last executing test programs: 21.591685474s ago: executing program 0 (id=2135): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r3 = userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 18.233034633s ago: executing program 2 (id=2142): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0xfffffffffffffd01) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r5 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000010000000000000000089924c749135ef5da89278cdc3da25fc808d33c4dcd8a6f9cf800dc75a897932d695236f7ac302b47cd87624972fe4c164b38eb359ba1dc2e2", @ANYRES32=0x0, @ANYBLOB="99c0020000440000"], 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 17.820393051s ago: executing program 0 (id=2143): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x81}, {0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f0000000080)=[{}], 0x1, 0x14, 0x0) 16.658674181s ago: executing program 0 (id=2147): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffe0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0xce76, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50) sendfile(r4, r5, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a0900000000004e22"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) recvmmsg(r7, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400303a00fe880000000000000000000000000001ff0200000000000000000000000102009078000005006050835900006c00fc0100"/102], 0x0) 14.62235139s ago: executing program 0 (id=2148): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x12f) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) syz_open_dev$mouse(&(0x7f00000000c0), 0x400000, 0x42082) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x10001, 0x7, 0x5, 0x82, 0xc, 0xfa, 0x40, 0xca, 0x5, [0x6, 0x0, 0x4b, 0x5f15, 0x0, 0x8a6d, 0xffffffff, 0x2]}}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000005c0)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000940)={{r0}, 0x0, 0x2, @unused=[0xac, 0xffffffff, 0x6, 0x40], @name="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"}) write$FUSE_STATX(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000001180)=""/150) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.775938012s ago: executing program 3 (id=2151): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000060000/0x2000)=nil, 0x2000, 0x1, 0x80050, r2, 0x4733000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x800448d7, &(0x7f0000000080)='|w') shmctl$IPC_RMID(r1, 0x0) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x18) 12.613027573s ago: executing program 3 (id=2153): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) socket$inet6(0xa, 0x3, 0x2) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) futex_waitv(&(0x7f0000001e40)=[{0x1edf, &(0x7f0000000440)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r1, &(0x7f0000000200)="9000", 0xc3ff, 0x844, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 9.310135476s ago: executing program 1 (id=2157): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) fcntl$setown(r1, 0x8, 0xffffffffffffffff) syz_open_dev$video(0x0, 0xa7, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0xffff, 0x5, 0x4, 0x102, 0x803, "000000ffff20001b10000000000800", '\x00', "05030400", "0200", ['\x00', "6cf8ffff18f0f0ff00000100", "f0ffffffffebffff00000010", "fdffffffa240b82dc44d00"]}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008b40), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000008dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000008e00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210927bd7000fbdbdf", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7e) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) fanotify_init(0x40, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0x3, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 8.460588881s ago: executing program 2 (id=2158): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r3 = userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 8.285126692s ago: executing program 1 (id=2159): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket(0x2a, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x482, 0x0) fchdir(r4) openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x694000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000014) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) readv(r6, &(0x7f00000006c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x2, 0x0, 0x0, 0x0, 0x0, 0x1e9]}}, 0x5c) 8.135420745s ago: executing program 0 (id=2160): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x2, &(0x7f0000000100)=[{0x80, 0x0, 0x2, 0xfffffffe}, {0x6}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004000625eca60a2f7240b5b73827a942e2801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x80}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) 8.058346134s ago: executing program 3 (id=2161): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4) sendmmsg$inet6(r2, &(0x7f0000001a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x24044000) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001300), 0x4100, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000001340)='nl80211\x00', &(0x7f0000001380)="deb1af3ac15c1510adfc328f2510c1a60346d14fd2fd33d8f5a345e33b7b4d4602c7d8e663826f5112d8a48eb4609ecd61041c5bc6a029d3780cb0cf58d42ed051146bb91cb5d722640d8f978a8fcf1750fee574aef6217a47868129440992b3b12dd60552f2b0624991b88009d6c9fb60eeece53e7a6f3dc587610d2893", 0x7e) recvmmsg(r3, 0x0, 0x0, 0x40012100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmsg(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_getattr(0x0, &(0x7f0000001440)={0x38}, 0x38, 0x0) 8.019015599s ago: executing program 4 (id=2162): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000003100)='net/ip6_mr_cache\x00') read$FUSE(r2, &(0x7f0000012f40)={0x2020}, 0x2040) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r4}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') getdents64(r7, &(0x7f0000000400)=""/35, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x40000) 6.807666796s ago: executing program 4 (id=2163): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) ioctl$sock_SIOCSPGRP(r4, 0x8902, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xd8, 0x0, 0x2, 0x4, 0x8, 0x8, "db749129fc6669e1d6af8f3d2a052a07c23996d6f96a2280f870e8a9535fd6c9c57e3d368de0b8608738f820355318c0487ea714a7b03f442789d55015142f3a429358dd429ff51ecf7ff5e595bc6ae0c9c0c88c8f3d032780554504240afd58ef9b46bbb3eb1ec37d686b1345a91245a932bf246ef40081da06e8f44609359a92aea156adef1161079d46b03d2ac420d44c1ce38ed5d6255e88fc6bd383f3589787873e5ff0ed609ac2ccecf3e175aa4c3a05d51b34cf462aa61757669c54fac4d55c0ff5a6249fbe355ea473edaff7fa4fc803a4e9a9fc"}}, 0x1f0) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x1000000010) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) ioctl$BLKRRPART(r7, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) 5.811871664s ago: executing program 4 (id=2164): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x81}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) io_uring_enter(0xffffffffffffffff, 0x7357, 0x9fcb, 0x1, &(0x7f0000000780)={[0x7]}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) process_madvise(r8, &(0x7f0000000080)=[{}], 0x1, 0x14, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 5.674973121s ago: executing program 1 (id=2165): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1134, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x1104, 0x2, [@TCA_TCINDEX_ACT={0x1100, 0x7, [@m_xt={0x1ac, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}]}, {0x71, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1134}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, 0x0, 0x0, r4) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0xa) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) 5.049887364s ago: executing program 2 (id=2166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r7 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r7, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x5, 0x6, 0x7, 0x7ffffffd}}) 4.845330888s ago: executing program 4 (id=2167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x70bd27, 0x0, {}, [{0xc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x20000000, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x54) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000101010200000000000000000100000514001980020002001400000008000200010000000600124000040000140005800e000100732e6d705f74726170000000"], 0x44}}, 0x800) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000003c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@release_agent={'release_agent', 0x3d, './cgroup'}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000edff0081000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x7e, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.579340702s ago: executing program 2 (id=2168): r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6a779a9511a52dbd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x5, 0xffffffff, 0x101, 0x5}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c9000c0008000500160f040009f781c1706c7d3e7a59155c278bff0f0500"], 0x11) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ftruncate(0xffffffffffffffff, 0x200004) 3.529355927s ago: executing program 1 (id=2169): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) fcntl$setown(r1, 0x8, 0xffffffffffffffff) syz_open_dev$video(0x0, 0xa7, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0xffff, 0x5, 0x4, 0x102, 0x803, "000000ffff20001b10000000000800", '\x00', "05030400", "0200", ['\x00', "6cf8ffff18f0f0ff00000100", "f0ffffffffebffff00000010", "fdffffffa240b82dc44d00"]}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008b40), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000008dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000008e00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210927bd7000fbdbdf253d000000", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7e) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) fanotify_init(0x40, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0x3, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.523350564s ago: executing program 3 (id=2170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000140)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(0xffffffffffffffff, 0xc0086442, &(0x7f00000001c0)={r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="c788800ccb950180c200000008004500005c000000000011907800000000ffffffff00004e200048907803000000a41faf9bb15ac795fe082e64dae230b2ef0fa8fe47585d158bc32e3399464616e5a3"], 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x38, r6, 0x801, 0x2, 0xfffffffe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "1d9d000600"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_SEQ={0x4}]}]}, 0x38}}, 0x4000800) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r9, 0x404c4701, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x400000, 0x17, "3eccd8000000000000000010000000040100"}) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r10 = socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0xa, 