last executing test programs: 17m38.347788709s ago: executing program 3 (id=1995): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 17m37.347968538s ago: executing program 3 (id=2002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0xd}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xac}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x44}}, 0x0) 17m37.232254451s ago: executing program 3 (id=2006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r2, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) 17m37.0184069s ago: executing program 3 (id=2011): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) 17m36.985839133s ago: executing program 3 (id=2012): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x100) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x460, 0xffffffff, 0x0, 0x130, 0x2b8, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x25d1009fe4ffe98a, 0xff000000, 0xffffffff, 0xff000000], [0xff, 0xffffff00, 0xff], 'pim6reg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x33, 0x7, 0x0, 0x20}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x2, 0x9f3, 0xf, 0x5, 0x0, 0x81, 0x9]}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x3b, 0x0, 0x5, 0x2e, 0x8, @mcast2, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xff, 0xff000000, 0xff, 0xff], [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x800, 0x401}}, @common=@inet=@tos={{0x28}, {0x10, 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x400}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @local, [0xffffff00, 0xff, 0xffffff00, 0xff], [0x832e88e4108a7c8f, 0xffffffff, 0xff, 0xffffff00], 'bridge_slave_0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7, 0x42}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x1ff, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 17m36.548813779s ago: executing program 3 (id=2015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x5d, 0x1000000, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 17m36.280907619s ago: executing program 32 (id=2015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x5d, 0x1000000, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 16m51.167752184s ago: executing program 5 (id=2539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x100) 16m50.745674087s ago: executing program 5 (id=2547): socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec28, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 16m50.128790167s ago: executing program 5 (id=2552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x404c831}, 0x44) 16m49.983670705s ago: executing program 5 (id=2554): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x8) 16m49.868736017s ago: executing program 5 (id=2555): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000092000040"]) 16m49.03664738s ago: executing program 5 (id=2565): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003"], 0x509) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 16m48.894154291s ago: executing program 33 (id=2565): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003"], 0x509) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 16m14.014032657s ago: executing program 4 (id=2900): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd08, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r2, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x400040, 0x80, 0x2, 0xfffffffb, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x400c0930, 0x7) 16m13.795793652s ago: executing program 4 (id=2903): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x1) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x104) fdatasync(r0) 16m13.701501701s ago: executing program 4 (id=2905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m13.276591503s ago: executing program 4 (id=2910): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1004, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$binder(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 16m13.166463116s ago: executing program 4 (id=2912): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x2, 0x17, 0x0, 0x0) 16m12.504764319s ago: executing program 4 (id=2916): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 16m12.153537932s ago: executing program 34 (id=2916): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 14m18.757833734s ago: executing program 2 (id=4033): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x120, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe9, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}, @TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_ACT={0x80, 0x1, [@m_skbmod={0x7c, 0xd, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x15, 0x6, "ac74a020e69210ef1e4b1bec96d0381169"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 14m18.291918437s ago: executing program 2 (id=4040): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x8, 0x39bb) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 14m18.136105235s ago: executing program 2 (id=4043): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) r1 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) ptrace(0x4207, r2) 14m17.621748358s ago: executing program 2 (id=4049): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 14m13.262729438s ago: executing program 2 (id=4077): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0) 14m12.525190742s ago: executing program 2 (id=4083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x2}, {}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f00000003c0)=""/232, 0x38, 0xe8, 0x3}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x7, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 14m0.394810276s ago: executing program 0 (id=4164): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000380), &(0x7f0000000400)=r1}, 0x20) 13m59.907067649s ago: executing program 0 (id=4167): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r3}, 0x10) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 13m59.704480228s ago: executing program 0 (id=4169): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f00000002c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m59.593981136s ago: executing program 0 (id=4170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 13m58.360860076s ago: executing program 0 (id=4174): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0/file0\x00'}) 13m57.428831513s ago: executing program 0 (id=4181): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00000000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6, 0x10}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) 13m56.388360765s ago: executing program 35 (id=4083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x2}, {}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f00000003c0)=""/232, 0x38, 0xe8, 0x3}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x7, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 13m40.839168574s ago: executing program 36 (id=4181): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00000000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6, 0x10}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) 26.114892173s ago: executing program 6 (id=7267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 17.677168198s ago: executing program 6 (id=7286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0x41, 0xfffffffb}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)="00147167cc5745bf66c109b429963bf976a107a35753021bbb55e6bf0f33ba28fdbe58f595feefc4636d1d3006f26963e6248b47749d7d7bcab7ada59b7427976048040c059429fec135235e56d46527cbb6f6f7ee0462dcb36a2f84bdde34ec3e2f7d796b608f1dffc2b03324f7ae3f1a7365c06e8f5b6d289c3219f44171993468aa0fd8deee47314ebf101893ca30667a38bf4ec85b3d2a0b17cf9c2c", 0x9e, 0xfffffffffffffffd) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) timerfd_create(0x9, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x10200300) 13.610431864s ago: executing program 8 (id=7293): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r3, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x1f, 0x3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc7"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) syz_emit_ethernet(0xce, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}, {0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 13.138719408s ago: executing program 7 (id=7294): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88580, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_create_resource$binfmt(0x0) close(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x400455cb, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r5, r5, 0x0, 0x800000a1a) 13.08902094s ago: executing program 6 (id=7295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) msgget(0x1, 0x64d) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x40, 0x9, 0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 11.855118266s ago: executing program 6 (id=7298): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900000018120000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 7.679683977s ago: executing program 8 (id=7304): r0 = socket(0x10, 0x803, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x83108a0715751750) r2 = gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) prlimit64(r2, 0xc, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffcd9, &(0x7f00000002c0)='\x00') chdir(&(0x7f0000000080)='./file1\x00') 7.646851476s ago: executing program 8 (id=7305): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, @local}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x86\x81\t\n\xac\"\xff4l\xaa\x91\xec\x99M.p\xdc4\x0e\x1c\xdf\xd3\xd4\x8d\xad\x99\x1c\xae\xb2vt\r@0K\x989\x1c\xd7%\x82\x94\x05\x06\xbeJ\x90\xd8&\xa6?~\x88\x01;\r7\xdf\xb7\xfb\x85\x133\x17I\xb4\xbc`7\xda\x91\xefP0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x8, 0x9, 0x0, 0x5, 0x3, [0x0, 0x400, 0x0, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r2, &(0x7f0000000000)=0x8, r2, 0x0, 0x4, 0x0) socket(0x10, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001fff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1c0012800b0001006272296467"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4800) 6.905911622s ago: executing program 7 (id=7308): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x3e8, 0x800, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}}, 0x40000) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4e, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.475228382s ago: executing program 8 (id=7309): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x102) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb652, 0x3}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"c607936430a3171081128715cf95feda464f6d008f8348eb683ae6186f2295e0"}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x800, 0x6, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x66, 0x0, 0xe, 0x2f, 0x0, @multicast1, @multicast1}}}}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x0, 0x9c1}, [@IFLA_TXQLEN={0x8, 0xd, 0x2}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 5.563596295s ago: executing program 9 (id=7311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)={[{}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.562333896s ago: executing program 1 (id=7312): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000400)={&(0x7f0000000300)=""/196, 0xc4, 0xe77e, 0x21}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002580)={r2}, 0xc) keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 5.46792351s ago: executing program 8 (id=7313): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4374, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x48000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.544340164s ago: executing program 1 (id=7314): rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000000540)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004) 4.438742825s ago: executing program 1 (id=7315): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4.412001318s ago: executing program 7 (id=7316): socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) prlimit64(0x0, 0xe, &(0x7f0000002440)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) add_key$keyring(0x0, &(0x7f00000023c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000002b000701fefffffffbdbdf25037c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4.272166681s ago: executing program 1 (id=7317): r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xfffff000, 0x4000}) r1 = signalfd4(r0, 0x0, 0x0, 0x80800) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x8, 0x8, 0x80, 0x3}, {0x800, 0xd, 0xfd, 0x4}]}) signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 4.126594697s ago: executing program 7 (id=7318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80ec}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005}) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000380)=""/176, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x62040881}, 0x0) 3.421319829s ago: executing program 9 (id=7319): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x1, 0x5, 0x7}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x19) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[], 0x18) bind$tipc(r2, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) 3.248808444s ago: executing program 1 (id=7320): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.225717375s ago: executing program 7 (id=7321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 2.507076597s ago: executing program 9 (id=7322): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) 2.410170034s ago: executing program 6 (id=7323): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000040)=0x9b6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) 1.872805221s ago: executing program 7 (id=7324): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknod$loop(0x0, 0x208c, 0x0) mknod$loop(0x0, 0x2000, 0x0) listen(r3, 0xda90) accept4(r3, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, 0x0, 0x0, 0x12}) unshare(0x62040200) 1.536553229s ago: executing program 9 (id=7325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x51f180, 0x100) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x7, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x9) 345.717221ms ago: executing program 6 (id=7326): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000001c0), 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 269.66581ms ago: executing program 9 (id=7327): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="038e71e43634", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "82379f", 0x8, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4, 0x0, 0x8}}}}}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001c00)=[{&(0x7f0000002000)="f8", 0x1}], 0x1, 0x9) close(r4) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003, {}, 0x1}, 0x18) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="2190", 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 120.711811ms ago: executing program 