" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 871.738239][T13895] random: crng reseeded on system resumption [ 871.745605][ T30] audit: type=1400 audit(2000000011.970:1419): avc: denied { open } for pid=13894 comm="syz.1.1797" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 872.604781][T13903] atomic_op ffff88803759f998 conn xmit_atomic 0000000000000000 [ 873.396331][T13910] wireguard: wireguard0: Could not create IPv4 socket [ 874.473662][T13925] netlink: zone id is out of range [ 874.479255][T13925] netlink: get zone limit has 4 unknown bytes [ 874.574891][T13929] Failed to initialize the IGMP autojoin socket (err -2) [ 875.137808][T13930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 875.144131][T13930] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 875.163685][T13930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 875.170779][T13930] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 875.189843][T13930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 875.199700][T13930] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 875.217108][T13930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 875.223079][T13930] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 877.028947][T13955] atomic_op ffff88802b360998 conn xmit_atomic 0000000000000000 [ 877.885097][T13968] tc_dump_action: action bad kind [ 878.342452][T13967] fuse: fd is not a fuse device [ 878.549159][T13973] trusted_key: encrypted_key: insufficient parameters specified [ 878.925676][ T30] audit: type=1400 audit(2000000019.150:1420): avc: denied { append } for pid=13969 comm="syz.1.1801" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 879.052184][ T5707] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 879.173378][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 879.421890][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 879.440879][ T5707] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.471653][ T5707] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 879.521882][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 879.530860][ T5707] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 879.541929][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.573902][ T5707] usb 5-1: Product: syz [ 879.586513][ T5707] usb 5-1: Manufacturer: syz [ 879.599075][ T5707] usb 5-1: SerialNumber: syz [ 879.749573][ T5707] usb 5-1: config 0 descriptor?? [ 880.298278][T13997] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 880.304903][T13997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 880.313524][T13997] vhci_hcd vhci_hcd.0: Device attached [ 880.450447][T13999] vhci_hcd: connection closed [ 880.459800][T10653] vhci_hcd vhci_hcd.1: stop threads [ 880.481398][T10653] vhci_hcd vhci_hcd.1: release socket [ 880.489071][T10653] vhci_hcd vhci_hcd.1: disconnect device [ 880.662496][ T5707] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 880.677184][T14009] virt_wifi0: entered promiscuous mode [ 880.731105][ T5707] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 881.047470][ T5707] usb 5-1: USB disconnect, device number 42 [ 882.314381][T14022] atomic_op ffff888036306998 conn xmit_atomic 0000000000000000 [ 883.318458][ T30] audit: type=1326 audit(2000000023.570:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.0.1823" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fcc49197c17 code=0x0 [ 883.831149][ T30] audit: type=1400 audit(2000000024.080:1422): avc: denied { audit_control } for pid=14041 comm="syz.1.1831" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 883.995446][T14046] bridge1: entered promiscuous mode [ 884.506492][T14046] bridge1: entered allmulticast mode [ 884.535702][ T30] audit: type=1400 audit(2000000024.310:1423): avc: denied { append } for pid=14041 comm="syz.1.1831" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 884.565688][T14036] atomic_op ffff88802b0b5998 conn xmit_atomic 0000000000000000 [ 885.069345][T14060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.282792][T14060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.710253][T14081] atomic_op ffff88803425e198 conn xmit_atomic 0000000000000000 [ 886.595824][T14085] atomic_op ffff888034258198 conn xmit_atomic 0000000000000000 [ 887.636356][T14096] fuse: Bad value for 'fd' [ 887.762297][T14094] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 887.830731][T14094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.173050][T14094] team0: Port device netdevsim1 added [ 888.987639][T11835] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 889.143341][T11835] usb 5-1: device descriptor read/64, error -71 [ 889.185378][T14115] atomic_op ffff88807a2ee198 conn xmit_atomic 0000000000000000 [ 889.252086][T14128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1847'. [ 889.812121][T11835] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 890.073176][T14131] atomic_op ffff88807aef5198 conn xmit_atomic 0000000000000000 [ 890.610520][T11835] usb 5-1: device descriptor read/64, error -71 [ 890.743684][T11835] usb usb5-port1: attempt power cycle [ 891.112363][T11835] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 891.362276][T11835] usb 5-1: device not accepting address 45, error -71 [ 893.984608][T14180] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1859'. [ 895.138705][T14198] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 895.558396][T14212] bridge1: entered promiscuous mode [ 896.412335][ T187] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 896.538308][T14227] netlink: 'syz.2.1868': attribute type 4 has an invalid length. [ 896.610779][T14228] netlink: 'syz.2.1868': attribute type 4 has an invalid length. [ 897.052887][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 897.069864][ T187] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 897.100361][ T187] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41 [ 897.137546][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.171590][ T187] usb 2-1: Product: syz [ 897.190178][ T187] usb 2-1: Manufacturer: syz [ 897.223734][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 897.267302][ T187] usb 2-1: SerialNumber: syz [ 897.390897][T14235] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1872'. [ 898.411595][T14259] atomic_op ffff888033eee998 conn xmit_atomic 0000000000000000 [ 898.596166][ T187] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 898.967027][ T187] usb 2-1: USB disconnect, device number 45 [ 899.362396][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1880'. [ 900.786931][ T30] audit: type=1400 audit(2000000002.830:1424): avc: denied { create } for pid=14286 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 902.442482][T14305] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1886'. [ 902.915896][T14311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1888'. [ 903.066651][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 903.104325][T14317] ceph: No mds server is up or the cluster is laggy [ 903.933601][T14289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1882'. [ 903.946874][T14342] atomic_op ffff888074ebb198 conn xmit_atomic 0000000000000000 [ 904.037730][T14289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.622320][T14371] overlayfs: unescaped trailing colons in lowerdir mount option. [ 906.695997][T14371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1900'. [ 907.098738][T14380] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1904'. [ 909.445523][T14402] atomic_op ffff88802a0c4998 conn xmit_atomic 0000000000000000 [ 911.353479][T14441] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 911.473307][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1909'. [ 911.568593][ T30] audit: type=1400 audit(2000000013.600:1425): avc: denied { search } for pid=14439 comm="syz.4.1915" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 911.679252][ T30] audit: type=1400 audit(2000000013.600:1426): avc: denied { search } for pid=14439 comm="syz.4.1915" name="usb_gadget" dev="configfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 911.816627][ T30] audit: type=1400 audit(2000000013.680:1427): avc: denied { search } for pid=14439 comm="syz.4.1915" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 911.940376][ T30] audit: type=1400 audit(2000000013.680:1428): avc: denied { search } for pid=14439 comm="syz.4.1915" name="usb_gadget" dev="configfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 912.087056][ T30] audit: type=1400 audit(2000000013.710:1429): avc: denied { search } for pid=14439 comm="syz.4.1915" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 912.268809][ T30] audit: type=1400 audit(2000000013.710:1430): avc: denied { search } for pid=14439 comm="syz.4.1915" name="usb_gadget" dev="configfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 912.455680][ T30] audit: type=1400 audit(2000000013.720:1431): avc: denied { search } for pid=14439 comm="syz.4.1915" name="/" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 912.614235][ T30] audit: type=1400 audit(2000000013.720:1432): avc: denied { search } for pid=14439 comm="syz.4.1915" name="usb_gadget" dev="configfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 912.835497][T14448] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1917'. [ 915.518221][ T30] audit: type=1400 audit(2000000002.500:1433): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 916.237614][ T30] audit: type=1326 audit(2000000003.220:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14483 comm="syz.0.1926" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc4919de99 code=0x0 [ 916.941960][ T5610] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 917.135388][ T5610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.166328][ T5610] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 917.214827][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.271656][ T5610] usb 5-1: config 0 descriptor?? [ 918.089885][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 918.109116][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 918.382289][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 919.018706][T14518] atomic_op ffff888035acc198 conn xmit_atomic 0000000000000000 [ 919.560748][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 919.589854][T14510] ceph: No mds server is up or the cluster is laggy [ 921.342163][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 921.747156][T14499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 921.765939][T14531] bond0: invalid NS target ff00:: specified for addition [ 921.773202][T14531] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 921.865882][T14536] wireguard: wireguard0: Could not create IPv4 socket [ 921.919966][ T5610] usb 5-1: string descriptor 0 read error: -71 [ 921.937344][ T5610] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 921.947272][ T5610] earthmate ttyUSB0: required endpoint is missing [ 921.955710][ T5610] usb 5-1: USB disconnect, device number 47 [ 921.963458][ T5610] cypress_m8 5-1:0.0: device disconnected [ 922.706158][T14547] can: request_module (can-proto-3) failed. [ 922.782707][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1938'. [ 922.908059][ T30] audit: type=1400 audit(2000000002.870:1435): avc: denied { mount } for pid=14545 comm="syz.4.1938" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 923.064637][ T30] audit: type=1400 audit(2000000002.880:1436): avc: denied { unmount } for pid=14545 comm="syz.4.1938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 924.567341][T14578] overlayfs: unescaped trailing colons in lowerdir mount option. [ 924.622163][T14579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 924.711981][ T804] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 925.056523][ T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.071259][ T804] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 925.089102][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.116141][ T804] usb 5-1: config 0 descriptor?? [ 925.843373][T14575] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 925.925065][ T804] usb 5-1: string descriptor 0 read error: -71 [ 925.940907][ T804] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 925.965688][ T804] earthmate ttyUSB0: required endpoint is missing [ 926.057097][ T804] usb 5-1: USB disconnect, device number 48 [ 926.087240][ T804] cypress_m8 5-1:0.0: device disconnected [ 926.476924][ T30] audit: type=1400 audit(2000000006.470:1437): avc: denied { shutdown } for pid=14603 comm="syz.1.