last executing test programs: 57m5.550581266s ago: executing program 32 (id=706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 56m54.795149798s ago: executing program 5 (id=930): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002502000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe5d6405000000000075040000000d00000701000000000000b70400001000e5207b0700fe000090ff85000000b5000000b70000000a00000095000000000000006458c2c62fc206000000f909a63796c113a80c19aab9d60700ffffffff483be3f0d3253730e78000000062c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766aeb39439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c013700e69274f8e9c31975e551558055dc2dc29edc33b375fa325dcf3e91e20f63d7030dbe7ff7f51fe89c3d17cf45a1616ad237682057034dfdc81f5a53cd640212c88e8b687a2446049577c75b76b775c1e301caf2465ed4b2ad56b848d046c52bfc3737127120ab17d82a294d174f240a3cdc725cfe6e839a1f80f59486578e45b008d39ab618f660e3c53ed4409aa92ae4fecd913060ca74ed8a303e22de12087a217d8d7be0ae1117cc791313b1318497dd5ebeef0d7e1795a6ff20f699870ebb137cffa79465da52ab2b3430ba0ba59152496a1ea5dd1e4dee46f6d3688603b5f25a588a31da4e481884074e211dd09a8b8039d0834507656ed7d552a990c1354d7638b2c2215dd9f606b01a92fabc6eb6fa033a86f8920e2168a80d7c86da5ad1d27c8d2a180e56046a49b989128ea736894d3eef8dca16ed63520be4654ddb14bfe4268c487c5a75c044e21021c089608c50adbc4e3f4c6a4ca86c7d2df5bc7c76e413d05e8f57b1e22d4af34f9d4d2e6e4d4f57f47aebdd5f98f67834c656b2fe09df4a1b15116fceaa404a6df278c7c629f584ba8d37c1137c2263ae02ad3718a03a886eb"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) 56m54.750198085s ago: executing program 5 (id=931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x4, 0x4) 56m53.806233084s ago: executing program 5 (id=950): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x3, "99bdb1b0c7251b080600f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"}) close(r0) 56m53.684515793s ago: executing program 5 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 56m53.562754511s ago: executing program 5 (id=955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001100)={0x1, 0x0, [{0x0, 0x0, 0x5, 0x8000d, 0x68747541, 0x656e6975, 0x6}]}) 56m53.269298444s ago: executing program 5 (id=959): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 56m53.075077753s ago: executing program 33 (id=959): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 55m18.950629545s ago: executing program 0 (id=2420): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x100000000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 55m18.781517663s ago: executing program 0 (id=2423): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) 55m18.690575856s ago: executing program 0 (id=2426): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 55m18.477195908s ago: executing program 0 (id=2431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 55m18.394647004s ago: executing program 0 (id=2433): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 55m17.926866031s ago: executing program 0 (id=2439): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 55m17.570975759s ago: executing program 34 (id=2439): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 53m8.610786273s ago: executing program 4 (id=4271): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) 53m8.570823092s ago: executing program 4 (id=4272): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000200)) 53m8.186869408s ago: executing program 4 (id=4278): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80d00, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x528}}, './file0\x00'}) 53m8.131055382s ago: executing program 4 (id=4280): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 53m8.083397267s ago: executing program 4 (id=4282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r1) 53m7.777557743s ago: executing program 4 (id=4287): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 53m7.246729911s ago: executing program 35 (id=4287): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 53m5.850544395s ago: executing program 1 (id=4299): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) socket$kcm(0x2, 0xa, 0x73) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 53m5.579270041s ago: executing program 1 (id=4302): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{}]}) 53m5.532298293s ago: executing program 1 (id=4303): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) 53m5.289518478s ago: executing program 1 (id=4306): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 53m5.24995775s ago: executing program 1 (id=4307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53m4.134192441s ago: executing program 1 (id=4312): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 53m3.918307315s ago: executing program 36 (id=4312): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 46m39.615525617s ago: executing program 2 (id=8599): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000a804) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24060084}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 46m37.884714604s ago: executing program 2 (id=8610): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000006c0)={0x0, 0x30, 0x7, "e86409af18b983"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a80)={0x40, 0x16}, 0x0, 0x0, &(0x7f0000000b40)={0xc0, 0xa1, 0x4, 0x80000001}, &(0x7f0000000b80)={0x40, 0xa0, 0x4, 0x401}, 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 46m34.642056482s ago: executing program 2 (id=8641): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000880)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xdddd0000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 46m34.555605078s ago: executing program 2 (id=8642): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x1) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 46m34.350638742s ago: executing program 2 (id=8645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x626f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 46m33.089103351s ago: executing program 2 (id=8652): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x57b}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c40c4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfd3fd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}}, 0x0) 46m32.781857336s ago: executing program 37 (id=8652): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x57b}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c40c4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfd3fd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}}, 0x0) 16.679576977s ago: executing program 9 (id=15753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c003aab2e78bdaa6329884e9640fff10a1b00000a000000000000000000000202000000000000000300000d00000000030000000300000000000000030000000400000003000000000000000000000500000000000000e4b99ee687ffd9165ac7524c4ee0622391a2d4b0a06de054038739ad099d601462e5eba19d590e000a5aa2c738c8f2de482cc9597ecaafb92787a6447305c8497a2112faf6382e6387a63cb1b6580a9836cffbb55d3b91103e8b44562ea4bf4b2810505a779d20ade8cd373f50d73b85627b353f94"], 0x0, 0x5e, 0x0, 0x1}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0xd931d3864d39dc41) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$AUDIT_SET(r5, 0x0, 0x4000) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r4, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2ce77d953f32222d808f", @ANYRES64=r4]) read$FUSE(r6, &(0x7f00000083c0)={0x2020}, 0x2020) write$FUSE_INIT(r6, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) r10 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x140, 0xb4, 0x0, @discrete={0x5, 0x6}}) io_submit(r9, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r8, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r6, r8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x4008031, r3, 0x0) 13.428440053s ago: executing program 9 (id=15756): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5693d"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073697a3100000000087e5440000000000900010073797a3000000000080003400000000a1400002e001100010000160000000000000000000a7cf39d9e35496a235bd2fc8381dc89bfbd93d081d1bdc5650f0922c8eeb1dd21d9b045bfdd3f9b485ac70d08b819dc497da280620e41b9a9d13dacc69d006b3baaf7525c5f6ba6217b9ca5c4149b9c1f6a035566941443297a84651d0176ffea161df82d27bc9acf2d3da701db79c2ffa10ae81813809605a10e9ca56231017c21bfeab113"], 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0xfffd}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304fcfffeff3d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fde170b60d88ad88000015fecec4f4c158e20132676528a4001400028005000c00010000000500a500010000001a0000"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000002180)=""/4101, 0x1005, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000c0601010000000000000000541a1e5a9df302848f7e8ead9a5b9805000009050001000700a600"], 0x1c}, 0x1, 0x0, 0x0, 0x2004004}, 0x40080) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e22, @private=0xa010101}}) 10.892982831s ago: executing program 6 (id=15763): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) 10.445216001s ago: executing program 7 (id=15764): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7eff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001e0ffffff00000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800084000000000080002400000000008000540000000000800034000000000080006"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) 10.253638484s ago: executing program 3 (id=15765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r3 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r3) ptrace$getenv(0x4201, r3, 0x7, &(0x7f0000000440)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000ec0)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) process_vm_readv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000840)=""/230, 0xe6}], 0x6, 0x0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 9.719721245s ago: executing program 6 (id=15766): socket$netlink(0x10, 0x3, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xb, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r1, 0x6, &(0x7f00000009c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0x0, 0x4, 0xfa, 0x9b0}, 0x20) 8.623935766s ago: executing program 7 (id=15767): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX=r3, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES16=r1, @ANYRES32=r2], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)={r8}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno', @ANYBLOB=',\x00']) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033006c6f0000000000001f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 8.549702744s ago: executing program 6 (id=15768): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) 8.549101296s ago: executing program 7 (id=15769): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2e4}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8.497356507s ago: executing program 3 (id=15770): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@delchain={0x148, 0x65, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0xd, 0x4}, {0xa, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x100, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0xffffffff, 0xffffff00, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x4}, @TCA_FLOWER_ACT={0xc4, 0x3, [@m_skbmod={0xc0, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa}]}, {0x7b, 0x6, "7ca8a4ac021c87b253e9d6943fed67b28f628d78696bfb59fcc172a245c1be745a98a1e6f9e0e115752f261c747408b8dc9bd515004ab1819f3d42ec1ac1f45e929e21c68a5ba83e37bf880d3169f6981402f13ce88e0bcb5037c54adb0c0802d0586de95ff8e003b6aa342ad1652624ed9607fc9f1d47"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9, 0xb}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012"], 0x50}}, 0x20008844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x3f, &(0x7f0000000380)=0x1, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) setgroups(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x200, 0x0, 0x100312}, &(0x7f00000029c0), &(0x7f0000000300)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000002c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) 7.76165673s ago: executing program 6 (id=15771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x74) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0xee00) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=0x0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="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"]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 7.466654726s ago: executing program 3 (id=15772): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) 7.43686403s ago: executing program 9 (id=15773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x74) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0xee00) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=0x0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c00d7048fe1f67e7479da7a64d3a870bbf18343a2d5246e642032bf5e6f6265c05748328c84bd2ad816751b80d161053bcc0a7d12b25b812a6ffe69b33172938ccdc411868a445eab4f0d6b389f8da37433a4e38fe668b6b719e0a17db1e6d3dc834107f1ca09748ec36ea81e7604d5f8005a8edf001223466bb0c5a482bd0478a15dff1cfdd25063b0f723465eda4911c04d18f45eb6d580768d55f373bbfd66dbd0d1af9c9aa8ccd6a615db05b88f33153e6001f4d719970756d3cba29c0b3486e42651955393d9f1c9a156f01bcf24415c1501e3e4710f621afd2d454f7f159ac6b8a97f3d7dfcd3975c821893f2298476d4bbcf87d06c362bf291f67946490a9225e52a582eca1f731b4e40b70ac0e9e0c143e9ebe9b51562de46b45384f527b420cb167d801bb6a3559de72d69e82ce847190d9cf5f6ec5c4bc13886b98a9f04186e2b1dbd95a68162661de99462a95916361eb91a50f1e1b0807a0209ea53a5de9103ae3e6ae121d96f8d8696bdca1c98c3ac7656b311c783792213a592c746bc51acc882bc5c0b12dc6055ecd30cb6e2b13d92c79c72bf728204d26c71a4a8fce2f0dbffa216f8"]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 6.939515143s ago: executing program 7 (id=15774): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="00000000000000000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5.985880179s ago: executing program 9 (id=15775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000200000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r5, &(0x7f0000000000)=""/42, 0x2a) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') renameat2(r7, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7, &(0x7f0000000040)='./file1\x00', 0x5) lseek(r7, 0x2004, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000"], 0x4c}}, 0xc050) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r8}) 5.809497799s ago: executing program 8 (id=15776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) 5.806283658s ago: executing program 6 (id=15777): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000000)={0xc9}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 5.191383836s ago: executing program 7 (id=15778): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x25}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r6}, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 5.148638438s ago: executing program 8 (id=15779): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7eff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001e0ffffff00000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800084000000000080002400000000008000540000000000800034000000000080006"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) 5.027392354s ago: executing program 9 (id=15780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r3 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r3) ptrace$getenv(0x4201, r3, 0x7, &(0x7f0000000440)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000ec0)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) process_vm_readv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000840)=""/230, 0xe6}], 0x6, 0x0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.579518509s ago: executing program 8 (id=15781): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @generic={0x21, 0x2, 0x8, 0xe7c, 0x4}, @generic={0x2c, 0x9, 0x6, 0x160, 0x4}]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3.405008248s ago: executing program 3 (id=15782): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000f300000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000040), 0x55, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004080) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x14) r5 = socket(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad3, 0x0, 0xfffffffc, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0xfeffffff, r5, 0x3, {0x3b4, 0x9}, 0x6}, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x3, "8d"}, @global=@item_012={0x2, 0x1, 0x4, "b314"}]}}, 0x0}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 2.398067345s ago: executing program 9 (id=15783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="280000000203010100000000000000000300000108090002000000054e000000009d760000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x40010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x59}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000003060500000000000000000005addef0faa3c1d76e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x402001, 0x3e) socket$packet(0x11, 0x3, 0x300) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x4d4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) ioctl$int_in(r10, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000340)) 1.273701793s ago: executing program 8 (id=15784): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2e4}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.161006939s ago: executing