0x0) sendmsg$key(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x80000000}, 0x18}}, 0x4000) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @empty, 0x3}, 0xd) 3.290754663s ago: executing program 4 (id=2171): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x81}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) io_uring_enter(0xffffffffffffffff, 0x7357, 0x9fcb, 0x1, &(0x7f0000000780)={[0x7]}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, &(0x7f00000000c0)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) process_madvise(r8, &(0x7f0000000080)=[{}], 0x1, 0x14, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 3.229973265s ago: executing program 0 (id=2172): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x2000007, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x26d1, "fa02791d2a69a2610f0200000000000000110001000000010000800000000007", 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x7de6, 0x10100, 0xfffffffd, 0x400170}, 0x0, 0x0, &(0x7f0000000000)) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0xff03) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r2, @ANYRESHEX=r1]) 1.92754673s ago: executing program 2 (id=2173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r6, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0]) io_destroy(r6) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r7}) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) bind$xdp(r10, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x34, r5, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="010000000800"}) 1.926648318s ago: executing program 4 (id=2183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af24, &(0x7f0000000000)={0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 1.858147558s ago: executing program 1 (id=2174): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000060000/0x2000)=nil, 0x2000, 0x1, 0x80050, r2, 0x4733000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x800448d7, &(0x7f0000000080)='|w') shmctl$IPC_RMID(r1, 0x0) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x18) 1.202609589s ago: executing program 3 (id=2175): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000280)=""/81, 0x51}, {0x0}], 0x3, 0x8, 0x3}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x300, 0x2, 0x0, 0x0, 0x4, 0x2000004}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x400084, 0x81, &(0x7f0000000180)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x6, &(0x7f0000000240)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r5, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) 120.532593ms ago: executing program 1 (id=2176): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000003100)='net/ip6_mr_cache\x00') read$FUSE(r2, &(0x7f0000012f40)={0x2020}, 0x2040) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r4}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') getdents64(r7, &(0x7f0000000400)=""/35, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x40000) 119.382132ms ago: executing program 2 (id=2177): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x81}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) io_uring_enter(0xffffffffffffffff, 0x7357, 0x9fcb, 0x1, &(0x7f0000000780)={[0x7]}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) getpgid(0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, &(0x7f00000000c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x14, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 0s ago: executing program 3 (id=2178): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000003000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) r5 = socket(0x10, 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) connect$can_bcm(r6, &(0x7f0000000140), 0x10) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x5, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x9, 0x5}}) kernel console output (not intermixed with test programs): .3.1476" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 790.328465][ T30] audit: type=1400 audit(1775957935.573:997): avc: denied { create } for pid=12828 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 790.674830][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 790.711419][ T30] audit: type=1400 audit(1775957935.573:998): avc: denied { getopt } for pid=12828 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 790.731908][ T30] audit: type=1400 audit(1775957935.657:999): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 790.756146][ T30] audit: type=1400 audit(1775957935.657:1000): avc: denied { open } for pid=5805 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 790.882045][ T30] audit: type=1400 audit(1775957935.657:1001): avc: denied { ioctl } for pid=5805 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.056913][ T30] audit: type=1400 audit(1775957935.723:1002): avc: denied { sys_module } for pid=12828 comm="syz.3.1476" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 791.843255][ T30] audit: type=1400 audit(1775957935.845:1003): avc: denied { read } for pid=12839 comm="syz.0.1478" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 791.860471][T12865] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 791.909352][T12865] PKCS7: Only support pkcs7_signedData type [ 792.212454][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 793.239255][T12875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.940090][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 794.576218][T12888] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 795.581657][ T5914] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 795.599136][T12897] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 795.673523][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 795.673542][ T30] audit: type=1400 audit(1775957940.233:1047): avc: denied { read } for pid=12891 comm="syz.2.1490" dev="nsfs" ino=4026533358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 795.755958][ T30] audit: type=1400 audit(1775957940.233:1048): avc: denied { open } for pid=12891 comm="syz.2.1490" path="net:[4026533358]" dev="nsfs" ino=4026533358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 795.767487][ T5914] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 795.980722][T12901] kAFS: unable to lookup cell 'ÿ' [ 795.998307][ T30] audit: type=1400 audit(1775957940.355:1049): avc: denied { setopt } for pid=12890 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 796.018937][ T5914] usb 1-1: config 0 has no interface number 0 [ 796.132097][ T5914] usb 1-1: config 0 interface 146 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 796.143961][ T30] audit: type=1400 audit(1775957940.355:1050): avc: denied { bind } for pid=12890 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 796.176449][ T5914] usb 1-1: config 0 interface 146 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.197519][ T30] audit: type=1400 audit(1775957940.355:1051): avc: denied { name_bind } for pid=12890 comm="syz.3.1489" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 796.221671][ T5914] usb 1-1: config 0 interface 146 has no altsetting 0 [ 796.250765][ T5914] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 796.265294][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.277331][ T30] audit: type=1400 audit(1775957940.355:1052): avc: denied { node_bind } for pid=12890 comm="syz.3.1489" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 796.313236][ T5914] usb 1-1: Product: syz [ 796.321042][ T5914] usb 1-1: Manufacturer: syz [ 796.326287][ T5914] usb 1-1: SerialNumber: syz [ 796.336510][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 796.344641][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 796.364418][ T5914] usb 1-1: config 0 descriptor?? [ 796.394623][T12904] ceph: No mds server is up or the cluster is laggy [ 796.401815][ T30] audit: type=1400 audit(1775957940.430:1053): avc: denied { watch } for pid=12891 comm="syz.2.1490" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 796.457969][ T5914] pn533_usb 1-1:0.146: NFC: Could not find bulk-in or bulk-out endpoint [ 796.548327][ T30] audit: type=1400 audit(1775957940.439:1054): avc: denied { create } for pid=12891 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 796.618169][ T30] audit: type=1400 audit(1775957940.449:1055): avc: denied { bind } for pid=12891 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 796.639318][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 796.698410][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 796.750614][ T30] audit: type=1400 audit(1775957940.823:1056): avc: denied { append } for pid=12882 comm="syz.4.1488" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 796.820970][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 797.596734][T12920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.974068][ T9] usb 1-1: USB disconnect, device number 12 [ 798.267192][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 799.804838][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 800.189605][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 800.201553][ T9] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 800.238003][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.257164][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 800.272122][ T9] usb 5-1: config 0 has no interface number 0 [ 800.280939][T12951] kAFS: unable to lookup cell 'ÿ' [ 800.308408][ T9] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 800.322038][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.342925][ T9] usb 5-1: Product: syz [ 800.362495][T12952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.398830][ T9] usb 5-1: Manufacturer: syz [ 800.411513][ T9] usb 5-1: SerialNumber: syz [ 800.439561][ T9] usb 5-1: config 0 descriptor?? [ 800.461389][ T9] asix 5-1:0.104: probe with driver asix failed with error -22 [ 800.872833][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 800.879244][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 801.004498][T12955] ceph: No mds server is up or the cluster is laggy [ 801.447015][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 801.447056][ T30] audit: type=1400 audit(1775957946.279:1081): avc: denied { write } for pid=12960 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 801.868213][ T30] audit: type=1400 audit(1775957946.279:1082): avc: denied { connect } for pid=12960 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 801.890094][ T30] audit: type=1400 audit(1775957946.279:1083): avc: denied { name_connect } for pid=12960 comm="syz.1.1505" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 802.242815][T12969] overlayfs: missing 'lowerdir' [ 803.191636][ T30] audit: type=1400 audit(1775957946.363:1084): avc: denied { ioctl } for pid=12960 comm="syz.1.1505" path="uts:[4026532805]" dev="nsfs" ino=4026532805 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 803.555661][ T30] audit: type=1400 audit(1775957947.037:1085): avc: denied { mounton } for pid=12966 comm="syz.0.1506" path="/292/bus" dev="tmpfs" ino=1580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 803.849422][ T5914] usb 5-1: USB disconnect, device number 20 [ 804.492124][T12982] syz_tun: entered allmulticast mode [ 804.624723][ T30] audit: type=1400 audit(1775957949.217:1086): avc: denied { mount } for pid=12976 comm="syz.4.1509" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 804.647137][ T30] audit: type=1400 audit(1775957949.226:1087): avc: denied { map } for pid=12976 comm="syz.4.1509" path="socket:[32653]" dev="sockfs" ino=32653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 804.943827][T12982] syz_tun: left allmulticast mode [ 804.955699][ T30] audit: type=1400 audit(1775957949.226:1088): avc: denied { read accept } for pid=12976 comm="syz.4.1509" path="socket:[32653]" dev="sockfs" ino=32653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 804.991275][T12987] kAFS: unable to lookup cell 'ÿ' [ 805.200646][ T30] audit: type=1400 audit(1775957949.769:1089): avc: denied { bind } for pid=12970 comm="syz.0.