8 (id=7328): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) unshare(0x64000600) sched_setscheduler(0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 1 (id=7329): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000004c0)) kernel console output (not intermixed with test programs): 86.698411][T19158] Set syz0 is full, maxelem 0 reached [ 586.704734][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 586.704751][ T30] audit: type=1400 audit(1759624686.274:1183): avc: denied { listen } for pid=19157 comm="syz.9.4965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 592.380483][ T30] audit: type=1400 audit(1759624691.561:1184): avc: denied { create } for pid=19207 comm="syz.8.4979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 593.700495][T15734] Bluetooth: hci1: command 0x0406 tx timeout [ 594.518298][ T30] audit: type=1800 audit(1759624693.592:1185): pid=19229 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4984" name="/" dev="9p" ino=2 res=0 errno=0 [ 595.037283][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 595.231277][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.244139][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.254065][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.267161][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.276338][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.286513][ T9] usb 10-1: config 0 descriptor?? [ 595.528115][T19224] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4982'. [ 595.538133][T19234] tipc: Started in network mode [ 595.543388][T19234] tipc: Node identity ac14140f, cluster identity 4711 [ 595.579449][T19234] tipc: New replicast peer: 255.255.255.255 [ 595.586725][T19234] tipc: Enabled bearer , priority 10 [ 595.730830][T19249] netlink: 'syz.8.4993': attribute type 1 has an invalid length. [ 595.768240][ T9] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 595.782996][T19249] bond1: entered promiscuous mode [ 595.788492][T19249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.897672][T19251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.905034][T19251] IPv6: NLM_F_CREATE should be set when creating new route [ 595.912235][T19251] IPv6: NLM_F_CREATE should be set when creating new route [ 595.921294][ T5914] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 595.947142][T19251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.992088][T19249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.007953][T19249] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 596.018941][T19249] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 596.045786][T19249] bond1: (slave wireguard0): making interface the new active one [ 596.053730][T19249] wireguard0: entered promiscuous mode [ 596.060392][T19249] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 596.078367][T19251] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 596.108577][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 596.115510][ T5914] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 596.137958][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.162955][ T5914] usb 2-1: config 0 descriptor?? [ 596.172260][T19251] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 596.427897][ T30] audit: type=1400 audit(1759624695.380:1186): avc: denied { connect } for pid=19237 comm="syz.9.4989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 596.649487][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4996'. [ 596.711594][ T5914] isku 0003:1E7D:3264.0031: hidraw1: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.1-1/input0 [ 596.746356][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4996'. [ 596.789657][ T5913] tipc: Node number set to 2886997007 [ 596.848141][T19266] overlayfs: failed to clone upperpath [ 597.083033][ T5914] usb 2-1: USB disconnect, device number 42 [ 597.448411][T19237] delete_channel: no stack [ 597.974612][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 597.981344][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 598.275233][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 598.872837][ T9] usb 10-1: USB disconnect, device number 2 [ 598.889127][T19291] ceph: No mds server is up or the cluster is laggy [ 598.930961][T19304] binder: BINDER_SET_CONTEXT_MGR already set [ 598.967604][T19304] binder: 19303:19304 ioctl 4018620d 200000000040 returned -16 [ 598.996778][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 599.567044][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 599.573408][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 599.882257][ T30] audit: type=1326 audit(1759624698.609:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19315 comm="syz.1.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b78eec9 code=0x7fc00000 [ 600.673244][ T30] audit: type=1326 audit(1759624699.348:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19315 comm="syz.1.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe0b78eec9 code=0x7fc00000 [ 600.737956][ T30] audit: type=1326 audit(1759624699.348:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19315 comm="syz.1.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b78eec9 code=0x7fc00000 [ 600.962085][T19342] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 601.016410][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5022'. [ 603.242704][T19366] Mount JFS Failure: -5 [ 604.406658][T19388] overlayfs: failed to clone upperpath [ 606.334087][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5043'. [ 606.631695][ T24] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 606.660952][ T24] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 607.821534][T19436] netlink: 22 bytes leftover after parsing attributes in process `syz.6.5052'. [ 607.861658][ T30] audit: type=1400 audit(1759624706.068:1190): avc: denied { cmd } for pid=19437 comm="syz.8.5053" path="/189/file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 609.164656][ T30] audit: type=1326 audit(1759624707.294:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19444 comm="syz.7.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674818eec9 code=0x7fc00000 [ 610.712773][T19479] netlink: 'syz.1.5068': attribute type 10 has an invalid length. [ 610.727268][T19479] geneve1: left allmulticast mode [ 610.735198][T19479] geneve1: entered allmulticast mode [ 610.741145][T19479] team0: Port device geneve1 added [ 610.749889][ T2958] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.753694][T19479] netlink: 'syz.1.5068': attribute type 17 has an invalid length. [ 610.766330][T19479] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5068'. [ 610.775540][ T2958] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.784253][T19479] ip6_vti0: left allmulticast mode [ 610.797263][ T2958] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.823467][ T2958] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.592116][T19502] overlayfs: failed to clone upperpath [ 612.363849][T19506] cgroup: fork rejected by pids controller in /syz1 [ 613.708476][T19631] netlink: 'syz.8.5084': attribute type 10 has an invalid length. [ 613.718282][T19631] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5084'. [ 613.730993][T19631] dummy0: entered promiscuous mode [ 613.746128][T19631] bridge0: port 3(dummy0) entered blocking state [ 613.754126][T19631] bridge0: port 3(dummy0) entered disabled state [ 613.762616][T19631] dummy0: entered allmulticast mode [ 613.785962][T19631] bridge0: port 3(dummy0) entered blocking state [ 613.792415][T19631] bridge0: port 3(dummy0) entered forwarding state [ 614.937956][ T3000] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.195412][ T3000] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.223675][ T3000] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.453621][T19665] netlink: 'syz.6.5095': attribute type 1 has an invalid length. [ 616.470293][T19665] netlink: 'syz.6.5095': attribute type 4 has an invalid length. [ 616.473498][ T3000] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.485890][T19665] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.5095'. [ 616.722842][ T3000] bridge_slave_1: left promiscuous mode [ 616.729205][T15734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 616.736749][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.744650][T15734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 616.753777][T15734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 616.770099][T15734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 616.778826][T15734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.786980][ T3000] bridge_slave_0: left promiscuous mode [ 616.813346][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.962044][ T3000] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 617.642855][ T3000] geneve1 (unregistering): left allmulticast mode [ 617.652238][ T3000] team0: Port device geneve1 removed [ 617.741756][ T3000] bond1 (unregistering): (slave bridge1): Releasing active interface [ 618.291882][ T3000] bond0 (unregistering): Released all slaves [ 618.314434][ T3000] bond1 (unregistering): Released all slaves [ 618.334445][ T3000] bond2 (unregistering): Released all slaves [ 618.359618][ T3000] bond3 (unregistering): Released all slaves [ 618.530587][ T3000] bond4 (unregistering): Released all slaves [ 618.995684][T15734] Bluetooth: hci3: command tx timeout [ 619.343031][T19706] netlink: 'syz.6.5106': attribute type 2 has an invalid length. [ 621.227926][T15734] Bluetooth: hci3: command tx timeout [ 622.388200][ T3000] tipc: Left network mode [ 623.439973][T15734] Bluetooth: hci3: command tx timeout [ 623.874736][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5122'. [ 623.891307][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5122'. [ 623.892795][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.916718][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5122'. [ 623.926804][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.935152][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5122'. [ 624.115993][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5122'. [ 624.129714][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5122'. [ 624.141093][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5122'. [ 624.156370][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5122'. [ 624.794018][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5122'. [ 624.827010][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5122'. [ 625.391832][T19776] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 625.441804][ T3000] team0 (unregistering): Port device team_slave_1 removed [ 625.570744][ T3000] team0 (unregistering): Port device team_slave_0 removed [ 625.683237][T15734] Bluetooth: hci3: command tx timeout [ 626.783570][T19666] chnl_net:caif_netlink_parms(): no params data found [ 627.344879][T19796] veth7: entered promiscuous mode [ 627.490743][ T30] audit: type=1326 audit(1759624724.430:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.8.5135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x0 [ 628.483850][T19666] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.497793][T19666] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.526337][T19666] bridge_slave_0: entered allmulticast mode [ 628.532740][T19815] binder_alloc: 19814: binder_alloc_buf size 1024 failed, no address space [ 628.549918][T19815] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 628.577517][T19666] bridge_slave_0: entered promiscuous mode [ 628.623745][T19666] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.646583][T19666] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.662786][T19666] bridge_slave_1: entered allmulticast mode [ 628.681776][T19666] bridge_slave_1: entered promiscuous mode [ 629.182834][T19666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.206286][T19666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.513096][T19834] netlink: 'syz.7.5141': attribute type 1 has an invalid length. [ 629.522167][T19834] netlink: 'syz.7.5141': attribute type 4 has an invalid length. [ 629.570904][T19834] __nla_validate_parse: 3 callbacks suppressed [ 629.570917][T19834] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.5141'. [ 629.739587][T19666] team0: Port device team_slave_0 added [ 629.748279][T19666] team0: Port device team_slave_1 added [ 629.866605][T19666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.875095][T19666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.901207][T19666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.917928][T19666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.926477][T19666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.008522][T19666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.304443][T19666] hsr_slave_0: entered promiscuous mode [ 630.325168][T19666] hsr_slave_1: entered promiscuous mode [ 630.336892][T19666] debugfs: 'hsr0' already exists in 'hsr' [ 630.398480][T19666] Cannot create hsr debugfs directory [ 632.202826][T19666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 632.213563][T19666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 632.223770][T19666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 632.245064][T19666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 632.729892][T19666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.793788][T19666] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.822163][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.829284][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.855427][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.862538][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.219352][T19666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.255690][T19666] veth0_vlan: entered promiscuous mode [ 633.265450][T19666] veth1_vlan: entered promiscuous mode [ 633.286982][T19666] veth0_macvtap: entered promiscuous mode [ 633.556107][T19666] veth1_macvtap: entered promiscuous mode [ 633.649100][T19666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.660183][T19666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.675926][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.685572][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.696318][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.705045][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.771255][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.779311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.800832][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.808706][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.889248][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5163'. [ 635.415056][T19928] Bluetooth: MGMT ver 1.23 [ 638.941776][T19989] create_pit_timer: 2 callbacks suppressed [ 638.941787][T19989] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 639.607533][T20001] bridge_slave_0: left allmulticast mode [ 639.620210][T20001] bridge_slave_0: left promiscuous mode [ 639.639679][T20001] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.734468][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5185'. [ 639.783959][T20001] bridge_slave_1: left allmulticast mode [ 639.828621][T20001] bridge_slave_1: left promiscuous mode [ 639.850080][T20001] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.910977][T20001] bond0: (slave bond_slave_0): Releasing backup interface [ 639.984350][T20001] bond0: (slave bond_slave_1): Releasing backup interface                                                        [ 641.849954][ T30] audit: type=1400 audit(1759624737.804:1194): avc: denied { search } for pid=20027 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.879891][ T30] audit: type=1400 audit(1759624737.823:1195): avc: denied { read } for pid=20027 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 642.528814][ T30] audit: type=1400 audit(1759624738.085:1196): avc: denied { checkpoint_restore } for pid=20028 comm="syz.9.5193" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 644.406818][ T30] audit: type=1400 audit(1759624739.873:1197): avc: denied { create } for pid=20042 comm="syz.9.