program 3 (id=15785): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x4, 0x11, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x4, 0x70, 0x2, 0xfffffff7, 0x1ab, 0xfffffff8], 0x0, 0x4}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x2c, r6, 0x1, 0x40, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x46) r9 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000080)=0x2) 1.126384515s ago: executing program 8 (id=15786): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="00000000000000000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 410.770763ms ago: executing program 7 (id=15787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x61c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5f0, 0x2, [@TCA_U32_SEL={0x3a4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x800, 0x9, 0x1, 0x4}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x4}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x0, 0x4, 0x2, 0x6}, {0x7fff, 0x0, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x81, 0xd4, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x10, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x51, 0xd6fa, 0x9}, {0xd, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0xdc, 0x1ff, 0x101, 0x5}, {0x0, 0x7f, 0x60d4, 0x3}, {0x6, 0x8, 0xc, 0x8}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x234, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0x7d}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x10001, 0x7, 0xc841, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0x7, 0x2, 0x5, 0x2}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0x2, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x4, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x61c}}, 0x24040084) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) 286.865414ms ago: executing program 6 (id=15788): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="00000000000000000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 184.744195ms ago: executing program 3 (id=15789): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7eff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001e0ffffff00000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800084000000000080002400000000008000540000000000800034000000000080006"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) 0s ago: executing program 8 (id=15790): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x10, 0xa, 0x8, 0x4, @rand_addr=' \x01\x00', @private2, 0x1, 0x1, 0xfffffffd, 0xfffffffc}}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x7, 0x10000, 0x7fff, 0x2, 0xffffffffffffffff, 0x7fffffff, '\x00', r0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000040)={0x6, 'team0\x00', {0x1}, 0x1}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050429bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000bc8ed1917f000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x240040d0) kernel console output (not intermixed with test programs): 08]" dev="sockfs" ino=195608 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3351.268542][ T30] audit: type=1400 audit(2000000118.026:5132): avc: denied { create } for pid=24484 comm="syz.8.15243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3351.334109][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3351.415592][ T30] audit: type=1400 audit(2000000118.036:5133): avc: denied { write } for pid=24484 comm="syz.8.15243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3352.226859][ T30] audit: type=1400 audit(2000000119.416:5134): avc: denied { read } for pid=24497 comm="syz.8.15246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3352.374492][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3353.416218][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3353.437737][ T30] audit: type=1400 audit(2000000120.256:5135): avc: denied { write } for pid=24508 comm="syz.6.15248" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3353.787384][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15251'. [ 3353.804555][T24520] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15251'. [ 3354.463854][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3354.909255][ T30] audit: type=1400 audit(2000000122.066:5136): avc: denied { bind } for pid=24516 comm="syz.9.15250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3355.068537][T24531] autofs: Bad value for 'fd' [ 3355.356321][ T30] audit: type=1400 audit(2000000122.556:5137): avc: denied { read } for pid=24534 comm="syz.6.15254" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 3355.493912][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3355.805685][ T30] audit: type=1400 audit(2000000122.556:5138): avc: denied { open } for pid=24534 comm="syz.6.15254" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 3356.246274][T24546] random: crng reseeded on system resumption [ 3356.266159][ T30] audit: type=1400 audit(2000000123.416:5139): avc: denied { write } for pid=24534 comm="syz.6.15254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3356.309606][ T30] audit: type=1400 audit(2000000123.446:5140): avc: denied { ioctl } for pid=24534 comm="syz.6.15254" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 3356.403750][ T30] audit: type=1400 audit(2000000123.456:5141): avc: denied { write } for pid=24534 comm="syz.6.15254" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3356.477502][ T30] audit: type=1400 audit(2000000123.456:5142): avc: denied { open } for pid=24534 comm="syz.6.15254" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3356.543710][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3356.793973][ T30] audit: type=1400 audit(2000000123.516:5143): avc: denied { firmware_load } for pid=5294 comm="kworker/u8:60" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 3356.818984][ C1] vkms_vblank_simulate: vblank timer overrun [ 3356.828947][ T30] audit: type=1400 audit(2000000123.576:5144): avc: denied { write } for pid=24534 comm="syz.6.15254" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 3356.852654][ C1] vkms_vblank_simulate: vblank timer overrun [ 3357.261145][T24563] bridge31: entered promiscuous mode [ 3357.493719][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3357.573732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3357.591177][T24570] bridge32: entered promiscuous mode [ 3358.541334][T24580] lo speed is unknown, defaulting to 1000 [ 3358.613581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3359.115683][T24581] blktrace: Concurrent blktraces are not allowed on loop14 [ 3359.194844][ T30] audit: type=1400 audit(2000000126.217:5145): avc: denied { create } for pid=24575 comm="syz.7.15262" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3359.410461][T24580] lo speed is unknown, defaulting to 1000 [ 3359.417745][T24580] lo speed is unknown, defaulting to 1000 [ 3359.424928][T24580] lo speed is unknown, defaulting to 1000 [ 3359.663645][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3359.935191][T24585] autofs: Bad value for 'fd' [ 3360.092241][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 3360.092257][ T30] audit: type=1400 audit(2000000127.297:5150): avc: denied { create } for pid=24587 comm="syz.3.15265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3360.693482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3360.753809][ T30] audit: type=1400 audit(2000000127.947:5151): avc: denied { mount } for pid=24594 comm="syz.6.15267" name="/" dev="ocfs2_dlmfs" ino=196623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3360.783572][ T30] audit: type=1400 audit(2000000127.957:5152): avc: denied { prog_load } for pid=24594 comm="syz.6.15267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3360.838407][ T30] audit: type=1400 audit(2000000127.957:5153): avc: denied { bpf } for pid=24594 comm="syz.6.15267" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3361.005073][ T30] audit: type=1400 audit(2000000128.197:5154): avc: denied { read } for pid=24603 comm="syz.3.15269" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3361.034253][ T30] audit: type=1400 audit(2000000128.197:5155): avc: denied { open } for pid=24603 comm="syz.3.15269" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3361.115289][ T30] audit: type=1400 audit(2000000128.277:5156): avc: denied { create } for pid=24603 comm="syz.3.15269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3361.139501][ T30] audit: type=1400 audit(2000000128.277:5157): avc: denied { write } for pid=24603 comm="syz.3.15269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3361.224315][ T30] audit: type=1400 audit(2000000128.297:5158): avc: denied { create } for pid=24603 comm="syz.3.15269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3361.430431][ T30] audit: type=1400 audit(2000000128.377:5159): avc: denied { create } for pid=24603 comm="syz.3.15269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3361.610449][T24612] siw: device registration error -23 [ 3361.733679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3362.773374][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3363.081672][T24631] bridge38: entered promiscuous mode [ 3363.813518][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3363.864260][T24638] lo speed is unknown, defaulting to 1000 [ 3363.976032][T24638] lo speed is unknown, defaulting to 1000 [ 3363.983112][T24638] lo speed is unknown, defaulting to 1000 [ 3363.990248][T24638] lo speed is unknown, defaulting to 1000 [ 3364.231297][T24640] trusted_key: encrypted_key: insufficient parameters specified [ 3364.251722][T24640] trusted_key: encrypted_key: keylen parameter is missing [ 3364.288579][T24640] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3364.301455][T24640] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3364.853246][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3364.979114][T24643] autofs: Unknown parameter '0x0000000000000000' [ 3365.101189][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 3365.101205][ T30] audit: type=1400 audit(2000000132.307:5200): avc: denied { create } for pid=24644 comm="syz.6.15279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3365.498802][ T30] audit: type=1400 audit(2000000132.347:5201): avc: denied { ioctl } for pid=24644 comm="syz.6.15279" path="socket:[196007]" dev="sockfs" ino=196007 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3365.580875][ T30] audit: type=1400 audit(2000000132.357:5202): avc: denied { connect } for pid=24644 comm="syz.6.15279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3365.627178][ T30] audit: type=1400 audit(2000000132.467:5203): avc: denied { create } for pid=24651 comm="syz.7.15282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3365.673433][ T30] audit: type=1400 audit(2000000132.467:5204): avc: denied { ioctl } for pid=24651 comm="syz.7.15282" path="socket:[196017]" dev="sockfs" ino=196017 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3365.699368][ T30] audit: type=1400 audit(2000000132.467:5205): avc: denied { create } for pid=24651 comm="syz.7.15282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3365.817404][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15283'. [ 3365.893252][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3366.431926][ T30] audit: type=1400 audit(2000000132.477:5206): avc: denied { connect } for pid=24651 comm="syz.7.15282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3366.465913][T24668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=24668 comm=syz.9.15285 [ 3366.623562][ T30] audit: type=1400 audit(2000000132.827:5207): avc: denied { create } for pid=24656 comm="syz.8.15283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3366.923541][ T30] audit: type=1400 audit(2000000132.867:5208): avc: denied { read write } for pid=24659 comm="syz.6.15284" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3366.953141][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3367.032043][ T30] audit: type=1400 audit(2000000132.867:5209): avc: denied { open } for pid=24659 comm="syz.6.15284" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3367.973283][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3368.479462][T24687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3368.486717][T24687] IPv6: NLM_F_CREATE should be set when creating new route [ 3368.493941][T24687] IPv6: NLM_F_CREATE should be set when creating new route [ 3368.501122][T24687] IPv6: NLM_F_CREATE should be set when creating new route [ 3368.947910][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15291'. [ 3369.013037][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3369.074194][T24694] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15291'. [ 3370.053071][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3370.141889][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 3370.141907][ T30] audit: type=1400 audit(2000000137.087:5256): avc: denied { create } for pid=24695 comm="syz.6.15292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3370.941671][ T30] audit: type=1400 audit(2000000137.087:5257): avc: denied { create } for pid=24695 comm="syz.6.15292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3370.981777][ T30] audit: type=1400 audit(2000000137.097:5258): avc: denied { write } for pid=24695 comm="syz.6.15292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3371.029793][ T30] audit: type=1400 audit(2000000137.107:5259): avc: denied { create } for pid=24693 comm="syz.7.15291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3371.092859][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3371.166876][ T30] audit: type=1400 audit(2000000137.107:5260): avc: denied { setopt } for pid=24693 comm="syz.7.15291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3371.240879][ T30] audit: type=1400 audit(2000000137.417:5261): avc: denied { create } for pid=24704 comm="syz.3.15294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3372.132979][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3372.320717][ T30] audit: type=1400 audit(2000000137.747:5262): avc: denied { read } for pid=24704 comm="syz.3.15294" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3372.414742][ T30] audit: type=1400 audit(2000000137.747:5263): avc: denied { open } for pid=24704 comm="syz.3.15294" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3372.444634][ T30] audit: type=1400 audit(2000000137.747:5264): avc: denied { read write } for pid=24704 comm="syz.3.15294" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3372.677972][ T30] audit: type=1400 audit(2000000137.747:5265): avc: denied { open } for pid=24704 comm="syz.3.15294" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3372.718821][T24736] netlink: 'syz.7.15301': attribute type 10 has an invalid length. [ 3372.727431][T24736] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15301'. [ 3372.737149][T24736] dummy0: entered promiscuous mode [ 3372.742473][T24736] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 3372.873607][T24739] trusted_key: encrypted_key: insufficient parameters specified [ 3372.891144][T24739] trusted_key: encrypted_key: keylen parameter is missing [ 3372.922143][T24739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3372.934347][T24739] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3373.172813][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3373.831422][T24747] bridge24: entered promiscuous mode [ 3374.053420][ T7177] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3374.212836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3374.213499][ T7177] usb 4-1: Using ep0 maxpacket: 8 [ 3374.255627][ T7177] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 3374.267117][ T7177] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3374.442502][T24768] bridge39: entered promiscuous mode [ 3374.494060][T24769] netlink: 112 bytes leftover after parsing attributes in process `syz.6.15306'. [ 3374.521834][T24769] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 3374.653713][ T7177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3374.661827][ T7177] usb 4-1: Product: syz [ 3374.670401][ T7177] usb 4-1: Manufacturer: syz [ 3374.676094][ T7177] usb 4-1: SerialNumber: syz [ 3374.682277][ T7177] usb 4-1: config 0 descriptor?? [ 3374.697102][ T7177] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3374.708093][ T7177] usb 4-1: setting power ON [ 3374.713358][ T7177] dvb-usb: bulk message failed: -22 (2/0) [ 3374.721025][ T7177] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3374.735670][ T7177] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3374.758246][ T7177] usb 4-1: media controller created [ 3374.896340][ T7177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3374.930841][T24774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3374.976219][ T7177] usb 4-1: selecting invalid altsetting 6 [ 3374.989950][ T7177] usb 4-1: digital interface selection failed (-22) [ 3375.007058][T24779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3375.022480][T24779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3375.237436][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 3375.237449][ T30] audit: type=1400 audit(2000000142.447:5297): avc: denied { setopt } for pid=24749 comm="syz.3.15304" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3375.264177][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3375.283463][ T7177] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3375.284151][T24777] netlink: 'syz.3.15304': attribute type 10 has an invalid length. [ 3375.305172][ T7177] usb 4-1: setting