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 805.432176][ T30] audit: type=1400 audit(1775957949.966:1090): avc: denied { write } for pid=12988 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 806.748239][T13006] 9p: Bad value for 'rfdno' [ 806.871195][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 806.871232][ T30] audit: type=1400 audit(1775957951.257:1093): avc: denied { create } for pid=13000 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 807.164864][ T30] audit: type=1400 audit(1775957951.257:1094): avc: denied { map_create } for pid=13000 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 807.197377][ T30] audit: type=1400 audit(1775957951.257:1095): avc: denied { map_read map_write } for pid=13000 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 807.258876][ T30] audit: type=1400 audit(1775957951.267:1096): avc: denied { ioctl } for pid=13000 comm="syz.1.1515" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 807.314721][ T30] audit: type=1400 audit(1775957951.725:1097): avc: denied { accept } for pid=12995 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 807.465180][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 808.162964][ T30] audit: type=1400 audit(1775957952.427:1098): avc: denied { name_connect } for pid=12995 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 808.213956][ T30] audit: type=1400 audit(1775957952.427:1099): avc: denied { listen } for pid=12995 comm="syz.3.1513" lport=53714 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 808.851695][ T30] audit: type=1400 audit(1775957953.222:1100): avc: denied { connect } for pid=13024 comm="syz.2.1520" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 809.665813][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 809.825169][ T30] audit: type=1400 audit(1775957954.139:1101): avc: denied { read write } for pid=13032 comm="syz.2.1522" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 809.885063][T13033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1522'. [ 809.997840][ T30] audit: type=1400 audit(1775957954.139:1102): avc: denied { open } for pid=13032 comm="syz.2.1522" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 810.105063][T13037] syz_tun: entered allmulticast mode [ 810.121256][T13037] syz_tun: left allmulticast mode [ 811.236043][T13046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.509956][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 811.923134][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 812.085108][T13060] kAFS: unable to lookup cell 'ÿ' [ 812.114919][T13053] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 812.254906][T13064] kAFS: unable to lookup cell 'ÿ' [ 813.511771][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 813.511787][ T30] audit: type=1400 audit(1775957957.583:1106): avc: denied { create } for pid=13070 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 813.600875][ T30] audit: type=1400 audit(1775957957.583:1107): avc: denied { write } for pid=13070 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 813.779286][T13076] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 815.057237][ T30] audit: type=1400 audit(1775957957.621:1108): avc: denied { read } for pid=13070 comm="syz.3.1531" path="socket:[33877]" dev="sockfs" ino=33877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 816.074589][ T30] audit: type=1400 audit(1775957959.268:1109): avc: denied { watch_mount watch_reads } for pid=13082 comm="syz.2.1533" path="/291" dev="tmpfs" ino=1599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 816.100065][T13076] bond1: entered promiscuous mode [ 816.192237][T13076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.390330][T13086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.887952][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 816.917470][T13086] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 816.945643][T13086] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 817.020636][ T30] audit: type=1400 audit(1775957960.868:1110): avc: denied { unlink } for pid=13096 comm="syz.1.1536" name="#16" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 817.046514][ T30] audit: type=1400 audit(1775957960.868:1111): avc: denied { mount } for pid=13096 comm="syz.1.1536" name="/" dev="overlay" ino=1640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 817.097186][T13086] bond1: (slave wireguard0): making interface the new active one [ 817.105679][T13086] wireguard0: entered promiscuous mode [ 817.129950][T13099] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 817.144759][ T30] audit: type=1400 audit(1775957960.989:1112): avc: denied { ioctl } for pid=13096 comm="syz.1.1536" path="socket:[33409]" dev="sockfs" ino=33409 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.195131][ T30] audit: type=1400 audit(1775957961.036:1113): avc: denied { create } for pid=13100 comm="syz.4.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 817.199349][T13086] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 817.380320][T13106] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 817.434870][ T30] audit: type=1400 audit(1775957961.195:1114): avc: denied { open } for pid=13100 comm="syz.4.1537" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 817.567623][ T30] audit: type=1400 audit(1775957961.195:1115): avc: denied { ioctl } for pid=13100 comm="syz.4.1537" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 818.438465][T13110] 9pnet_fd: Insufficient options for proto=fd [ 818.574521][T13111] syz.0.1539 (13111) used greatest stack depth: 19152 bytes left [ 818.851916][T13119] syz_tun: entered allmulticast mode [ 818.880092][T13119] syz_tun: left allmulticast mode [ 818.965601][T10517] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 819.038324][T13125] /dev/nullb0: Can't open blockdev [ 819.050381][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1541'. [ 819.347270][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 819.347290][ T30] audit: type=1400 audit(1775957963.048:1129): avc: denied { ioctl } for pid=13121 comm="syz.1.1542" path="socket:[33950]" dev="sockfs" ino=33950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 819.350447][T10517] usb 3-1: Using ep0 maxpacket: 32 [ 819.353979][ T30] audit: type=1400 audit(1775957963.048:1130): avc: denied { bind } for pid=13121 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 819.529514][T10517] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 819.562524][T10517] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 819.620959][T10517] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 819.630678][T10517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.639008][T10517] usb 3-1: Product: syz [ 819.643321][T10517] usb 3-1: Manufacturer: syz [ 819.647922][T10517] usb 3-1: SerialNumber: syz [ 819.688413][ T30] audit: type=1400 audit(1775957963.198:1131): avc: denied { setopt } for pid=13121 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 819.708136][ T30] audit: type=1400 audit(1775957963.198:1132): avc: denied { write } for pid=13121 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 819.727779][ T30] audit: type=1400 audit(1775957963.245:1133): avc: denied { create } for pid=13126 comm="syz.3.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 819.770947][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880595c2400: rx timeout, send abort [ 820.294830][ T30] audit: type=1400 audit(1775957963.245:1134): avc: denied { write } for pid=13126 comm="syz.3.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 820.315140][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880595c0c00: rx timeout, send abort [ 820.421236][ T30] audit: type=1400 audit(1775957963.872:1135): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 820.431528][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 820.450032][ T30] audit: type=1400 audit(1775957963.872:1136): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.849524][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880595c0c00: abort rx timeout. Force session deactivation [ 820.942115][ T30] audit: type=1400 audit(1775957963.872:1137): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.966531][ T30] audit: type=1400 audit(1775957963.872:1138): avc: denied { add_name } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.113143][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 821.119985][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.393232][T13142] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 822.737668][T10517] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 822.750468][T10517] usb 3-1: unit 255 not found! [ 822.835650][T13147] kAFS: unable to lookup cell 'ÿ' [ 822.859802][T10517] usb 3-1: disable ehci-hcd to run US-144 [ 822.898765][T10517] usb 3-1: disable ehci-hcd to run US-144 [ 822.939440][T10517] usb 3-1: USB disconnect, device number 10 [ 822.965442][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 823.013132][ T7768] udevd[7768]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 823.101379][ T5809] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 823.506533][T10517] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 823.689233][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1551'. [ 823.699342][ T9] libceph: connect (1)[c::]:6789 error -101 [ 823.705511][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 823.724083][T10517] usb 3-1: device descriptor read/64, error -71 [ 823.768271][T13164] ceph: No mds server is up or the cluster is laggy [ 824.130415][T10517] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 824.401472][T10517] usb 3-1: device descriptor read/64, error -71 [ 824.611194][T10517] usb usb3-port1: attempt power cycle [ 824.783290][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 824.783328][ T30] audit: type=1400 audit(1775957968.139:1157): avc: denied { getopt } for pid=13171 comm="syz.0.