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 644.485597][ T30] audit: type=1400 audit(1759624739.882:1198): avc: denied { write } for pid=20042 comm="syz.9.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 644.508488][ T30] audit: type=1400 audit(1759624739.882:1199): avc: denied { connect } for pid=20042 comm="syz.9.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 644.529233][ T30] audit: type=1400 audit(1759624739.929:1200): avc: denied { setopt } for pid=20042 comm="syz.9.5197" lport=58263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 644.556076][ T30] audit: type=1400 audit(1759624739.929:1201): avc: denied { shutdown } for pid=20042 comm="syz.9.5197" lport=58263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 644.615954][ T30] audit: type=1400 audit(1759624740.022:1202): avc: denied { read } for pid=20042 comm="syz.9.5197" lport=58263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 646.967104][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 646.967122][ T30] audit: type=1400 audit(1759624742.652:1205): avc: denied { create } for pid=20079 comm="syz.8.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 647.041012][ T30] audit: type=1400 audit(1759624742.652:1206): avc: denied { setopt } for pid=20079 comm="syz.8.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 647.141943][T20089] netlink: 'syz.9.5209': attribute type 39 has an invalid length. [ 647.151510][ T30] audit: type=1400 audit(1759624742.839:1207): avc: denied { map_create } for pid=20087 comm="syz.9.5209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.255598][ T30] audit: type=1400 audit(1759624742.839:1208): avc: denied { map_read map_write } for pid=20087 comm="syz.9.5209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 648.026935][T20096] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5211'. [ 648.035974][T20096] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5211'. [ 648.252787][T20101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5212'. [ 650.167807][T20132] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 650.185415][T20132] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 650.580037][T20138] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5226'. [ 650.787081][T20143] netlink: 'syz.7.5228': attribute type 4 has an invalid length. [ 650.817168][T20143] netlink: 'syz.7.5228': attribute type 4 has an invalid length. [ 651.650513][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.657055][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 653.519982][T20181] netlink: 'syz.9.5236': attribute type 10 has an invalid length. [ 653.572216][T20181] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 655.104920][T20201] netlink: 'syz.8.5243': attribute type 1 has an invalid length. [ 655.330065][T20214] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5250'. [ 656.676859][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5259'. [ 656.697656][T20241] openvswitch: netlink: Flow actions attr not present in new flow. [ 656.780385][ T30] audit: type=1400 audit(1759624751.862:1209): avc: denied { getopt } for pid=20242 comm="syz.8.5260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 659.126577][T20261] bridge0: port 3(gretap0) entered blocking state [ 659.138847][T20261] bridge0: port 3(gretap0) entered disabled state [ 659.249707][T20261] gretap0: entered promiscuous mode [ 659.755363][ T30] audit: type=1326 audit(1759624754.641:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 659.819003][T20270] pimreg: entered allmulticast mode [ 659.846594][ T30] audit: type=1326 audit(1759624754.641:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 659.906312][ T30] audit: type=1326 audit(1759624754.669:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 659.940630][ T30] audit: type=1326 audit(1759624754.669:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 659.966409][ T30] audit: type=1326 audit(1759624754.669:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 660.148157][ T30] audit: type=1326 audit(1759624754.669:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 660.173417][ T30] audit: type=1326 audit(1759624754.669:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 660.422770][ T30] audit: type=1326 audit(1759624754.669:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 661.116378][T20269] pimreg: left allmulticast mode [ 661.156157][ T30] audit: type=1326 audit(1759624754.669:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.8.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 662.890680][T20305] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5279'. [ 664.147313][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 664.147324][ T30] audit: type=1400 audit(1759624758.759:1240): avc: denied { bind } for pid=20330 comm="syz.1.5287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 664.238941][ T30] audit: type=1400 audit(1759624758.787:1241): avc: denied { name_bind } for pid=20330 comm="syz.1.5287" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 664.292136][ T30] audit: type=1400 audit(1759624758.787:1242): avc: denied { name_connect } for pid=20330 comm="syz.1.5287" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 667.733719][ T30] audit: type=1400 audit(1759624762.110:1243): avc: denied { read write } for pid=20375 comm="syz.9.5300" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 667.765371][ T30] audit: type=1400 audit(1759624762.138:1244): avc: denied { open } for pid=20375 comm="syz.9.5300" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 667.997894][ T30] audit: type=1400 audit(1759624762.353:1245): avc: denied { rename } for pid=20375 comm="syz.9.5300" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 668.798756][T20395] netlink: 'syz.8.5306': attribute type 3 has an invalid length. [ 668.810784][T20395] netlink: 'syz.8.5306': attribute type 3 has an invalid length. [ 670.630028][ T30] audit: type=1400 audit(1759624764.824:1246): avc: denied { listen } for pid=20409 comm="syz.6.5312" laddr=172.20.20.170 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 670.681985][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5314'. [ 672.908388][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5324'. [ 673.282796][ T30] audit: type=1400 audit(1759624767.304:1247): avc: denied { sys_admin } for pid=20458 comm="syz.6.5328" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 673.463663][ T30] audit: type=1400 audit(1759624767.313:1248): avc: denied { associate } for pid=20462 comm="syz.6.5328" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 675.111501][T20485] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5335'. [ 675.452623][T20488] overlayfs: failed to clone upperpath [ 677.266683][ T30] audit: type=1400 audit(1759624771.010:1249): avc: denied { create } for pid=20509 comm="syz.9.5343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 677.385899][ T30] audit: type=1400 audit(1759624771.010:1250): avc: denied { read } for pid=20509 comm="syz.9.5343" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 677.408850][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.508751][ T30] audit: type=1400 audit(1759624771.010:1251): avc: denied { open } for pid=20509 comm="syz.9.5343" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 677.532620][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.772840][ T30] audit: type=1400 audit(1759624771.010:1252): avc: denied { ioctl } for pid=20509 comm="syz.9.5343" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 677.799195][ T30] audit: type=1400 audit(1759624771.403:1253): avc: denied { bind } for pid=20527 comm="syz.9.5350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 678.686654][T20541] netlink: 'syz.8.5352': attribute type 39 has an invalid length. [ 682.229767][T20570] netlink: 'syz.8.5361': attribute type 10 has an invalid length. [ 682.275398][T20570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.306977][T20570] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 683.604395][ T5893] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 684.798356][ T5893] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 684.851516][ T5893] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 684.872627][ T5893] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 684.902710][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.924567][T20578] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 684.947025][ T5893] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 685.174849][ T5893] usb 10-1: USB disconnect, device number 3 [ 686.525107][T20637] overlayfs: failed to clone upperpath [ 687.817137][T20657] Invalid option length (1032005) for dns_resolver key [ 689.432372][T20692] dummy0: left allmulticast mode [ 689.459898][T20692] bridge0: port 3(dummy0) entered disabled state [ 689.468471][T20692] bond0: (slave batadv0): Releasing backup interface [ 689.480294][T20692] bridge_slave_0: left allmulticast mode [ 689.486440][T20692] bridge_slave_0: left promiscuous mode [ 689.967638][T20692] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.007477][T20692] bridge_slave_1: left allmulticast mode [ 690.013160][T20692] bridge_slave_1: left promiscuous mode [ 690.197163][T20692] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.707014][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5398'. [ 690.749776][T20692] bond0: (slave bond_slave_0): Releasing backup interface [ 690.772002][T20692] bond0: (slave bond_slave_1): Releasing backup interface [ 690.791580][T20692] team0: Port device team_slave_0 removed [ 690.800888][T20692] team0: Port device team_slave_1 removed [ 690.807401][T20692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.818494][T20692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.840113][T20692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.856982][T20692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.005876][T20692] bond1: (slave wireguard0): Releasing backup interface [ 691.013510][T20692] wireguard0: left promiscuous mode [ 691.133547][T20692] bond1: (slave wireguard1): making interface the new active one [ 691.160848][T20692] wireguard1: entered promiscuous mode [ 691.206638][T20692] bond1: (slave wireguard1): Releasing backup interface [ 691.265650][ T5893] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 691.297541][T20692] wireguard1: left promiscuous mode [ 691.455894][T20693] team0: Mode changed to "loadbalance" [ 691.906703][ T5893] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 691.915771][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.975253][ T5893] usb 2-1: Product: syz [ 691.979478][ T5893] usb 2-1: Manufacturer: syz [ 691.988846][ T5893] usb 2-1: SerialNumber: syz [ 692.829663][T20733] ptrace attach of "./syz-executor exec"[13313] was attempted by "./syz-executor exec"[20733] [ 694.759451][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 694.771754][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 694.953967][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 694.973395][ T5893] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 694.976511][T20771] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 695.001296][ T5893] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 695.020334][ T5893] usb 2-1: USB disconnect, device number 43 [ 695.234940][T20773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 695.481347][T20773] team0: Mode changed to "loadbalance" [ 695.670671][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5424'. [ 696.414542][T20790] syz_tun: entered allmulticast mode [ 696.480695][T20790] dvmrp8: entered allmulticast mode [ 696.515480][T20790] syz_tun: left allmulticast mode [ 696.520569][T20790] dvmrp8: left allmulticast mode [ 696.842481][ T30] audit: type=1400 audit(1759624789.354:1254): avc: denied { connect } for pid=20802 comm="syz.1.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 696.872804][ T30] audit: type=1400 audit(1759624789.354:1255): avc: denied { create } for pid=20802 comm="syz.1.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 696.892882][ T30] audit: type=1400 audit(1759624789.382:1256): avc: denied { ioctl } for pid=20802 comm="syz.1.5434" path="socket:[95069]" dev="sockfs" ino=95069 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 699.804453][T20855] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 700.713862][ T30] audit: type=1400 audit(1759624792.976:1257): avc: denied { setopt } for pid=20874 comm="syz.9.