power OFF [ 3375.309793][ T7177] dvb-usb: bulk message failed: -22 (2/0) [ 3375.350749][T24777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15304'. [ 3375.371358][ T7177] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3375.427882][ T7177] (NULL device *): no alternate interface [ 3375.600639][ T30] audit: type=1400 audit(2000000142.787:5298): avc: denied { connect } for pid=24780 comm="syz.9.15312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3375.729082][T24791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3375.777214][ T30] audit: type=1400 audit(2000000142.787:5299): avc: denied { name_connect } for pid=24780 comm="syz.9.15312" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 3375.831841][ T7177] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3375.945486][ T30] audit: type=1400 audit(2000000143.158:5300): avc: denied { create } for pid=24792 comm="syz.8.15316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3376.031224][ T30] audit: type=1400 audit(2000000143.238:5301): avc: denied { setopt } for pid=24792 comm="syz.8.15316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3376.107004][T24793] netlink: 'syz.8.15316': attribute type 16 has an invalid length. [ 3376.120540][ T7177] usb 4-1: USB disconnect, device number 71 [ 3376.128281][T24793] netlink: 'syz.8.15316': attribute type 17 has an invalid length. [ 3376.181987][T24794] netlink: 408 bytes leftover after parsing attributes in process `syz.8.15316'. [ 3376.221027][T24794] netlink: 88 bytes leftover after parsing attributes in process `syz.8.15316'. [ 3376.292821][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3376.445209][ T30] audit: type=1400 audit(2000000143.498:5302): avc: denied { read } for pid=24796 comm="syz.3.15317" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3376.475493][ T30] audit: type=1400 audit(2000000143.498:5303): avc: denied { open } for pid=24796 comm="syz.3.15317" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3376.736316][ T30] audit: type=1400 audit(2000000143.498:5304): avc: denied { ioctl } for pid=24796 comm="syz.3.15317" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3376.779460][T24811] bridge40: entered promiscuous mode [ 3377.179801][ T30] audit: type=1400 audit(2000000143.538:5305): avc: denied { create } for pid=24792 comm="syz.8.15316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3377.211589][ T30] audit: type=1400 audit(2000000143.718:5306): avc: denied { ioctl } for pid=24796 comm="syz.3.15317" path="socket:[196300]" dev="sockfs" ino=196300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3377.297296][T24812] autofs: Bad value for 'fd' [ 3377.332579][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3378.372697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3379.125522][T24838] lo speed is unknown, defaulting to 1000 [ 3379.412415][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3379.563880][T24838] lo speed is unknown, defaulting to 1000 [ 3379.570344][T24838] lo speed is unknown, defaulting to 1000 [ 3379.577600][T24838] lo speed is unknown, defaulting to 1000 [ 3380.151785][T24840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3380.452462][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3380.586187][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 3380.586232][ T30] audit: type=1400 audit(2000000147.768:5310): avc: denied { connect } for pid=24847 comm="syz.9.15327" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3381.492318][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3381.498662][T24858] lo speed is unknown, defaulting to 1000 [ 3382.194041][T24861] autofs: Bad value for 'fd' [ 3382.319040][T24858] lo speed is unknown, defaulting to 1000 [ 3382.326263][T24858] lo speed is unknown, defaulting to 1000 [ 3382.333715][T24858] lo speed is unknown, defaulting to 1000 [ 3382.544545][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3383.020712][ T30] audit: type=1400 audit(2000000150.197:5311): avc: denied { read } for pid=24862 comm="syz.3.15331" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3383.188784][ T30] audit: type=1400 audit(2000000150.197:5312): avc: denied { open } for pid=24862 comm="syz.3.15331" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3383.213201][ T30] audit: type=1400 audit(2000000150.197:5313): avc: denied { ioctl } for pid=24862 comm="syz.3.15331" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3383.572337][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3383.678623][ T30] audit: type=1400 audit(2000000150.497:5314): avc: denied { mount } for pid=24869 comm="syz.9.15332" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 3383.919734][ T30] audit: type=1400 audit(2000000151.127:5315): avc: denied { ioctl } for pid=24879 comm="syz.9.15335" path="socket:[196474]" dev="sockfs" ino=196474 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3384.025154][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15334'. [ 3384.432993][T24885] bridge41: entered promiscuous mode [ 3384.515190][T24883] lo speed is unknown, defaulting to 1000 [ 3384.612525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3384.777002][T24883] lo speed is unknown, defaulting to 1000 [ 3384.784865][T24883] lo speed is unknown, defaulting to 1000 [ 3384.793503][T24883] lo speed is unknown, defaulting to 1000 [ 3385.449979][T24893] lo speed is unknown, defaulting to 1000 [ 3385.652307][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3385.882690][T24893] lo speed is unknown, defaulting to 1000 [ 3385.889109][T24893] lo speed is unknown, defaulting to 1000 [ 3385.896277][T24893] lo speed is unknown, defaulting to 1000 [ 3386.031722][ T30] audit: type=1400 audit(2000000153.237:5316): avc: denied { create } for pid=24890 comm="syz.8.15337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3386.151771][T24901] 9pnet_fd: Insufficient options for proto=fd [ 3386.316901][ T30] audit: type=1400 audit(2000000153.257:5317): avc: denied { ioctl } for pid=24890 comm="syz.8.15337" path="socket:[197084]" dev="sockfs" ino=197084 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3386.702454][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3386.875578][T24905] bridge25: entered promiscuous mode [ 3387.416792][T24919] netlink: 'syz.9.15343': attribute type 4 has an invalid length. [ 3387.425177][T24919] netlink: 116 bytes leftover after parsing attributes in process `syz.9.15343'. [ 3387.732324][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3388.082719][ T30] audit: type=1400 audit(2000000154.947:5318): avc: denied { ioctl } for pid=24915 comm="syz.3.15341" path="socket:[196568]" dev="sockfs" ino=196568 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3388.252068][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 3388.259747][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 3388.685266][T24936] lo speed is unknown, defaulting to 1000 [ 3388.772415][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3389.030917][T24936] lo speed is unknown, defaulting to 1000 [ 3389.037798][T24936] lo speed is unknown, defaulting to 1000 [ 3389.044617][T24936] lo speed is unknown, defaulting to 1000 [ 3389.215272][ T30] audit: type=1400 audit(2000000155.297:5319): avc: denied { create } for pid=24913 comm="syz.6.15342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 3389.237959][ T30] audit: type=1400 audit(2000000155.597:5320): avc: denied { execute } for pid=24913 comm="syz.6.15342" path="/2504/cpu.stat" dev="tmpfs" ino=13358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3389.822348][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3389.829863][ T30] audit: type=1400 audit(2000000156.937:5321): avc: denied { create } for pid=24940 comm="syz.3.15346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3390.852447][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3391.456116][ T30] audit: type=1400 audit(2000000158.667:5322): avc: denied { bind } for pid=24950 comm="syz.9.15348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3391.519943][ T30] audit: type=1400 audit(2000000158.667:5323): avc: denied { ioctl } for pid=24950 comm="syz.9.15348" path="socket:[197177]" dev="sockfs" ino=197177 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3391.618667][ T30] audit: type=1400 audit(2000000158.667:5324): avc: denied { setopt } for pid=24950 comm="syz.9.15348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3391.689706][ T30] audit: type=1400 audit(2000000158.667:5325): avc: denied { accept } for pid=24950 comm="syz.9.15348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3391.892319][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3391.968123][ T30] audit: type=1400 audit(2000000158.667:5326): avc: denied { read } for pid=24950 comm="syz.9.15348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3392.133262][ T30] audit: type=1400 audit(2000000158.717:5327): avc: denied { write } for pid=24950 comm="syz.9.15348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3392.664960][ T30] audit: type=1400 audit(2000000159.877:5328): avc: denied { create } for pid=24970 comm="syz.3.15354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3392.687361][T24963] bridge26: entered promiscuous mode [ 3392.711208][ T30] audit: type=1400 audit(2000000159.877:5329): avc: denied { ioctl } for pid=24970 comm="syz.3.15354" path="socket:[197703]" dev="sockfs" ino=197703 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3392.808117][T24976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3392.932482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3393.038575][ T30] audit: type=1400 audit(2000000159.877:5330): avc: denied { read append } for pid=24970 comm="syz.3.15354" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3393.088726][ T30] audit: type=1400 audit(2000000159.877:5331): avc: denied { open } for pid=24970 comm="syz.3.15354" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3393.201903][T24981] 9pnet_fd: Insufficient options for proto=fd [ 3393.972316][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3394.986972][T24998] netlink: 'syz.3.15359': attribute type 36 has an invalid length. [ 3395.022440][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3396.052309][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3396.697449][T25007] lo speed is unknown, defaulting to 1000 [ 3397.102446][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3397.133597][T25007] lo speed is unknown, defaulting to 1000 [ 3397.140038][T25007] lo speed is unknown, defaulting to 1000 [ 3397.147184][T25007] lo speed is unknown, defaulting to 1000 [ 3397.609899][T25021] siw: device registration error -23 [ 3398.132330][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3398.573445][T25027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15367'. [ 3398.592287][T25027] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15367'. [ 3399.172492][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3399.461112][T25035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3399.720893][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 3399.720912][ T30] audit: type=1400 audit(2000000166.917:5338): avc: denied { write } for pid=25028 comm="syz.9.15368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3400.212364][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3400.435467][T25048] overlayfs: missing 'lowerdir' [ 3401.252428][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3401.478870][T25059] lo speed is unknown, defaulting to 1000 [ 3401.918453][T25059] lo speed is unknown, defaulting to 1000 [ 3401.925250][T25059] lo speed is unknown, defaulting to 1000 [ 3401.931669][T25059] lo speed is unknown, defaulting to 1000 [ 3402.076768][ T30] audit: type=1400 audit(2000000168.617:5339): avc: denied { setopt } for pid=25055 comm="syz.3.15374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3402.292379][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3402.476700][ T30] audit: type=1400 audit(2000000168.617:5340): avc: denied { read write } for pid=25055 comm="syz.3.15374" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3402.591503][ T30] audit: type=1400 audit(2000000168.617:5341): avc: denied { open } for pid=25055 comm="syz.3.15374" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3403.332451][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3403.623647][ T30] audit: type=1400 audit(2000000170.739:5342): avc: denied { create } for pid=25067 comm="syz.6.15378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3403.774405][ T30] audit: type=1400 audit(2000000170.749:5343): avc: denied { shutdown } for pid=25067 comm="syz.6.15378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3403.796697][ T30] audit: type=1400 audit(2000000170.759:5344): avc: denied { getopt } for pid=25067 comm="syz.6.15378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3404.372301][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3404.848012][T25096] tipc: Enabling of bearer rejected, already enabled [ 3405.422447][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3405.667324][ T30] audit: type=1400 audit(2000000172.879:5345): avc: denied { map } for pid=25112 comm="syz.6.15391" path="socket:[197418]" dev="sockfs" ino=197418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 3406.392775][ T30] audit: type=1400 audit(2000000172.879:5346): avc: denied { accept } for pid=25112 comm="syz.6.15391" path="socket:[197418]" dev="sockfs" ino=197418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 3406.452428][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3407.207948][ T30] audit: type=1400 audit(2000000174.419:5347): avc: denied { bind } for pid=25112 comm="syz.6.15391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3407.492426][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3407.635743][ T30] audit: type=1400 audit(2000000174.839:5348): avc: denied { create } for pid=25131 comm="syz.8.15394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3407.770629][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15397'. [ 3407.853500][T25142] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15397'. [ 3408.532288][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3408.643437][ T30] audit: type=1400 audit(2000000174.839:5349): avc: denied { connect } for pid=25131 comm="syz.8.15394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3408.692691][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3408.786916][ T30] audit: type=1400 audit(2000000174.839:5350): avc: denied { create } for pid=25131 comm="syz.8.15394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3408.829896][T25149] 9pnet_fd: Insufficient options for proto=fd [ 3409.206578][T25155] lo speed is unknown, defaulting to 1000 [ 3409.225331][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15400'. [ 3409.267843][T25159] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15400'. [ 3409.582484][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3409.989306][T25168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=25168 comm=syz.3.15398 [ 3410.017606][ T30] audit: type=1400 audit(2000000177.229:5351): avc: denied { write } for pid=25152 comm="syz.3.15398" name="igmp" dev="proc" ino=4026534427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 3410.231465][T25155] lo speed is unknown, defaulting to 1000 [ 3410.238735][T25155] lo speed is unknown, defaulting to 1000 [ 3410.321543][T25155] lo speed is unknown, defaulting to 1000 [ 3410.358082][ T30] audit: type=1400 audit(2000000177.259:5352): avc: denied { connect } for pid=25152 comm="syz.3.15398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3410.498126][ T30] audit: type=1400 audit(2000000177.349:5353): avc: denied { append } for pid=25152 comm="syz.3.15398" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3410.612362][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3410.724446][ T30] audit: type=1400 audit(2000000177.879:5354): avc: denied { execute_no_trans } for pid=25174 comm="syz.8.15405" path=2F6D656D66643A5B0BDB58AE5B1AA9202864656C6574656429 dev="tmpfs" ino=3303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3410.807549][T25181] netlink: 'syz.8.15405': attribute type 1 has an invalid length. [ 3411.151578][ T30] audit: type=1400 audit(2000000177.909:5355): avc: denied { create } for pid=25174 comm="syz.8.15405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3411.174860][T25182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3411.305852][ T30] audit: type=1400 audit(2000000177.939:5356): avc: denied { getopt } for pid=25174 comm="syz.8.15405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3411.327327][ T30] audit: type=1400 audit(2000000177.939:5357): avc: denied { setopt } for pid=25174 comm="syz.8.15405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3411.351172][T25185] netlink: 'syz.9.15408': attribute type 10 has an invalid length. [ 3411.383814][ T30] audit: type=1400 audit(2000000178.539:5358): avc: denied { ioctl } for pid=25183 comm="syz.9.15408" path="socket:[197514]" dev="sockfs" ino=197514 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3411.652499][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3411.677304][ T30] audit: type=1400 audit(2000000178.569:5359): avc: denied { write } for pid=25183 comm="syz.9.15408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3411.767315][ T30] audit: type=1400 audit(2000000178.709:5360): avc: denied { create } for pid=25183 comm="syz.9.15408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3411.789819][T25193] bridge0: port 