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 926.854235][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1951'. [ 927.398001][T14614] siw: device registration error -23 [ 928.247286][T14620] overlay: Bad value for 'metacopy' [ 928.330083][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1955'. [ 928.685406][T14622] gre0: entered promiscuous mode [ 928.690371][T14622] gre0: entered allmulticast mode [ 928.695856][ T30] audit: type=1400 audit(2000000008.230:1438): avc: denied { mount } for pid=14617 comm="syz.4.1955" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 928.805664][ T30] audit: type=1400 audit(2000000008.240:1439): avc: denied { mounton } for pid=14617 comm="syz.4.1955" path="/344/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 928.807406][T14602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1949'. [ 928.914913][ T30] audit: type=1400 audit(2000000008.300:1440): avc: denied { read } for pid=14617 comm="syz.4.1955" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 929.015919][ T30] audit: type=1400 audit(2000000008.300:1441): avc: denied { open } for pid=14617 comm="syz.4.1955" path="/344/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 929.151572][ T30] audit: type=1400 audit(2000000008.770:1442): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 929.257265][ T30] audit: type=1326 audit(2000000008.840:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.1.1953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039de99 code=0x7ffc0000 [ 929.463632][ T30] audit: type=1326 audit(2000000008.890:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.1.1953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fade039de99 code=0x7ffc0000 [ 929.490552][ T30] audit: type=1326 audit(2000000008.900:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.1.1953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039de99 code=0x7ffc0000 [ 930.022146][ T30] audit: type=1326 audit(2000000008.900:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.1.1953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade039de99 code=0x7ffc0000 [ 930.119590][ T30] audit: type=1326 audit(2000000008.910:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.1.1953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fade039de99 code=0x7ffc0000 [ 931.244940][T14647] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1971'. [ 931.299458][T14650] bridge3: entered promiscuous mode [ 931.304748][T14650] bridge3: entered allmulticast mode [ 931.311655][T14650] team0: Port device bridge3 added [ 931.681899][T11835] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 932.465682][T11835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.484136][T11835] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 932.501967][T11835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.513379][T11835] usb 5-1: config 0 descriptor?? [ 933.082455][T14654] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 933.129652][T14681] bridge0: port 3(erspan0) entered disabled state [ 933.147277][T14681] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.154727][T14681] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.247327][T14681] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 933.257486][T14681] bridge1: left promiscuous mode [ 933.268378][T14681] bond3: left promiscuous mode [ 933.275978][T14681] bridge3: left promiscuous mode [ 933.292670][T11835] usb 5-1: string descriptor 0 read error: -71 [ 933.307435][T10891] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.317794][T11835] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 933.329977][T10891] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.349912][T11835] earthmate ttyUSB0: required endpoint is missing [ 933.359391][T10891] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.408079][T10891] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.497184][T11835] usb 5-1: USB disconnect, device number 49 [ 933.534955][T11835] cypress_m8 5-1:0.0: device disconnected [ 934.058005][T14693] afs: Bad value for 'source' [ 934.112154][T14693] lo speed is unknown, defaulting to 1000 [ 934.118321][T14693] lo speed is unknown, defaulting to 1000 [ 934.136005][T14693] lo speed is unknown, defaulting to 1000 [ 934.148787][T14693] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 934.174999][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1970'. [ 934.192241][T14693] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 934.209420][T14693] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 934.266656][T14693] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 934.406490][T14693] lo speed is unknown, defaulting to 1000 [ 934.439488][T14693] lo speed is unknown, defaulting to 1000 [ 934.466079][T14693] lo speed is unknown, defaulting to 1000 [ 934.486137][T14693] lo speed is unknown, defaulting to 1000 [ 934.524145][T14693] lo speed is unknown, defaulting to 1000 [ 936.082174][ T5707] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 936.473119][ T5707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.484526][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.502677][ T5707] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 936.518245][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 936.531057][ T5707] usb 5-1: SerialNumber: syz [ 936.596815][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 936.682865][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 936.682900][ T30] audit: type=1400 audit(2000000007.110:1491): avc: denied { ioctl } for pid=14732 comm="syz.1.1981" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 936.884001][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 936.987925][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 936.997089][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 937.044831][T14742] 9p: Bad value for 'rfdno' [ 937.482648][ T30] audit: type=1400 audit(2000000007.480:1492): avc: denied { write } for pid=14703 comm="syz.4.1975" name="usbmon9" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 937.507192][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 937.524889][T14724] ceph: No mds server is up or the cluster is laggy [ 938.644910][ T5707] usb 5-1: 0:2 : does not exist [ 938.684704][ T5707] usb 5-1: USB disconnect, device number 50 [ 941.044774][T14796] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 942.218236][ T30] audit: type=1400 audit(2000000012.650:1493): avc: denied { append } for pid=14785 comm="syz.1.1994" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 942.323601][T14807] netlink: 'syz.0.1999': attribute type 2 has an invalid length. [ 942.758413][ T30] audit: type=1400 audit(2000000012.750:1494): avc: denied { listen } for pid=14802 comm="syz.0.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 942.813845][ T30] audit: type=1400 audit(2000000012.770:1495): avc: denied { connect } for pid=14802 comm="syz.0.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 942.877710][ T30] audit: type=1400 audit(2000000012.830:1496): avc: denied { setopt } for pid=14802 comm="syz.0.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 943.850304][T14819] fuse: fd is not a fuse device [ 943.859593][T14821] overlayfs: failed to clone upperpath [ 945.122190][T14853] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2012'. [ 945.138500][T14853] netlink: 'syz.1.2012': attribute type 2 has an invalid length. [ 945.167302][T14853] usb usb8: usbfs: process 14853 (syz.1.2012) did not claim interface 0 before use [ 945.578907][ T30] audit: type=1400 audit(2000000016.003:1497): avc: denied { getopt } for pid=14854 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 946.250770][T14861] fuse: fd is not a fuse device [ 946.265641][T14863] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 946.349543][T14863] bond2: (slave geneve2): Opening slave failed [ 946.396243][T14868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2016'. [ 946.483454][T14868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 946.518972][T14872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14872 comm=syz.4.2018 [ 946.761851][ T804] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 947.382268][T14877] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2019'. [ 947.516044][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 947.529652][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 947.543023][ T804] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 947.553746][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.583612][ T804] usb 2-1: Product: syz [ 947.597540][ T804] usb 2-1: Manufacturer: syz [ 947.622364][ T804] usb 2-1: SerialNumber: syz [ 947.736864][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2009'. [ 947.754315][ T804] usb 2-1: config 0 descriptor?? [ 947.764411][T14863] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 947.775515][ T804] usb 2-1: ucan: probing device on interface #0 [ 947.785427][ T804] usb 2-1: ucan: invalid endpoint configuration [ 947.797596][ T804] usb 2-1: ucan: probe failed; try to update the device firmware [ 948.227123][T14902] overlayfs: failed to clone upperpath [ 948.551999][ T30] audit: type=1400 audit(2000000018.593:1498): avc: denied { listen } for pid=14896 comm="syz.0.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 948.822458][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 948.876275][ T804] usb 2-1: USB disconnect, device number 46 [ 949.156598][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'. [ 949.796333][ T30] audit: type=1400 audit(2000000020.223:1499): avc: denied { mount } for pid=14926 comm="syz.1.2030" name="/" dev="hugetlbfs" ino=40104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 949.841724][T14929] 8021q: VLANs not supported on ip_vti0 [ 950.898070][T14942] overlayfs: failed to clone upperpath [ 951.766108][T14951] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2035'. [ 952.541099][T14967] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2038'. [ 953.466686][T14972] atomic_op ffff88807909f998 conn xmit_atomic 0000000000000000 [ 954.474005][T15001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2046'. [ 955.607251][T15014] CIFS: VFS: UNC: path must begin with // or \\ [ 955.614376][T15014] Malformed UNC in devname [ 955.614376][T15014] [ 955.621334][T15014] CIFS: VFS: Malformed UNC in devname [ 955.975115][ T30] audit: type=1400 audit(2000000026.033:1500): avc: denied { getopt } for pid=15011 comm="syz.2.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 956.304961][T15022] ipip1: entered promiscuous mode [ 956.356120][T15022] ipip1: entered allmulticast mode [ 956.427039][T15031] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2053'. [ 956.566855][ T30] audit: type=1400 audit(2000000026.993:1501): avc: denied { nlmsg_read } for pid=15016 comm="syz.0.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 956.911301][T15050] openvswitch: netlink: IP tunnel dst address not specified [ 956.918826][T15050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.061994][ T30] audit: type=1400 audit(2000000027.323:1502): avc: denied { read write } for pid=15042 comm="syz.4.2056" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 957.286015][ T30] audit: type=1400 audit(2000000027.323:1503): avc: denied { open } for pid=15042 comm="syz.4.2056" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 957.376288][T15046] fuse: fd is not a fuse device [ 958.877520][T15062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2060'. [ 959.664533][T15066] atomic_op ffff888053d8e998 conn xmit_atomic 0000000000000000 [ 960.176227][T15070] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 961.085220][T15077] atomic_op ffff88807ae66198 conn xmit_atomic 0000000000000000 [ 961.445466][T15088] netlink: 'syz.0.2069': attribute type 1 has an invalid length. [ 961.479982][T15088] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2069'. [ 961.526517][T15088] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.2069'. [ 967.220589][T15156] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 967.326273][T15157] overlayfs: unescaped trailing colons in lowerdir mount option. [ 967.423420][T15157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2080'. [ 967.804546][ T30] audit: type=1400 audit(2000000004.520:1504): avc: denied { map } for pid=15164 comm="syz.4.2083" path="/dev/video4" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 969.247960][ T30] audit: type=1400 audit(2000000005.530:1505): avc: denied { append } for pid=15179 comm="syz.1.2085" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 969.948244][T15188] atomic_op ffff88807a09e198 conn xmit_atomic 0000000000000000 [ 970.446617][ T30] audit: type=1400 audit(2000000007.160:1506): avc: denied { write } for pid=15176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.614278][ T30] audit: type=1400 audit(2000000007.330:1507): avc: denied { write } for pid=15206 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.533861][T15231] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2096'. [ 973.971652][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 974.677456][T15247] atomic_op ffff88801fe96198 conn xmit_atomic 0000000000000000 [ 