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 701.004915][T20879] binder: 20877:20879 ioctl c0306201 200000000080 returned -14 [ 701.289695][T20887] bridge_slave_0: left allmulticast mode [ 701.295369][T20887] bridge_slave_0: left promiscuous mode [ 701.444759][T20890] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5462'. [ 701.486897][T20887] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.499894][T20891] netlink: 'syz.6.5463': attribute type 1 has an invalid length. [ 701.754259][T20887] bridge_slave_1: left allmulticast mode [ 701.811437][T20887] bridge_slave_1: left promiscuous mode [ 701.817221][T20887] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.900211][T20887] bond0: (slave bond_slave_0): Releasing backup interface [ 701.918717][T20887] bond0: (slave bond_slave_1): Releasing backup interface [ 701.953301][T20887] team0: Port device team_slave_0 removed [ 701.975101][T20887] team0: Port device team_slave_1 removed [ 701.981709][T20887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.022533][T20887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.201355][T20887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.208912][T20887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.243011][T20887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 702.324626][T20891] bond4: entered promiscuous mode [ 702.356870][T20891] 8021q: adding VLAN 0 to HW filter on device bond4 [ 702.436384][T20892] 8021q: adding VLAN 0 to HW filter on device bond4 [ 702.461113][T20892] bond4: (slave gre3): The slave device specified does not support setting the MAC address [ 702.488376][T20892] bond4: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 702.513003][T20892] bond4: (slave gre3): making interface the new active one [ 702.529488][T20892] gre3: entered promiscuous mode [ 702.540773][T20892] bond4: (slave gre3): Enslaving as an active interface with an up link [ 702.668710][T20904] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.5467'. [ 704.004554][ T30] audit: type=1400 audit(1759624796.064:1258): avc: denied { write } for pid=20913 comm="syz.6.5471" path="socket:[97289]" dev="sockfs" ino=97289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 707.631788][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 707.638160][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 707.797224][T20959] ceph: No mds server is up or the cluster is laggy [ 712.726422][T21023] overlayfs: failed to clone upperpath [ 713.233256][T21042] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5507'. [ 713.679792][T21055] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5509'. [ 713.779455][ T30] audit: type=1400 audit(1759624805.198:1259): avc: denied { getopt } for pid=21053 comm="syz.1.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 715.669772][ T30] audit: type=1804 audit(1759624806.864:1260): pid=21064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.5512" name="bus" dev="ramfs" ino=96654 res=1 errno=0 [ 715.708825][ T30] audit: type=1804 audit(1759624807.014:1261): pid=21064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.5512" name="bus" dev="ramfs" ino=96654 res=1 errno=0 [ 717.566450][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 717.572857][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.909772][T21102] netlink: 'syz.8.5522': attribute type 1 has an invalid length. [ 718.210644][T21103] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 718.298467][T21108] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 718.322730][T21108] bond2 (unregistering): Released all slaves [ 718.789826][ T30] audit: type=1400 audit(1759624809.812:1262): avc: denied { write } for pid=21109 comm="syz.9.5525" path="socket:[97478]" dev="sockfs" ino=97478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 721.818735][ T30] audit: type=1400 audit(1759624812.732:1263): avc: denied { shutdown } for pid=21149 comm="syz.9.5537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 723.312271][T21158] overlayfs: failed to clone upperpath [ 732.804602][ T24] IPVS: starting estimator thread 0... [ 732.915357][T21284] IPVS: using max 46 ests per chain, 110400 per kthread [ 732.931548][ T30] audit: type=1400 audit(1759624823.130:1264): avc: denied { unmount } for pid=21289 comm="syz.6.5580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 733.492559][T21299] geneve2: entered promiscuous mode [ 733.503036][T21299] geneve2: entered allmulticast mode [ 734.976305][T21324] overlayfs: failed to clone upperpath [ 736.060347][ T5875] IPVS: starting estimator thread 0... [ 736.227758][T21334] IPVS: using max 46 ests per chain, 110400 per kthread [ 739.114336][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5600'. [ 739.179049][T21367] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 743.527057][ T30] audit: type=1400 audit(1759624833.051:1265): avc: denied { read write } for pid=21425 comm="syz.1.5621" name="sg0" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 743.559758][ T30] audit: type=1400 audit(1759624833.051:1266): avc: denied { open } for pid=21425 comm="syz.1.5621" path="/dev/sg0" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 743.584159][ T30] audit: type=1400 audit(1759624833.079:1267): avc: denied { ioctl } for pid=21425 comm="syz.1.5621" path="/dev/sg0" dev="devtmpfs" ino=751 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 744.354925][T21441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.486509][T21441] team0: Mode changed to "loadbalance" [ 744.546142][T21441] netlink: 'syz.9.5623': attribute type 10 has an invalid length. [ 744.600974][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5623'. [ 744.602347][T21441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.635938][T21441] team0: Port device bond0 added [ 744.847941][T21446] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5625'. [ 745.046537][T21443] team0 (unregistering): Port device bond0 removed [ 745.318933][T21446] hsr_slave_1 (unregistering): left promiscuous mode [ 752.430603][T21507] Bluetooth: hci3: command 0x0406 tx timeout [ 752.960871][ T30] audit: type=1400 audit(1759625097.676:1268): avc: denied { read append } for pid=21543 comm="syz.1.5657" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 753.611561][ T30] audit: type=1400 audit(1759625097.686:1269): avc: denied { open } for pid=21543 comm="syz.1.5657" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 754.812337][ T30] audit: type=1400 audit(1759625099.015:1270): avc: denied { ioctl } for pid=21550 comm="syz.1.5658" path="socket:[98435]" dev="sockfs" ino=98435 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 757.214247][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 757.298908][T21507] Bluetooth: hci3: command 0x0406 tx timeout [ 757.392351][ T30] audit: type=1800 audit(1759625102.010:1271): pid=21597 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5671" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 760.210434][T21638] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5682'. [ 762.085879][T21662] 9pnet_fd: Insufficient options for proto=fd [ 768.456115][T21740] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5713'. [ 768.470230][T21740] netlink: zone id is out of range [ 768.476480][T21740] netlink: zone id is out of range [ 768.482931][T21740] netlink: zone id is out of range [ 768.489159][T21740] netlink: get zone limit has 8 unknown bytes [ 768.655724][T21748] tipc: Enabling of bearer rejected, failed to enable media [ 769.802510][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5719'. [ 771.403215][T21780] syz_tun: entered allmulticast mode [ 771.423910][T21780] dvmrp1: entered allmulticast mode [ 771.713149][T21778] syz_tun: left allmulticast mode [ 774.416578][ T30] audit: type=1400 audit(1759625117.967:1272): avc: denied { ioctl } for pid=21806 comm="syz.9.5734" path="socket:[99342]" dev="sockfs" ino=99342 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 774.633093][T21812] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5735'. [ 774.802251][ T30] audit: type=1400 audit(1759625118.322:1273): avc: denied { lock } for pid=21814 comm="syz.9.5736" path="socket:[99358]" dev="sockfs" ino=99358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 777.227381][T21847] netlink: 'syz.1.5744': attribute type 3 has an invalid length. [ 777.816358][T21846] dummy0: left promiscuous mode [ 778.520383][T21846] bond_slave_0: left promiscuous mode [ 778.525858][T21846] bond_slave_0: left allmulticast mode [ 779.294735][T21846] bond1: left promiscuous mode [ 779.323100][T21858] tipc: Enabling of bearer rejected, failed to enable media [ 779.389292][T11052] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.398543][T11052] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.407806][T11052] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.417270][T11052] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.590079][T21871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5750'. [ 782.684739][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5762'. [ 783.428098][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 783.434507][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.273561][T21961] netlink: 'syz.1.5774': attribute type 1 has an invalid length. [ 787.475335][T21961] bond1: entered promiscuous mode [ 787.480605][T21961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.094524][ T30] audit: type=1400 audit(1759625130.199:1274): avc: denied { create } for pid=21960 comm="syz.1.5774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 788.118462][ T30] audit: type=1400 audit(1759625130.789:1275): avc: denied { write } for pid=21960 comm="syz.1.5774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 788.164247][T21966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 788.283037][T21966] bond1: (slave bond2): making interface the new active one [ 788.402941][T21966] bond2: entered promiscuous mode [ 788.410827][T21966] bond1: (slave bond2): Enslaving as an active interface with an up link [ 788.550423][T21969] geneve2: entered promiscuous mode [ 788.555827][T21969] geneve2: entered allmulticast mode [ 788.671709][T21967] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 788.685097][T21967] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 789.374254][ T5893] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 789.436877][T21990] netlink: 1276 bytes leftover after parsing attributes in process `syz.7.5782'. [ 789.620015][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 789.627502][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 789.637395][ T5893] usb 2-1: config 46 has an invalid interface number: 136 but max is 0 [ 789.647368][ T5893] usb 2-1: config 46 contains an unexpected descriptor of type 0x1, skipping [ 789.667540][ T5893] usb 2-1: config 46 has no interface number 0 [ 789.716823][ T5893] usb 2-1: config 46 interface 136 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 789.728186][ T5893] usb 2-1: config 46 interface 136 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 789.814100][ T5893] usb 2-1: New USB device found, idVendor=1410, idProduct=a012, bcdDevice=96.94 [ 789.823512][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.315863][ T5893] usb 2-1: Product: syz [ 790.326722][ T5893] usb 2-1: Manufacturer: syz [ 790.339434][ T5893] usb 2-1: SerialNumber: syz [ 790.921119][ T5893] usb 2-1: USB disconnect, device number 44 [ 790.942643][T22016] tipc: Enabling of bearer rejected, failed to enable media [ 793.671737][T22047] netlink: 'syz.9.5799': attribute type 9 has an invalid length. [ 799.361861][ T30] audit: type=1400 audit(1759625141.252:1276): avc: denied { accept } for pid=22130 comm="syz.6.5825" lport=48250 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 799.450051][ T30] audit: type=1400 audit(1759625141.252:1277): avc: denied { read } for pid=22130 comm="syz.6.5825" lport=48250 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 799.863419][T22143] trusted_key: encrypted_key: hex blob is missing [ 800.147407][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5828'. [ 802.757178][T22183] ptrace attach of "./syz-executor exec"[12393] was attempted by " [ 810.301089][T22266] 9pnet_fd: Insufficient options for proto=fd [ 810.590763][ T30] audit: type=1400 audit(1759625151.809:1278): avc: denied { map } for pid=22272 comm="syz.6.5869" path="socket:[99860]" dev="sockfs" ino=99860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 810.614313][ T30] audit: type=1400 audit(1759625151.809:1279): avc: denied { read } for pid=22272 comm="syz.6.5869" path="socket:[99860]" dev="sockfs" ino=99860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 812.663431][T22322] nfs4: Deprecated parameter 'intr' [ 812.668701][T22322] nfs4: Unknown parameter 'smackfsroot' [ 812.749132][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5878'. [ 813.227080][T22328] team0: entered promiscuous mode [ 813.476468][T22328] team_slave_0: entered promiscuous mode [ 813.500037][T22328] team_slave_1: entered promiscuous mode [ 813.533752][T22328] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 814.420389][T22328] bridge0: port 4(macvlan0) entered blocking state [ 814.486214][T22328] bridge0: port 4(macvlan0) entered disabled state [ 814.492864][T22328] macvlan0: entered allmulticast mode [ 814.582906][T22328] macvlan0: entered promiscuous mode [ 814.732401][T22343] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5883'. [ 816.915786][ T30] audit: type=1400 audit(1759625157.705:1280): avc: denied { read write } for pid=22365 comm="syz.1.5888" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 816.956619][ T30] audit: type=1400 audit(1759625157.705:1281): avc: denied { open } for pid=22365 comm="syz.1.5888" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 817.190813][ T30] audit: type=1400 audit(1759625157.705:1282): avc: denied { ioctl } for pid=22365 comm="syz.1.5888" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 827.236856][T22498] syzkaller0: entered promiscuous mode [ 827.255240][T22498] syzkaller0: entered allmulticast mode [ 830.259531][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.335243][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.449612][ T30] audit: type=1400 audit(1759625170.405:1283): avc: denied { setopt } for pid=22500 comm="syz.7.5925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 831.239900][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.411221][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.297222][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.331388][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.152204][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.408422][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.781710][ T50] bridge_slave_1: left allmulticast mode [ 835.807226][ T50] bridge_slave_1: left promiscuous mode [ 835.831624][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.906535][ T50] bridge_slave_0: left allmulticast mode [ 835.947558][ T50] bridge_slave_0: left promiscuous mode [ 836.002559][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.679682][ T50] batman_adv: batadv0: Interface deactivated: gretap1 [ 836.862571][ T50] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 837.496846][ T50] batman_adv: batadv0: Removing interface: gretap1 [ 839.530718][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.544760][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.554954][ T50] bond0 (unregistering): Released all slaves [ 839.569822][ T50] bond1 (unregistering): Released all slaves [ 839.638619][ T50] bond2 (unregistering): Released all slaves [ 841.147674][ T50] bond3 (unregistering): Released all slaves [ 841.733905][ T30] audit: type=1400 audit(1759625180.943:1284): avc: denied { read } for pid=22645 comm="syz.6.5967" lport=48715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 841.925355][ T50] bond4 (unregistering): Released all slaves [ 842.823789][ T50] hsr_slave_0: left promiscuous mode [ 843.428589][ T50] hsr_slave_1: left promiscuous mode [ 843.435523][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.456994][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.466271][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.473972][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.508590][ T50] veth1_macvtap: left promiscuous