1(syz_tun) entered disabled state [ 3411.911348][ T30] audit: type=1400 audit(2000000178.709:5361): avc: denied { connect } for pid=25183 comm="syz.9.15408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3411.973644][ T30] audit: type=1400 audit(2000000178.819:5362): avc: denied { map } for pid=25192 comm="syz.8.15411" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=197587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3411.999355][ T30] audit: type=1400 audit(2000000178.819:5363): avc: denied { read write } for pid=25192 comm="syz.8.15411" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=197587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3412.702314][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3412.991004][T25214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15416'. [ 3413.042383][T25214] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15416'. [ 3413.608487][T25222] 9pnet_fd: Insufficient options for proto=fd [ 3413.742375][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3414.782323][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3415.346878][T25245] siw: device registration error -23 [ 3415.774986][T25248] bridge42: entered promiscuous mode [ 3415.812362][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3416.862312][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3417.129680][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 3417.129695][ T30] audit: type=1400 audit(2000000184.339:5368): avc: denied { write } for pid=25264 comm="syz.6.15430" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 3417.160006][ C1] vkms_vblank_simulate: vblank timer overrun [ 3417.220938][T25262] CIFS: Unable to determine destination address [ 3417.902348][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3417.980516][ T30] audit: type=1400 audit(2000000184.609:5369): avc: denied { read write } for pid=25264 comm="syz.6.15430" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3418.181563][T25265] input: syz0 as /devices/virtual/input/input84 [ 3418.198149][ T30] audit: type=1400 audit(2000000184.609:5370): avc: denied { open } for pid=25264 comm="syz.6.15430" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3418.250656][T25266] tmpfs: Bad value for 'mpol' [ 3418.295894][ T30] audit: type=1400 audit(2000000185.389:5371): avc: denied { ioctl } for pid=25264 comm="syz.6.15430" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3418.533177][T25280] netlink: 'syz.7.15432': attribute type 1 has an invalid length. [ 3418.541085][T25280] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15432'. [ 3418.562432][T24664] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3418.932464][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3419.139529][T25288] loop9: detected capacity change from 0 to 7 [ 3419.152293][T25288] buffer_io_error: 31 callbacks suppressed [ 3419.152311][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.167553][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.180529][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.182228][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.182324][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.182413][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.182487][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.182541][T25288] ldm_validate_partition_table(): Disk read failed. [ 3419.182575][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.182655][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.182729][T25288] Buffer I/O error on dev loop9, logical block 0, async page read [ 3419.182841][T25288] Dev loop9: unable to read RDB block 0 [ 3419.183039][T25288] loop9: unable to read partition table [ 3419.183233][T25288] loop9: partition table beyond EOD, truncated [ 3419.183250][T25288] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 3419.183250][T25288] ) failed (rc=-5) [ 3419.244226][T24664] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 3419.244256][T24664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3419.244276][T24664] usb 4-1: Product: syz [ 3419.244292][T24664] usb 4-1: Manufacturer: syz [ 3419.244307][T24664] usb 4-1: SerialNumber: syz [ 3419.291853][T24664] usb 4-1: config 0 descriptor?? [ 3419.308908][T24751] udevd[24751]: symlink '../../loop9' '/dev/disk/by-diskseq/131.tmp-b7:9' failed: Read-only file system [ 3419.370544][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15437'. [ 3419.406880][T24751] udevd[24751]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 3419.727281][ T30] audit: type=1400 audit(2000000186.809:5372): avc: denied { ioctl } for pid=25285 comm="syz.6.15436" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 3419.764893][T25291] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15437'. [ 3419.896479][ T30] audit: type=1400 audit(2000000186.929:5373): avc: denied { append } for pid=25275 comm="syz.3.15433" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3419.972367][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3420.040285][T25297] ubi: mtd0 is already attached to ubi31 [ 3420.411864][T24751] udevd[24751]: symlink '../../loop9' '/dev/disk/by-diskseq/131.tmp-b7:9' failed: Read-only file system [ 3420.498178][T24751] udevd[24751]: symlink '../../loop9' '/dev/disk/by-diskseq/131.tmp-b7:9' failed: Read-only file system [ 3421.012282][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3421.333530][ T30] audit: type=1400 audit(2000000188.549:5374): avc: denied { create } for pid=25311 comm="syz.7.15441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3421.454826][ T7177] usb 4-1: USB disconnect, device number 72 [ 3421.489144][T25315] netlink: 308 bytes leftover after parsing attributes in process `syz.3.15442'. [ 3421.652928][ T30] audit: type=1400 audit(2000000188.579:5375): avc: denied { setopt } for pid=25311 comm="syz.7.15441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3421.765220][ T30] audit: type=1400 audit(2000000188.929:5376): avc: denied { mount } for pid=25314 comm="syz.3.15442" name="/" dev="ocfs2_dlmfs" ino=198816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3421.866739][ T30] audit: type=1400 audit(2000000189.079:5377): avc: denied { read write } for pid=8365 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3422.062427][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3422.168317][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 3422.168329][ T30] audit: type=1400 audit(2000000189.349:5386): avc: denied { allowed } for pid=25321 comm="syz.6.15443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3422.214740][ T30] audit: type=1400 audit(2000000189.349:5387): avc: denied { create } for pid=25321 comm="syz.6.15443" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3422.463896][ T30] audit: type=1400 audit(2000000189.349:5388): avc: denied { map } for pid=25321 comm="syz.6.15443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=198822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3422.546762][ T30] audit: type=1400 audit(2000000189.349:5389): avc: denied { read write } for pid=25321 comm="syz.6.15443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=198822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3422.777533][ T30] audit: type=1400 audit(2000000189.379:5390): avc: denied { read } for pid=25321 comm="syz.6.15443" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3423.092303][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3423.692924][ T30] audit: type=1400 audit(2000000189.379:5391): avc: denied { open } for pid=25321 comm="syz.6.15443" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3423.716377][ T30] audit: type=1400 audit(2000000189.679:5392): avc: denied { name_bind } for pid=25326 comm="syz.8.15444" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 3423.742959][ T30] audit: type=1400 audit(2000000189.679:5393): avc: denied { node_bind } for pid=25326 comm="syz.8.15444" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 3423.772940][ T30] audit: type=1400 audit(2000000190.099:5394): avc: denied { read } for pid=25332 comm="syz.3.15445" dev="nsfs" ino=4026534395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3423.795410][ T30] audit: type=1400 audit(2000000190.099:5395): avc: denied { open } for pid=25332 comm="syz.3.15445" path="net:[4026534395]" dev="nsfs" ino=4026534395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3424.110328][T25348] netlink: 'syz.8.15447': attribute type 1 has an invalid length. [ 3424.118339][T25348] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15447'. [ 3424.142335][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3425.121552][T25359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3425.156736][T25359] netlink: 148 bytes leftover after parsing attributes in process `syz.8.15450'. [ 3425.172322][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3426.212345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3426.733661][T25367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3426.790367][T25367] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 3426.883311][T25367] overlayfs: missing 'lowerdir' [ 3426.899831][T25370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3427.161780][T25373] netlink: 308 bytes leftover after parsing attributes in process `syz.7.15456'. [ 3427.182059][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 3427.182076][ T30] audit: type=1400 audit(2000000194.359:5430): avc: denied { read write } for pid=25374 comm="syz.6.15455" name="vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3427.252289][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3427.340219][T25375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15455'. [ 3427.433744][ T30] audit: type=1400 audit(2000000194.429:5431): avc: denied { mount } for pid=25372 comm="syz.7.15456" name="/" dev="ocfs2_dlmfs" ino=198392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3427.747507][ T30] audit: type=1400 audit(2000000194.439:5432): avc: denied { open } for pid=25374 comm="syz.6.15455" path="/dev/vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3428.176802][ T30] audit: type=1400 audit(2000000194.859:5433): avc: denied { create } for pid=25374 comm="syz.6.15455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3428.277391][ T30] audit: type=1400 audit(2000000194.869:5434): avc: denied { write } for pid=25374 comm="syz.6.15455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3428.297203][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3428.522258][ T30] audit: type=1400 audit(2000000194.879:5435): avc: denied { ioctl } for pid=25374 comm="syz.6.15455" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3429.057345][ T30] audit: type=1400 audit(2000000194.889:5436): avc: denied { module_request } for pid=25374 comm="syz.6.15455" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3429.099111][T25401] lo speed is unknown, defaulting to 1000 [ 3429.181400][T25401] lo speed is unknown, defaulting to 1000 [ 3429.188500][T25401] lo speed is unknown, defaulting to 1000 [ 3429.195594][T25401] lo speed is unknown, defaulting to 1000 [ 3429.332331][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3429.375503][ T30] audit: type=1400 audit(2000000195.189:5437): avc: denied { sys_module } for pid=25374 comm="syz.6.15455" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3429.708605][T25410] netlink: 'syz.8.15461': attribute type 1 has an invalid length. [ 3429.716888][T25410] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15461'. [ 3430.372345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3430.546439][T25417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3430.790480][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15467'. [ 3430.848042][ T30] audit: type=1400 audit(2000000198.059:5438): avc: denied { read } for pid=25411 comm="syz.6.15463" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3430.919303][T25428] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15467'. [ 3430.941405][T25435] 9pnet_fd: Insufficient options for proto=fd [ 3431.133431][ T30] audit: type=1400 audit(2000000198.149:5439): avc: denied { ioctl } for pid=25422 comm="syz.3.15470" path="socket:[198511]" dev="sockfs" ino=198511 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3431.422446][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3431.711586][T25447] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15472'. [ 3432.452541][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3433.081017][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 3433.081032][ T30] audit: type=1400 audit(2000000200.289:5448): avc: denied { create } for pid=25450 comm="syz.7.15475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3433.398302][ T30] audit: type=1400 audit(2000000200.609:5449): avc: denied { read write } for pid=25452 comm="syz.3.15473" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3433.492463][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3433.501424][T25460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3433.615795][ T30] audit: type=1400 audit(2000000200.609:5450): avc: denied { open } for pid=25452 comm="syz.3.15473" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3433.653897][T24751] udevd[24751]: symlink '../../loop9' '/dev/disk/by-diskseq/133.tmp-b7:9' failed: Read-only file system [ 3433.683170][ T30] audit: type=1400 audit(2000000200.609:5451): avc: denied { write } for pid=25452 comm="syz.3.15473" name="tcp" dev="proc" ino=4026534433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 3433.705332][T25466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3433.811754][T24751] udevd[24751]: symlink '../../loop9' '/dev/disk/by-diskseq/133.tmp-b7:9' failed: Read-only file system [ 3433.976107][ T30] audit: type=1400 audit(2000000201.189:5452): avc: denied { ioctl } for pid=25471 comm="syz.8.15479" path="socket:[199034]" dev="sockfs" ino=199034 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3434.532355][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3434.635519][T24751] udevd[24751]: symlink '../../loop9' '/dev/disk/by-diskseq/133.tmp-b7:9' failed: Read-only file system [ 3435.108164][T25488] 9pnet_fd: Insufficient options for proto=fd [ 3435.572308][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3435.953075][T25493] netlink: 'syz.9.15481': attribute type 1 has an invalid length. [ 3435.961006][T25493] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15481'. [ 3436.612367][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3436.947703][ T30] audit: type=1400 audit(2000000203.899:5453): avc: denied { mounton } for pid=25494 comm="syz.3.15482" path="/proc/5321/task" dev="proc" ino=198576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3437.064965][ T30] audit: type=1400 audit(2000000203.909:5454): avc: denied { mount } for pid=25494 comm="syz.3.15482" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 3437.387703][ T30] audit: type=1400 audit(2000000204.599:5455): avc: denied { write } for pid=25500 comm="syz.6.15484" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3437.645677][T25514] bridge27: entered promiscuous mode [ 3437.652385][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3437.741889][ T30] audit: type=1400 audit(2000000204.949:5456): avc: denied { create } for pid=25503 comm="syz.3.15486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3437.764063][ T30] audit: type=1400 audit(2000000204.949:5457): avc: denied { connect } for pid=25503 comm="syz.3.15486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3437.811021][T25510] 9pnet_fd: Insufficient options for proto=fd [ 3438.515287][ T30] audit: type=1400 audit(2000000205.729:5458): avc: denied { wake_alarm } for pid=25523 comm="syz.8.15490" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3438.584738][T25526] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15488'. [ 3438.620073][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15490'. [ 3438.702365][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3438.846627][ T30] audit: type=1400 audit(2000000206.059:5459): avc: denied { mount } for pid=25523 comm="syz.8.15490" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 3438.875267][T25524] netlink: 'syz.8.15490': attribute type 10 has an invalid length. [ 3439.095650][ T30] audit: type=1400 audit(2000000206.309:5460): avc: denied { bind } for pid=25531 comm="syz.3.15492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3439.207054][T25534] lo speed is unknown, defaulting to 1000 [ 3439.732280][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3439.746545][T25534] lo speed is unknown, defaulting to 1000 [ 3439.756025][T25534] lo speed is unknown, defaulting to 1000 [ 3439.764368][T25534] lo speed is unknown, defaulting to 1000 [ 3439.877142][ T30] audit: type=1400 audit(2000000206.309:5461): avc: denied { write } for pid=25531 comm="syz.3.15492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3440.043405][T25539] overlayfs: failed to resolve './file1': -2 [ 3440.131754][ T30] audit: type=1400 audit(2000000207.339:5462): avc: denied { mounton } for pid=25543 comm="syz.8.15496" path="/2489/file0" dev="tmpfs" ino=13226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3440.219433][ T30] audit: type=1400 audit(2000000207.349:5463): avc: denied { ioctl } for pid=25543 comm="syz.8.15496" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=199694 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3440.324724][T25545] overlayfs: failed to clone upperpath [ 3440.415224][ T30] audit: type=1400 audit(2000000207.629:5464): avc: denied { unmount } for pid=25544 comm="syz.7.15495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 3440.607260][ T30] audit: type=1400 audit(2000000207.819:5465): avc: denied { listen } for pid=25549 comm="syz.6.15499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 3440.772507][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3440.990943][T25556] 9pnet_fd: Insufficient options for proto=fd [ 3441.073743][ T30] audit: type=1400 audit(2000000207.849:5466): avc: denied { create } for pid=25549 comm="syz.6.15499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3441.095292][ T30] audit: type=1400 audit(2000000207.859:5467): avc: denied { bind } for pid=25549 comm="syz.6.15499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3441.722165][T24751] udevd[24751]: setting mode of /dev/comedi3_subd0 to 020600 failed: Read-only file system [ 3441.812350][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3441.875130][T24751] udevd[24751]: setting owner of /dev/comedi3_subd0 to uid=0, gid=0 failed: Read-only file system [ 3442.549748][T25573] netlink: 'syz.9.15501': attribute type 1 has an invalid length. [ 3442.852347][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3443.616507][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 3443.616525][ T30] audit: type=1400 audit(2000000210.829:5488): avc: denied { read } for pid=25582 comm="syz.3.15507" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3443.671066][ T30] audit: type=1400 audit(2000000210.829:5489): avc: denied { open } for pid=25582 comm="syz.3.15507" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3443.892276][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3443.895270][T25599] lo speed is unknown, defaulting to 1000 [ 3444.341908][T25599] lo speed is unknown, defaulting to 1000 [ 3444.349098][T25599] lo speed is unknown, defaulting to 1000 [ 3444.356168][T25599] lo speed is unknown, defaulting to 1000 [ 3444.525898][T25597] bridge23: entered promiscuous mode [ 3444.539947][T25595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15507'. [ 3444.625053][ T30] audit: type=1400 audit(2000000211.789:5490): avc: denied { ioctl } for pid=25581 comm="syz.6.15508" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3444.690857][T25595] geneve2: entered allmulticast mode [ 3444.751261][ T30] audit: type=1400 audit(2000000211.959:5491): avc: denied { map } for pid=25581 comm="syz.6.15508" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3444.932414][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3445.626187][ T30] audit: type=1400 audit(2000000212.389:5492): avc: denied { name_connect } for pid=25605 comm="syz.7.15512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 3445.699376][ T30] audit: type=1400 audit(2000000212.389:5493): avc: denied { getopt } for pid=25605 comm="syz.7.15512" lport=47261 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3445.972290][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3447.012310][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3447.178230][ T30] audit: type=1400 audit(2000000214.379:5494): avc: denied { name_bind } for pid=25586 comm="syz.8.15509" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 3447.490577][T25627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3447.682109][T25629] netlink: 'syz.6.15516': attribute type 1 has an invalid length. [ 3448.052314][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3448.243247][T25627] netlink: 148 bytes leftover after parsing attributes in process `syz.9.15526'. [ 3448.274086][ T30] audit: type=1400 audit(2000000215.479:5495): avc: denied { create } for pid=25630 comm="syz.6.15517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3448.887066][T25638] bridge32: entered promiscuous mode [ 3449.092315][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3449.771913][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 3449.778340][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 3449.796128][ T30] audit: type=1326 audit(2000000216.889:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3449.820989][ T30] audit: type=1326 audit(2000000216.889:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3449.861290][ T30] audit: type=1326 audit(2000000216.939:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3450.116946][ T30] audit: type=1326 audit(2000000216.939:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3450.140607][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3450.242210][ T30] audit: type=1326 audit(2000000216.939:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3451.172304][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3451.183004][ T30] audit: type=1326 audit(2000000216.939:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3451.284613][ T30] audit: type=1326 audit(2000000216.939:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3451.313225][ T30] audit: type=1326 audit(2000000216.939:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3451.340668][ T30] audit: type=1326 audit(2000000216.939:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3451.365510][ T30] audit: type=1326 audit(2000000216.939:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.6.15518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff832b8ebe9 code=0x7ffc0000 [ 3451.637154][T25665] lo speed is unknown, defaulting to 1000 [ 3452.222289][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3453.044813][T25665] lo speed is unknown, defaulting to 1000 [ 3453.051205][T25665] lo speed is unknown, defaulting to 1000 [ 3453.058261][T25665] lo speed is unknown, defaulting to 1000 [ 3453.252321][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3454.079728][T25680] bridge33: entered promiscuous mode [ 3454.292262][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3455.068274][T25694] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3455.081114][T25694] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 3455.332312][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3455.479188][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 3455.479205][ T30] audit: type=1400 audit(2000000222.209:5556): avc: denied { mounton } for pid=25683 comm="syz.6.15531" path="/2537/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 3455.519066][ T30] audit: type=1400 audit(2000000222.219:5557): avc: denied { mount } for pid=25683 comm="syz.6.15531" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3455.542101][ T30] audit: type=1400 audit(2000000222.279:5558): avc: denied { unlink } for pid=25683 comm="syz.6.15531" name="#102" dev="tmpfs" ino=13534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3455.652214][ T30] audit: type=1400 audit(2000000222.859:5559): avc: denied { unmount } for pid=8365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3455.987060][ T30] audit: type=1400 audit(2000000223.109:5560): avc: denied { unmount } for pid=8365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 3456.372280][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3456.560244][ T30] audit: type=1400 audit(2000000223.769:5561): avc: denied { read write } for pid=25708 comm="syz.6.15534" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3456.643421][T25709] block nbd6: Attempted send on invalid socket [ 3456.649589][T25709] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.659716][T25709] block nbd6: Attempted send on invalid socket [ 3456.667519][T25709] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.677406][T25709] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 3456.687609][T25709] block nbd6: Attempted send on invalid socket [ 3456.694566][T25709] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.704540][T25709] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 3456.714997][T25709] block nbd6: Attempted send on invalid socket [ 3456.721131][T25709] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.730906][T25709] block nbd6: Attempted send on invalid socket [ 3456.737371][T25709] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.747029][T25709] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 3456.757295][T25709] block nbd6: Attempted send on invalid socket [ 3456.764115][T25709] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.774084][T25709] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 3456.784475][T25709] block nbd6: Attempted send on invalid socket [ 3456.790609][T25709] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.800240][T25709] block nbd6: Attempted send on invalid socket [ 3456.806736][T25709] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.816408][T25709] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 3456.826656][T25709] block nbd6: Attempted send on invalid socket [ 3456.833480][T25709] I/O error, dev nbd6, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3456.843447][T25709] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 3456.853776][T25709] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 3456.996575][ T30] audit: type=1400 audit(2000000223.769:5562): avc: denied { open } for pid=25708 comm="syz.6.15534" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 3457.292167][ T30] audit: type=1400 audit(2000000224.499:5563): avc: denied { mount } for pid=25711 comm="syz.8.15536" name="/" dev="autofs" ino=200202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 3457.392741][T25717] netlink: 'syz.6.15537': attribute type 1 has an invalid length. [ 3457.400613][T25717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15537'. [ 3457.412302][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3458.452273][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3458.557254][ T30] audit: type=1400 audit(2000000225.429:5564): avc: denied { sqpoll } for pid=25719 comm="syz.3.15538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3458.623446][ T30] audit: type=1400 audit(2000000225.449:5565): avc: denied { write } for pid=25719 comm="syz.3.15538" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 3459.492321][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3460.197306][T25741] block nbd6: Attempted send on invalid socket [ 3460.203545][T25741] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3460.213037][T25741] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 3460.222874][T25741] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 3460.233040][T25741] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 3460.244633][T25741] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 3460.254503][T25741] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 3460.264098][T25741] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 3460.273578][T25741] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 3460.532299][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3461.161570][T25756] lo speed is unknown, defaulting to 1000 [ 3461.495198][T25756] lo speed is unknown, defaulting to 1000 [ 3461.501893][T25756] lo speed is unknown, defaulting to 1000 [ 3461.508679][T25756] lo speed is unknown, defaulting to 1000 [ 3461.572329][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3461.919739][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 3461.919754][ T30] audit: type=1400 audit(2000000229.129:5570): avc: denied { ioctl } for pid=25738 comm="syz.7.15542" path="socket:[199630]" dev="sockfs" ino=199630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3462.039930][T25759] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 3462.214829][T25759] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 3462.229538][ T30] audit: type=1400 audit(2000000229.439:5571): avc: denied { firmware_load } for pid=25738 comm="syz.7.15542" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3462.316193][T25768] netlink: 'syz.8.15549': attribute type 1 has an invalid length. [ 3462.324145][T25768] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15549'. [ 3462.622268][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3462.728635][T25759] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 3462.805462][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15550'. [ 3462.836636][T25770] netlink: 36 bytes leftover after parsing attributes in process `syz.9.15550'. [ 3463.652321][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3463.806974][ T30] audit: type=1400 audit(2000000230.719:5572): avc: denied { create } for pid=25771 comm="syz.6.15551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 3464.702261][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3464.907446][ T30] audit: type=1400 audit(2000000230.759:5573): avc: denied { sys_admin } for pid=25771 comm="syz.6.15551" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 3464.938864][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15552'. [ 3464.948141][T25779] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15552'. [ 3465.732303][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3466.772273][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3467.088600][T25803] nbd_handle_cmd: 8 callbacks suppressed [ 3467.088614][T25803] block nbd3: Attempted send on invalid socket [ 3467.101185][T25803] blk_print_req_error: 8 callbacks suppressed [ 3467.101197][T25803] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.118003][T25803] block nbd3: Attempted send on invalid socket [ 3467.124808][T25803] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.134887][T25803] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 3467.145225][T25803] block nbd3: Attempted send on invalid socket [ 3467.151360][T25803] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.160975][T25803] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 3467.171198][T25803] block nbd3: Attempted send on invalid socket [ 3467.177804][T25803] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.187724][T25803] block nbd3: Attempted send on invalid socket [ 3467.194547][T25803] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.204434][T25803] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 3467.214647][T25803] block nbd3: Attempted send on invalid socket [ 3467.220793][T25803] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.230767][T25803] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 3467.241283][T25803] block nbd3: Attempted send on invalid socket [ 3467.248086][T25803] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.258243][T25803] block nbd3: Attempted send on invalid socket [ 3467.265044][T25803] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.275019][T25803] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 3467.285078][T25803] block nbd3: Attempted send on invalid socket [ 3467.291219][T25803] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.300870][T25803] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 3467.310908][T25803] block nbd3: Attempted send on invalid socket [ 3467.317724][T25803] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 3467.327736][T25803] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 3467.337991][T25803] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 3467.347848][T25803] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 3467.450560][ T30] audit: type=1400 audit(2000000234.659:5574): avc: denied { create } for pid=25806 comm="syz.7.15559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 3467.577863][ T30] audit: type=1400 audit(2000000234.699:5575): avc: denied { name_bind } for pid=25806 comm="syz.7.15559" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 3467.822304][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3468.168850][ T30] audit: type=1400 audit(2000000234.959:5576): avc: denied { bind } for pid=25806 comm="syz.7.15559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 3468.851210][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15563'. [ 3468.860386][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3468.870124][T25821] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15563'. [ 3469.892318][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3470.094595][ T30] audit: type=1400 audit(2000000237.307:5577): avc: denied { create } for pid=25838 comm="syz.6.15568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3470.228863][T25844] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15569'. [ 3470.611222][T25845] siw: device registration error -23 [ 3470.623415][ T30] audit: type=1400 audit(2000000237.767:5578): avc: denied { getopt } for pid=25833 comm="syz.3.15566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3470.643256][ T30] audit: type=1400 audit(2000000237.817:5579): avc: denied { write } for pid=25838 comm="syz.6.15568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3470.932349][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3471.153304][ T30] audit: type=1400 audit(2000000238.317:5580): avc: denied { write } for pid=25838 comm="syz.6.15568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3471.312827][T20948] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 3471.676567][T20948] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 3471.800027][T20948] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3471.897894][T20948] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3471.911506][T20948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3471.935352][T20948] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3471.972294][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3471.973199][T20948] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3472.004702][T20948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3472.101980][T20948] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3472.112918][T20948] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3472.154621][T25865] bridge34: entered promiscuous mode [ 3472.322795][T20948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3472.333742][T25866] 9pnet_fd: Insufficient options for proto=fd [ 3472.633409][T20948] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3472.683418][T20948] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3472.720772][T20948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3472.767520][T25871] 9pnet_fd: Insufficient options for proto=fd [ 3473.012268][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3473.242640][ T30] audit: type=1400 audit(2000000240.417:5581): avc: denied { write } for pid=25873 comm="syz.7.15574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 3473.397368][ T30] audit: type=1400 audit(2000000240.587:5582): avc: denied { bind } for pid=25873 comm="syz.7.15574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3473.530114][T20948] usb 4-1: unable to read config index 4 descriptor/start: -71 [ 3473.538429][T20948] usb 4-1: can't read configurations, error -71 [ 3473.626736][ T30] audit: type=1400 audit(2000000240.587:5583): avc: denied { name_bind } for pid=25873 comm="syz.7.15574" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 3473.769107][T25885] bridge34: entered promiscuous mode [ 3473.908417][ T30] audit: type=1400 audit(2000000240.597:5584): avc: denied { node_bind } for pid=25873 comm="syz.7.15574" saddr=2001::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 3474.052402][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3474.279425][ T30] audit: type=1400 audit(2000000241.057:5585): avc: denied { write } for pid=25881 comm="syz.6.15576" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3475.092278][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3475.168046][T25897] bridge43: entered promiscuous mode [ 3475.897377][ T30] audit: type=1400 audit(2000000243.097:5586): avc: denied { getopt } for pid=25907 comm="syz.9.15581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3476.132319][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3476.186203][ T30] audit: type=1400 audit(2000000243.387:5587): avc: denied { create } for pid=25911 comm="syz.7.15582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3477.172286][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3477.837203][T25933] 9pnet_fd: Insufficient options for proto=fd [ 3478.222321][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3478.412601][T25943] netlink: 'syz.3.15587': attribute type 1 has an invalid length. [ 3478.420486][T25943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15587'. [ 3479.262254][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3479.451365][T25956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15589'. [ 3479.552183][T25957] netlink: 'syz.6.15590': attribute type 1 has an invalid length. [ 3479.560098][T25957] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15590'. [ 3480.292309][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3480.427788][ T30] audit: type=1400 audit(2000000247.627:5588): avc: denied { create } for pid=25965 comm="syz.6.15592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3480.482566][T25967] No control pipe specified [ 3480.891893][T25971] bridge24: entered promiscuous mode [ 3480.935986][T25962] pim6reg: entered allmulticast mode [ 3480.943555][T25962] pim6reg: left allmulticast mode [ 3481.332370][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3482.372330][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3482.638014][T25992] sch_fq: defrate 6 ignored. [ 3482.731114][T25993] netlink: 'syz.7.15599': attribute type 1 has an invalid length. [ 3482.740351][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15599'. [ 3483.140664][ T30] audit: type=1400 audit(2000000250.337:5589): avc: denied { write } for pid=25985 comm="syz.8.15598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3483.314305][T25999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3483.327686][T25999] netlink: 148 bytes leftover after parsing attributes in process `syz.9.15600'. [ 3483.412293][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3483.993315][T26010] No control pipe specified [ 3484.082093][ T30] audit: type=1400 audit(2000000251.277:5590): avc: denied { ioctl } for pid=26006 comm="syz.6.15604" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3484.398195][T26004] 9pnet_fd: Insufficient options for proto=fd [ 3484.452278][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3484.577343][ T30] audit: type=1400 audit(2000000251.787:5591): avc: denied { map } for pid=26013 comm="syz.7.15605" path="socket:[201904]" dev="sockfs" ino=201904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 3485.502382][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3485.638710][T26020] mkiss: ax0: crc mode is auto. [ 3485.695629][ T30] audit: type=1400 audit(2000000252.867:5592): avc: denied { bind } for pid=26016 comm="syz.6.15606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3485.771111][ T30] audit: type=1400 audit(2000000252.867:5593): avc: denied { listen } for pid=26016 comm="syz.6.15606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3485.852838][T26025] bridge28: entered promiscuous mode [ 3485.888570][ T30] audit: type=1400 audit(2000000252.867:5594): avc: denied { connect } for pid=26016 comm="syz.6.15606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3485.948648][ T30] audit: type=1400 audit(2000000253.147:5595): avc: denied { ioctl } for pid=26024 comm="syz.3.15608" path="socket:[201148]" dev="sockfs" ino=201148 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3486.053100][ T30] audit: type=1400 audit(2000000253.157:5596): avc: denied { connect } for pid=26024 comm="syz.3.15608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3486.204408][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15609'. [ 3486.532356][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3486.597750][ T30] audit: type=1400 audit(2000000253.807:5597): avc: denied { mount } for pid=26035 comm="syz.9.15610" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3486.627840][T26037] siw: device registration error -23 [ 3486.804200][T26041] netlink: 'syz.7.15611': attribute type 4 has an invalid length. [ 3486.893345][T26042] netlink: 'syz.7.15611': attribute type 4 has an invalid length. [ 3486.942596][ T30] audit: type=1400 audit(2000000253.837:5598): avc: denied { create } for pid=26035 comm="syz.9.15610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3486.965996][ T30] audit: type=1400 audit(2000000253.837:5599): avc: denied { ioctl } for pid=26035 comm="syz.9.15610" path="socket:[201162]" dev="sockfs" ino=201162 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3487.210250][T26044] gretap0: left allmulticast mode [ 3487.217863][T26047] siw: device registration error -23 [ 3487.225210][T26044] gretap0: left promiscuous mode [ 3487.230482][T26044] bridge0: port 1(gretap0) entered disabled state [ 3487.320029][T20950] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3487.329480][ T30] audit: type=1400 audit(2000000254.477:5600): avc: denied { create } for pid=26050 comm="syz.3.15614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3487.365153][T26044] bond2: (slave bond3): Releasing backup interface [ 3487.572481][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3487.594262][ T30] audit: type=1400 audit(2000000254.797:5601): avc: denied { read } for pid=26050 comm="syz.3.15614" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3487.625580][T26058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15612'. [ 3487.658307][T26044] bond5: (slave vcan1): Releasing backup interface [ 3487.667768][T26044] bond9: (slave veth9): Releasing active interface [ 3487.693961][T20950] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3487.713034][T20950] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3487.756460][T26044] bond11: (slave gretap1): Releasing active interface [ 3487.919067][T26065] bridge35: entered promiscuous mode [ 3488.207060][T26044] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3488.612438][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3488.614376][T20948] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3488.668938][T26044] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3488.831318][T26044] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3488.923316][T26076] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15620'. [ 3489.215934][T26044] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3489.360876][T26082] netlink: 52 bytes leftover after parsing attributes in process `syz.8.15621'. [ 3489.662322][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3489.865323][T26163] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3489.881406][T26163] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3490.100477][T12511] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3490.279005][ T5276] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3490.692288][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3491.073124][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 3491.073136][ T30] audit: type=1400 audit(2000000258.277:5608): avc: denied { unmount } for pid=27941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3491.649237][ T30] audit: type=1400 audit(2000000258.837:5609): avc: denied { unmount } for pid=8365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 3491.656360][T26114] bridge36: entered promiscuous mode [ 3491.738547][T26125] 9pnet_fd: Insufficient options for proto=fd [ 3491.744770][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3491.845700][T26122] sctp: [Deprecated]: syz.3.15627 (pid 26122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3491.845700][T26122] Use struct sctp_sack_info instead [ 3492.204600][ T30] audit: type=1400 audit(2000000259.397:5610): avc: denied { read } for pid=26128 comm="syz.6.15631" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3492.521998][ T30] audit: type=1400 audit(2000000259.407:5611): avc: denied { open } for pid=26128 comm="syz.6.15631" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3492.682920][T26137] bridge37: entered promiscuous mode [ 3492.772290][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3492.886937][T26141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15634'. [ 3492.900088][T26141] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15634'. [ 3493.812274][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3494.549702][T26162] netlink: 308 bytes leftover after parsing attributes in process `syz.8.15638'. [ 3494.596527][ T30] audit: type=1400 audit(2000000261.777:5612): avc: denied { write } for pid=26161 comm="syz.9.15639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 3494.669468][T26165] overlayfs: failed to clone upperpath [ 3494.678991][T26170] netlink: 'syz.9.15639': attribute type 10 has an invalid length. [ 3494.686989][T26170] netlink: 40 bytes leftover after parsing attributes in process `syz.9.15639'. [ 3494.723837][T26170] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 3494.759731][ T30] audit: type=1400 audit(2000000261.777:5613): avc: denied { audit_read } for pid=26161 comm="syz.9.15639" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3494.862299][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3495.902247][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3496.309209][ T30] audit: type=1400 audit(2000000263.517:5614): avc: denied { setopt } for pid=26175 comm="syz.9.15642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3496.364094][T26182] netlink: 14 bytes leftover after parsing attributes in process `syz.8.15643'. [ 3496.743160][ T30] audit: type=1400 audit(2000000263.907:5615): avc: denied { setopt } for pid=26184 comm="syz.3.15644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3496.932286][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3497.017677][ T30] audit: type=1400 audit(2000000263.907:5616): avc: denied { audit_write } for pid=26184 comm="syz.3.15644" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3497.303906][ T30] audit: type=1400 audit(2000000264.507:5617): avc: denied { create } for pid=26192 comm="syz.7.15647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3497.546250][ T30] audit: type=1400 audit(2000000264.507:5618): avc: denied { write } for pid=26192 comm="syz.7.15647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3497.767740][T26203] bridge45: the hash_elasticity option has been deprecated and is always 16 [ 3497.801074][T26203] bridge45: entered allmulticast mode [ 3497.898970][T26205] netlink: 188 bytes leftover after parsing attributes in process `syz.3.15649'. [ 3497.982338][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3498.891388][T26213] bridge38: entered promiscuous mode [ 3499.012308][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3499.184252][T26226] netlink: 'syz.7.15653': attribute type 10 has an invalid length. [ 3499.192365][T26226] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15653'. [ 3499.796783][ T30] audit: type=1400 audit(2000000267.007:5619): avc: denied { ioctl } for pid=26237 comm="syz.7.15659" path="socket:[202240]" dev="sockfs" ino=202240 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3500.062277][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3500.380412][ T30] audit: type=1400 audit(2000000267.587:5620): avc: denied { connect } for pid=26237 comm="syz.7.15659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3500.479868][T26255] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15664'. [ 3500.489150][T26255] netlink: 'syz.8.15664': attribute type 14 has an invalid length. [ 3500.498049][T26255] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15664'. [ 3500.507224][T26255] netlink: 'syz.8.15664': attribute type 14 has an invalid length. [ 3501.092308][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3501.101736][ T30] audit: type=1400 audit(2000000268.297:5621): avc: denied { setopt } for pid=26256 comm="syz.3.15665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3501.517103][T26266] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15666'. [ 3501.577046][ T30] audit: type=1400 audit(2000000268.787:5622): avc: denied { bind } for pid=26264 comm="syz.8.15666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3501.661685][ T30] audit: type=1400 audit(2000000268.787:5623): avc: denied { setopt } for pid=26264 comm="syz.8.15666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3501.800697][ T30] audit: type=1400 audit(2000000269.007:5624): avc: denied { accept } for pid=26264 comm="syz.8.15666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3501.915482][ T30] audit: type=1400 audit(2000000269.007:5625): avc: denied { write } for pid=26264 comm="syz.8.15666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3502.006913][ T30] audit: type=1400 audit(2000000269.067:5626): avc: denied { read } for pid=26264 comm="syz.8.15666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3502.132277][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3503.091590][T26287] netlink: 'syz.8.15670': attribute type 10 has an invalid length. [ 3503.099733][T26287] netlink: 40 bytes leftover after parsing attributes in process `syz.8.15670'. [ 3503.141852][T26287] team0: Device geneve0 is of different type [ 3503.162637][T26287] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 3503.178385][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3503.551868][T26298] macvlan0: entered promiscuous mode [ 3503.558447][T26298] bridge0: entered promiscuous mode [ 3504.199120][T26296] siw: device registration error -23 [ 3504.212345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3504.997540][ T30] audit: type=1400 audit(2000000271.787:5627): avc: denied { write } for pid=26301 comm="syz.9.15677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3505.062974][ T30] audit: type=1400 audit(2000000271.787:5628): avc: denied { nlmsg_write } for pid=26301 comm="syz.9.15677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3505.145155][ T30] audit: type=1400 audit(2000000272.357:5629): avc: denied { setopt } for pid=26307 comm="syz.3.15678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3505.252327][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3505.377079][ T30] audit: type=1400 audit(2000000272.567:5630): avc: denied { getopt } for pid=26304 comm="syz.7.15679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3505.462774][T26321] 9pnet_fd: Insufficient options for proto=fd [ 3505.955322][T26329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15682'. [ 3505.964540][T26329] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15682'. [ 3506.171997][T26332] erofs (device nbd6): cannot find valid erofs superblock [ 3506.292249][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3507.332299][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3507.433355][ T30] audit: type=1400 audit(2000000274.267:5631): avc: denied { create } for pid=26334 comm="syz.9.15683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 3507.867309][T26343] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=26343 comm=syz.6.15684 [ 3508.372225][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3509.412281][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3510.462502][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3510.604832][T26372] netlink: 