975.347320][ T30] audit: type=1400 audit(2000000004.450:1508): avc: denied { write } for pid=15214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.077227][ T30] audit: type=1400 audit(2000000005.180:1509): avc: denied { write } for pid=15260 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.498674][T15270] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2103'. [ 976.589013][T15274] overlayfs: unescaped trailing colons in lowerdir mount option. [ 976.605816][T15274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2102'. [ 978.354267][T15300] overlayfs: unescaped trailing colons in lowerdir mount option. [ 978.365975][T15300] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 978.462763][T15298] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2108'. [ 979.427531][T15311] atomic_op ffff8880371be998 conn xmit_atomic 0000000000000000 [ 979.504282][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 979.552265][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 980.185278][T15325] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2114'. [ 980.688253][ T30] audit: type=1400 audit(2000000003.430:1510): avc: denied { read } for pid=15317 comm="syz.1.2113" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 980.764107][ T30] audit: type=1400 audit(2000000003.460:1511): avc: denied { open } for pid=15317 comm="syz.1.2113" path="/370/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 981.831877][T15357] tc_dump_action: action bad kind [ 982.176334][T15363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2112'. [ 982.897434][T15374] overlayfs: failed to clone upperpath [ 983.153114][T15363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15363 comm=syz.0.2112 [ 984.670453][T15388] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 984.976794][T15410] overlayfs: unescaped trailing colons in lowerdir mount option. [ 985.031741][T15411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2124'. [ 985.544280][T15416] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 985.576812][ T9] lo speed is unknown, defaulting to 1000 [ 985.718492][T15423] overlayfs: unescaped trailing colons in lowerdir mount option. [ 985.732588][T15423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2130'. [ 985.732633][ T5707] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 985.972558][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 985.984317][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 986.014519][ T5707] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 986.032321][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.049539][ T5707] usb 5-1: Product: syz [ 986.055793][ T5707] usb 5-1: Manufacturer: syz [ 986.069786][ T5707] usb 5-1: SerialNumber: syz [ 986.113228][ T5707] usb 5-1: config 0 descriptor?? [ 986.129688][ T5707] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 986.146640][ T5707] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 986.843328][T15442] bond5: option xmit_hash_policy: invalid value (6) [ 986.859962][T15442] bond5 (unregistering): Released all slaves [ 986.936035][ T5707] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 987.023312][T15447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2137'. [ 987.111457][T15447] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 987.240975][ T5707] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 987.257675][ T5707] em28xx 5-1:0.0: board has no eeprom [ 987.282888][T15455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2138'. [ 987.342115][ T5707] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 987.355706][ T5707] em28xx 5-1:0.0: dvb set to bulk mode. [ 987.369692][ T9] em28xx 5-1:0.0: Binding DVB extension [ 987.390232][ T5707] usb 5-1: USB disconnect, device number 51 [ 987.408722][ T5707] em28xx 5-1:0.0: Disconnecting em28xx [ 987.577364][ T9] em28xx 5-1:0.0: Registering input extension [ 988.062529][ T5707] em28xx 5-1:0.0: Closing input extension [ 988.115812][T15471] wireguard: wireguard0: Could not create IPv4 socket [ 988.456324][ T5707] em28xx 5-1:0.0: Freeing device [ 988.579851][ T30] audit: type=1400 audit(2000000006.790:1512): avc: denied { write } for pid=15456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.607514][T15481] overlayfs: unescaped trailing colons in lowerdir mount option. [ 988.625385][T15481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2142'. [ 988.836727][ T30] audit: type=1400 audit(2000000007.130:1513): avc: denied { write } for pid=15485 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.883249][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'. [ 988.911658][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 989.106254][T15510] overlayfs: unescaped trailing colons in lowerdir mount option. [ 989.162407][T15511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2141'. [ 989.202260][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 989.303813][T15516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2148'. [ 989.683071][ T30] audit: type=1400 audit(2000000007.970:1514): avc: denied { write } for pid=15509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 989.742489][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 989.768697][T15495] ceph: No mds server is up or the cluster is laggy [ 989.783536][T15534] netlink: 'syz.4.2150': attribute type 4 has an invalid length. [ 990.061573][T15542] siw: device registration error -23 [ 990.530350][ T30] audit: type=1400 audit(2000000008.820:1515): avc: denied { write } for pid=15541 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.576242][ T804] lo speed is unknown, defaulting to 1000 [ 990.594955][ T804] syz2: Port: 1 Link DOWN [ 990.897737][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 992.080364][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 992.175111][T15566] fuse: fd is not a fuse device [ 993.628223][ T30] audit: type=1326 audit(2000000002.050:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2163" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x0 [ 993.726087][T15597] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2164'. [ 993.813082][T15601] overlayfs: unescaped trailing colons in lowerdir mount option. [ 993.821734][T15601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2160'. [ 995.436832][T15605] atomic_op ffff888033275198 conn xmit_atomic 0000000000000000 [ 997.853425][T15673] kernel profiling enabled (shift: 9) [ 997.860712][T15673] nfs4: Unknown parameter 'no' [ 1000.014777][T15696] fuse: fd is not a fuse device [ 1001.038321][T15703] atomic_op ffff888069306998 conn xmit_atomic 0000000000000000 [ 1002.204376][T15730] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1002.213490][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2192'. [ 1002.601988][ T9] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1002.941134][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.000465][ T9] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1003.028024][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.053188][ T9] usb 5-1: config 0 descriptor?? [ 1003.391603][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1003.555385][ T9] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 1003.588901][ T9] earthmate ttyUSB0: required endpoint is missing [ 1003.612536][T15751] fuse: Unknown parameter '' [ 1003.640029][ T9] usb 5-1: USB disconnect, device number 52 [ 1003.687332][ T9] cypress_m8 5-1:0.0: device disconnected [ 1005.744593][T15780] atomic_op ffff88807bbd1998 conn xmit_atomic 0000000000000000 [ 1006.403111][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 1008.780817][T15827] tipc: Enabled bearer , priority 0 [ 1008.883425][T15827] bond5: (slave bond_slave_1): Device is not bonding slave [ 1008.901666][T15827] bond5: option active_slave: invalid value (bond_slave_1) [ 1008.923052][T15827] bond5 (unregistering): Released all slaves [ 1010.069364][T15840] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1010.123083][T15848] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2216'. [ 1010.153464][T15840] cramfs: wrong magic [ 1010.903305][ T30] audit: type=1326 audit(2000000004.210:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15845 comm="syz.0.2219" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4919de99 code=0x7fc00000 [ 1011.384171][T15861] siw: device registration error -23 [ 1012.441131][T15846] atomic_op ffff88807daec198 conn xmit_atomic 0000000000000000 [ 1013.005710][T15873] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1013.060661][T15874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2223'. [ 1013.628857][T15881] siw: device registration error -23 [ 1015.936844][T15912] Failed to initialize the IGMP autojoin socket (err -2) [ 1017.027474][ T30] audit: type=1400 audit(2000000005.580:1518): avc: denied { mounton } for pid=15917 comm="syz.4.2233" path="/399/config" dev="configfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1017.401927][ T5610] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 1017.771227][ T5610] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.802122][ T5610] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1017.830350][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.861340][ T5610] usb 2-1: config 0 descriptor?? [ 1018.096383][ T5610] usb 2-1: string descriptor 0 read error: -71 [ 1018.114630][ T5610] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 1018.144686][ T5610] earthmate ttyUSB0: required endpoint is missing [ 1018.375242][T15935] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1018.426256][T15936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2237'. [ 1018.476402][T15933] atomic_op ffff88807e5c8998 conn xmit_atomic 0000000000000000 [ 1019.164685][ T5610] usb 2-1: USB disconnect, device number 47 [ 1019.187135][ T5610] cypress_m8 2-1:0.0: device disconnected [ 1021.502207][ T30] audit: type=1804 audit(2000000010.040:1519): pid=15964 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2245" name="/newroot/441/file0/file1" dev="overlay" ino=2437 res=1 errno=0 [ 1024.109902][T15983] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1024.170231][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2246'. [ 1025.545006][T16000] serio: Serial port ptm0 [ 1025.761741][T15987] atomic_op ffff88802a8cb998 conn xmit_atomic 0000000000000000 [ 1027.388291][T16024] /dev/nullb0: Can't open blockdev [ 1027.724535][T16007] atomic_op ffff88804d20b198 conn xmit_atomic 0000000000000000 [ 1027.819565][ T30] audit: type=1326 audit(2000000016.370:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1027.903933][ T30] audit: type=1326 audit(2000000016.370:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1027.980070][ T30] audit: type=1326 audit(2000000016.370:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1028.062795][ T30] audit: type=1326 audit(2000000016.410:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1028.140025][ T30] audit: type=1326 audit(2000000016.410:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1028.167947][T16022] netlink: 'syz.4.2258': attribute type 10 has an invalid length. [ 1028.176018][T16022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2258'. [ 1028.841556][ T30] audit: type=1326 audit(2000000016.410:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1028.889346][ T30] audit: type=1326 audit(2000000016.410:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1028.918942][ T30] audit: type=1326 audit(2000000016.410:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1028.949306][ T30] audit: type=1326 audit(2000000016.410:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1028.976073][ T30] audit: type=1326 audit(2000000016.410:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16026 comm="syz.3.2259" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1029.228603][T16036] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1029.280105][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2262'. [ 1032.305628][T16079] atomic_op ffff88807835b998 conn xmit_atomic 0000000000000000 [ 1032.876495][T16077] trusted_key: encrypted_key: keylen parameter is missing [ 1034.119996][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1034.120014][ T30] audit: type=1400 audit(2000000022.670:1567): avc: denied { write } for pid=16088 comm="syz.4.2276" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1034.190523][ T30] audit: type=1400 audit(2000000022.740:1568): avc: denied { create } for pid=16088 comm="syz.4.2276" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1035.746931][T16096] atomic_op ffff88803759c998 conn xmit_atomic 0000000000000000 [ 1035.839703][ T5610] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 1035.922405][T16113] overlayfs: failed to clone upperpath [ 1036.005712][ T5610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.031458][ T5610] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1036.052062][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.074815][ T5610] usb 5-1: config 0 descriptor?? [ 1036.370591][T16100] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1036.429178][ T5725] lo speed is unknown, defaulting to 1000 [ 1036.446171][ T5725] syz2: Port: 1 Link ACTIVE [ 1036.462742][ T5610] usb 5-1: string descriptor 0 read error: -71 [ 1036.494117][ T5610] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 1036.522418][ T5610] earthmate ttyUSB0: required endpoint is missing [ 1036.557407][ T5610] usb 5-1: USB disconnect, device number 53 [ 1036.583767][ T5610] cypress_m8 5-1:0.0: device disconnected [ 1037.672935][ T30] audit: type=1804 audit(2000000026.130:1569): pid=16135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2283" name="/newroot/402/file0" dev="tmpfs" ino=2174 res=1 errno=0 [ 1039.908900][T16152] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2290'. [ 1040.610911][T16167] atomic_op ffff888053de7998 conn xmit_atomic 0000000000000000 [ 1041.163911][T16166] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1041.468933][T16175] netlink: 'syz.0.2297': attribute type 1 has an invalid length. [ 1041.478562][T16176] nbd: must specify an index to disconnect [ 1041.620840][ T9] IPVS: starting estimator thread 0... [ 1041.650522][T16183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16183 comm=syz.1.2298 [ 1041.721859][T16182] IPVS: using max 76 ests per chain, 182400 per kthread [ 1041.872934][T16177] gretap1: entered allmulticast mode [ 1042.177813][T16177] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1043.341157][T16200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2302'. [ 1043.374178][T16200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1043.383486][T16200] IPv6: NLM_F_CREATE should be set when creating new route [ 1043.428757][ T30] audit: type=1326 audit(2000000000.410:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1043.503482][ T30] audit: type=1326 audit(2000000000.440:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1043.655938][ T30] audit: type=1326 audit(2000000000.440:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1043.926235][T16210] openvswitch: netlink: IP tunnel dst address not specified [ 1043.933765][T16210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.625060][T16209] atomic_op ffff888029e54198 conn xmit_atomic 0000000000000000 [ 1044.890015][ T30] audit: type=1326 audit(2000000000.440:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1045.033075][ T30] audit: type=1326 audit(2000000000.440:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1045.115744][T16217] random: crng reseeded on system resumption [ 1045.712825][ T30] audit: type=1326 audit(2000000000.440:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1045.964767][ T30] audit: type=1326 audit(2000000000.440:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1046.029145][ T30] audit: type=1326 audit(2000000000.440:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1046.063847][T16228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2304'. [ 1046.124844][ T30] audit: type=1326 audit(2000000000.440:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1046.194290][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 1046.233747][ T30] audit: type=1326 audit(2000000000.450:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03799de99 code=0x7ffc0000 [ 1046.271959][ T9] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 1046.851899][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 1046.876913][T16227] ceph: No mds server is up or the cluster is laggy [ 1046.904297][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.928236][ T9] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1046.944026][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.987171][ T9] usb 2-1: config 0 descriptor?? [ 1047.303469][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1047.327666][ T9] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 1047.390437][T16249] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1047.446060][T16250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2313'. [ 1047.484556][ T9] earthmate ttyUSB0: required endpoint is missing [ 1047.514756][ T9] usb 2-1: USB disconnect, device number 48 [ 1047.546149][ T9] cypress_m8 2-1:0.0: device disconnected [ 1047.760436][T16256] overlayfs: failed to clone upperpath [ 1048.433742][T16263] usb usb7: usbfs: process 16263 (syz.4.2316) did not claim interface 0 before use [ 1048.858898][T16276] atomic_op ffff88802ef5a198 conn xmit_atomic 0000000000000000 [ 1050.624647][T16287] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1050.676097][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2322'. [ 1052.265928][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1052.265945][ T30] audit: type=1400 audit(2000000009.250:1597): avc: denied { append } for pid=16302 comm="syz.4.2319" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1052.317549][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2319'. [ 1052.624503][T16308] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1052.634825][T16308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2326'. [ 1053.287969][T16307] atomic_op ffff88805355e998 conn xmit_atomic 0000000000000000 [ 1053.696648][T16316] atomic_op ffff88805355d998 conn xmit_atomic 0000000000000000 [ 1055.057742][T16336] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1055.112166][T16337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2334'. [ 1055.533561][T16344] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1055.783837][T16320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2330'. [ 1056.990328][T16367] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1057.045911][T16368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2340'. [ 1057.175331][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2339'. [ 1057.757520][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.771195][T16373] bridge4: entered promiscuous mode [ 1057.776455][T16373] bridge4: entered allmulticast mode [ 1057.783288][T16373] team0: Port device bridge4 added [ 1058.175899][T16378] atomic_op ffff88802b379198 conn xmit_atomic 0000000000000000 [ 1059.679186][T16389] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1059.856873][T16388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2347'. [ 1060.418236][ T30] audit: type=1400 audit(2000000017.400:1598): avc: denied { setopt } for pid=16395 comm="syz.2.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1061.385464][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 1061.401563][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2354'. [ 1061.431771][T16417] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1061.483337][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2353'. [ 1062.062392][T16425] atomic_op ffff888075392998 conn xmit_atomic 0000000000000000 [ 1062.578305][T16420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.585584][T16420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.647290][T16420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.797225][T16434] Failed to initialize the IGMP autojoin socket (err -2) [ 1064.041365][T16408] atomic_op ffff888053456198 conn xmit_atomic 0000000000000000 [ 1064.243278][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2360'. [ 1065.546286][ T30] audit: type=1400 audit(2000000022.500:1599): avc: denied { write } for pid=16440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1065.688550][T16463] netlink: 'syz.4.2361': attribute type 1 has an invalid length. [ 1065.715107][T16465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16465 comm=syz.3.2366 [ 1065.878633][ T30] audit: type=1400 audit(2000000022.860:1600): avc: denied { write } for pid=16470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.404839][T16478] trusted_key: encrypted_key: keylen parameter is missing [ 1066.590486][T16469] gretap1: entered allmulticast mode [ 1066.694614][T16469] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1067.182542][ T187] libceph: mon0 (1)[c::]:6789 connect error [ 1067.411517][T16501] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1067.467441][T16502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2369'. [ 1067.478608][ T187] libceph: mon0 (1)[c::]:6789 connect error [ 1067.767178][T16487] ceph: No mds server is up or the cluster is laggy [ 1068.244632][ T30] audit: type=1400 audit(2000000025.230:1601): avc: denied { write } for pid=16479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.865567][ T30] audit: type=1326 audit(2000000025.850:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.3.2370" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7fc00000 [ 1068.921967][ T804] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 1069.506688][ T30] audit: type=1400 audit(2000000026.490:1603): avc: denied { write } for pid=16524 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.555589][ T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.673590][ T804] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1069.708234][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.148642][ T804] usb 5-1: config 0 descriptor?? [ 1070.396298][ T804] usb 5-1: string descriptor 0 read error: -71 [ 1070.479901][ T804] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 1070.524268][ T804] earthmate ttyUSB0: required endpoint is missing [ 1070.560854][ T804] usb 5-1: USB disconnect, device number 54 [ 1071.168469][T16539] atomic_op ffff888053dff198 conn xmit_atomic 0000000000000000 [ 1071.236219][ T804] cypress_m8 5-1:0.0: device disconnected [ 1071.726479][T16549] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2379'. [ 1072.434996][T16555] siw: device registration error -23 [ 1073.485933][T16559] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1073.494593][T16559] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1073.503122][T16559] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1073.600806][ T30] audit: type=1400 audit(2000000030.580:1604): avc: denied { bind } for pid=16558 comm="syz.0.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1074.360007][T16567] atomic_op ffff88802b548998 conn xmit_atomic 0000000000000000 [ 1074.621974][T16574] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2384'. [ 1075.471232][T16581] bridge0: port 3(erspan0) entered blocking state [ 1075.477777][T16581] bridge0: port 3(erspan0) entered forwarding state [ 1075.490110][T16579] netlink: 'syz.0.2387': attribute type 4 has an invalid length. [ 1075.523058][T16581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.547771][ T30] audit: type=1400 audit(2000000032.530:1605): avc: denied { create } for pid=16584 comm="syz.3.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1075.578229][T16581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.601405][T16581] wireguard: wg0: Could not create IPv4 socket [ 1075.613909][T16581] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1075.899721][T16591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16591 comm=syz.3.2390 [ 1075.942475][T16591] netlink: 'syz.3.2390': attribute type 1 has an invalid length. [ 1076.030550][T16591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1076.051904][ T30] audit: type=1400 audit(2000000033.030:1606): avc: denied { write } for pid=16571 comm="syz.1.2384" name="usb_gadget" dev="configfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1076.087282][ T30] audit: type=1400 audit(2000000033.070:1607): avc: denied { add_name } for pid=16571 comm="syz.1.2384" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1076.114495][ T30] audit: type=1400 audit(2000000033.070:1608): avc: denied { create } for pid=16571 comm="syz.1.2384" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1076.142245][ T30] audit: type=1400 audit(2000000033.100:1609): avc: denied { write } for pid=16571 comm="syz.1.2384" name="target" dev="configfs" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1076.211484][ T30] audit: type=1400 audit(2000000033.190:1610): avc: denied { write } for pid=16571 comm="syz.1.2384" name="usb_gadget" dev="configfs" ino=44329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1076.266510][T16589] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 1076.287371][ T30] audit: type=1400 audit(2000000033.230:1611): avc: denied { write } for pid=16571 comm="syz.1.2384" name="control" dev="configfs" ino=45248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1076.320899][ T30] audit: type=1400 audit(2000000033.230:1612): avc: denied { open } for pid=16571 comm="syz.1.2384" path="/423/my_configfs/target/core/rd_mcp_0/dev0/control" dev="configfs" ino=45248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1076.402023][T16592] bond3: (slave ip6erspan0): making interface the new active one [ 1076.475234][T16592] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1077.257085][T16603] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2392'. [ 1077.366978][ T30] audit: type=1400 audit(2000000034.350:1613): avc: denied { write } for pid=16605 comm="syz.1.2393" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1078.867044][T16622] netlink: 'syz.3.2395': attribute type 4 has an invalid length. [ 1078.982410][T16627] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2397'. [ 1080.428829][T16651] Failed to initialize the IGMP autojoin socket (err -2) [ 1083.278585][T16677] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2406'. [ 1083.641490][ T30] audit: type=1326 audit(2000000040.620:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.2405" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03799de99 code=0x7fc00000 [ 1084.705130][T16701] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2411'. [ 1085.390903][T16704] atomic_op ffff8880328c7998 conn xmit_atomic 0000000000000000 [ 1086.240396][ T30] audit: type=1400 audit(2000000043.220:1615): avc: denied { getopt } for pid=16715 comm="syz.1.