mode [ 843.514877][ T50] veth0_macvtap: left promiscuous mode [ 843.520839][ T50] veth1_vlan: left promiscuous mode [ 843.526229][ T50] veth0_vlan: left promiscuous mode [ 843.860212][T22678] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 843.881802][T22678] overlayfs: failed to set xattr on upper [ 843.887565][T22678] overlayfs: ...falling back to redirect_dir=nofollow. [ 843.898303][T22678] overlayfs: ...falling back to index=off. [ 843.904797][T22678] overlayfs: ...falling back to uuid=null. [ 843.912181][T22681] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 844.928514][ T50] team0 (unregistering): Port device team_slave_1 removed [ 844.972072][ T50] team0 (unregistering): Port device team_slave_0 removed [ 845.939674][ T30] audit: type=1400 audit(1759625184.753:1285): avc: denied { append } for pid=22688 comm="syz.1.5978" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 845.985065][ T50] team0 (unregistering): Port device dummy0 removed [ 846.418925][T22669] syz_tun: entered allmulticast mode [ 846.424752][T22669] syz_tun: left allmulticast mode [ 846.449636][T22671] dvmrp1: entered allmulticast mode [ 846.611227][T22709] netlink: 'syz.8.5984': attribute type 1 has an invalid length. [ 846.815515][T22709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 847.264335][T22709] bond2: (slave bond3): making interface the new active one [ 847.272265][T22709] bond2: (slave bond3): Enslaving as an active interface with an up link [ 847.307872][T22718] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 847.343465][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5984'. [ 847.355928][T22709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 847.416222][ T50] IPVS: stop unused estimator thread 0... [ 847.425489][ T30] audit: type=1326 audit(1759625186.278:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 847.481770][ T30] audit: type=1326 audit(1759625186.278:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 847.574862][ T30] audit: type=1326 audit(1759625186.278:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 847.710320][ T30] audit: type=1326 audit(1759625186.278:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 847.811598][ T30] audit: type=1326 audit(1759625186.278:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 847.840647][ T30] audit: type=1326 audit(1759625186.278:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 848.143935][ T30] audit: type=1326 audit(1759625186.278:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 848.449739][ T30] audit: type=1326 audit(1759625186.278:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 848.475341][ T30] audit: type=1326 audit(1759625186.278:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 848.499665][ T30] audit: type=1326 audit(1759625186.278:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 848.628961][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 848.636504][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.992549][T22786] Invalid ELF header magic: != ELF [ 853.321298][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 853.321314][ T30] audit: type=1400 audit(1759625191.482:1311): avc: denied { module_load } for pid=22777 comm="syz.1.6003" path="/149/bus" dev="tmpfs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 859.039692][ T30] audit: type=1400 audit(1759625197.135:1312): avc: denied { read write } for pid=22850 comm="syz.1.6027" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 859.064848][ T30] audit: type=1400 audit(1759625197.135:1313): avc: denied { open } for pid=22850 comm="syz.1.6027" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 859.116741][ T30] audit: type=1400 audit(1759625197.135:1314): avc: denied { ioctl } for pid=22850 comm="syz.1.6027" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 861.941884][T22895] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6037'. [ 862.002716][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6037'. [ 864.086161][T22918] netlink: 'syz.1.6045': attribute type 1 has an invalid length. [ 864.174692][T22918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 864.203705][T22920] vlan2: entered promiscuous mode [ 864.214485][T22920] bond3: entered promiscuous mode [ 864.242247][T22920] vlan2: entered allmulticast mode [ 864.265857][T22920] bond3: entered allmulticast mode [ 864.311899][T22918] bond3: (slave gretap1): making interface the new active one [ 864.329917][T22918] gretap1: entered promiscuous mode [ 864.347902][T22918] gretap1: entered allmulticast mode [ 864.377699][T22918] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 864.556122][T22923] fuse: Bad value for 'user_id' [ 864.582668][T22923] fuse: Bad value for 'user_id' [ 864.667772][ T30] audit: type=1400 audit(1759625202.422:1315): avc: denied { ioctl } for pid=22921 comm="syz.1.6046" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 866.823234][ T5914] IPVS: starting estimator thread 0... [ 867.220701][ T30] audit: type=1804 audit(1759625204.809:1316): pid=22955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.6056" name="file0" dev="tmpfs" ino=2215 res=1 errno=0 [ 867.246854][T22953] IPVS: using max 51 ests per chain, 122400 per kthread [ 867.383703][T22960] vlan0: entered promiscuous mode [ 867.415368][T22960] vlan0: entered allmulticast mode [ 867.420912][ T30] audit: type=1800 audit(1759625204.809:1317): pid=22955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.6056" name="file0" dev="tmpfs" ino=2215 res=0 errno=0 [ 867.482077][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6057'. [ 868.935981][T22982] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6065'. [ 871.399850][T23014] futex_wake_op: syz.1.6073 tries to shift op by 32; fix this program [ 872.966491][T23031] : entered promiscuous mode [ 873.764807][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6081'. [ 875.090287][T23053] netlink: 'syz.6.6086': attribute type 1 has an invalid length. [ 875.333880][T23059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6086'. [ 876.598240][T23059] bond5: entered promiscuous mode [ 877.092276][T23059] bond5: entered allmulticast mode [ 877.120812][T23059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 877.773017][T23082] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.6092'. [ 877.813190][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6092'. [ 880.689834][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6103'. [ 880.713954][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6103'. [ 882.318562][T23137] bond0: (slave wlan1): Releasing backup interface [ 882.348415][T23137] mac80211_hwsim hwsim20 wlan1 (unregistering): left allmulticast mode [ 883.636526][ T5914] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 884.053433][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 884.534096][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.545399][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 884.813241][ T5914] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 885.282054][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.302517][ T5914] usb 2-1: config 0 descriptor?? [ 886.771476][ T5914] HID 045e:07da: Invalid code 65791 type 1 [ 887.056599][ T5914] HID 045e:07da: Invalid code 768 type 1 [ 887.062794][ T5914] HID 045e:07da: Invalid code 769 type 1 [ 887.068663][ T5914] HID 045e:07da: Invalid code 770 type 1 [ 887.074530][ T5914] HID 045e:07da: Invalid code 771 type 1 [ 887.080824][T23186] hugetlbfs: syz.8.6121 (23186): Using mlock ulimits for SHM_HUGETLB is obsolete [ 887.099380][ T5914] HID 045e:07da: Invalid code 772 type 1 [ 887.099517][T23189] netlink: 'syz.9.6122': attribute type 10 has an invalid length. [ 887.113078][ T5914] HID 045e:07da: Invalid code 773 type 1 [ 887.118733][ T5914] HID 045e:07da: Invalid code 774 type 1 [ 887.124691][ T5914] HID 045e:07da: Invalid code 775 type 1 [ 887.130574][ T5914] HID 045e:07da: Invalid code 776 type 1 [ 887.143349][ T5914] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0033/input/input42 [ 887.156746][T23189] batman_adv: batadv0: Adding interface: wlan0 [ 887.498367][T23189] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.528806][T23189] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 887.542224][ T5914] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 887.574506][ T5914] usb 2-1: USB disconnect, device number 45 [ 888.377393][T23214] tipc: Enabled bearer , priority 0 [ 894.391577][T23297] vxcan1: tx drop: invalid da for name 0x0000000000000004 [ 898.506502][ T30] audit: type=1400 audit(1759625234.093:1318): avc: denied { ioctl } for pid=23333 comm="syz.1.6165" path="socket:[103132]" dev="sockfs" ino=103132 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 899.966444][T15734] Bluetooth: hci3: command 0x0406 tx timeout [ 903.340442][ T30] audit: type=1400 audit(1759625238.623:1319): avc: denied { watch } for pid=23391 comm="syz.8.6178" path="/437/file0" dev="tmpfs" ino=2367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 904.046426][ T30] audit: type=1326 audit(1759625239.128:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23395 comm="syz.1.6179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f567bb8eec9 code=0x0 [ 905.124890][ T30] audit: type=1400 audit(1759625240.251:1321): avc: denied { create } for pid=23414 comm="syz.6.6185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 905.144562][ T30] audit: type=1400 audit(1759625240.251:1322): avc: denied { setopt } for pid=23414 comm="syz.6.6185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 905.321400][T23426] overlayfs: failed to clone upperpath [ 907.057523][T23455] veth0: entered promiscuous mode [ 907.146012][T23453] veth0: left promiscuous mode [ 908.136045][T15734] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 908.708627][ T30] audit: type=1804 audit(1759625243.565:1323): pid=23475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.6201" name="file0" dev="ramfs" ino=103822 res=1 errno=0 [ 911.962258][T23512] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6211'. [ 914.356707][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 914.363639][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 914.697423][ T30] audit: type=1400 audit(1759625249.236:1324): avc: denied { read } for pid=23538 comm="syz.1.6218" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 914.819865][ T30] audit: type=1400 audit(1759625249.236:1325): avc: denied { open } for pid=23538 comm="syz.1.6218" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 914.866400][ T30] audit: type=1400 audit(1759625249.245:1326): avc: denied { ioctl } for pid=23538 comm="syz.1.6218" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 916.073645][T23553] netlink: 'syz.8.6220': attribute type 2 has an invalid length. [ 916.081796][T23553] netlink: 'syz.8.6220': attribute type 1 has an invalid length. [ 916.093716][T23553] netlink: 'syz.8.6220': attribute type 1 has an invalid length. [ 918.688394][T23581] netlink: 'syz.6.6225': attribute type 2 has an invalid length. [ 918.719685][T23581] netlink: 'syz.6.6225': attribute type 1 has an invalid length. [ 918.737582][T23581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6225'. [ 918.849210][ T30] audit: type=1400 audit(1759625253.055:1327): avc: denied { write } for pid=23578 comm="syz.1.6228" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 919.119165][T23588] netlink: 'syz.9.6232': attribute type 10 has an invalid length. [ 919.260196][T23588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.269127][T23588] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 920.843511][T23603] overlayfs: failed to clone upperpath [ 923.439890][T23639] tipc: Enabling of bearer rejected, failed to enable media [ 923.599974][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6246'. [ 930.947173][T23722] batadv_slave_0: entered promiscuous mode [ 930.955632][T23719] overlayfs: failed to clone upperpath [ 934.927772][T23762] netlink: 'syz.8.6285': attribute type 4 has an invalid length. [ 934.935640][T23762] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6285'. [ 934.945479][T23762] : renamed from bond0 [ 935.041295][ T30] audit: type=1326 audit(1759625268.282:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 935.411311][ T30] audit: type=1326 audit(1759625268.310:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 935.526328][ T30] audit: type=1326 audit(1759625268.310:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 936.007281][ T30] audit: type=1326 audit(1759625268.310:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 936.286973][ T30] audit: type=1326 audit(1759625268.310:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 936.311984][ T30] audit: type=1326 audit(1759625268.310:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 936.351996][ T30] audit: type=1326 audit(1759625268.310:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 936.954104][ T30] audit: type=1326 audit(1759625268.310:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 936.979230][ T30] audit: type=1326 audit(1759625268.310:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 937.053951][ T30] audit: type=1326 audit(1759625268.310:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.6.