'syz.7.15691': attribute type 10 has an invalid length. [ 3510.614823][T26372] netlink: 40 bytes leftover after parsing attributes in process `syz.7.15691'. [ 3510.877001][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15694'. [ 3510.984983][T26384] bridge39: entered promiscuous mode [ 3511.019482][T26382] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15694'. [ 3511.211279][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.218736][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 3511.235826][ T30] audit: type=1400 audit(2000000278.257:5632): avc: denied { getopt } for pid=26385 comm="syz.6.15696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3511.492267][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3512.358906][T26401] siw: device registration error -23 [ 3512.427811][T26407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15701'. [ 3512.439320][T26407] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15701'. [ 3512.532263][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3512.647009][T26411] erofs (device nbd6): cannot find valid erofs superblock [ 3513.572275][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3514.232755][ T30] audit: type=1400 audit(2000000281.437:5633): avc: denied { append } for pid=26422 comm="syz.3.15704" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3514.612249][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3515.355342][T26444] bridge25: entered promiscuous mode [ 3515.464199][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15709'. [ 3515.476031][T26446] netlink: 36 bytes leftover after parsing attributes in process `syz.9.15709'. [ 3515.662357][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3515.788696][T26448] nfs: Unknown parameter '' [ 3516.105023][T26454] bridge46: entered promiscuous mode [ 3516.692223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3517.732293][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3518.365038][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15719'. [ 3518.772249][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3519.317059][ T30] audit: type=1400 audit(2000000286.517:5634): avc: denied { create } for pid=26487 comm="syz.6.15720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3519.322518][T26476] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 3519.431231][ T30] audit: type=1400 audit(2000000286.527:5635): avc: denied { read write } for pid=26487 comm="syz.6.15720" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3519.487954][ T30] audit: type=1400 audit(2000000286.527:5636): avc: denied { open } for pid=26487 comm="syz.6.15720" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3519.566068][ T30] audit: type=1400 audit(2000000286.557:5637): avc: denied { ioctl } for pid=26487 comm="syz.6.15720" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3519.736482][ T30] audit: type=1400 audit(2000000286.557:5638): avc: denied { read append } for pid=26487 comm="syz.6.15720" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 3519.811356][ T30] audit: type=1400 audit(2000000286.557:5639): avc: denied { open } for pid=26487 comm="syz.6.15720" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 3519.842345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3519.977316][ T30] audit: type=1400 audit(2000000286.557:5640): avc: denied { map } for pid=26487 comm="syz.6.15720" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 3520.146417][T26499] bridge47: entered promiscuous mode [ 3520.297530][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15723'. [ 3520.307481][ T30] audit: type=1400 audit(2000000286.557:5641): avc: denied { write execute } for pid=26487 comm="syz.6.15720" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 3520.307531][ T30] audit: type=1400 audit(2000000286.567:5642): avc: denied { write } for pid=26487 comm="syz.6.15720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3520.307571][ T30] audit: type=1400 audit(2000000286.567:5643): avc: denied { read } for pid=26487 comm="syz.6.15720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3520.382605][T26501] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15723'. [ 3520.601035][T26502] erofs (device nbd3): cannot find valid erofs superblock [ 3520.780714][T26506] bridge40: the hash_elasticity option has been deprecated and is always 16 [ 3520.789654][T26506] bridge40: entered allmulticast mode [ 3520.852255][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3521.524779][T26519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3521.607509][T26521] netlink: 'syz.8.15727': attribute type 1 has an invalid length. [ 3521.615750][T26521] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15727'. [ 3521.902269][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3522.045701][T26516] 9pnet_fd: Insufficient options for proto=fd [ 3522.436380][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15731'. [ 3522.452140][T26525] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15731'. [ 3522.932257][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3523.972304][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3524.546261][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 3524.546273][ T30] audit: type=1400 audit(2000000291.137:5685): avc: denied { sys_module } for pid=26536 comm="syz.9.15733" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3524.784595][ T30] audit: type=1400 audit(2000000291.237:5686): avc: denied { create } for pid=26544 comm="syz.8.15735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3524.997863][ T30] audit: type=1400 audit(2000000292.017:5687): avc: denied { map_read map_write } for pid=26547 comm="syz.6.15734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3525.022250][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3525.132252][T26560] sctp: [Deprecated]: syz.9.15738 (pid 26560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3525.132252][T26560] Use struct sctp_sack_info instead [ 3525.175536][ T30] audit: type=1400 audit(2000000292.337:5688): avc: denied { setopt } for pid=26553 comm="syz.9.15738" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3525.529642][T26564] lo speed is unknown, defaulting to 1000 [ 3525.811805][ T30] audit: type=1400 audit(2000000292.637:5689): avc: denied { create } for pid=26559 comm="syz.8.15739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3525.833522][ T30] audit: type=1400 audit(2000000292.637:5690): avc: denied { connect } for pid=26559 comm="syz.8.15739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3525.909047][ T30] audit: type=1400 audit(2000000292.637:5691): avc: denied { setopt } for pid=26559 comm="syz.8.15739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3525.935936][ T30] audit: type=1400 audit(2000000292.647:5692): avc: denied { write } for pid=26559 comm="syz.8.15739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3525.997131][T26564] lo speed is unknown, defaulting to 1000 [ 3526.003875][T26564] lo speed is unknown, defaulting to 1000 [ 3526.010236][T26564] lo speed is unknown, defaulting to 1000 [ 3526.052277][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3526.144649][ T30] audit: type=1400 audit(2000000293.357:5693): avc: denied { create } for pid=26566 comm="syz.3.15740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3526.167403][ T30] audit: type=1400 audit(2000000293.377:5694): avc: denied { getopt } for pid=26566 comm="syz.3.15740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3526.954254][T26569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3527.092251][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3527.169469][T26577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15743'. [ 3527.183654][T26569] bond0: (slave rose0): Enslaving as an active interface with an up link [ 3527.201933][T26577] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15743'. [ 3527.626843][T26581] comedi comedi3: comedi_config --init_data is deprecated [ 3527.646597][T26583] lo: entered promiscuous mode [ 3527.651430][T26583] lo: entered allmulticast mode [ 3527.658794][T26583] tunl0: entered promiscuous mode [ 3527.664070][T26583] tunl0: entered allmulticast mode [ 3527.670548][T26583] gre0: entered promiscuous mode [ 3527.675584][T26583] gre0: entered allmulticast mode [ 3527.683950][T26583] gretap0: entered promiscuous mode [ 3527.689177][T26583] gretap0: entered allmulticast mode [ 3527.695550][T26583] erspan0: entered promiscuous mode [ 3527.700746][T26583] erspan0: entered allmulticast mode [ 3527.710007][T26583] ip_vti0: entered promiscuous mode [ 3527.715252][T26583] ip_vti0: entered allmulticast mode [ 3527.721438][T26583] ip6_vti0: entered promiscuous mode [ 3527.726846][T26583] ip6_vti0: entered allmulticast mode [ 3527.733524][T26583] sit0: entered promiscuous mode [ 3527.738454][T26583] sit0: entered allmulticast mode [ 3527.746446][T26583] ip6tnl0: entered promiscuous mode [ 3527.751632][T26583] ip6tnl0: entered allmulticast mode [ 3527.757953][T26583] ip6gre0: entered promiscuous mode [ 3527.763195][T26583] ip6gre0: entered allmulticast mode [ 3527.769460][T26583] @: entered promiscuous mode [ 3527.774175][T26583] @: entered allmulticast mode [ 3527.779960][T26583] ip6gretap0: entered promiscuous mode [ 3527.785457][T26583] ip6gretap0: entered allmulticast mode [ 3527.792141][T26583] vcan0: entered promiscuous mode [ 3527.797169][T26583] vcan0: entered allmulticast mode [ 3527.803260][T26583] bond0: entered promiscuous mode [ 3527.808276][T26583] bond_slave_0: entered promiscuous mode [ 3527.814055][T26583] bond_slave_1: entered promiscuous mode [ 3527.819754][T26583] bond0: entered allmulticast mode [ 3527.824938][T26583] bond_slave_0: entered allmulticast mode [ 3527.830632][T26583] bond_slave_1: entered allmulticast mode [ 3527.837191][T26583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3527.846685][T26583] 8021q: adding VLAN 0 to HW filter on device team0 [ 3527.853935][T26583] dummy0: entered promiscuous mode [ 3527.859026][T26583] dummy0: entered allmulticast mode [ 3527.865481][T26583] nlmon0: entered promiscuous mode [ 3527.870594][T26583] nlmon0: entered allmulticast mode [ 3527.903008][T26583] caif0: entered promiscuous mode [ 3527.908025][T26583] caif0: entered allmulticast mode [ 3527.913124][T26583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3527.978919][T17715] lo speed is unknown, defaulting to 1000 [ 3528.004583][T17715] 3yz0: Port: 1 Link ACTIVE [ 3528.132283][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3528.234605][T26592] bridge29: entered promiscuous mode [ 3528.300824][T26593] bridge35: entered promiscuous mode [ 3529.172309][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3530.192664][T26616] fuse: Unknown parameter '0x0000000000000008' [ 3530.222324][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3530.704968][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 3530.711123][ T30] audit: type=1400 audit(2000000297.237:5715): avc: denied { create } for pid=26604 comm="syz.7.15750" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3531.252219][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3531.491458][ T30] audit: type=1400 audit(2000000297.397:5716): avc: denied { mounton } for pid=26605 comm="syz.9.15753" path="/2371/file0" dev="tmpfs" ino=12684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3531.617629][T26624] 9pnet_fd: Insufficient options for proto=fd [ 3531.707494][ T30] audit: type=1400 audit(2000000298.727:5717): avc: denied { unlink } for pid=11955 comm="syz-executor" name="file0" dev="tmpfs" ino=14878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3531.817785][T26626] lo speed is unknown, defaulting to 1000 [ 3532.267907][T26626] lo speed is unknown, defaulting to 1000 [ 3532.275048][T26626] lo speed is unknown, defaulting to 1000 [ 3532.281458][T26626] lo speed is unknown, defaulting to 1000 [ 3532.292299][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3533.099071][T26635] netlink: 'syz.7.15755': attribute type 1 has an invalid length. [ 3533.107668][T26635] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15755'. [ 3533.332210][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3533.440792][ T30] audit: type=1400 audit(2000000300.647:5718): avc: denied { bind } for pid=26632 comm="syz.9.15756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3533.513317][ T30] audit: type=1400 audit(2000000300.647:5719): avc: denied { name_bind } for pid=26632 comm="syz.9.15756" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 3533.536314][ T30] audit: type=1400 audit(2000000300.647:5720): avc: denied { node_bind } for pid=26632 comm="syz.9.15756" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 3533.596703][T26640] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15756'. [ 3533.627137][ T30] audit: type=1400 audit(2000000300.837:5721): avc: denied { connect } for pid=26632 comm="syz.9.15756" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3533.863985][T26637] erofs (device nbd3): cannot find valid erofs superblock [ 3534.001956][ T30] audit: type=1400 audit(2000000300.837:5722): avc: denied { name_connect } for pid=26632 comm="syz.9.15756" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 3534.179436][T26640] netlink: 36 bytes leftover after parsing attributes in process `syz.9.15756'. [ 3534.194858][ T30] audit: type=1400 audit(2000000301.387:5723): avc: denied { ioctl } for pid=26632 comm="syz.9.15756" path="socket:[203516]" dev="sockfs" ino=203516 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3534.372259][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3534.978865][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15756'. [ 3535.020382][ T30] audit: type=1400 audit(2000000302.227:5724): avc: denied { create } for pid=26648 comm="syz.3.15759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3535.183690][T26656] bridge30: entered promiscuous mode [ 3535.412224][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3535.588593][T26661] overlayfs: failed to clone upperpath [ 3536.452303][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3536.785472][T26675] lo speed is unknown, defaulting to 1000 [ 3537.155073][T26675] lo speed is unknown, defaulting to 1000 [ 3537.165341][T26675] lo speed is unknown, defaulting to 1000 [ 3537.175534][T26675] lo speed is unknown, defaulting to 1000 [ 3537.492201][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3537.680649][T26680] siw: device registration error -23 [ 3537.699789][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 3537.699801][ T30] audit: type=1400 audit(2000000304.887:5727): avc: denied { mount } for pid=26679 comm="syz.7.15767" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3537.811803][ T30] audit: type=1400 audit(2000000304.887:5728): avc: denied { create } for pid=26679 comm="syz.7.15767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3537.842015][T26684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15770'. [ 3537.853480][T26684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15770'. [ 3537.966984][ T30] audit: type=1400 audit(2000000304.887:5729): avc: denied { ioctl } for pid=26679 comm="syz.7.15767" path="socket:[204100]" dev="sockfs" ino=204100 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3537.994874][ T30] audit: type=1400 audit(2000000304.887:5730): avc: denied { create } for pid=26679 comm="syz.7.15767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3538.034800][ T30] audit: type=1400 audit(2000000304.887:5731): avc: denied { write } for pid=26679 comm="syz.7.15767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3538.056155][T26685] erofs (device nbd3): cannot find valid erofs superblock [ 3538.532419][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3538.847574][T26694] 9pnet_fd: Insufficient options for proto=fd [ 3539.160943][T26703] 9pnet_fd: Insufficient options for proto=fd [ 3539.572223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3540.088153][T26714] bridge31: entered promiscuous mode [ 3540.622258][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3541.652235][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3542.090269][T26737] lo speed is unknown, defaulting to 1000 [ 3542.485882][T26737] lo speed is unknown, defaulting to 1000 [ 3542.493024][T26737] lo speed is unknown, defaulting to 1000 [ 3542.499461][T26737] lo speed is unknown, defaulting to 1000 [ 3542.702263][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3543.157779][T26747] overlayfs: failed to clone upperpath [ 3543.732313][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3543.741137][T26743] netlink: 'syz.6.15777': attribute type 10 has an invalid length. [ 3543.813986][T26754] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15783'. [ 3543.842426][T26756] loop2: detected capacity change from 0 to 7 [ 3543.851957][T26756] loop2: p1 p4 [ 3543.856446][T26756] loop2: partition table partially beyond EOD, truncated [ 3543.870892][T26756] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 3544.003742][T26756] loop2: p4 start 2495 is beyond EOD, truncated [ 3544.242898][ T30] audit: type=1400 audit(2000000311.187:5732): avc: denied { create } for pid=26744 comm="syz.3.15782" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3544.515129][T26757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15783'. [ 3544.517641][T24751] udevd[24751]: symlink '../../loop2' '/dev/disk/by-diskseq/135.tmp-b7:2' failed: Read-only file system [ 3544.691550][T24751] udevd[24751]: symlink '../../loop2' '/dev/disk/by-diskseq/135.tmp-b7:2' failed: Read-only file system [ 3544.723399][ T30] audit: type=1400 audit(2000000311.187:5733): avc: denied { map } for pid=26744 comm="syz.3.15782" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=203677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3544.768660][T24751] udevd[24751]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 3544.782262][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3544.845850][T24751] udevd[24751]: symlink '../../loop2' '/dev/disk/by-diskseq/135.tmp-b7:2' failed: Read-only file system [ 3544.895282][ T30] audit: type=1400 audit(2000000311.187:5734): avc: denied { read write } for pid=26744 comm="syz.3.15782" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=203677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3544.957686][T24751] udevd[24751]: symlink '../../loop2' '/dev/disk/by-diskseq/135.tmp-b7:2' failed: Read-only file system [ 3545.180063][ T30] audit: type=1400 audit(2000000312.387:5735): avc: denied { write } for pid=26760 comm="syz.3.15785" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3545.466775][T26766] tipc: Enabling of bearer rejected, failed to enable media [ 3545.822222][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3545.851381][T26767] bridge48: entered promiscuous mode [ 3546.227608][T26779] bridge26: entered promiscuous mode [ 3546.330810][ T30] audit: type=1400 audit(2000000313.527:5736): avc: denied { read } for pid=26774 comm="syz.3.15789" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3546.633917][ T30] audit: type=1400 audit(2000000313.527:5737): avc: denied { open } for pid=26774 comm="syz.3.15789" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3546.852347][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3546.933097][ C1] ================================================================== [ 3546.941184][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x45a/0x4d0 [ 3546.949079][ C1] Read of size 2 at addr ffff888029b7c82a by task syz.8.15790/26783 [ 3546.957040][ C1] [ 3546.959350][ C1] CPU: 1 UID: 0 PID: 26783 Comm: syz.8.15790 Not tainted syzkaller #0 PREEMPT(full) [ 3546.959374][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3546.959385][ C1] Call Trace: [ 3546.959394][ C1] [ 3546.959402][ C1] dump_stack_lvl+0x116/0x1f0 [ 3546.959426][ C1] print_report+0xcd/0x630 [ 3546.959446][ C1] ? __virt_addr_valid+0x81/0x610 [ 3546.959470][ C1] ? __phys_addr+0xe8/0x180 [ 3546.959494][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 3546.959520][ C1] kasan_report+0xe0/0x110 [ 3546.959541][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 3546.959570][ C1] rose_timer_expiry+0x45a/0x4d0 [ 3546.959597][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 3546.959622][ C1] call_timer_fn+0x197/0x620 [ 3546.959654][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 3546.959685][ C1] ? rcu_is_watching+0x12/0xc0 [ 3546.959708][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 3546.959736][ C1] __run_timers+0x6ef/0x960 [ 3546.959777][ C1] ? __pfx___run_timers+0x10/0x10 [ 3546.959813][ C1] run_timer_base+0x114/0x190 [ 3546.959840][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 3546.959868][ C1] ? rcu_is_watching+0x12/0xc0 [ 3546.959891][ C1] run_timer_softirq+0x1a/0x40 [ 3546.959918][ C1] handle_softirqs+0x216/0x8e0 [ 3546.959944][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3546.959970][ C1] __irq_exit_rcu+0x109/0x170 [ 3546.959992][ C1] irq_exit_rcu+0x9/0x30 [ 3546.960013][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3546.960033][ C1] [ 3546.960040][ C1] [ 3546.960048][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3546.960069][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 3546.960095][ C1] Code: fb 09 00 00 44 8b 05 e9 73 22 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 9f 68 3a 00 fb 65 48 8b 1d 8e 65 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 3546.960113][ C1] RSP: 0000:ffffc9001d1af4b8 EFLAGS: 00000206 [ 3546.960130][ C1] RAX: 0000000000009c17 RBX: ffff88802579c880 RCX: ffffffff81c3721f [ 3546.960143][ C1] RDX: 0000000000000000 RSI: ffffffff8de50330 RDI: ffffffff8c162900 [ 3546.960156][ C1] RBP: ffffc9001d1af500 R08: 0000000000000001 R09: 0000000000000001 [ 3546.960169][ C1] R10: ffffffff90ab4c97 R11: 0000000000000000 R12: ffff8880b853a300 [ 3546.960181][ C1] R13: ffff888062ed2440 R14: 0000000000000000 R15: dffffc0000000000 [ 3546.960198][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 3546.960224][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 3546.960249][ C1] __schedule+0x1198/0x5de0 [ 3546.960268][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 3546.960303][ C1] ? __pfx___schedule+0x10/0x10 [ 3546.960323][ C1] ? find_held_lock+0x2b/0x80 [ 3546.960346][ C1] ? schedule+0x2d7/0x3a0 [ 3546.960365][ C1] schedule+0xe7/0x3a0 [ 3546.960382][ C1] schedule_timeout+0x257/0x290 [ 3546.960407][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 3546.960436][ C1] ? unix_wait_for_peer+0x23d/0x280 [ 3546.960457][ C1] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 3546.960485][ C1] unix_wait_for_peer+0x245/0x280 [ 3546.960505][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 3546.960526][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3546.960552][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3546.960577][ C1] unix_dgram_sendmsg+0x1410/0x17f0 [ 3546.960603][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 3546.960632][ C1] ____sys_sendmsg+0xa98/0xc70 [ 3546.960662][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 3546.960682][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3546.960708][ C1] ? kfree+0x24f/0x4d0 [ 3546.960734][ C1] ? futex_unqueue+0x133/0x2c0 [ 3546.960763][ C1] ___sys_sendmsg+0x134/0x1d0 [ 3546.960784][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 3546.960815][ C1] ? __pfx___might_resched+0x10/0x10 [ 3546.960841][ C1] __sys_sendmmsg+0x200/0x420 [ 3546.960863][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3546.960882][ C1] ? unix_dgram_connect+0x4e5/0xc80 [ 3546.960908][ C1] ? __pfx_do_futex+0x10/0x10 [ 3546.960941][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 3546.960969][ C1] ? xfd_validate_state+0x61/0x180 [ 3546.960996][ C1] ? __task_pid_nr_ns+0x17c/0x500 [ 3546.961027][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 3546.961046][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 3546.961067][ C1] do_syscall_64+0xcd/0x4c0 [ 3546.961088][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3546.961108][ C1] RIP: 0033:0x7f2d67b8ebe9 [ 3546.961122][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3546.961140][ C1] RSP: 002b:00007f2d68a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3546.961158][ C1] RAX: ffffffffffffffda RBX: 00007f2d67db5fa0 RCX: 00007f2d67b8ebe9 [ 3546.961171][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000007 [ 3546.961183][ C1] RBP: 00007f2d67c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 3546.961195][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3546.961206][ C1] R13: 00007f2d67db6038 R14: 00007f2d67db5fa0 R15: 00007fff5d734c28 [ 3546.961225][ C1] [ 3546.961232][ C1] [ 3547.450460][ C1] Allocated by task 24646: [ 3547.454843][ C1] kasan_save_stack+0x33/0x60 [ 3547.459491][ C1] kasan_save_track+0x14/0x30 [ 3547.464133][ C1] __kasan_kmalloc+0xaa/0xb0 [ 3547.468687][ C1] rose_rt_ioctl+0x87e/0x1d40 [ 3547.473342][ C1] rose_ioctl+0x64d/0x7d0 [ 3547.477645][ C1] sock_do_ioctl+0x118/0x280 [ 3547.482203][ C1] sock_ioctl+0x227/0x6b0 [ 3547.486501][ C1] __x64_sys_ioctl+0x18b/0x210 [ 3547.491420][ C1] do_syscall_64+0xcd/0x4c0 [ 3547.495888][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3547.501748][ C1] [ 3547.504050][ C1] Freed by task 26569: [ 3547.508080][ C1] kasan_save_stack+0x33/0x60 [ 3547.512722][ C1] kasan_save_track+0x14/0x30 [ 3547.517365][ C1] kasan_save_free_info+0x3b/0x60 [ 3547.522392][ C1] __kasan_slab_free+0x60/0x70 [ 3547.527123][ C1] kfree+0x2b4/0x4d0 [ 3547.530987][ C1] rose_remove_neigh+0x25e/0x370 [ 3547.535893][ C1] rose_rt_device_down+0x2dc/0x430 [ 3547.540975][ C1] rose_device_event+0xfc/0x120 [ 3547.545790][ C1] notifier_call_chain+0xbc/0x410 [ 3547.550793][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 3547.556656][ C1] netif_close_many+0x319/0x630 [ 3547.561474][ C1] netif_close+0x17f/0x230 [ 3547.565857][ C1] dev_close+0xaa/0x240 [ 3547.569980][ C1] bpq_device_event+0x6a9/0x910 [ 3547.574816][ C1] notifier_call_chain+0xbc/0x410 [ 3547.579816][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 3547.585686][ C1] netif_close_many+0x319/0x630 [ 3547.590504][ C1] netif_close+0x17f/0x230 [ 3547.594888][ C1] dev_close+0xaa/0x240 [ 3547.599013][ C1] bond_enslave+0x1f4c/0x60b0 [ 3547.603654][ C1] bond_do_ioctl+0x601/0x6c0 [ 3547.608216][ C1] bond_siocdevprivate+0x167/0x200 [ 3547.613291][ C1] dev_ifsioc+0x8ee/0x1f70 [ 3547.617682][ C1] dev_ioctl+0x1b2/0x10e0 [ 3547.621976][ C1] sock_ioctl+0x5b3/0x6b0 [ 3547.626274][ C1] __x64_sys_ioctl+0x18b/0x210 [ 3547.631008][ C1] do_syscall_64+0xcd/0x4c0 [ 3547.635476][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3547.641338][ C1] [ 3547.643630][ C1] The buggy address belongs to the object at ffff888029b7c800 [ 3547.643630][ C1] which belongs to the cache kmalloc-512 of size 512 [ 3547.657822][ C1] The buggy address is located 42 bytes inside of [ 3547.657822][ C1] freed 512-byte region [ffff888029b7c800, ffff888029b7ca00) [ 3547.671500][ C1] [ 3547.673794][ C1] The buggy address belongs to the physical page: [ 3547.680166][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029b7f000 pfn:0x29b7c [ 3547.690191][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3547.698653][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 3547.707118][ C1] page_type: f5(slab) [ 3547.711068][ C1] raw: 00fff00000000240 ffff88801b841c80 ffffea0001385710 ffff88801b8407c8 [ 3547.719616][ C1] raw: ffff888029b7f000 000000000010000f 00000000f5000000 0000000000000000 [ 3547.728164][ C1] head: 00fff00000000240 ffff88801b841c80 ffffea0001385710 ffff88801b8407c8 [ 3547.736800][ C1] head: ffff888029b7f000 000000000010000f 00000000f5000000 0000000000000000 [ 3547.745436][ C1] head: 00fff00000000002 ffffea0000a6df01 00000000ffffffff 00000000ffffffff [ 3547.754071][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 3547.762718][ C1] page dumped because: kasan: bad access detected [ 3547.769114][ C1] page_owner tracks the page as allocated [ 3547.774803][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9376012952, free_ts 0 [ 3547.792834][ C1] post_alloc_hook+0x1c0/0x230 [ 3547.797574][ C1] get_page_from_freelist+0x132b/0x38e0 [ 3547.803083][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 3547.808941][ C1] alloc_pages_mpol+0x1fb/0x550 [ 3547.813760][ C1] new_slab+0x247/0x330 [ 3547.817884][ C1] ___slab_alloc+0xcf2/0x1740 [ 3547.822531][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 3547.827969][ C1] __kmalloc_cache_noprof+0xfb/0x3e0 [ 3547.833239][ C1] usb_cache_string+0x5d/0x150 [ 3547.837977][ C1] usb_new_device+0x169/0x1a60 [ 3547.842720][ C1] register_root_hub+0x299/0x730 [ 3547.847636][ C1] usb_add_hcd+0xaf2/0x1730 [ 3547.852111][ C1] dummy_hcd_probe+0x15c/0x380 [ 3547.856857][ C1] platform_probe+0x103/0x1d0 [ 3547.861507][ C1] really_probe+0x241/0xa90 [ 3547.865983][ C1] __driver_probe_device+0x1de/0x440 [ 3547.871241][ C1] page_owner free stack trace missing [ 3547.876572][ C1] [ 3547.878865][ C1] Memory state around the buggy address: [ 3547.884458][ C1] ffff888029b7c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3547.892246][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 3547.892488][ C1] ffff888029b7c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3547.907333][ C1] >ffff888029b7c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3547.915360][ C1] ^ [ 3547.920705][ C1] ffff888029b7c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3547.928731][ C1] ffff888029b7c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3547.936755][ C1] ================================================================== [ 3547.944854][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3547.952023][ C1] CPU: 1 UID: 0 PID: 26783 Comm: syz.8.15790 Not tainted syzkaller #0 PREEMPT(full) [ 3547.961469][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3547.971499][ C1] Call Trace: [ 3547.974753][ C1] [ 3547.977568][ C1] dump_stack_lvl+0x3d/0x1f0 [ 3547.982131][ C1] vpanic+0x6e8/0x7a0 [ 3547.986096][ C1] ? handle_edge_irq+0x196/0x9e0 [ 3547.991020][ C1] ? __pfx_vpanic+0x10/0x10 [ 3547.995513][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 3548.000601][ C1] panic+0xca/0xd0 [ 3548.004296][ C1] ? __pfx_panic+0x10/0x10 [ 3548.008687][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 3548.013770][ C1] check_panic_on_warn+0xab/0xb0 [ 3548.018682][ C1] end_report+0x107/0x170 [ 3548.022982][ C1] kasan_report+0xee/0x110 [ 3548.027370][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 3548.032453][ C1] rose_timer_expiry+0x45a/0x4d0 [ 3548.037372][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 3548.042800][ C1] call_timer_fn+0x197/0x620 [ 3548.047370][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 3548.052463][ C1] ? rcu_is_watching+0x12/0xc0 [ 3548.057206][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 3548.062635][ C1] __run_timers+0x6ef/0x960 [ 3548.067119][ C1] ? __pfx___run_timers+0x10/0x10 [ 3548.072128][ C1] run_timer_base+0x114/0x190 [ 3548.076775][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 3548.081942][ C1] ? rcu_is_watching+0x12/0xc0 [ 3548.086673][ C1] run_timer_softirq+0x1a/0x40 [ 3548.091408][ C1] handle_softirqs+0x216/0x8e0 [ 3548.096145][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3548.101400][ C1] __irq_exit_rcu+0x109/0x170 [ 3548.106045][ C1] irq_exit_rcu+0x9/0x30 [ 3548.110264][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3548.115865][ C1] [ 3548.118765][ C1] [ 3548.121664][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3548.127626][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 3548.134011][ C1] Code: fb 09 00 00 44 8b 05 e9 73 22 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 9f 68 3a 00 fb 65 48 8b 1d 8e 65 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 3548.153589][ C1] RSP: 0000:ffffc9001d1af4b8 EFLAGS: 00000206 [ 3548.159622][ C1] RAX: 0000000000009c17 RBX: ffff88802579c880 RCX: ffffffff81c3721f [ 3548.167560][ C1] RDX: 0000000000000000 RSI: ffffffff8de50330 RDI: ffffffff8c162900 [ 3548.175500][ C1] RBP: ffffc9001d1af500 R08: 0000000000000001 R09: 0000000000000001 [ 3548.183439][ C1] R10: ffffffff90ab4c97 R11: 0000000000000000 R12: ffff8880b853a300 [ 3548.191376][ C1] R13: ffff888062ed2440 R14: 0000000000000000 R15: dffffc0000000000 [ 3548.199316][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 3548.205269][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 3548.211046][ C1] __schedule+0x1198/0x5de0 [ 3548.215517][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 3548.220439][ C1] ? __pfx___schedule+0x10/0x10 [ 3548.225266][ C1] ? find_held_lock+0x2b/0x80 [ 3548.229910][ C1] ? schedule+0x2d7/0x3a0 [ 3548.234215][ C1] schedule+0xe7/0x3a0 [ 3548.238249][ C1] schedule_timeout+0x257/0x290 [ 3548.243072][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 3548.248422][ C1] ? unix_wait_for_peer+0x23d/0x280 [ 3548.253588][ C1] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 3548.259278][ C1] unix_wait_for_peer+0x245/0x280 [ 3548.264269][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 3548.269781][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3548.275815][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3548.281154][ C1] unix_dgram_sendmsg+0x1410/0x17f0 [ 3548.286329][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 3548.291856][ C1] ____sys_sendmsg+0xa98/0xc70 [ 3548.296593][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 3548.302018][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3548.307273][ C1] ? kfree+0x24f/0x4d0 [ 3548.311313][ C1] ? futex_unqueue+0x133/0x2c0 [ 3548.316047][ C1] ___sys_sendmsg+0x134/0x1d0 [ 3548.320692][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 3548.325861][ C1] ? __pfx___might_resched+0x10/0x10 [ 3548.331125][ C1] __sys_sendmmsg+0x200/0x420 [ 3548.335772][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3548.340949][ C1] ? unix_dgram_connect+0x4e5/0xc80 [ 3548.346123][ C1] ? __pfx_do_futex+0x10/0x10 [ 3548.350781][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 3548.356036][ C1] ? xfd_validate_state+0x61/0x180 [ 3548.361121][ C1] ? __task_pid_nr_ns+0x17c/0x500 [ 3548.366118][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 3548.371022][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 3548.376186][ C1] do_syscall_64+0xcd/0x4c0 [ 3548.380659][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3548.386517][ C1] RIP: 0033:0x7f2d67b8ebe9 [ 3548.390898][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3548.410472][ C1] RSP: 002b:00007f2d68a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3548.418861][ C1] RAX: ffffffffffffffda RBX: 00007f2d67db5fa0 RCX: 00007f2d67b8ebe9 [ 3548.426806][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000007 [ 3548.434752][ C1] RBP: 00007f2d67c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 3548.442689][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3548.450626][ C1] R13: 00007f2d67db6038 R14: 00007f2d67db5fa0 R15: 00007fff5d734c28 [ 3548.458573][ C1] [ 3548.461759][ C1] Kernel Offset: disabled [ 3548.466055][ C1] Rebooting in 86400 seconds..