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1087.200304][ T30] audit: type=1400 audit(2000000043.550:1616): avc: denied { write } for pid=16715 comm="syz.1.2416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1087.230080][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 1087.465012][ T30] audit: type=1400 audit(2000000043.550:1617): avc: denied { read } for pid=16715 comm="syz.1.2416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1089.612715][T16742] atomic_op ffff88807909a198 conn xmit_atomic 0000000000000000 [ 1089.792109][ T187] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1089.963538][ T187] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1089.994413][ T187] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1090.023817][ T187] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1090.059505][ T187] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1090.084304][ T187] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1090.100360][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.123904][ T187] usb 5-1: Product: syz [ 1090.135499][ T187] usb 5-1: Manufacturer: syz [ 1090.145702][ T187] usb 5-1: SerialNumber: syz [ 1090.176761][T16739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1090.480868][T16739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1090.957754][T16739] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1092.049242][T16775] netlink: 'syz.1.2427': attribute type 4 has an invalid length. [ 1092.507174][T16782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2429'. [ 1092.543650][ T187] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 1092.678720][T16785] binfmt_misc: register: failed to install interpreter file ./file0 [ 1093.264717][ T187] cdc_ncm 5-1:1.0: bind() failure [ 1093.280849][ T187] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1093.291145][ T187] cdc_ncm 5-1:1.1: bind() failure [ 1093.314195][ T187] usb 5-1: USB disconnect, device number 55 [ 1096.121818][ T187] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1097.055836][ T187] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.079100][ T187] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1097.121390][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1097.165365][T16841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2441'. [ 1097.169077][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 1097.216475][T16841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1097.224045][T16841] IPv6: NLM_F_CREATE should be set when creating new route [ 1097.248726][ T187] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1097.283381][ T30] audit: type=1326 audit(2000000054.270:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.3.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1097.502615][ T30] audit: type=1326 audit(2000000054.370:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.3.2441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032b39de99 code=0x7ffc0000 [ 1099.613713][ T187] usb 2-1: string descriptor 0 read error: -71 [ 1099.645672][ T187] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1099.707847][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.774612][ T187] usb 2-1: config 0 descriptor?? [ 1099.795413][ T187] usb 2-1: can't set config #0, error -71 [ 1099.946944][ T187] usb 2-1: USB disconnect, device number 49 [ 1101.477334][T16875] Need at least one configuration in g1. [ 1101.483665][T16875] udc usbip-vudc.0: failed to start g1: -22 [ 1101.489576][T16875] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1101.503201][T16875] UDC core: g1: couldn't find an available UDC or it's busy [ 1102.303010][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2449'. [ 1103.766894][T16891] atomic_op ffff8880783b4998 conn xmit_atomic 0000000000000000 [ 1107.850598][T16924] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1107.902634][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2460'. [ 1107.975823][T16919] fuse: Unknown parameter '' [ 1110.194979][T16930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2461'. [ 1111.815913][T16943] atomic_op ffff888029abe198 conn xmit_atomic 0000000000000000 [ 1112.962317][ T30] audit: type=1400 audit(2000000069.940:1620): avc: denied { block_suspend } for pid=16962 comm="syz.3.2471" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1115.734790][T16986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2474'. [ 1117.191149][T16993] atomic_op ffff888034d4e198 conn xmit_atomic 0000000000000000 [ 1117.355920][T16997] overlayfs: failed to clone upperpath [ 1118.329991][T17008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.354336][T17008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.389265][T17008] wireguard: wg0: Could not create IPv4 socket [ 1118.406662][T17008] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1118.512391][T10653] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1118.647507][T10653] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1118.660744][T10653] bond0: now running without any active interface! [ 1118.842352][T17018] Failed to initialize the IGMP autojoin socket (err -2) [ 1119.386704][T17027] wireguard: wg0: Could not create IPv4 socket [ 1119.426790][T17027] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1120.314617][T17035] netdevsim0 speed is unknown, defaulting to 1000 [ 1120.321431][T17035] netdevsim0 speed is unknown, defaulting to 1000 [ 1120.329305][T17035] netdevsim0 speed is unknown, defaulting to 1000 [ 1120.336680][T17035] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1120.351424][T17035] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1120.369047][T17035] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1120.382159][T17035] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 1120.397850][T17035] netdevsim0 speed is unknown, defaulting to 1000 [ 1120.405722][T17035] netdevsim0 speed is unknown, defaulting to 1000 [ 1120.413622][T17035] netdevsim0 speed is unknown, defaulting to 1000 [ 1120.421836][T17035] netdevsim0 speed is unknown, defaulting to 1000 [ 1120.429609][T17035] netdevsim0 speed is unknown, defaulting to 1000 [ 1120.894797][T17046] kAFS: unable to lookup cell '' [ 1122.718990][T17056] atomic_op ffff88802c486198 conn xmit_atomic 0000000000000000 [ 1123.963161][T17075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.451160][T17085] netlink: 'syz.0.2497': attribute type 2 has an invalid length. [ 1124.518264][ T30] audit: type=1400 audit(2000000001.360:1621): avc: denied { accept } for pid=17084 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1125.725980][T17104] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2500'. [ 1126.532076][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1126.553392][ T30] audit: type=1400 audit(2000000003.390:1622): avc: denied { audit_write } for pid=17121 comm="syz.2.2503" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1126.694030][ T30] audit: type=1107 audit(2000000003.390:1623): pid=17121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ti1[Po [ 1126.694030][ T30] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 1126.694030][ T30] Вh0VZ2' [ 1127.176709][T17124] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1127.202087][ T5610] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1127.845400][ T5610] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1128.396412][T17138] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2509'. [ 1128.705436][T17152] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1128.992039][ T5610] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1129.552006][ T5610] usb 2-1: Using ep0 maxpacket: 16 [ 1129.569424][ T5610] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1129.607518][ T5610] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1129.629908][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.642383][ T5610] usb 2-1: config 0 descriptor?? [ 1129.700749][T17174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2517'. [ 1130.524951][T17184] overlayfs: failed to clone upperpath [ 1130.626227][ T30] audit: type=1400 audit(2000000007.450:1624): avc: denied { create } for pid=17179 comm="syz.2.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1130.899832][ T5610] usbhid 2-1:0.0: can't add hid device: -71 [ 1130.943482][ T5610] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1130.960298][T17145] fuse: Unknown parameter '' [ 1130.977728][T17190] file system registered [ 1130.986264][ T30] audit: type=1400 audit(2000000007.820:1625): avc: denied { write } for pid=17189 comm="syz.3.2519" name="functions" dev="configfs" ino=45240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1131.024252][ T5610] usb 2-1: USB disconnect, device number 50 [ 1131.921421][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1132.193503][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1132.646040][T17204] ceph: No mds server is up or the cluster is laggy [ 1133.386785][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 1133.425274][T17218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1133.566847][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 1133.588001][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2525'. [ 1134.085048][T17230] netlink: 'syz.4.2525': attribute type 10 has an invalid length. [ 1134.237401][T17218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.818909][T17218] bond5: (slave bond0): making interface the new active one [ 1135.537402][ T30] audit: type=1400 audit(2000000012.340:1626): avc: denied { mount } for pid=17247 comm="syz.2.2531" name="/" dev="rpc_pipefs" ino=46492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1135.598087][T17218] bond5: (slave bond0): Enslaving as an active interface with an up link [ 1135.635302][T17230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.642631][T17230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.575862][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1136.862902][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1137.300922][T17276] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1137.370733][T17266] ceph: No mds server is up or the cluster is laggy [ 1137.561882][ T5610] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 1138.195760][ T5610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.206716][ T5610] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1138.215832][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.229116][ T5610] usb 5-1: config 0 descriptor?? [ 1138.263879][ T30] audit: type=1400 audit(2000000015.110:1627): avc: denied { getopt } for pid=17297 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1138.517156][T17278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.524400][T17278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.531973][T17278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.539118][T17278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.565509][T17278] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1138.612853][ T5610] usb 5-1: string descriptor 0 read error: -71 [ 1138.623634][ T5610] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 1138.632170][ T5610] earthmate ttyUSB0: required endpoint is missing [ 1138.640535][ T5610] usb 5-1: USB disconnect, device number 56 [ 1138.648363][ T5610] cypress_m8 5-1:0.0: device disconnected [ 1138.755360][T17308] siw: device registration error -23 [ 1139.635382][T17312] overlayfs: failed lookup in lower (newroot/510, name='file0', err=-40): overlapping layers [ 1139.656604][T17312] overlayfs: failed lookup in lower (newroot/510, name='file0', err=-40): overlapping layers [ 1139.683930][ T30] audit: type=1804 