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 937.705877][T23799] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 937.725217][T23799] SELinux: failed to load policy [ 939.819270][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6299'. [ 940.473175][T23819] syz.6.6299 (23819) used greatest stack depth: 18872 bytes left [ 941.253630][T23833] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6301'. [ 941.620848][T23830] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6301'. [ 942.562134][T23849] netlink: 'syz.6.6307': attribute type 4 has an invalid length. [ 942.747853][T23854] overlayfs: failed to clone upperpath [ 942.960358][T23861] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6310'. [ 945.745855][T23887] netlink: 'syz.1.6312': attribute type 11 has an invalid length. [ 946.364835][T23901] overlayfs: failed to clone upperpath [ 949.306681][T23939] tipc: Enabling of bearer rejected, failed to enable media [ 951.196665][T23969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6342'. [ 952.289999][T23987] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6348'. [ 952.457936][T23990] tipc: Started in network mode [ 952.467072][T23990] tipc: Node identity fa213b1f0482, cluster identity 4711 [ 952.585099][T23990] tipc: Enabled bearer , priority 0 [ 952.596877][T23994] syzkaller0: entered promiscuous mode [ 952.602910][T23994] syzkaller0: entered allmulticast mode [ 953.181542][T23990] tipc: Resetting bearer [ 953.197207][T23988] tipc: Resetting bearer [ 953.241823][T23988] tipc: Disabling bearer [ 954.079718][T24010] netlink: 'syz.1.6355': attribute type 10 has an invalid length. [ 954.094786][T24010] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 954.372845][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 954.372861][ T30] audit: type=1804 audit(1759625286.288:1350): pid=24019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6357" name="file0" dev="ramfs" ino=105240 res=1 errno=0 [ 955.907592][ T5914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5914 comm=kworker/1:4 [ 956.030989][T24041] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 959.174865][T24071] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 960.509433][ T30] audit: type=1804 audit(1759625292.100:1351): pid=24085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.6375" name="file0" dev="ramfs" ino=104428 res=1 errno=0 [ 960.895803][T24087] tipc: Enabled bearer , priority 0 [ 960.919925][T24087] syzkaller0: entered promiscuous mode [ 960.940418][T24087] syzkaller0: entered allmulticast mode [ 961.203035][T24088] tipc: Resetting bearer [ 961.230278][T24086] tipc: Resetting bearer [ 961.389496][T24086] tipc: Disabling bearer [ 961.635919][T24101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6381'. [ 961.699582][T24104] ref_ctr increment failed for inode: 0xedc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88806471cb40 [ 962.463245][T24101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6381'. [ 963.934423][T24129] tipc: Enabling of bearer rejected, failed to enable media [ 964.440023][T24146] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6395'. [ 965.247993][ T30] audit: type=1400 audit(1759625296.555:1352): avc: denied { map } for pid=24154 comm="syz.1.6399" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 965.882210][ T30] audit: type=1400 audit(1759625296.555:1353): avc: denied { execute } for pid=24154 comm="syz.1.6399" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 966.303047][T24174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6404'. [ 969.141551][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6414'. [ 969.171707][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6414'. [ 969.297279][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6414'. [ 971.444912][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 971.690618][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 971.702865][ T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 972.096777][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.112879][ T9] usb 2-1: config 0 has no interface number 0 [ 972.128752][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 972.140670][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 972.152788][ T9] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 972.166689][ T9] usb 2-1: config 0 interface 52 has no altsetting 0 [ 972.175297][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 972.194335][ T9] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 972.221570][ T9] usb 2-1: Product: syz [ 972.228639][ T9] usb 2-1: SerialNumber: syz [ 972.237567][ T9] usb 2-1: config 0 descriptor?? [ 972.712724][ T9] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 972.728680][ T9] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 973.333957][ T9] usb 2-1: USB disconnect, device number 46 [ 974.940550][T24308] : entered promiscuous mode [ 975.006851][T15734] Bluetooth: Wrong link type (-71) [ 976.386850][T24321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 976.401052][T24321] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 979.444768][ T30] audit: type=1400 audit(1759625309.845:1354): avc: denied { write } for pid=24345 comm="syz.8.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 979.898090][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 979.904442][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 979.919164][T24353] trusted_key: encrypted_key: insufficient parameters specified [ 980.986163][ T30] audit: type=1400 audit(1759625311.286:1355): avc: denied { setopt } for pid=24362 comm="syz.1.6453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 981.901968][T24362] delete_channel: no stack [ 982.143842][T24378] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6455'. [ 986.399903][ T30] audit: type=1400 audit(1759625316.331:1356): avc: denied { accept } for pid=24431 comm="syz.7.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 990.475924][T24472] batadv_slave_0: entered promiscuous mode [ 995.469695][ T30] audit: type=1400 audit(1759625324.838:1357): avc: denied { ioctl } for pid=24524 comm="syz.6.6496" path="socket:[106323]" dev="sockfs" ino=106323 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 997.630087][T24548] tipc: Enabled bearer , priority 0 [ 997.638313][T24548] syzkaller0: entered promiscuous mode [ 997.643799][T24548] syzkaller0: entered allmulticast mode [ 997.876892][T24555] tipc: Resetting bearer [ 997.893472][ T30] audit: type=1400 audit(1759625327.103:1358): avc: denied { setattr } for pid=24551 comm="syz.9.6503" name="" dev="pipefs" ino=107648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 998.125772][T24547] tipc: Resetting bearer [ 998.403203][T24547] tipc: Disabling bearer [ 998.760259][ T30] audit: type=1326 audit(1759625327.927:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24568 comm="syz.7.6511" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f674818eec9 code=0x0 [ 1001.026741][T24597] netlink: 165 bytes leftover after parsing attributes in process `syz.7.6516'. [ 1003.386022][ T30] audit: type=1804 audit(1759625332.241:1360): pid=24631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.6523" name="file0" dev="ramfs" ino=106471 res=1 errno=0 [ 1005.456382][T24649] team0: left promiscuous mode [ 1005.471029][T24649] team_slave_0: left promiscuous mode [ 1005.653134][T24649] team_slave_1: left promiscuous mode [ 1007.768545][ T30] audit: type=1804 audit(1759625336.350:1361): pid=24675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.6536" name="/newroot/242/file1" dev="fuse" ino=1 res=1 errno=0 [ 1008.436358][ T30] audit: type=1800 audit(1759625336.874:1362): pid=24675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.6536" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1011.750498][T24688] 9pnet_fd: Insufficient options for proto=fd [ 1014.554113][ T30] audit: type=1804 audit(1759625342.704:1363): pid=24720 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.6544" name="file0" dev="ramfs" ino=107821 res=1 errno=0 [ 1016.749362][T24749] netlink: 165 bytes leftover after parsing attributes in process `syz.9.6552'. [ 1018.806244][T24755] orangefs_mount: mount request failed with -4 [ 1019.446057][T24796] overlayfs: failed to clone upperpath [ 1019.652349][T24800] overlayfs: failed to clone upperpath [ 1020.206255][T24793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6561'. [ 1022.946218][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1022.957359][T24836] tipc: Enabling of bearer rejected, failed to enable media [ 1023.150505][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1023.163332][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1023.178823][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1023.198592][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1023.313800][ T9] usb 2-1: Product: syz [ 1023.318003][ T9] usb 2-1: Manufacturer: syz [ 1023.337740][ T9] usb 2-1: SerialNumber: syz [ 1023.351308][ T9] usb 2-1: config 0 descriptor?? [ 1023.957595][ T9] usb 2-1: selecting invalid altsetting 0 [ 1024.098633][ T5875] usb 2-1: USB disconnect, device number 47 [ 1025.059940][T24857] netlink: 165 bytes leftover after parsing attributes in process `syz.6.6580'. [ 1027.505110][T24884] Bluetooth: MGMT ver 1.23 [ 1029.400632][T24912] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1029.408003][T24912] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1029.499704][T24904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24904 comm=syz.1.6592 [ 1029.512466][T24904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24904 comm=syz.1.6592 [ 1029.757255][T24908] siw: device registration error -23 [ 1032.718759][T24944] tipc: Enabled bearer , priority 0 [ 1032.748399][T24944] syzkaller0: entered promiscuous mode [ 1032.765353][T24944] syzkaller0: entered allmulticast mode [ 1033.287164][T24944] tipc: Resetting bearer [ 1033.309936][T24943] tipc: Resetting bearer [ 1033.430506][T24943] tipc: Disabling bearer [ 1034.159930][ T30] audit: type=1326 audit(1759625362.040:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1034.759526][ T30] audit: type=1326 audit(1759625362.040:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1034.988621][T24988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6617'. [ 1035.149784][T24988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6617'. [ 1035.185898][ T30] audit: type=1326 audit(1759625362.040:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1035.191054][T24988] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6617'. [ 1035.257095][ T30] audit: type=1326 audit(1759625362.040:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1035.414945][T24996] netlink: 296 bytes leftover after parsing attributes in process `syz.1.6618'. [ 1035.579941][T24988] 9pnet_fd: Insufficient options for proto=fd [ 1035.607732][ T30] audit: type=1326 audit(1759625362.040:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1035.727368][ T30] audit: type=1326 audit(1759625362.049:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1035.757448][ T30] audit: type=1326 audit(1759625362.049:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1035.793705][ T30] audit: type=1326 audit(1759625362.049:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1035.831878][ T30] audit: type=1326 audit(1759625362.049:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1035.861438][ T30] audit: type=1326 audit(1759625362.049:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24968 comm="syz.9.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69098eec9 code=0x7ffc0000 [ 1037.539339][T25018] tipc: Enabling of bearer rejected, failed to enable media [ 1038.153396][T25031] tipc: Enabling of bearer rejected, failed to enable media [ 1038.253687][T25034] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6629'. [ 1040.524081][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1040.530189][ T30] audit: type=1400 audit(1759625368.002:1381): avc: denied { setopt } for pid=25052 comm="syz.9.6635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1042.458927][T25087] tipc: Enabling of bearer rejected, failed to enable media [ 1042.740819][T25100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6644'. [ 1043.194235][ T30] audit: type=1400 audit(1759625370.426:1382): avc: denied { create } for pid=25099 comm="syz.9.6644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1044.881952][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6652'. [ 1044.893772][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6652'. [ 1044.903759][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6652'. [ 1044.912695][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6652'. [ 1045.292872][T25133] tipc: Cannot configure node identity twice [ 1045.537256][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.543655][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1047.459258][T25159] Device name cannot be null; rc = [-22] [ 1047.546317][T25160] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6659'. [ 1048.061646][T25159] syz.1.6658 (25159): attempted to duplicate a private mapping with mremap. This is not supported. [ 1050.082159][T25193] tipc: Enabling of bearer rejected, failed to enable media [ 1050.122050][ T30] audit: type=1400 audit(1759625376.996:1383): avc: denied { override_creds } for pid=25188 comm="syz.6.6668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1050.153880][T25184] syzkaller0: entered promiscuous mode [ 1050.159368][T25184] syzkaller0: entered allmulticast mode [ 1051.152209][T25212] tipc: Enabled bearer , priority 0 [ 1051.166529][T25212] syzkaller0: entered promiscuous mode [ 1051.196926][T25212] syzkaller0: entered allmulticast mode [ 1051.562744][T25212] tipc: Resetting bearer [ 1051.586993][T25210] tipc: Resetting bearer [ 1051.673137][T25210] tipc: Disabling bearer [ 1051.709962][T25223] tipc: Enabled bearer , priority 0 [ 1051.784810][T25225] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6677'. [ 1051.938273][ T30] audit: type=1400 audit(1759625378.690:1384): avc: denied { create } for pid=25232 comm="syz.6.6682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1051.963337][ T30] audit: type=1400 audit(1759625378.708:1385): avc: denied { write } for pid=25232 comm="syz.6.6682" path="socket:[108396]" dev="sockfs" ino=108396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1054.764495][T25274] netlink: 'syz.7.6692': attribute type 1 has an invalid length. [ 1057.657369][T25299] Process accounting resumed [ 1058.589005][T25274] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1058.648776][T25311] netlink: 5668 bytes leftover after parsing attributes in process `syz.6.6702'. [ 1059.565829][ T30] audit: type=1400 audit(1759625385.831:1386): avc: denied { ioctl } for pid=25327 comm="syz.1.6709" path="/dev/ptyq7" dev="devtmpfs" ino=125 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1060.862974][T25326] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.331095][T25326] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.985248][T25326] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.128595][T25326] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.172716][T25362] tipc: Enabling of bearer rejected, already enabled [ 1062.292150][T25365] tipc: Enabling of bearer rejected, failed to enable media [ 1062.368507][T11051] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.455114][T25369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1062.481271][T25363] bridge0: entered promiscuous mode [ 1062.487190][T25363] macsec1: entered promiscuous mode [ 1062.493770][T25363] bridge0: port 1(macsec1) entered blocking state [ 1062.500444][T25363] bridge0: port 1(macsec1) entered disabled state [ 1062.507319][T25363] macsec1: entered allmulticast mode [ 1062.524134][T25363] bridge0: entered allmulticast mode [ 1062.589480][T25363] macsec1: left allmulticast mode [ 1062.594545][T25363] bridge0: left allmulticast mode [ 1062.617701][T25363] bridge0: left promiscuous mode [ 1063.190132][ T2925] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.343935][T25372] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1063.355740][ T36] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1063.408722][T25369] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1063.471673][T25369] bond6: (slave macvlan2): Enslaving as a backup interface with a down link [ 1063.485263][T11051] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1063.497948][ T2123] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.543961][ T3487] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.626562][T25378] tipc: Enabling of bearer rejected, already enabled [ 1064.004809][ T30] audit: type=1400 audit(1759625389.977:1387): avc: denied { accept } for pid=25381 comm="syz.6.6724" path="socket:[109725]" dev="sockfs" ino=109725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1066.744346][T25421] tipc: Enabling of bearer rejected, failed to enable media [ 1067.469045][T25428] batadv_slave_0: entered promiscuous mode [ 1067.497112][T25428] batadv_slave_0: left allmulticast mode [ 1067.617976][T25436] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6738'. [ 1067.727178][T25432] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1069.574968][ T30] audit: type=1326 audit(1759625395.190:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25456 comm="syz.9.6745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd69098eec9 code=0x0 [ 1069.656601][T25465] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6747'. [ 1072.036604][T25487] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6752'. [ 1072.680073][T25499] tipc: Enabling of bearer rejected, failed to enable media [ 1073.010753][T25515] pimreg: entered allmulticast mode [ 1074.754049][T25528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=25528 comm=syz.9.6763 [ 1080.783666][T25597] delete_channel: no stack [ 1080.918313][T25600] tipc: Enabling of bearer rejected, failed to enable media [ 1081.162518][T25612] overlayfs: failed to clone upperpath [ 1083.178644][T25629] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6788'. [ 1087.933160][ T5955] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1088.360867][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 1088.370983][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.382795][ T5955] usb 2-1: config 0 has no interfaces? [ 1088.817118][ T5955] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1088.826278][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.842465][ T5955] usb 2-1: config 0 descriptor?? [ 1088.886230][T25683] netlink: 'syz.9.6804': attribute type 1 has an invalid length. [ 1088.906154][T25684] overlayfs: failed to clone upperpath [ 1089.557682][ T5955] usb 2-1: USB disconnect, device number 48 [ 1091.592280][ T30] audit: type=1400 audit(1759625415.798:1389): avc: denied { create } for pid=25703 comm="syz.1.