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 826.148820][T13188] netlink: 'syz.1.1556': attribute type 32 has an invalid length. [ 826.668631][T10517] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 826.824328][T10517] usb 3-1: device descriptor read/8, error -71 [ 828.335645][T13198] Mount JFS Failure: -22 [ 828.340334][T13198] jfs_mount failed w/return code = -22 [ 828.902473][ T5914] kernel read not supported for file /dsp (pid: 5914 comm: kworker/1:5) [ 829.655388][ T30] audit: type=1400 audit(1775957972.696:1158): avc: denied { ioctl } for pid=13202 comm="syz.1.1558" path="socket:[34141]" dev="sockfs" ino=34141 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 830.828935][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 832.350577][T10517] libceph: connect (1)[c::]:6789 error -101 [ 832.357161][T10517] libceph: mon0 (1)[c::]:6789 connect error [ 832.385220][T13224] ceph: No mds server is up or the cluster is laggy [ 832.680445][ T30] audit: type=1400 audit(1775957975.494:1159): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 832.781624][T13235] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 833.167283][T13235] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 833.178422][T13235] overlayfs: failed to look up (tracing) for ino (-66) [ 833.743878][ T30] audit: type=1400 audit(1775957975.597:1160): avc: denied { mount } for pid=13228 comm="syz.1.1563" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 834.313573][ T30] audit: type=1400 audit(1775957975.607:1161): avc: denied { mounton } for pid=13228 comm="syz.1.1563" path="/308/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 834.459675][T13240] kAFS: unable to lookup cell 'ÿ' [ 835.710042][ T30] audit: type=1400 audit(1775957977.506:1162): avc: denied { getopt } for pid=13237 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 835.737255][ T30] audit: type=1400 audit(1775957977.516:1163): avc: denied { read write } for pid=13237 comm="syz.4.1566" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 836.224342][ T30] audit: type=1400 audit(1775957977.516:1164): avc: denied { open } for pid=13237 comm="syz.4.1566" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 836.255396][ T30] audit: type=1400 audit(1775957977.516:1165): avc: denied { mounton } for pid=13237 comm="syz.4.1566" path="/300/file0" dev="tmpfs" ino=1642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 836.618546][ T30] audit: type=1800 audit(1775957977.825:1166): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1568" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=33775 res=0 errno=0 [ 836.696448][ T30] audit: type=1400 audit(1775957979.144:1167): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 837.492220][ T30] audit: type=1400 audit(1775957980.024:1168): avc: denied { ioctl } for pid=13254 comm="syz.0.1569" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 838.056527][T13264] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 838.126643][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 838.126662][ T30] audit: type=1400 audit(1775957980.585:1170): avc: denied { ioctl } for pid=13259 comm="syz.1.1570" path="socket:[34200]" dev="sockfs" ino=34200 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 838.241818][T13265] usb usb7: usbfs: process 13265 (syz.0.1571) did not claim interface 0 before use [ 839.170414][ T30] audit: type=1400 audit(1775957980.697:1171): avc: denied { write } for pid=13260 comm="syz.0.1571" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 839.193859][ T30] audit: type=1400 audit(1775957980.772:1172): avc: denied { search } for pid=13260 comm="syz.0.1571" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 839.275646][ T30] audit: type=1400 audit(1775957980.782:1173): avc: denied { search } for pid=13260 comm="syz.0.1571" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 839.377427][ T30] audit: type=1400 audit(1775957980.782:1174): avc: denied { search } for pid=13260 comm="syz.0.1571" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 839.593828][T13278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 839.805321][ T30] audit: type=1400 audit(1775957981.212:1175): avc: denied { create } for pid=13266 comm="syz.3.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 839.909729][ T30] audit: type=1400 audit(1775957981.212:1176): avc: denied { setopt } for pid=13266 comm="syz.3.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 839.988826][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 840.141715][ T30] audit: type=1400 audit(1775957981.212:1177): avc: denied { read } for pid=13266 comm="syz.3.1572" path="socket:[34861]" dev="sockfs" ino=34861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 840.172985][ T30] audit: type=1400 audit(1775957981.315:1178): avc: denied { mount } for pid=13266 comm="syz.3.1572" name="/" dev="ramfs" ino=34863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 840.805511][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 840.841033][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.851224][ T30] audit: type=1400 audit(1775957981.315:1179): avc: denied { map } for pid=13266 comm="syz.3.1572" path="socket:[34859]" dev="sockfs" ino=34859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 840.878875][ T9] usb 1-1: Product: syz [ 840.935647][ T9] usb 1-1: Manufacturer: syz [ 840.940918][ T9] usb 1-1: SerialNumber: syz [ 841.065372][ T9] usb 1-1: config 0 descriptor?? [ 841.073365][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 841.079544][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 841.814679][T13293] bridge0: port 4(syz_tun) entered blocking state [ 841.821800][T13293] bridge0: port 4(syz_tun) entered disabled state [ 841.828985][T13293] syz_tun: entered allmulticast mode [ 841.839903][T13293] syz_tun: entered promiscuous mode [ 841.846705][T13293] bridge0: port 4(syz_tun) entered blocking state [ 841.853650][T13293] bridge0: port 4(syz_tun) entered forwarding state [ 841.871234][T13293] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 841.879411][T13293] bridge0: port 4(syz_tun) entered disabled state [ 841.886061][T13293] bridge0: port 3(dummy0) entered disabled state [ 842.459528][T13293] bridge0: port 4(syz_tun) entered blocking state [ 842.466195][T13293] bridge0: port 4(syz_tun) entered forwarding state [ 842.473289][T13293] bridge0: port 3(dummy0) entered blocking state [ 842.479837][T13293] bridge0: port 3(dummy0) entered forwarding state [ 842.489514][T13293] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 842.678682][T13296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 842.791684][T13300] FAT-fs (nullb0): bogus number of reserved sectors [ 842.798438][T13300] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 844.201701][T13310] ufs: You didn't specify the type of your ufs filesystem [ 844.201701][T13310] [ 844.201701][T13310] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 844.201701][T13310] [ 844.201701][T13310] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 844.232654][T13310] ufs: ufstype=old is supported read-only [ 844.240078][T13310] ufs: ufs_fill_super(): bad magic number [ 844.402552][ T5914] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 844.666838][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 844.752001][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 844.857503][ T9] dib0700: firmware download failed at 7 with -22 [ 844.896832][ T9] usb 1-1: USB disconnect, device number 14 [ 844.899989][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 844.920789][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 844.940520][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 844.940537][ T30] audit: type=1326 audit(1775957986.995:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 845.531378][T13323] pim6reg: entered allmulticast mode [ 845.556576][ T5914] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 845.583956][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 845.591983][ T5914] usb 5-1: Product: syz [ 845.617751][T13313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1584'. [ 845.627117][ T5914] usb 5-1: SerialNumber: syz [ 845.652936][ T5914] usb 5-1: config 0 descriptor?? [ 845.738049][ T30] audit: type=1326 audit(1775957986.995:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 846.147819][ T30] audit: type=1326 audit(1775957986.995:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 846.225544][ T30] audit: type=1326 audit(1775957986.995:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 846.405262][ T30] audit: type=1326 audit(1775957987.023:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 846.527509][ T30] audit: type=1326 audit(1775957987.042:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 846.588211][ T30] audit: type=1326 audit(1775957987.042:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 846.663612][ T30] audit: type=1326 audit(1775957987.070:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 846.800582][ T30] audit: type=1326 audit(1775957987.070:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 846.856136][ T30] audit: type=1326 audit(1775957987.070:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3039c819 code=0x7ffc0000 [ 847.621518][ T5877] usb 5-1: USB disconnect, device number 21 [ 850.287870][ T30] kauditd_printk_skb: 321 callbacks suppressed [ 850.287887][ T30] audit: type=1400 audit(1775957992.002:1522): avc: denied { unlink } for pid=5805 comm="syz-executor" name="file0" dev="tmpfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 850.825926][T13354] Mount JFS Failure: -22 [ 850.830268][T13354] jfs_mount failed w/return code = -22 [ 852.548444][T13369] /dev/nullb0: Can't open blockdev [ 852.563377][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1593'. [ 853.345865][ T30] audit: type=1400 audit(1775957994.865:1523): avc: denied { setopt } for pid=13375 comm="syz.4.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 853.508453][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 853.541644][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 853.554110][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 853.568545][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 853.579982][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 854.041187][ T30] audit: type=1400 audit(1775957995.520:1524): avc: denied { write } for pid=13378 comm="syz.0.1596" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 855.464135][T13388] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 856.122990][T13400] fuse: Bad value for 'user_id' [ 856.127999][T13400] fuse: Bad value for 'user_id' [ 857.644052][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 859.123650][ T30] audit: type=1400 audit(1775957999.675:1525): avc: denied { ioctl } for pid=13414 comm="syz.1.1605" path="socket:[35331]" dev="sockfs" ino=35331 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 859.657390][ T30] audit: type=1400 audit(1775958000.331:1526): avc: denied { watch } for pid=13409 comm="syz.3.1603" path="/358/bus/file1" dev="tmpfs" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 859.842187][ T30] audit: type=1400 audit(1775958000.331:1527): avc: denied { watch_sb } for pid=13409 comm="syz.3.1603" path="/358/bus/file1" dev="tmpfs" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 860.423800][ T30] audit: type=1400 audit(1775958001.463:1528): avc: denied { mount } for pid=13427 comm="syz.3.1608" name="/" dev="hugetlbfs" ino=34571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 861.748333][ T30] audit: type=1400 audit(1775958002.726:1529): avc: denied { connect } for pid=13444 comm="syz.1.