audit(2000000016.530:1628): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2546" name="/newroot/510/bus/file1" dev="overlay" ino=2835 res=1 errno=0 [ 1139.728758][T17314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17314 comm=syz.0.2545 [ 1139.742549][T17316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2547'. [ 1139.761380][T17314] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 1140.135080][T17314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1140.211598][T17323] bond5: (slave ip6erspan0): making interface the new active one [ 1140.423519][T17323] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1140.633665][T17333] netlink: 'syz.4.2548': attribute type 4 has an invalid length. [ 1141.192209][ T5707] lo speed is unknown, defaulting to 1000 [ 1141.198565][ T5707] syz2: Port: 1 Link DOWN [ 1141.220318][T17340] wireguard: wg0: Could not create IPv4 socket [ 1141.246979][T17340] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1143.005206][T17364] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1143.576247][T17373] wireguard: wg0: Could not create IPv4 socket [ 1143.596120][T17373] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1144.269504][T17384] overlayfs: failed to clone upperpath [ 1144.422443][T17390] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 1144.431548][T17390] SELinux: failed to load policy [ 1144.463950][T17390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2561'. [ 1146.298928][T17403] overlayfs: failed to clone upperpath [ 1146.562696][T17417] wireguard: wg0: Could not create IPv4 socket [ 1146.571407][T17417] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1148.397084][T17445] Failed to initialize the IGMP autojoin socket (err -2) [ 1149.788452][ T30] audit: type=1400 audit(2000000026.090:1629): avc: denied { execute } for pid=17453 comm="syz.4.2578" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1149.881528][T17462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2580'. [ 1150.049666][T17464] atomic_op ffff88802f402998 conn xmit_atomic 0000000000000000 [ 1150.921314][T17470] wireguard: wg0: Could not create IPv4 socket [ 1150.953485][T17470] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1152.672316][T17483] atomic_op ffff88802acbc998 conn xmit_atomic 0000000000000000 [ 1152.723330][ T30] audit: type=1400 audit(2000000028.680:1630): avc: denied { write } for pid=17478 comm="syz.4.2579" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1153.846338][T17486] netlink: 'syz.0.2585': attribute type 4 has an invalid length. [ 1153.959651][ T30] audit: type=1326 audit(2000000030.800:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1154.054481][ T30] audit: type=1326 audit(2000000030.800:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1154.151315][ T30] audit: type=1326 audit(2000000030.840:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1154.232040][ T30] audit: type=1326 audit(2000000030.840:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1154.314011][ T30] audit: type=1326 audit(2000000030.840:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1154.371844][ T30] audit: type=1326 audit(2000000030.870:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1154.471153][ T30] audit: type=1326 audit(2000000030.870:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1154.621283][ T30] audit: type=1326 audit(2000000030.870:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1154.982437][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1154.982453][ T30] audit: type=1326 audit(2000000031.820:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1155.106024][ T30] audit: type=1326 audit(2000000031.820:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1155.811564][T17513] atomic_op ffff888076aff998 conn xmit_atomic 0000000000000000 [ 1155.859292][ T30] audit: type=1326 audit(2000000031.820:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1155.897573][ T30] audit: type=1326 audit(2000000031.820:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1155.991538][ T30] audit: type=1326 audit(2000000031.820:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1156.137622][ T30] audit: type=1326 audit(2000000031.820:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1156.213318][ T30] audit: type=1326 audit(2000000031.820:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1156.307256][ T30] audit: type=1326 audit(2000000031.820:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1156.353558][T17524] wireguard: wg0: Could not create IPv4 socket [ 1156.360222][T17524] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1156.387295][T17522] ceph: No mds server is up or the cluster is laggy [ 1156.394442][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1156.414594][ T30] audit: type=1326 audit(2000000031.820:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1156.442970][ T30] audit: type=1326 audit(2000000031.820:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.2.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83bb9de99 code=0x7ffc0000 [ 1156.569995][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2597'. [ 1157.325338][T17535] atomic_op ffff888026e04998 conn xmit_atomic 0000000000000000 [ 1159.667247][T17548] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1159.756223][T17551] macvlan4: entered promiscuous mode [ 1159.773192][T17551] macvlan4: entered allmulticast mode [ 1159.783474][T17551] team0: Device macvlan4 is already an upper device of the team interface [ 1159.970813][T17554] fuse: fd is not a fuse device [ 1160.148523][T17560] netlink: 'syz.2.2608': attribute type 23 has an invalid length. [ 1160.208357][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1160.208374][ T30] audit: type=1400 audit(2000000037.050:1742): avc: denied { execute } for pid=17557 comm="syz.0.2607" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1160.716164][T17578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2604'. [ 1161.510677][T17581] atomic_op ffff888074eba198 conn xmit_atomic 0000000000000000 [ 1162.381169][T17593] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1162.425326][ T30] audit: type=1400 audit(2000000039.260:1743): avc: denied { create } for pid=17595 comm="syz.4.2614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1162.489755][ T30] audit: type=1400 audit(2000000039.300:1744): avc: denied { create } for pid=17595 comm="syz.4.2614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 1162.579570][ T30] audit: type=1400 audit(2000000039.300:1745): avc: denied { create } for pid=17595 comm="syz.4.2614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 1163.234605][T17603] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1163.441865][ T804] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 1163.609291][ T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.844380][ T804] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1163.869593][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.901547][ T804] usb 2-1: config 0 descriptor?? [ 1164.529897][T17605] wireguard: wg0: Could not create IPv4 socket [ 1164.536876][ T5707] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1164.565166][T17605] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1164.616872][ T804] usb 2-1: string descriptor 0 read error: -71 [ 1164.644313][ T804] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 1164.667807][ T804] earthmate ttyUSB0: required endpoint is missing [ 1164.686536][ T804] usb 2-1: USB disconnect, device number 51 [ 1164.704517][ T804] cypress_m8 2-1:0.0: device disconnected [ 1164.725028][T17622] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2619'. [ 1165.583914][T17633] atomic_op ffff88802d64a998 conn xmit_atomic 0000000000000000 [ 1165.636034][ T5707] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1165.653267][ T30] audit: type=1400 audit(2000000042.490:1746): avc: denied { mounton } for pid=17635 comm="syz.3.2624" path="/533/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1165.952348][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2623'. [ 1166.686943][T17649] IPv6: sit1: Disabled Multicast RS [ 1166.704198][T17649] sit1: entered allmulticast mode [ 1169.292401][T17675] team_slave_1: Caught tx_queue_len zero misconfig [ 1169.317279][T17675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2631'. [ 1170.152673][T17683] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2633'. [ 1170.201449][T17687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2634'. [ 1170.210807][T17687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2634'. [ 1170.279750][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1170.975483][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 1171.206359][T17702] overlayfs: missing 'workdir' [ 1171.251890][T17700] vlan2: left allmulticast mode [ 1171.256929][T17700] geneve0: left allmulticast mode [ 1171.262195][T17700] vlan2: left promiscuous mode [ 1171.267026][T17700] geneve0: left promiscuous mode [ 1171.275018][T17680] can0: slcan on ttyS3. [ 1171.284057][T17700] bridge0: port 3(vlan2) entered disabled state [ 1171.319825][T17700] bridge_slave_1: left allmulticast mode [ 1171.325871][T17700] bridge_slave_1: left promiscuous mode [ 1171.332837][T17700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.445609][T17700] bridge_slave_0: left allmulticast mode [ 1171.451447][T17700] bridge_slave_0: left promiscuous mode [ 1171.458462][T17700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.379939][T17714] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1173.514474][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 1173.772549][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1173.817522][T17666] can0 (unregistered): slcan off ttyS3. [ 1174.236143][ T30] audit: type=1400 audit(2000000051.080:1747): avc: denied { compute_member } for pid=17738 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1174.359602][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2645'. [ 1174.388565][T17742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17742 comm=syz.4.2645 [ 1174.407099][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2645'. [ 1174.486896][T17742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17742 comm=syz.4.2645 [ 1174.837405][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1174.862789][T17722] ceph: No mds server is up or the cluster is laggy [ 1175.238451][T17747] fuse: Unknown parameter '0x0000000000000004' [ 1175.620234][T17760] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1175.674949][T17761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2651'. [ 1176.684571][T17770] overlayfs: failed to clone upperpath [ 1176.963191][T17785] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1177.018039][T17787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2658'. [ 1177.325202][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 1177.343527][T17783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2660'. [ 1177.358185][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 1177.376224][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 1177.385823][T17790] netlink: 'syz.1.2659': attribute type 13 has an invalid length. [ 1177.827442][ T30] audit: type=1400 audit(2000000054.670:1748): avc: denied { write } for pid=17789 comm="syz.1.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1178.030952][T17800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1179.249843][ T30] audit: type=1804 audit(2000000056.090:1749): pid=17816 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2667" name="/newroot/544/file0" dev="tmpfs" ino=3020 res=1 errno=0 [ 1179.413752][T17822] fuse: fd is not a fuse device [ 1179.475797][T17823] IPv6: NLM_F_CREATE should be specified when creating new route [ 1179.492991][T17823] IPv6: Can't replace route, no match found [ 1179.950363][T17830] autofs: Unknown parameter 'fd0x0000000000000000' [ 1180.078476][T17822] orangefs_mount: mount request failed with -4 [ 1181.366922][T17849] IPVS: Scheduler module ip_vs_ not found [ 1181.617724][T17853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17853 comm=syz.2.2676 [ 1182.461799][T17871] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1183.236115][T17890] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1183.288921][T17893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1183.778729][ T30] audit: type=1400 audit(2000000060.620:1750): avc: denied { getopt } for pid=17888 comm="syz.3.