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1091.736361][ T30] audit: type=1400 audit(1759625415.798:1390): avc: denied { setopt } for pid=25703 comm="syz.1.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1092.409134][T25716] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6812'. [ 1096.272008][T25763] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1096.282411][T25763] macsec1: entered promiscuous mode [ 1096.451963][T25763] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1097.484376][ T30] audit: type=1400 audit(1759625421.208:1391): avc: denied { ioctl } for pid=25778 comm="syz.8.6830" path="socket:[110180]" dev="sockfs" ino=110180 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1097.525777][ T30] audit: type=1400 audit(1759625421.208:1392): avc: denied { ioctl } for pid=25778 comm="syz.8.6830" path="socket:[110842]" dev="sockfs" ino=110842 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1099.015681][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.029675][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.040698][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.051342][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.063806][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.078329][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.095459][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.110806][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.126109][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1099.140817][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6834'. [ 1111.833505][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1111.962293][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1114.730790][T25960] __nla_validate_parse: 37 callbacks suppressed [ 1114.730802][T25960] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6879'. [ 1115.899497][ T30] audit: type=1400 audit(1759625438.550:1393): avc: denied { lock } for pid=25970 comm="syz.1.6881" path="socket:[110376]" dev="sockfs" ino=110376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1116.739638][ T30] audit: type=1800 audit(1759625439.327:1394): pid=25981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.6886" name="bus" dev="tmpfs" ino=1606 res=0 errno=0 [ 1119.958304][T26023] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6895'. [ 1119.967907][T26023] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6895'. [ 1124.632593][T26077] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6910'. [ 1124.641953][T26077] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6910'. [ 1124.654679][T26077] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1132.398094][T26187] tipc: Enabling of bearer rejected, failed to enable media [ 1133.174377][T21507] Bluetooth: hci3: command 0x0406 tx timeout [ 1133.307288][T26192] 9pnet_fd: p9_fd_create_tcp (26192): problem connecting socket to 127.0.0.1 [ 1134.620334][ T30] audit: type=1326 audit(1759625456.070:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.212853][ T30] audit: type=1326 audit(1759625456.070:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.276491][ T30] audit: type=1326 audit(1759625456.070:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.303438][ T30] audit: type=1326 audit(1759625456.070:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.327088][ T30] audit: type=1326 audit(1759625456.070:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.350734][ T30] audit: type=1326 audit(1759625456.070:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.457600][ T30] audit: type=1326 audit(1759625456.070:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.576976][ T30] audit: type=1326 audit(1759625456.070:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.714779][ T30] audit: type=1326 audit(1759625456.070:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1135.741149][ T30] audit: type=1326 audit(1759625456.070:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26202 comm="syz.6.6937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9af6d8eec9 code=0x7ffc0000 [ 1139.221605][T26259] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6951'. [ 1139.331793][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6951'. [ 1140.066627][T26272] SQUASHFS error: Failed to read block 0x0: -5 [ 1140.073392][T26272] unable to read squashfs_super_block [ 1141.483223][T26285] batadv_slave_0: left promiscuous mode [ 1143.407292][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1143.407308][ T30] audit: type=1326 audit(1759625464.259:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1143.482848][ T30] audit: type=1326 audit(1759625464.259:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1143.553748][ T30] audit: type=1326 audit(1759625464.268:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1144.018023][ T30] audit: type=1326 audit(1759625464.268:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1144.247379][ T30] audit: type=1326 audit(1759625464.268:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1144.489855][ T30] audit: type=1326 audit(1759625464.268:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1144.528432][ T30] audit: type=1326 audit(1759625464.268:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1144.733375][ T30] audit: type=1326 audit(1759625464.268:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1144.786397][ T30] audit: type=1326 audit(1759625464.268:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1144.810636][ T30] audit: type=1326 audit(1759625464.268:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26312 comm="syz.8.6963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe485b8eec9 code=0x7ffc0000 [ 1144.927958][T26339] overlayfs: failed to clone upperpath [ 1147.668891][ T5893] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1148.002118][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 1148.008645][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.019921][ T5893] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1148.062118][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.120410][ T5893] usb 2-1: config 0 descriptor?? [ 1148.868020][ T5893] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 1148.878383][ T5893] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 1148.885429][ T5893] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 1148.911208][ T5893] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 1148.919639][ T5893] mcp2221 0003:04D8:00DD.0034: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1149.124462][ C0] usb 2-1: input irq status -75 received [ 1149.490594][T26383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.500009][T26383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.519492][T26383] netlink: 'syz.1.6979': attribute type 1 has an invalid length. [ 1150.453185][T26415] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6989'. [ 1150.463670][ T5914] usb 2-1: USB disconnect, device number 49 [ 1150.555878][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1150.555896][ T30] audit: type=1400 audit(1759625470.969:1434): avc: denied { ioctl } for pid=26418 comm="syz.9.6988" path="socket:[112168]" dev="sockfs" ino=112168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1150.608282][T26426] tipc: Started in network mode [ 1150.620793][T26426] tipc: Node identity 7f000001, cluster identity 4711 [ 1150.632371][T26426] tipc: Enabled bearer , priority 10 [ 1150.902813][T26426] tipc: Enabling of bearer rejected, failed to enable media [ 1151.919107][ T5893] tipc: Node number set to 2130706433 [ 1152.333990][T26446] tipc: Enabling of bearer rejected, already enabled [ 1152.783088][T26454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=26454 comm=syz.1.6999 [ 1154.214524][T26457] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1154.710386][ T30] audit: type=1400 audit(1759625474.863:1435): avc: denied { read } for pid=26464 comm="syz.9.7002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1154.921198][T26469] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1155.305635][T26474] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.7003'. [ 1170.534563][T26623] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1170.793857][T26627] dlm: no locking on control device [ 1171.068105][ T30] audit: type=1400 audit(1759625490.165:1436): avc: denied { mount } for pid=26622 comm="syz.6.7041" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1171.520671][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7042'. [ 1171.529860][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7042'. [ 1171.828502][T26637] netlink: 'syz.9.7044': attribute type 1 has an invalid length. [ 1173.215472][T26655] openvswitch: netlink: Message has 16 unknown bytes. [ 1174.307111][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7051'. [ 1174.316103][T26669] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7051'. [ 1177.183973][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.190316][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.190323][ T30] audit: type=1400 audit(1759625495.537:1437): avc: denied { watch_sb } for pid=26691 comm="syz.7.7057" path="/831/file0" dev="tmpfs" ino=4494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1179.313465][T26722] netlink: 'syz.6.7055': attribute type 30 has an invalid length. [ 1179.714027][T26731] tipc: Enabling of bearer rejected, failed to enable media [ 1180.124581][T26745] openvswitch: netlink: Message has 16 unknown bytes. [ 1180.671392][T26749] overlayfs: failed to clone upperpath [ 1180.701301][ T30] audit: type=1400 audit(1759625499.206:1438): avc: denied { write } for pid=26747 comm="syz.8.7069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1180.931235][ T30] audit: type=1400 audit(1759625499.234:1439): avc: denied { ioctl } for pid=26746 comm="syz.9.7068" path="socket:[112527]" dev="sockfs" ino=112527 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1182.816421][T26773] netlink: 'syz.8.7076': attribute type 1 has an invalid length. [ 1182.858202][T26775] random: crng reseeded on system resumption [ 1182.888294][ T30] audit: type=1400 audit(1759625501.218:1440): avc: denied { write } for pid=26768 comm="syz.1.7074" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1182.952764][ T30] audit: type=1400 audit(1759625501.218:1441): avc: denied { ioctl } for pid=26768 comm="syz.1.7074" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1182.976319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1182.989345][T26778] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1182.998642][ T30] audit: type=1400 audit(1759625501.339:1442): avc: denied { getopt } for pid=26777 comm="syz.7.7077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1183.028292][T26778] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 1183.126337][T26773] gretap2: entered promiscuous mode [ 1183.434071][T26773] bond0: (slave gretap2): making interface the new active one [ 1183.601069][T26773] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 1188.840521][ T30] audit: type=1400 audit(1759625507.821:1443): avc: denied { accept } for pid=26847 comm="syz.1.7094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1191.108831][ T30] audit: type=1400 audit(1759625509.918:1444): avc: denied { read } for pid=26873 comm="syz.1.7101" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1191.214582][ T30] audit: type=1400 audit(1759625509.918:1445): avc: denied { open } for pid=26873 comm="syz.1.7101" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1194.390300][T26904] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7109'. [ 1195.127405][T26918] PKCS7: Unknown OID: [5] (bad) [ 1195.132841][T26918] PKCS7: Only support pkcs7_signedData type [ 1198.503784][T26944] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.7118'. [ 1201.578100][T26977] netlink: 'syz.6.7127': attribute type 1 has an invalid length. [ 1201.814039][T26977] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1202.259268][T26988] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1202.294514][T26978] bond8: (slave wlan0): Enslaving as an active interface with a down link [ 1202.309989][T26984] vlan2: entered allmulticast mode [ 1202.317487][T26984] veth1: entered allmulticast mode [ 1202.323236][T26984] veth1: entered promiscuous mode [ 1202.351294][T26984] veth1: left promiscuous mode [ 1202.370062][T26984] bond8: (slave vlan2): making interface the new active one [ 1202.380966][T26984] bond8: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1202.403540][T26984] veth1: entered promiscuous mode [ 1202.414302][T26984] vlan2: entered promiscuous mode [ 1202.427074][T26984] bond8: (slave vlan2): Enslaving as an active interface with an up link [ 1203.893665][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7134'. [ 