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 861.778319][ T30] audit: type=1400 audit(1775958002.754:1530): avc: denied { read write } for pid=13444 comm="syz.1.1612" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 861.806456][ T30] audit: type=1400 audit(1775958002.754:1531): avc: denied { open } for pid=13444 comm="syz.1.1612" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 861.837752][ T30] audit: type=1400 audit(1775958002.782:1532): avc: denied { ioctl } for pid=13444 comm="syz.1.1612" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 861.898941][ T30] audit: type=1400 audit(1775958002.867:1533): avc: denied { connect } for pid=13444 comm="syz.1.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 862.465805][T13452] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1613'. [ 862.831216][ T30] audit: type=1400 audit(1775958003.353:1534): avc: denied { append } for pid=13449 comm="syz.2.1613" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 863.453635][T13460] bridge0: port 5(syz_tun) entered blocking state [ 863.460519][T13460] bridge0: port 5(syz_tun) entered disabled state [ 863.468939][T13460] syz_tun: entered allmulticast mode [ 863.480907][T13460] syz_tun: entered promiscuous mode [ 863.489087][T13460] bridge0: port 5(syz_tun) entered blocking state [ 863.495676][T13460] bridge0: port 5(syz_tun) entered forwarding state [ 863.535926][T13460] netlink: 'syz.3.1615': attribute type 10 has an invalid length. [ 863.544799][T13460] bridge0: port 5(syz_tun) entered disabled state [ 863.551455][T13460] bridge0: port 4(dummy0) entered disabled state [ 863.557997][T13460] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.565294][T13460] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.073940][T13460] bridge0: port 5(syz_tun) entered blocking state [ 864.080465][T13460] bridge0: port 5(syz_tun) entered forwarding state [ 864.089122][T13460] bridge0: port 4(dummy0) entered blocking state [ 864.095597][T13460] bridge0: port 4(dummy0) entered forwarding state [ 864.102363][T13460] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.109602][T13460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.117045][T13460] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.124246][T13460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.152044][T13460] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 864.722593][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 864.722630][ T30] audit: type=1400 audit(1775958005.374:1536): avc: denied { shutdown } for pid=13463 comm="syz.4.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 865.278543][ T30] audit: type=1400 audit(1775958005.384:1537): avc: denied { create } for pid=13463 comm="syz.4.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 865.416452][ T30] audit: type=1400 audit(1775958005.403:1538): avc: denied { write } for pid=13463 comm="syz.4.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 865.437973][ T30] audit: type=1400 audit(1775958005.758:1539): avc: denied { read } for pid=13453 comm="syz.2.1614" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 865.462051][ T30] audit: type=1400 audit(1775958005.758:1540): avc: denied { open } for pid=13453 comm="syz.2.1614" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 866.430430][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 867.386805][ T30] audit: type=1400 audit(1775958007.134:1541): avc: denied { getopt } for pid=13474 comm="syz.1.1618" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 867.948718][T13478] tipc: Enabled bearer , priority 10 [ 868.676509][T13481] kAFS: unable to lookup cell 'ÿ' [ 869.169014][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 870.395691][T13495] syz_tun: entered allmulticast mode [ 870.441780][T13495] syz_tun: left allmulticast mode [ 870.780426][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'. [ 870.859619][T13506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 870.879410][T13504] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt' [ 871.012828][T13510] kAFS: unable to lookup cell 'ÿ' [ 871.270744][T13504] CPU: 1 UID: 0 PID: 13504 Comm: syz.3.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.270767][T13504] Tainted: [L]=SOFTLOCKUP [ 871.270772][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 871.270783][T13504] Call Trace: [ 871.270787][T13504] [ 871.270796][T13504] dump_stack_lvl+0x100/0x190 [ 871.270823][T13504] sysfs_warn_dup.cold+0x1c/0x28 [ 871.270841][T13504] sysfs_do_create_link_sd+0x113/0x140 [ 871.270855][T13504] sysfs_create_link+0x61/0xc0 [ 871.270866][T13504] device_add+0x675/0x1950 [ 871.270884][T13504] ? __pfx_device_add+0x10/0x10 [ 871.270897][T13504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 871.270917][T13504] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 871.270939][T13504] wiphy_register+0x1e5b/0x2d30 [ 871.270952][T13504] ? __rtnl_unlock+0xb9/0xf0 [ 871.270964][T13504] ? netdev_run_todo+0x7c0/0x12c0 [ 871.270986][T13504] ? __pfx_wiphy_register+0x10/0x10 [ 871.271008][T13504] ieee80211_register_hw+0x2cfd/0x4140 [ 871.271031][T13504] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 871.271045][T13504] ? __pfx___debug_object_init+0x10/0x10 [ 871.271063][T13504] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 871.271084][T13504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 871.271102][T13504] ? __hrtimer_setup+0x178/0x280 [ 871.271117][T13504] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 871.271147][T13504] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 871.271172][T13504] ? __asan_memcpy+0x3c/0x60 [ 871.271192][T13504] hwsim_new_radio_nl+0xc1f/0x1340 [ 871.271213][T13504] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 871.271238][T13504] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 871.271253][T13504] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 871.271270][T13504] genl_family_rcv_msg_doit+0x214/0x300 [ 871.271286][T13504] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 871.271305][T13504] ? bpf_lsm_capable+0x9/0x10 [ 871.271317][T13504] ? security_capable+0x80/0x260 [ 871.271333][T13504] ? ns_capable+0xd2/0xf0 [ 871.271349][T13504] genl_rcv_msg+0x560/0x800 [ 871.271364][T13504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.271378][T13504] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 871.271396][T13504] ? lockdep_hardirqs_on+0x78/0x100 [ 871.271408][T13504] ? irqentry_exit+0x180/0x670 [ 871.271425][T13504] netlink_rcv_skb+0x159/0x420 [ 871.271438][T13504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.271452][T13504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.271463][T13504] ? rcu_is_watching+0x12/0xc0 [ 871.271483][T13504] ? __rcu_read_unlock+0x26a/0x5e0 [ 871.271494][T13504] ? rcu_is_watching+0x12/0xc0 [ 871.271511][T13504] genl_rcv+0x28/0x40 [ 871.271522][T13504] netlink_unicast+0x5aa/0x870 [ 871.271537][T13504] ? __pfx_netlink_unicast+0x10/0x10 [ 871.271555][T13504] netlink_sendmsg+0x8b0/0xda0 [ 871.271570][T13504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.271588][T13504] ____sys_sendmsg+0x9e1/0xb70 [ 871.271600][T13504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.271613][T13504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.271629][T13504] ? try_to_wake_up+0x644/0x1a80 [ 871.271648][T13504] ___sys_sendmsg+0x190/0x1e0 [ 871.271663][T13504] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.271676][T13504] ? futex_private_hash_put+0x107/0x1c0 [ 871.271714][T13504] __sys_sendmsg+0x170/0x220 [ 871.271731][T13504] ? __pfx___sys_sendmsg+0x10/0x10 [ 871.271747][T13504] ? __x64_sys_futex+0x34f/0x4d0 [ 871.271770][T13504] do_syscall_64+0x106/0xf80 [ 871.271781][T13504] ? clear_bhb_loop+0x40/0x90 [ 871.271796][T13504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.271808][T13504] RIP: 0033:0x7f6d3039c819 [ 871.271826][T13504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.271838][T13504] RSP: 002b:00007f6d311ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.271853][T13504] RAX: ffffffffffffffda RBX: 00007f6d30616180 RCX: 00007f6d3039c819 [ 871.271862][T13504] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 871.271870][T13504] RBP: 00007f6d30432c91 R08: 0000000000000000 R09: 0000000000000000 [ 871.271877][T13504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.271885][T13504] R13: 00007f6d30616218 R14: 00007f6d30616180 R15: 00007ffd562e5998 [ 871.271902][T13504] [ 872.809852][ T30] audit: type=1400 audit(1775958013.076:1542): avc: denied { bind } for pid=13519 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 873.044750][T13527] openvswitch: netlink: IP tunnel TTL not specified. [ 873.458089][ T30] audit: type=1400 audit(1775958013.310:1543): avc: denied { lock } for pid=13521 comm="syz.3.1630" path="socket:[34707]" dev="sockfs" ino=34707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 873.494465][ T30] audit: type=1400 audit(1775958013.712:1544): avc: denied { write } for pid=13519 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 874.016049][ T30] audit: type=1400 audit(1775958013.984:1545): avc: denied { bind } for pid=13536 comm="syz.0.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 874.466241][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 874.511862][T13544] tipc: Started in network mode [ 874.516824][T13544] tipc: Node identity , cluster identity 4711 [ 874.523003][T13544] tipc: Failed to obtain node identity [ 874.528845][T13544] tipc: Enabling of bearer rejected, failed to enable media [ 875.536846][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 875.921948][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 875.947038][ T9] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 876.091188][T13550] kAFS: unable to lookup cell 'ÿ' [ 876.131151][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 876.267349][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.293393][ T9] usb 5-1: Product: syz [ 876.357060][ T9] usb 5-1: Manufacturer: syz [ 876.395288][ T9] usb 5-1: SerialNumber: syz [ 876.439908][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 876.454746][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 876.725759][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 876.738723][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 877.000833][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 877.094617][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 877.175290][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 878.579643][ T30] audit: type=1400 audit(1775958018.448:1546): avc: denied { remount } for pid=13569 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 879.615371][ T5914] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 880.590590][T13584] ufs: You didn't specify the type of your ufs filesystem [ 880.590590][T13584] [ 880.590590][T13584] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 880.590590][T13584] [ 880.590590][T13584] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 880.621673][T13584] ufs: ufstype=old is supported read-only [ 880.630729][T13584] ufs: ufs_fill_super(): bad magic number [ 881.257511][T13590] netlink: 'syz.0.1643': attribute type 32 has an invalid length. [ 881.827706][T13592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.062373][T13596] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 882.241460][T13599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1645'. [ 882.852780][T13607] syz_tun: entered allmulticast mode [ 882.883650][T13607] syz_tun: left allmulticast mode [ 883.149714][T13609] kAFS: unable to lookup cell 'ÿ' [ 885.987937][ T30] audit: type=1400 audit(1775958024.792:1547): avc: denied { setopt } for pid=13624 comm="syz.2.