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1184.850952][T17889] Failed to initialize the IGMP autojoin socket (err -2) [ 1185.364865][T17905] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2688'. [ 1187.151463][T17932] atomic_op ffff88807a2eb998 conn xmit_atomic 0000000000000000 [ 1187.621915][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1188.627147][T17946] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17946 comm=syz.3.2698 [ 1189.112927][T17951] ceph: No mds server is up or the cluster is laggy [ 1189.119785][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1189.128931][T17949] ceph: No mds server is up or the cluster is laggy [ 1189.135872][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1190.058560][T17979] netlink: 'syz.2.2704': attribute type 2 has an invalid length. [ 1190.902296][T17979] : entered promiscuous mode [ 1191.358208][T17982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2704'. [ 1191.367283][T17982] netlink: 90 bytes leftover after parsing attributes in process `syz.2.2704'. [ 1191.376426][T17982] netlink: 90 bytes leftover after parsing attributes in process `syz.2.2704'. [ 1192.015440][T17999] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2708'. [ 1194.819919][T18042] Failed to initialize the IGMP autojoin socket (err -2) [ 1195.654419][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2719'. [ 1195.855997][T18055] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 1198.789656][T18071] atomic_op ffff8880548c3998 conn xmit_atomic 0000000000000000 [ 1199.211862][T18086] Failed to initialize the IGMP autojoin socket (err -2) [ 1199.945373][T18089] atomic_op ffff88807d8c4198 conn xmit_atomic 0000000000000000 [ 1201.204488][T18108] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1201.204488][T18108] The task syz.1.2732 (18108) triggered the difference, watch for misbehavior. [ 1201.363363][ T5610] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 1201.517561][T18117] bridge0: port 3(syz_tun) entered blocking state [ 1201.524502][T18117] bridge0: port 3(syz_tun) entered disabled state [ 1201.531597][T18117] syz_tun: entered allmulticast mode [ 1201.544821][T18117] syz_tun: entered promiscuous mode [ 1201.551913][T18117] bridge0: port 3(syz_tun) entered blocking state [ 1201.558414][T18117] bridge0: port 3(syz_tun) entered forwarding state [ 1202.396343][ T5610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.413726][ T5610] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1202.431261][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.454290][ T5610] usb 5-1: config 0 descriptor?? [ 1204.690397][T18125] atomic_op ffff888074df6198 conn xmit_atomic 0000000000000000 [ 1205.257943][T18097] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1205.280135][ T5725] lo speed is unknown, defaulting to 1000 [ 1205.327650][ T5610] usb 5-1: string descriptor 0 read error: -71 [ 1205.349294][ T5725] syz2: Port: 1 Link ACTIVE [ 1205.362920][ T5610] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 1205.406027][ T5610] earthmate ttyUSB0: required endpoint is missing [ 1205.448283][ T5610] usb 5-1: USB disconnect, device number 57 [ 1205.499342][ T5610] cypress_m8 5-1:0.0: device disconnected [ 1207.454385][T18160] netlink: 'syz.2.2742': attribute type 4 has an invalid length. [ 1208.433940][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1208.461420][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2746'. [ 1209.140855][T18186] atomic_op ffff88802d43b998 conn xmit_atomic 0000000000000000 [ 1209.189212][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1209.199866][T18179] ceph: No mds server is up or the cluster is laggy [ 1209.926051][T18190] atomic_op ffff88802d438198 conn xmit_atomic 0000000000000000 [ 1211.278313][T18203] netlink: 'syz.4.2754': attribute type 1 has an invalid length. [ 1211.357187][T18203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1211.846255][T18203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2754'. [ 1213.126222][T18228] fuse: fd is not a fuse device [ 1214.490567][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 1214.503160][T18242] ceph: No mds server is up or the cluster is laggy [ 1216.086470][T18262] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2763'. [ 1216.393277][T18269] netlink: 'syz.1.2766': attribute type 4 has an invalid length. [ 1216.885127][ T30] audit: type=1326 audit(2000000025.430:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18270 comm="syz.0.2767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc4919de99 code=0x0 [ 1217.680302][T18284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2769'. [ 1218.717831][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1218.727186][T18288] ceph: No mds server is up or the cluster is laggy [ 1219.193108][T18303] 9p: Bad value for 'rfdno' [ 1219.370689][T18305] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1220.788641][T18324] ceph: No mds server is up or the cluster is laggy [ 1220.951254][T18331] macsec1: entered promiscuous mode [ 1220.956633][T18331] macsec1: entered allmulticast mode [ 1221.240687][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 1221.270185][T18333] siw: device registration error -23 [ 1221.317112][T18330] can: request_module (can-proto-3) failed. [ 1222.701293][ T30] audit: type=1326 audit(2000000031.640:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18342 comm="syz.3.2787" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f032b39de99 code=0x0 [ 1224.269707][T18364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2793'. [ 1224.324918][T18371] wireguard: wg0: Could not create IPv4 socket [ 1224.331638][T18371] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1226.034144][T18387] block device autoloading is deprecated and will be removed. [ 1226.042514][T18387] hfsplus: unable to find HFS+ superblock [ 1227.299698][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2800'. [ 1227.578640][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 1227.606163][T18398] ceph: No mds server is up or the cluster is laggy [ 1227.606463][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 1227.982030][T18407] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2804'. [ 1228.123470][ T30] audit: type=1400 audit(2000000037.070:1753): avc: denied { nlmsg_write } for pid=18405 comm="syz.0.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1229.294580][T18427] wireguard: wg0: Could not create IPv4 socket [ 1229.301452][T18427] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1229.945655][T18433] fuse: fd is not a fuse device [ 1230.511198][T18437] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1230.709507][T18437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1230.717278][T18437] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1230.725046][T18437] audit: backlog limit exceeded [ 1230.730285][T18437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1230.738469][T18437] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1230.746967][T18437] audit: backlog limit exceeded [ 1230.754418][T18437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1230.760970][T18437] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1230.768696][T18437] audit: backlog limit exceeded [ 1231.011125][T18435] comedi comedi2: board detection failed [ 1231.073517][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1231.862993][T18445] overlayfs: failed to clone lowerpath [ 1231.944084][T18439] ceph: No mds server is up or the cluster is laggy [ 1231.951204][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 1232.585602][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 1232.599342][T18456] ceph: No mds server is up or the cluster is laggy [ 1233.245717][T18477] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2821'. [ 1233.709031][ T804] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1233.909563][ T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.955865][ T804] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1233.997801][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.076502][ T804] usb 2-1: config 0 descriptor?? [ 1235.386814][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.432397][T18483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.565070][T18483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.580614][T18483] wireguard: wg0: Could not create IPv4 socket [ 1235.587499][T18483] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1236.019461][ T30] kauditd_printk_skb: 260 callbacks suppressed [ 1236.019481][ T30] audit: type=1400 audit(2000000044.630:1819): avc: denied { write } for pid=18500 comm="syz.0.2825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1236.537477][ T804] usb 2-1: string descriptor 0 read error: -71 [ 1236.546550][ T804] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 1236.555561][ T804] earthmate ttyUSB0: required endpoint is missing [ 1236.564432][ T804] usb 2-1: USB disconnect, device number 52 [ 1236.572118][ T804] cypress_m8 2-1:0.0: device disconnected [ 1236.643131][ T5725] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1236.690743][T18515] netlink: 'syz.0.2828': attribute type 1 has an invalid length. [ 1236.898041][T18511] fuse: fd is not a fuse device [ 1237.126234][T18515] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1237.139020][T17398] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1237.175041][T18518] vlan2: entered allmulticast mode [ 1237.180776][T18518] bond6: entered allmulticast mode [ 1237.197238][T18519] bond6: (slave geneve2): Opening slave failed [ 1237.232025][ T5725] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1238.024276][T18529] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2833'. [ 1238.071814][T18521] geneve2: entered promiscuous mode [ 1238.084559][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'. [ 1238.104803][T18521] geneve2: entered allmulticast mode [ 1238.105530][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 1238.312598][T17398] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1238.334532][T18543] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 1238.348965][T17398] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1238.442630][ T804] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1239.892190][ T30] audit: type=1400 audit(2000000048.600:1820): avc: denied { listen } for pid=18558 comm="syz.1.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1240.037724][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1240.059988][T18564] fuse: fd is not a fuse device [ 1240.075508][T18567] ceph: No mds server is up or the cluster is laggy [ 1240.997054][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 1241.003692][T18578] ceph: No mds server is up or the cluster is laggy [ 1241.650009][T18587] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1241.753030][ T30] audit: type=1400 audit(2000000050.690:1821): avc: denied { search } for pid=18584 comm="syz.4.2845" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1241.826240][ T30] audit: type=1400 audit(2000000050.690:1822): avc: denied { search } for pid=18584 comm="syz.4.2845" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1241.909725][ T30] audit: type=1400 audit(2000000050.840:1823): avc: denied { search } for pid=18584 comm="syz.4.2845" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1242.092622][T18603] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2849'. [ 1242.223739][T18607] netlink: 'syz.1.2847': attribute type 10 has an invalid length. [ 1242.270912][T18607] team0: Port device dummy0 added [ 1242.504326][T18614] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1242.558973][T18615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2850'. [ 1242.731970][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1243.415419][T18607] netlink: 'syz.1.2847': attribute type 10 has an invalid length. [ 1243.467205][T18607] team0: Port device dummy0 removed [ 1243.478830][T18607] dummy0: entered promiscuous mode [ 1243.488055][T18607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1243.548586][T18620] fuse: fd is not a fuse device [ 1243.597563][T18624] fuse: Bad value for 'rootmode' [ 1243.752095][T18642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2854'. [ 1243.794701][T18639] ceph: No mds server is up or the cluster is laggy [ 1243.803062][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 1243.806934][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1243.818274][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2865'. [ 1245.137610][T18663] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1245.193424][T18665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2859'. [ 1246.937853][T18676] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1247.732335][T18684] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2863'. [ 1247.777287][T18687] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2864'. [ 1249.095076][T18700] bridge_slave_0 (unregistering): left allmulticast mode [ 1249.102253][T18700] bridge_slave_0 (unregistering): left promiscuous mode [ 1249.109249][T18700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.943953][T18725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1250.973924][ T30] audit: type=1400 audit(2000000059.910:1824): avc: denied { write } for pid=18718 comm="syz.3.2872" name="functions" dev="configfs" ino=45240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1251.008688][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2873'. [ 1251.268186][T18735] overlayfs: failed to clone upperpath [ 1251.612331][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1252.284901][ T30] audit: type=1400 audit(2000000061.230:1825): avc: denied { write } for pid=18718 comm="syz.3.2872" name="functions" dev="configfs" ino=45240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1252.436488][ T30] audit: type=1400 audit(2000000061.380:1826): avc: denied { write } for pid=18718 comm="syz.3.2872" name="configs" dev="configfs" ino=45241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1252.474563][T18726] printk: legacy console [ttyGS0] disabled [ 1252.562251][ T30] audit: type=1400 audit(2000000061.410:1827): avc: denied { remove_name } for pid=18718 comm="syz.3.2872" name="gser.usb0" dev="configfs" ino=51606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1252.611318][T18728] ================================================================== [ 1252.619435][T18728] BUG: KASAN: slab-use-after-free in tty_init_dev.part.0+0x44f/0x470 [ 1252.627521][T18728] Write of size 8 at addr ffff8880546af128 by task syz.3.2872/18728 [ 1252.635501][T18728] [ 1252.637831][T18728] CPU: 0 UID: 0 PID: 18728 Comm: syz.3.2872 Tainted: G L syzkaller #0 PREEMPT(full) [ 1252.637862][T18728] Tainted: [L]=SOFTLOCKUP [ 1252.637870][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1252.637882][T18728] Call Trace: [ 1252.637889][T18728] [ 1252.637896][T18728] dump_stack_lvl+0x100/0x190 [ 1252.637923][T18728] print_report+0x13d/0x4b0 [ 1252.637949][T18728] ? __virt_addr_valid+0x239/0x430 [ 1252.637981][T18728] ? tty_init_dev.part.0+0x44f/0x470 [ 1252.638007][T18728] kasan_report+0xdf/0x1c0 [ 1252.638032][T18728] ? tty_init_dev.part.0+0x44f/0x470 [ 1252.638060][T18728] tty_init_dev.part.0+0x44f/0x470 [ 1252.638088][T18728] tty_open+0xa63/0xfa0 [ 1252.638110][T18728] ? __pfx_tty_open+0x10/0x10 [ 1252.638130][T18728] ? chrdev_open+0x589/0x6a0 [ 1252.638147][T18728] ? chrdev_open+0x589/0x6a0 [ 1252.638165][T18728] ? __pfx_tty_open+0x10/0x10 [ 1252.638187][T18728] chrdev_open+0x234/0x6a0 [ 1252.638203][T18728] ? __pfx_chrdev_open+0x10/0x10 [ 1252.638222][T18728] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1252.638246][T18728] do_dentry_open+0x6ab/0x14d0 [ 1252.638261][T18728] ? __pfx_chrdev_open+0x10/0x10 [ 1252.638279][T18728] vfs_open+0x82/0x3f0 [ 1252.638299][T18728] path_openat+0x2873/0x4280 [ 1252.638321][T18728] ? __pfx_path_openat+0x10/0x10 [ 1252.638342][T18728] do_file_open+0x20e/0x430 [ 1252.638360][T18728] ? __pfx_do_file_open+0x10/0x10 [ 1252.638384][T18728] ? alloc_fd+0x471/0x7a0 [ 1252.638403][T18728] ? do_getname+0x191/0x390 [ 1252.638426][T18728] do_sys_openat2+0x10f/0x1e0 [ 1252.638447][T18728] ? __pfx_do_sys_openat2+0x10/0x10 [ 1252.638471][T18728] __x64_sys_openat+0x12d/0x210 [ 1252.638493][T18728] ? __pfx___x64_sys_openat+0x10/0x10 [ 1252.638519][T18728] do_syscall_64+0x115/0x870 [ 1252.638539][T18728] ? clear_bhb_loop+0x40/0x90 [ 1252.638559][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.638579][T18728] RIP: 0033:0x7f032b39de99 [ 1252.638595][T18728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.638611][T18728] RSP: 002b:00007f03295f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1252.638630][T18728] RAX: ffffffffffffffda RBX: 00007f032b626180 RCX: 00007f032b39de99 [ 1252.638643][T18728] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 1252.638655][T18728] RBP: 00007f032b433eaf R08: 0000000000000000 R09: 0000000000000000 [ 1252.638666][T18728] R10: 0000000000000166 R11: 0000000000000246 R12: 0000000000000000 [ 1252.638678][T18728] R13: 00007f032b626218 R14: 00007f032b626180 R15: 00007ffe3ecbf318 [ 1252.638696][T18728] [ 1252.638703][T18728] [ 1252.644701][ T30] audit: type=1400 audit(2000000061.420:1828): avc: denied { rmdir } for pid=18718 comm="syz.3.2872" name="gser.usb0" dev="configfs" ino=51606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1252.649620][T18728] Allocated by task 18722: [ 1252.649631][T18728] kasan_save_stack+0x30/0x50 [ 1252.649656][T18728] kasan_save_track+0x14/0x30 [ 1252.932768][T18728] __kasan_kmalloc+0xaa/0xb0 [ 1252.937351][T18728] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1252.942716][T18728] gserial_alloc_line_no_console+0xac/0x710 [ 1252.948596][T18728] gserial_alloc_line+0x16/0xa0 [ 1252.953431][T18728] gser_alloc_inst+0x86/0x100 [ 1252.958085][T18728] try_get_usb_function_instance+0x136/0x1f0 [ 1252.964050][T18728] usb_get_function_instance+0x16/0x70 [ 1252.969500][T18728] function_make+0x18c/0x3f0 [ 1252.974072][T18728] configfs_mkdir+0x51e/0xb70 [ 1252.978744][T18728] vfs_mkdir+0x361/0x850 [ 1252.982978][T18728] filename_mkdirat+0x48b/0x5e0 [ 1252.987810][T18728] __x64_sys_mkdirat+0x89/0xc0 [ 1252.992554][T18728] do_syscall_64+0x115/0x870 [ 1252.997125][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.002999][T18728] [ 1253.005303][T18728] Freed by task 18726: [ 1253.009348][T18728] kasan_save_stack+0x30/0x50 [ 1253.014007][T18728] kasan_save_track+0x14/0x30 [ 1253.018680][T18728] kasan_save_free_info+0x3b/0x70 [ 1253.023711][T18728] __kasan_slab_free+0x5f/0x80 [ 1253.028458][T18728] kfree+0x22b/0x6c0 [ 1253.032352][T18728] gserial_free_port+0x146/0x2f0 [ 1253.037275][T18728] gserial_free_line+0xf8/0x1e0 [ 1253.042111][T18728] gser_free_inst+0x3b/0x50 [ 1253.046594][T18728] usb_put_function_instance+0x89/0xc0 [ 1253.052051][T18728] config_item_cleanup+0x146/0x240 [ 1253.057159][T18728] config_item_put+0x93/0xb0 [ 1253.061745][T18728] configfs_rmdir+0x5e3/0x950 [ 1253.066403][T18728] vfs_rmdir+0x328/0x8a0 [ 1253.070639][T18728] filename_rmdir+0x31a/0x5c0 [ 1253.075296][T18728] __x64_sys_rmdir+0x46/0x70 [ 1253.079877][T18728] do_syscall_64+0x115/0x870 [ 1253.084465][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.090339][T18728] [ 1253.092644][T18728] The buggy address belongs to the object at ffff8880546af000 [ 1253.092644][T18728] which belongs to the cache kmalloc-2k of size 2048 [ 1253.106687][T18728] The buggy address is located 296 bytes inside of [ 1253.106687][T18728] freed 2048-byte region [ffff8880546af000, ffff8880546af800) [ 1253.120548][T18728] [ 1253.122851][T18728] The buggy address belongs to the physical page: [ 1253.129237][T18728] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x546a8 [ 1253.137973][T18728] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1253.146447][T18728] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1253.153970][T18728] page_type: f5(slab) [ 1253.157929][T18728] raw: 00fff00000000040 ffff88813fe28000 dead000000000100 dead000000000122 [ 1253.166502][T18728] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1253.175065][T18728] head: 00fff00000000040 ffff88813fe28000 dead000000000100 dead000000000122 [ 1253.183717][T18728] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1253.192369][T18728] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1253.201022][T18728] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1253.209678][T18728] page dumped because: kasan: bad access detected [ 1253.216066][T18728] page_owner tracks the page as allocated [ 1253.221756][T18728] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5608, tgid 5608 (syz-executor), ts 75168864744, free_ts 21400998829 [ 1253.243103][T18728] post_alloc_hook+0xfd/0x120 [ 1253.247771][T18728] get_page_from_freelist+0xf48/0x3530 [ 1253.253208][T18728] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1253.259084][T18728] new_slab+0xa2/0x640 [ 1253.263128][T18728] refill_objects+0xe3/0x410 [ 1253.267696][T18728] __pcs_replace_empty_main+0x376/0x680 [ 1253.273228][T18728] __kmalloc_noprof+0x66d/0x820 [ 1253.278058][T18728] sk_prot_alloc+0x10b/0x2a0 [ 1253.282630][T18728] sk_alloc+0x36/0xe80 [ 1253.286678][T18728] __netlink_create+0x5e/0x2c0 [ 1253.291423][T18728] netlink_create+0x29b/0x610 [ 1253.296092][T18728] __sock_create+0x339/0x860 [ 1253.300670][T18728] __sys_socket+0x14d/0x260 [ 1253.305150][T18728] __x64_sys_socket+0x72/0xb0 [ 1253.309805][T18728] do_syscall_64+0x115/0x870 [ 1253.314376][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.320263][T18728] page last free pid 1 tgid 1 stack trace: [ 1253.326057][T18728] free_pages_prepare+0x586/0xd80 [ 1253.331081][T18728] __free_contig_range_common+0x14f/0x250 [ 1253.336814][T18728] destroy_args+0xa8/0x7a0 [ 1253.341227][T18728] debug_vm_pgtable+0x1d69/0x3490 [ 1253.346237][T18728] do_one_initcall+0x11d/0x700 [ 1253.351001][T18728] kernel_init_freeable+0x6ea/0x7b0 [ 1253.356269][T18728] kernel_init+0x1f/0x1e0 [ 1253.360596][T18728] ret_from_fork+0x72b/0xd50 [ 1253.365183][T18728] ret_from_fork_asm+0x1a/0x30 [ 1253.369943][T18728] [ 1253.372246][T18728] Memory state around the buggy address: [ 1253.377858][T18728] ffff8880546af000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1253.385901][T18728] ffff8880546af080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1253.393941][T18728] >ffff8880546af100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1253.401988][T18728] ^ [ 1253.407353][T18728] ffff8880546af180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1253.415407][T18728] ffff8880546af200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1253.423450][T18728] ================================================================== [ 1253.433534][ T30] audit: type=1400 audit(2000000061.510:1829): avc: denied { write } for pid=18718 comm="syz.3.2872" name="c.1" dev="configfs" ino=51623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1253.783931][ T30] audit: type=1400 audit(2000000061.510:1830): avc: denied { create } for pid=18718 comm="syz.3.2872" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1253.887229][T18728] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1253.894444][T18728] CPU: 0 UID: 0 PID: 18728 Comm: syz.3.2872 Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.905368][T18728] Tainted: [L]=SOFTLOCKUP [ 1253.909703][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1253.919743][T18728] Call Trace: [ 1253.923004][T18728] [ 1253.925917][T18728] dump_stack_lvl+0x100/0x190 [ 1253.930571][T18728] vpanic+0x552/0x970 [ 1253.934525][T18728] ? __pfx_vpanic+0x10/0x10 [ 1253.939005][T18728] ? tty_init_dev.part.0+0x44f/0x470 [ 1253.944362][T18728] panic+0xd1/0xe0 [ 1253.948057][T18728] ? __pfx_panic+0x10/0x10 [ 1253.952454][T18728] ? tty_init_dev.part.0+0x44f/0x470 [ 1253.957715][T18728] ? preempt_schedule_common+0x42/0xc0 [ 1253.963148][T18728] check_panic_on_warn.cold+0x19/0x34 [ 1253.968494][T18728] end_report.part.0+0x3a/0x90 [ 1253.973247][T18728] kasan_report.cold+0xe/0x18 [ 1253.977915][T18728] ? tty_init_dev.part.0+0x44f/0x470 [ 1253.983175][T18728] tty_init_dev.part.0+0x44f/0x470 [ 1253.988262][T18728] tty_open+0xa63/0xfa0 [ 1253.992401][T18728] ? __pfx_tty_open+0x10/0x10 [ 1253.997060][T18728] ? chrdev_open+0x589/0x6a0 [ 1254.001715][T18728] ? chrdev_open+0x589/0x6a0 [ 1254.006279][T18728] ? __pfx_tty_open+0x10/0x10 [ 1254.010938][T18728] chrdev_open+0x234/0x6a0 [ 1254.015351][T18728] ? __pfx_chrdev_open+0x10/0x10 [ 1254.020277][T18728] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1254.026592][T18728] do_dentry_open+0x6ab/0x14d0 [ 1254.031336][T18728] ? __pfx_chrdev_open+0x10/0x10 [ 1254.036261][T18728] vfs_open+0x82/0x3f0 [ 1254.040307][T18728] path_openat+0x2873/0x4280 [ 1254.044872][T18728] ? __pfx_path_openat+0x10/0x10 [ 1254.049795][T18728] do_file_open+0x20e/0x430 [ 1254.054271][T18728] ? __pfx_do_file_open+0x10/0x10 [ 1254.059274][T18728] ? alloc_fd+0x471/0x7a0 [ 1254.063598][T18728] ? do_getname+0x191/0x390 [ 1254.068076][T18728] do_sys_openat2+0x10f/0x1e0 [ 1254.072738][T18728] ? __pfx_do_sys_openat2+0x10/0x10 [ 1254.077914][T18728] __x64_sys_openat+0x12d/0x210 [ 1254.082751][T18728] ? __pfx___x64_sys_openat+0x10/0x10 [ 1254.088112][T18728] do_syscall_64+0x115/0x870 [ 1254.092687][T18728] ? clear_bhb_loop+0x40/0x90 [ 1254.097348][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.103214][T18728] RIP: 0033:0x7f032b39de99 [ 1254.107606][T18728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.127199][T18728] RSP: 002b:00007f03295f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1254.135582][T18728] RAX: ffffffffffffffda RBX: 00007f032b626180 RCX: 00007f032b39de99 [ 1254.143543][T18728] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 1254.151503][T18728] RBP: 00007f032b433eaf R08: 0000000000000000 R09: 0000000000000000 [ 1254.159444][T18728] R10: 0000000000000166 R11: 0000000000000246 R12: 0000000000000000 [ 1254.167391][T18728] R13: 00007f032b626218 R14: 00007f032b626180 R15: 00007ffe3ecbf318 [ 1254.175351][T18728] [ 1254.178574][T18728] Kernel Offset: disabled [ 1254.182884][T18728] Rebooting in 86400 seconds..