1204.102589][T27008] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7134'. [ 1208.215582][T27058] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7145'. [ 1208.921964][T27059] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7145'. [ 1209.750677][T27079] batman_adv: batadv0: Adding interface: macsec1 [ 1209.757079][T27079] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.782547][T27079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.793029][T27079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.802870][T27079] batman_adv: batadv0: Interface activated: macsec1 [ 1210.481244][ T30] audit: type=1400 audit(1759625528.065:1446): avc: denied { create } for pid=27072 comm="syz.8.7150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1213.927248][T27109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7157'. [ 1220.730290][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1220.765450][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1220.774287][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1220.802298][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1220.816524][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1220.831165][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1220.845793][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1220.860894][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1220.964993][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1221.031996][T27202] netlink: 'syz.6.7175': attribute type 3 has an invalid length. [ 1221.526933][ T12] vlan2: left promiscuous mode [ 1226.000348][T27252] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7188'. [ 1226.509887][ T30] audit: type=1400 audit(1759625542.702:1447): avc: denied { execute_no_trans } for pid=27248 comm="syz.7.7189" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=114985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1227.937237][ T30] audit: type=1400 audit(1759625544.406:1448): avc: denied { setattr } for pid=27261 comm="syz.7.7192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1230.363938][T27291] tmpfs: Unknown parameter 'usrquotaªªªªª [ 1230.363938][T27291] lo' [ 1230.913424][T27299] netlink: 80 bytes leftover after parsing attributes in process `syz.8.7204'. [ 1230.927533][ T30] audit: type=1400 audit(1759625547.204:1449): avc: denied { read } for pid=27301 comm="syz.1.7205" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1230.970417][ T30] audit: type=1400 audit(1759625547.232:1450): avc: denied { open } for pid=27301 comm="syz.1.7205" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1231.000531][ T30] audit: type=1400 audit(1759625547.279:1451): avc: denied { ioctl } for pid=27301 comm="syz.1.7205" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1231.056368][T27307] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7205'. [ 1231.723658][T27316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27316 comm=syz.9.7207 [ 1231.754047][T27316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=27316 comm=syz.9.7207 [ 1231.767117][T27316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27316 comm=syz.9.7207 [ 1231.784921][T27316] IPv6: NLM_F_CREATE should be specified when creating new route [ 1232.446149][T27316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1232.453406][T27316] IPv6: NLM_F_CREATE should be set when creating new route [ 1232.460651][T27316] IPv6: NLM_F_CREATE should be set when creating new route [ 1232.732258][T27331] openvswitch: netlink: Message has 16 unknown bytes. [ 1233.246278][T15734] Bluetooth: hci3: command 0x0406 tx timeout [ 1233.758459][T27348] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1233.765585][T27348] overlayfs: failed to set xattr on upper [ 1233.771354][T27348] overlayfs: ...falling back to redirect_dir=nofollow. [ 1233.778188][T27348] overlayfs: ...falling back to index=off. [ 1233.783994][T27348] overlayfs: ...falling back to uuid=null. [ 1234.474127][T27350] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1234.484832][ T30] audit: type=1326 audit(1759625550.527:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27344 comm="syz.1.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567bb8eec9 code=0x7ffc0000 [ 1234.910503][ T30] audit: type=1326 audit(1759625550.527:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27344 comm="syz.1.7215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567bb8eec9 code=0x7ffc0000 [ 1234.961896][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1234.968175][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1235.361877][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1235.468773][T15734] Bluetooth: hci3: command 0x0406 tx timeout [ 1235.636302][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1236.098978][T27367] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1236.107152][T27367] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1236.423002][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1236.429106][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1236.507976][T27346] ceph: No mds server is up or the cluster is laggy [ 1236.542133][T27370] validate_nla: 36 callbacks suppressed [ 1236.542152][T27370] netlink: 'syz.1.7220': attribute type 1 has an invalid length. [ 1236.635177][T27374] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1236.804226][ T2958] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1236.818992][T27370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1237.714363][T27370] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1237.745045][T27370] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1237.789332][T27370] bond4 (unregistering): Released all slaves [ 1238.279047][T27399] openvswitch: netlink: Message has 16 unknown bytes. [ 1238.803779][T27400] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.7224'. [ 1239.128421][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7230'. [ 1239.212216][T27409] macvtap1: entered promiscuous mode [ 1239.217535][T27409] ip6gretap0: entered promiscuous mode [ 1239.235853][T27413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7230'. [ 1239.283359][T27409] macvtap1: entered allmulticast mode [ 1239.289945][T27409] ip6gretap0: entered allmulticast mode [ 1239.299712][T27413] ip6gretap0: left allmulticast mode [ 1239.305288][T27413] ip6gretap0: left promiscuous mode [ 1241.614969][T27431] netlink: 'syz.6.7235': attribute type 4 has an invalid length. [ 1242.510728][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.517303][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.401997][T27452] overlayfs: failed to clone upperpath [ 1244.532746][T27450] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7237'. [ 1244.633240][T27464] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 1245.981028][T27477] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7246'. [ 1255.925813][T27593] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7275'. [ 1259.880336][T27666] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1259.906473][T27666] CIFS mount error: No usable UNC path provided in device string! [ 1259.906473][T27666] [ 1259.917020][T27666] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1261.709039][T27675] netlink: 'syz.8.7284': attribute type 12 has an invalid length. [ 1262.623030][ T30] audit: type=1800 audit(1759625576.685:1454): pid=27699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.7289" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 1262.788238][T27702] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7290'. [ 1265.661263][T27720] netlink: 4400 bytes leftover after parsing attributes in process `syz.8.7293'. [ 1266.157475][T27720] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 1266.542845][T27734] bridge0: left promiscuous mode [ 1266.552222][T27734] bridge0: left allmulticast mode [ 1267.073908][T27742] sd 0:0:1:0: PR command failed: 1026 [ 1267.081751][T27742] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1267.092187][T27742] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1269.618253][ T30] audit: type=1400 audit(1759625583.414:1455): avc: denied { mount } for pid=27757 comm="syz.1.7303" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1271.067667][ T30] audit: type=1400 audit(1759625584.771:1456): avc: denied { unmount } for pid=19666 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1271.553196][T27782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7306'. [ 1271.563537][T27773] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7306'. [ 1271.782381][T27785] 9pnet_fd: Insufficient options for proto=fd [ 1271.917777][T27785] gretap2: left promiscuous mode [ 1271.928066][T27785] macvtap1: left promiscuous mode [ 1273.695179][T27807] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7316'. [ 1277.768062][T27843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7326'. [ 1278.652368][T27861] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1278.689880][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 1278.696129][ C0] CPU: 0 UID: 0 PID: 27861 Comm: syz.1.7329 Not tainted syzkaller #0 PREEMPT(full) [ 1278.705485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1278.715525][ C0] RIP: 0010:comedi_buf_write_free+0x414/0x720 [ 1278.721588][ C0] Code: 02 00 00 31 d2 f7 74 24 1c 48 8b 54 24 30 48 c1 ea 03 0f b6 14 2a 41 03 44 24 38 84 d2 74 09 80 fa 03 0f 8e 66 02 00 00 31 d2 <41> f7 b4 24 80 00 00 00 48 8b 44 24 48 48 c1 e8 03 41 89 54 24 38 [ 1278.741185][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00010046 [ 1278.747241][ C0] RAX: 0000000000000001 RBX: ffffc90003711000 RCX: ffffffff88bdfdff [ 1278.755198][ C0] RDX: 0000000000000000 RSI: ffffffff88bba620 RDI: 0000000000000004 [ 1278.763154][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 1278.771110][ C0] R10: 0000000000000001 R11: ffff888054e64c3c R12: ffff888054e64c00 [ 1278.779064][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88bdfd40 [ 1278.787032][ C0] FS: 00007f567c9936c0(0000) GS:ffff888124e77000(0000) knlGS:0000000000000000 [ 1278.795945][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1278.802501][ C0] CR2: 0000001b3170dff8 CR3: 000000005669e000 CR4: 00000000003526f0 [ 1278.810446][ C0] DR0: fffffffffffffff1 DR1: 0000000000000000 DR2: 0000000000000000 [ 1278.818385][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1278.826326][ C0] Call Trace: [ 1278.829577][ C0] [ 1278.832395][ C0] comedi_buf_write_samples+0x3fc/0x640 [ 1278.837915][ C0] das16m1_handler+0x203/0x5a0 [ 1278.842658][ C0] das16m1_interrupt+0xb7/0x1c0 [ 1278.847478][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 1278.852910][ C0] __handle_irq_event_percpu+0x233/0x920 [ 1278.858519][ C0] handle_irq_event+0xab/0x1e0 [ 1278.863255][ C0] handle_edge_irq+0x3ca/0x9e0 [ 1278.867991][ C0] __common_interrupt+0xcd/0x2f0 [ 1278.872904][ C0] common_interrupt+0xba/0xe0 [ 1278.877566][ C0] [ 1278.880472][ C0] [ 1278.883388][ C0] asm_common_interrupt+0x26/0x40 [ 1278.888381][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1278.894777][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 66 e8 46 f6 48 89 df e8 4e 3c 47 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 47 37 f6 65 8b 05 9e 3d 2a 08 85 c0 74 16 5b [ 1278.914354][ C0] RSP: 0018:ffffc90010e27a70 EFLAGS: 00000246 [ 1278.920403][ C0] RAX: 0000000000000002 RBX: ffffffff9ab66580 RCX: 0000000000000006 [ 1278.928343][ C0] RDX: 0000000000000000 RSI: ffffffff8d826483 RDI: ffffffff8bd045c0 [ 1278.936283][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000001 [ 1278.944221][ C0] R10: ffffffff905f9797 R11: 0000000000000000 R12: ffffffff8ee383a0 [ 1278.952162][ C0] R13: ffffffff9ab666e0 R14: 0000000000000000 R15: 1ffff920021c4f5d [ 1278.960107][ C0] serial8250_config_port+0x16ab/0x5030 [ 1278.965643][ C0] ? __pfx_serial8250_config_port+0x10/0x10 [ 1278.971511][ C0] ? __pfx___release_region+0x10/0x10 [ 1278.976850][ C0] univ8250_config_port+0x279/0x3b0 [ 1278.982016][ C0] ? serial8250_release_std_resource+0x204/0x2e0 [ 1278.988315][ C0] uart_ioctl+0xfd9/0x2d30 [ 1278.992702][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 1278.997522][ C0] ? rcu_is_watching+0x12/0xc0 [ 1279.002259][ C0] ? irqentry_exit+0x3b/0x90 [ 1279.006819][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1279.011989][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1279.017855][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 1279.022675][ C0] tty_ioctl+0x65e/0x1680 [ 1279.026976][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 1279.031717][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1279.038538][ C0] ? hook_file_ioctl_common+0x145/0x410 [ 1279.044059][ C0] ? selinux_file_ioctl+0x180/0x270 [ 1279.049227][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 1279.054305][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 1279.059040][ C0] __x64_sys_ioctl+0x18e/0x210 [ 1279.063780][ C0] do_syscall_64+0xcd/0x4e0 [ 1279.068254][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.074116][ C0] RIP: 0033:0x7f567bb8eec9 [ 1279.078502][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.098079][ C0] RSP: 002b:00007f567c993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.106459][ C0] RAX: ffffffffffffffda RBX: 00007f567bde6180 RCX: 00007f567bb8eec9 [ 1279.114401][ C0] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000007 [ 1279.122340][ C0] RBP: 00007f567bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1279.130281][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.138221][ C0] R13: 00007f567bde6218 R14: 00007f567bde6180 R15: 00007fff95716a38 [ 1279.146173][ C0] [ 1279.149164][ C0] Modules linked in: [ 1279.153029][ C0] ---[ end trace 0000000000000000 ]--- [ 1279.158449][ C0] RIP: 0010:comedi_buf_write_free+0x414/0x720 [ 1279.164489][ C0] Code: 02 00 00 31 d2 f7 74 24 1c 48 8b 54 24 30 48 c1 ea 03 0f b6 14 2a 41 03 44 24 38 84 d2 74 09 80 fa 03 0f 8e 66 02 00 00 31 d2 <41> f7 b4 24 80 00 00 00 48 8b 44 24 48 48 c1 e8 03 41 89 54 24 38 [ 1279.184068][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00010046 [ 1279.190105][ C0] RAX: 0000000000000001 RBX: ffffc90003711000 RCX: ffffffff88bdfdff [ 1279.198055][ C0] RDX: 0000000000000000 RSI: ffffffff88bba620 RDI: 0000000000000004 [ 1279.205997][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 1279.213937][ C0] R10: 0000000000000001 R11: ffff888054e64c3c R12: ffff888054e64c00 [ 1279.221889][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88bdfd40 [ 1279.229829][ C0] FS: 00007f567c9936c0(0000) GS:ffff888124e77000(0000) knlGS:0000000000000000 [ 1279.238728][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1279.245281][ C0] CR2: 0000001b3170dff8 CR3: 000000005669e000 CR4: 00000000003526f0 [ 1279.253222][ C0] DR0: fffffffffffffff1 DR1: 0000000000000000 DR2: 0000000000000000 [ 1279.261161][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1279.269103][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1279.276461][ C0] Kernel Offset: disabled [ 1279.280757][ C0] Rebooting in 86400 seconds..