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 886.012267][T12635] Bluetooth: hci1: hardware error 0x07 [ 886.265249][ T30] audit: type=1400 audit(1775958025.185:1548): avc: denied { setopt } for pid=13624 comm="syz.2.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 886.342748][T13638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.554144][ T5914] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 886.689112][T13643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1657'. [ 886.725361][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 886.732732][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 887.040222][ T5914] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 887.066317][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.426184][ T5914] usb 5-1: config 0 descriptor?? [ 887.477262][ T5914] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 888.301769][ T30] audit: type=1400 audit(1775958027.562:1549): avc: denied { accept } for pid=13633 comm="syz.4.1655" lport=58070 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 888.515753][T13646] input: syz0 as /devices/virtual/input/input8 [ 888.559445][ T5914] gp8psk: usb in 128 operation failed. [ 888.582898][T12635] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 888.623366][ T30] audit: type=1400 audit(1775958027.562:1550): avc: denied { write } for pid=13633 comm="syz.4.1655" lport=58070 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 888.647818][ T5877] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 888.655988][ T30] audit: type=1400 audit(1775958027.572:1551): avc: denied { setopt } for pid=13633 comm="syz.4.1655" lport=58070 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 888.684456][ T30] audit: type=1400 audit(1775958027.768:1552): avc: denied { setopt } for pid=13645 comm="syz.1.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 888.705377][ T30] audit: type=1400 audit(1775958027.778:1553): avc: denied { read } for pid=13645 comm="syz.1.1658" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 888.730112][ T30] audit: type=1400 audit(1775958027.778:1554): avc: denied { ioctl } for pid=13645 comm="syz.1.1658" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 888.755838][ T30] audit: type=1400 audit(1775958027.787:1555): avc: denied { read } for pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=2932 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 888.919335][ T30] audit: type=1400 audit(1775958027.787:1556): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2932 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 888.970527][ T5877] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 888.988497][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.011895][ T5877] usb 3-1: Product: syz [ 889.028742][ T5877] usb 3-1: Manufacturer: syz [ 889.045811][ T5877] usb 3-1: SerialNumber: syz [ 889.473526][ T5877] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 889.532167][T10517] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 889.593890][ T5914] gp8psk: usb in 137 operation failed. [ 889.603084][ T5914] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 889.614834][ T5914] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 889.639281][ T5914] usb 5-1: USB disconnect, device number 23 [ 889.694212][ T5877] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 889.807649][ T5877] usb 3-1: found format II with max.bitrate = 0, frame size=9 [ 889.815287][ T5877] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 889.825859][ T5877] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 889.835665][ T5877] usb 3-1: found format II with max.bitrate = 0, frame size=9 [ 889.843570][ T5877] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 889.872546][ T5877] usb 3-1: unit 5 not found! [ 889.877212][ T5877] usb 3-1: unit 2 not found! [ 890.022341][T13664] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1661'. [ 890.390474][T10517] usb 2-1: Using ep0 maxpacket: 16 [ 890.397474][T10517] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 890.410713][T10517] usb 2-1: config 0 interface 0 has no altsetting 0 [ 890.420571][T10517] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 890.451123][T13668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.496914][T10517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.510478][T10517] usb 2-1: config 0 descriptor?? [ 891.970631][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 891.970693][ T30] audit: type=1400 audit(1775958030.304:1558): avc: denied { bind } for pid=13655 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 892.313506][ T5877] usb 3-1: USB disconnect, device number 15 [ 892.802468][ T9122] udevd[9122]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.034227][T13716] kAFS: unable to lookup cell 'ÿ' [ 894.217391][T10517] usbhid 2-1:0.0: can't add hid device: -71 [ 894.229155][T10517] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 894.327037][T10517] usb 2-1: USB disconnect, device number 8 [ 894.590404][T13734] kAFS: unable to lookup cell 'ÿ' [ 894.709109][T13739] netlink: 'syz.0.1668': attribute type 30 has an invalid length. [ 894.935453][T13740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.990504][T13741] netlink: 'syz.0.1668': attribute type 30 has an invalid length. [ 895.211956][ T30] audit: type=1400 audit(1775958034.038:1559): avc: denied { setopt } for pid=13731 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 896.563351][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1670'. [ 896.692761][T10741] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.792003][T10741] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.802740][T10741] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.811495][T10741] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.666621][T13771] syz2: rxe_newlink: already configured on ipvlan0 [ 900.462975][T13784] SELinux: policydb version -188086128 does not match my version range 15-35 [ 900.478120][ T30] audit: type=1400 audit(1775958038.960:1560): avc: denied { load_policy } for pid=13782 comm="syz.1.1677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 900.478359][T13784] SELinux: failed to load policy [ 900.520244][T13784] veth0: entered promiscuous mode [ 900.661837][T13782] veth0: left promiscuous mode [ 901.385925][ T30] audit: type=1400 audit(1775958039.756:1561): avc: denied { bind } for pid=13792 comm="syz.4.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 901.825477][ T30] audit: type=1400 audit(1775958039.765:1562): avc: denied { setopt } for pid=13792 comm="syz.4.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 901.845567][ T30] audit: type=1400 audit(1775958039.784:1563): avc: denied { write } for pid=13792 comm="syz.4.1680" path="socket:[36957]" dev="sockfs" ino=36957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 902.877319][T13809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.526573][T13822] kAFS: unable to lookup cell 'ÿ' [ 903.619694][T13824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1686'. [ 903.656015][T13824] netlink: 'syz.1.1686': attribute type 39 has an invalid length. [ 903.675670][ T30] audit: type=1400 audit(1775958041.936:1564): avc: denied { create } for pid=13819 comm="syz.1.1686" name="#1c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 903.752339][ T30] audit: type=1400 audit(1775958041.936:1565): avc: denied { link } for pid=13819 comm="syz.1.1686" name="#1c" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 904.164770][ T30] audit: type=1400 audit(1775958041.936:1566): avc: denied { rename } for pid=13819 comm="syz.1.1686" name="#1d" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 904.912781][ T30] audit: type=1400 audit(1775958043.097:1567): avc: denied { wake_alarm } for pid=13832 comm="syz.4.1689" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 905.620059][T13842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.195116][T13848] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 906.663214][T13853] sctp: [Deprecated]: syz.2.1691 (pid 13853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.663214][T13853] Use struct sctp_sack_info instead [ 907.586337][ T30] audit: type=1400 audit(1775958045.623:1568): avc: denied { create } for pid=13866 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 908.625896][T13878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.658635][ T30] audit: type=1400 audit(1775958046.615:1569): avc: denied { ioctl } for pid=13874 comm="syz.1.1697" path="/dev/binderfs/binder0" dev="binder" ino=24 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 908.689681][ T30] audit: type=1400 audit(1775958046.615:1570): avc: denied { set_context_mgr } for pid=13874 comm="syz.1.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 908.819329][ T30] audit: type=1400 audit(1775958046.625:1571): avc: denied { map } for pid=13874 comm="syz.1.1697" path="/dev/binderfs/binder0" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 910.075096][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 911.447842][ T30] audit: type=1400 audit(1775958048.908:1572): avc: denied { write } for pid=13892 comm="syz.3.1702" name="file0" dev="tmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 911.477414][T13898] kAFS: unable to lookup cell 'ÿ' [ 911.552122][ T30] audit: type=1400 audit(1775958048.908:1573): avc: denied { open } for pid=13892 comm="syz.3.1702" path="/380/file0" dev="tmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 911.576835][ T30] audit: type=1400 audit(1775958048.917:1574): avc: denied { ioctl } for pid=13892 comm="syz.3.1702" path="/380/file0" dev="tmpfs" ino=2068 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 912.549343][ T30] audit: type=1400 audit(1775958049.872:1575): avc: denied { getopt } for pid=13905 comm="syz.4.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 912.572604][T13912] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 1, id = 0 [ 912.665982][ T30] audit: type=1400 audit(1775958050.368:1576): avc: denied { create } for pid=13896 comm="syz.0.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 912.907618][ T30] audit: type=1400 audit(1775958050.602:1577): avc: denied { write } for pid=13920 comm="syz.4.1707" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 913.122336][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 913.317296][T13927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1708'. [ 913.397534][ T30] audit: type=1400 audit(1775958050.985:1578): avc: denied { ioctl } for pid=13922 comm="syz.3.1708" path="socket:[37153]" dev="sockfs" ino=37153 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 913.476274][T13925] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt' already exists in 'ieee80211' [ 914.094403][T13934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1710'. [ 915.806186][T13941] pim6reg: entered allmulticast mode [ 915.889684][T13943] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 915.897131][T13943] ALSA: mixer_oss: invalid index 1374389 [ 916.358361][T13946] team0: entered allmulticast mode [ 916.363547][T13946] team_slave_0: entered allmulticast mode [ 916.390528][T13946] team_slave_1: entered allmulticast mode [ 916.540034][T13950] team0: left allmulticast mode [ 916.558633][T13950] team_slave_0: left allmulticast mode [ 916.592663][T10517] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 916.625928][T13957] kAFS: unable to lookup cell 'ÿ' [ 916.644395][T13950] team_slave_1: left allmulticast mode [ 916.663319][T13950] pim6reg: left allmulticast mode [ 916.782981][T10517] usb 1-1: Using ep0 maxpacket: 16 [ 916.794277][T10517] usb 1-1: config index 0 descriptor too short (expected 29555, got 27) [ 917.260359][T10517] usb 1-1: config 109 has too many interfaces: 95, using maximum allowed: 32 [ 917.286308][T10517] usb 1-1: config 109 has an invalid descriptor of length 114, skipping remainder of the config [ 917.431164][T10517] usb 1-1: config 109 has 0 interfaces, different from the descriptor's value: 95 [ 917.445937][T10517] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 917.456385][T10517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.530032][T10517] usb 1-1: Product: syz [ 917.577128][T10517] usb 1-1: Manufacturer: syz [ 917.584709][T10517] usb 1-1: SerialNumber: syz [ 918.364127][T10517] usb 1-1: USB disconnect, device number 15 [ 918.493455][T12635] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 918.590910][ T5877] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 918.809724][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 918.839999][T13976] kAFS: unable to lookup cell 'ÿ' [ 918.870497][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 918.899426][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 918.937428][ T5877] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 918.983230][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.994201][ T5877] usb 5-1: Product: syz [ 919.024680][ T5877] usb 5-1: Manufacturer: syz [ 919.037150][ T5877] usb 5-1: SerialNumber: syz [ 919.054651][ T5877] usb 5-1: config 0 descriptor?? [ 919.065240][T13969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 919.204620][T13983] kAFS: unable to lookup cell 'ÿ' [ 919.314379][T13966] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 919.743830][T13982] sctp: [Deprecated]: syz.1.1722 (pid 13982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 919.743830][T13982] Use struct sctp_sack_info instead [ 920.306597][T13993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1724'. [ 920.583139][T13994] tipc: Started in network mode [ 920.588067][T13994] tipc: Node identity 2, cluster identity 4711 [ 920.594276][T13994] tipc: Node number set to 2 [ 920.871318][ T9] usb 5-1: USB disconnect, device number 24 [ 921.430880][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 921.459455][T14005] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt' already exists in 'ieee80211' [ 922.254986][ T30] audit: type=1400 audit(1775958059.314:1579): avc: denied { mount } for pid=14006 comm="syz.3.1729" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 923.092623][T14022] binder: 14012:14022 ioctl c018620c 200000000040 returned -1 [ 923.329486][ T30] audit: type=1400 audit(1775958060.119:1580): avc: denied { write } for pid=14012 comm="syz.4.1731" name="binder0" dev="binder" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 923.440426][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 923.471210][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 923.962843][ T30] audit: type=1400 audit(1775958060.736:1581): avc: denied { write } for pid=14024 comm="syz.1.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 924.120463][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 924.126323][T14025] ceph: No mds server is up or the cluster is laggy [ 924.135476][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 924.179706][ T30] audit: type=1400 audit(1775958060.746:1582): avc: denied { read } for pid=14024 comm="syz.1.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 924.384368][T14035] kAFS: unable to lookup cell 'ÿ' [ 924.995921][T14038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1736'. [ 926.140004][T14041] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 926.251012][ T30] audit: type=1400 audit(1775958063.085:1583): avc: denied { read } for pid=14039 comm="syz.2.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 928.571186][T14067] overlayfs: workdir and upperdir must be separate subtrees [ 928.847032][ T30] audit: type=1400 audit(1775958065.107:1584): avc: denied { write } for pid=14063 comm="syz.2.1744" path="socket:[36698]" dev="sockfs" ino=36698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 928.876544][ T30] audit: type=1400 audit(1775958065.200:1585): avc: denied { mounton } for pid=14063 comm="syz.2.1744" path="/syzcgroup/unified/syz2" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 929.142465][ T30] audit: type=1400 audit(1775958065.219:1586): avc: denied { mount } for pid=14063 comm="syz.2.1744" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 930.897291][T14094] ufs: You didn't specify the type of your ufs filesystem [ 930.897291][T14094] [ 930.897291][T14094] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 930.897291][T14094] [ 930.897291][T14094] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 930.928439][T14094] ufs: ufstype=old is supported read-only [ 930.936134][T14094] ufs: ufs_fill_super(): bad magic number [ 930.959294][T14094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1749'. [ 932.391331][T14106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 932.689181][ T30] audit: type=1400 audit(1775958069.112:1587): avc: denied { create } for pid=14112 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 933.006402][ T30] audit: type=1400 audit(1775958069.112:1588): avc: denied { read } for pid=14112 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 933.027523][ T30] audit: type=1400 audit(1775958069.140:1589): avc: denied { sqpoll } for pid=14112 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 933.049133][T14116] kAFS: unable to lookup cell 'ÿ' [ 935.357397][ T5863] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 935.528326][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 935.751185][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.780455][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.809077][ T5863] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 935.826158][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.841277][ T5863] usb 3-1: config 0 descriptor?? [ 935.854414][ T5863] hub 3-1:0.0: USB hub found [ 937.542774][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 938.504834][ T5863] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 938.556414][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 938.569934][ T5863] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 938.918312][ T30] audit: type=1400 audit(1775958074.923:1590): avc: denied { read } for pid=14156 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 938.939035][ T5863] usb 3-1: USB disconnect, device number 16 [ 939.161662][ T30] audit: type=1400 audit(1775958075.166:1591): avc: denied { create } for pid=14161 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 939.402425][ T30] audit: type=1400 audit(1775958075.176:1592): avc: denied { setopt } for pid=14161 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 939.405608][T14165] batman_adv: batadv0: Adding interface: macsec1 [ 939.428725][T14165] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.456201][T14165] batman_adv: batadv0: Interface activated: macsec1 [ 939.592503][T14167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.558026][T14175] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 943.327097][T14205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1775'. [ 944.640801][ T30] audit: type=1400 audit(1775958079.780:1593): avc: denied { map } for pid=14209 comm="syz.0.1777" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 944.693070][ T30] audit: type=1400 audit(1775958079.780:1594): avc: denied { execute } for pid=14209 comm="syz.0.1777" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 945.579094][ T30] audit: type=1400 audit(1775958081.174:1595): avc: denied { ioctl } for pid=14220 comm="syz.2.1779" path="socket:[37672]" dev="sockfs" ino=37672 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 945.604222][ T30] audit: type=1400 audit(1775958081.174:1596): avc: denied { create } for pid=14221 comm="syz.0.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 946.092298][ T30] audit: type=1400 audit(1775958081.174:1597): avc: denied { ioctl } for pid=14221 comm="syz.0.1780" path="socket:[37941]" dev="sockfs" ino=37941 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 946.128008][ T30] audit: type=1400 audit(1775958081.174:1598): avc: denied { connect } for pid=14220 comm="syz.2.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 946.168797][ T30] audit: type=1400 audit(1775958081.174:1599): avc: denied { bind } for pid=14220 comm="syz.2.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 946.221859][ T30] audit: type=1400 audit(1775958081.202:1600): avc: denied { mount } for pid=14221 comm="syz.0.1780" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 946.253759][ T30] audit: type=1400 audit(1775958081.268:1601): avc: denied { ioctl } for pid=14220 comm="syz.2.1779" path="socket:[37950]" dev="sockfs" ino=37950 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 946.296524][ T30] audit: type=1400 audit(1775958081.689:1602): avc: denied { unmount } for pid=14221 comm="syz.0.1780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 946.329378][T14229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1781'. [ 949.435350][T12635] Bluetooth: hci4: unexpected event 0x08 length: 9 > 4 [ 949.941655][T14273] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 951.036356][T14278] 9p: Bad value for 'rfdno' [ 951.380575][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 952.297252][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 952.304100][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.320885][T14299] Mount JFS Failure: -22 [ 955.861117][T14299] jfs_mount failed w/return code = -22 [ 956.440847][T10517] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 957.046602][T14332] xt_ecn: cannot match TCP bits for non-tcp packets [ 957.084137][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 957.084183][ T30] audit: type=1400 audit(1775958091.374:1607): avc: denied { mount } for pid=14322 comm="syz.2.1802" name="/" dev="rpc_pipefs" ino=39050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 957.477842][ T30] audit: type=1400 audit(1775958091.627:1608): avc: denied { create } for pid=14323 comm="syz.0.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 957.639428][ T30] audit: type=1400 audit(1775958091.683:1609): avc: denied { sys_admin } for pid=14323 comm="syz.0.1803" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 957.662377][ T30] audit: type=1400 audit(1775958091.908:1610): avc: denied { ioctl } for pid=14322 comm="syz.2.1802" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 957.931364][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1804'. [ 959.049613][T14345] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.1808'. [ 960.007435][T10517] usb 2-1: device descriptor read/all, error -71 [ 961.247087][ T30] audit: type=1400 audit(1775958095.838:1611): avc: denied { read write } for pid=14359 comm="syz.1.1812" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 961.474015][ T30] audit: type=1400 audit(1775958095.979:1612): avc: denied { open } for pid=14359 comm="syz.1.1812" path="/353/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 961.959349][T10517] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 962.582523][T14380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.610804][T10517] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 962.623334][T10517] usb 2-1: config 0 interface 0 has no altsetting 0 [ 962.633907][T10517] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 962.643423][T10517] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 962.652464][T10517] usb 2-1: Product: syz [ 962.660610][T10517] usb 2-1: Manufacturer: syz [ 962.675082][T10517] usb 2-1: SerialNumber: syz [ 962.693034][T10517] usb 2-1: config 0 descriptor?? [ 962.717758][T10517] usb 2-1: selecting invalid altsetting 0 [ 963.058848][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 963.070872][T14396] xt_hashlimit: size too large, truncated to 1048576 [ 963.569622][T14401] ufs: You didn't specify the type of your ufs filesystem [ 963.569622][T14401] [ 963.569622][T14401] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 963.569622][T14401] [ 963.569622][T14401] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 963.601171][T14401] ufs: ufstype=old is supported read-only [ 963.607260][T14401] ufs: ufs_fill_super(): bad magic number [ 963.918039][T14404] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1816'. [ 964.178183][T14401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1818'. [ 966.005609][T10517] usb 2-1: USB disconnect, device number 10 [ 966.089595][ T30] audit: type=1400 audit(1775958100.358:1613): avc: denied { write } for pid=14385 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 966.183158][ T7228] udevd[7228]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 968.181881][T14430] kAFS: unable to lookup cell 'ÿ' [ 968.425731][ T30] audit: type=1400 audit(1775958102.557:1614): avc: denied { watch } for pid=14429 comm="syz.4.1825" path="/346/file0" dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 970.506224][T14449] bridge_slave_1: Caught tx_queue_len zero misconfig [ 974.242584][T12635] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 975.826286][T14491] ufs: You didn't specify the type of your ufs filesystem [ 975.826286][T14491] [ 975.826286][T14491] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 975.826286][T14491] [ 975.826286][T14491] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 975.857346][T14491] ufs: ufstype=old is supported read-only [ 975.865127][T14491] ufs: ufs_fill_super(): bad magic number [ 976.207293][T14492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 977.889491][T14508] smc: removing ib device syz2 [ 978.584065][T14516] kAFS: unable to lookup cell 'ÿ' [ 978.868507][T14515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 980.757623][T14528] kAFS: unable to lookup cell 'ÿ' [ 981.088098][ T30] audit: type=1400 audit(1775958114.405:1615): avc: denied { read } for pid=14535 comm="syz.1.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 983.031190][T14557] ufs: You didn't specify the type of your ufs filesystem [ 983.031190][T14557] [ 983.031190][T14557] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 983.031190][T14557] [ 983.031190][T14557] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 983.062696][T14557] ufs: ufstype=old is supported read-only [ 983.071216][T14557] ufs: ufs_fill_super(): bad magic number [ 983.544612][ T30] audit: type=1400 audit(1775958116.707:1616): avc: denied { ioctl } for pid=14560 comm="syz.1.1855" path="socket:[38579]" dev="sockfs" ino=38579 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 984.089415][ T30] audit: type=1400 audit(1775958116.894:1617): avc: denied { ioctl } for pid=14558 comm="syz.3.1856" path="socket:[39403]" dev="sockfs" ino=39403 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 986.977919][T14583] IPv6: sit3: Disabled Multicast RS [ 986.984155][T14583] sit3: entered allmulticast mode [ 987.002547][T14591] SET target dimension over the limit! [ 988.058657][ T30] audit: type=1400 audit(1775958120.862:1618): avc: denied { write } for pid=14585 comm="syz.0.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 988.199938][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 988.208889][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 988.614950][T14596] syz_tun: entered allmulticast mode [ 988.727375][T14595] syz_tun: left allmulticast mode [ 989.444662][T14614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1867'. [ 989.481373][ T30] audit: type=1400 audit(1775958122.237:1619): avc: denied { write } for pid=14609 comm="syz.1.1867" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 989.884770][T14617] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1868'. [ 989.929390][T14618] kAFS: unable to lookup cell 'ÿ' [ 989.965750][ T30] audit: type=1400 audit(1775958122.247:1620): avc: denied { ioctl } for pid=14609 comm="syz.1.1867" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 990.462930][T14623] xt_TPROXY: Can be used only with -p tcp or -p udp [ 992.962838][T14640] tipc: Failed to remove unknown binding: 66,0,0/0:2370050532/2370050533 [ 992.979265][T14640] tipc: Failed to remove unknown binding: 66,0,0/0:2370050532/2370050533 [ 993.000296][ T30] audit: type=1400 audit(1775958125.447:1621): avc: denied { mounton } for pid=14635 comm="syz.2.1872" path="/syzcgroup/unified/syz2" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 993.163693][ T30] audit: type=1400 audit(1775958125.494:1622): avc: denied { ioctl } for pid=14635 comm="syz.2.1872" path="socket:[39509]" dev="sockfs" ino=39509 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 993.594486][T14647] SET target dimension over the limit! [ 995.190312][T14656] can0: slcan on ttyS3. [ 995.594124][ T30] audit: type=1400 audit(1775958127.665:1623): avc: denied { ioctl } for pid=14652 comm="syz.1.1876" path="socket:[39537]" dev="sockfs" ino=39537 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 995.676928][ T30] audit: type=1400 audit(1775958128.058:1624): avc: denied { search } for pid=5474 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.714210][T12635] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 995.724008][ T30] audit: type=1400 audit(1775958128.086:1625): avc: denied { search } for pid=5474 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.748410][ T30] audit: type=1400 audit(1775958128.086:1626): avc: denied { search } for pid=5474 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.773094][ T30] audit: type=1400 audit(1775958128.086:1627): avc: denied { read } for pid=5474 comm="dhcpcd" name="n123" dev="tmpfs" ino=7745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 996.037450][ T30] audit: type=1400 audit(1775958128.086:1628): avc: denied { open } for pid=5474 comm="dhcpcd" path="/run/udev/data/n123" dev="tmpfs" ino=7745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 996.096823][ T30] audit: type=1400 audit(1775958128.086:1629): avc: denied { getattr } for pid=5474 comm="dhcpcd" path="/run/udev/data/n123" dev="tmpfs" ino=7745 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 996.294483][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 996.300637][ T30] audit: type=1400 audit(1775958128.442:1630): avc: denied { read open } for pid=14665 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.327065][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 996.334922][ T30] audit: type=1400 audit(1775958128.442:1631): avc: denied { getattr } for pid=14665 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.386559][T14659] ceph: No mds server is up or the cluster is laggy [ 996.431675][T14652] can0 (unregistered): slcan off ttyS3. [ 997.174163][ T30] audit: type=1400 audit(1775958129.069:1632): avc: denied { create } for pid=14670 comm="syz.3.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 997.697710][T14682] FAT-fs (loop3): unable to read boot sector [ 999.439616][T14709] team_slave_1: Caught tx_queue_len zero misconfig [ 999.898275][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1887'. [ 1000.922228][T14729] hub 1-0:1.0: USB hub found [ 1000.928620][T14729] hub 1-0:1.0: 1 port detected [ 1002.391833][T14745] can0: slcan on ttyS3. [ 1003.201170][T14735] can0 (unregistered): slcan off ttyS3. [ 1004.891900][T14769] team0: entered allmulticast mode [ 1004.897070][T14769] team_slave_0: entered allmulticast mode [ 1004.902828][T14769] team_slave_1: entered allmulticast mode [ 1004.909210][T14769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1895'. [ 1004.918330][T14769] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1005.672920][T14783] kAFS: unable to lookup cell 'ÿ' [ 1005.910916][T14786] syz_tun: entered allmulticast mode [ 1005.953182][T14786] syz_tun: left allmulticast mode [ 1007.623890][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 1010.132246][T14815] orangefs_mount: mount request failed with -4 [ 1012.596460][T14833] kAFS: unable to lookup cell 'ÿ' [ 1012.980801][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1012.980843][ T30] audit: type=1400 audit(1775958144.219:1650): avc: denied { setopt } for pid=14834 comm="syz.0.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1013.145072][ T30] audit: type=1400 audit(1775958144.238:1651): avc: denied { read } for pid=14834 comm="syz.0.1911" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1013.231573][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 1013.536091][ T30] audit: type=1400 audit(1775958144.247:1652): avc: denied { open } for pid=14834 comm="syz.0.1911" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1013.795641][T14847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1914'. [ 1014.150285][ T30] audit: type=1400 audit(1775958144.285:1653): avc: denied { ioctl } for pid=14834 comm="syz.0.1911" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1014.682807][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 1016.678110][ T30] audit: type=1400 audit(1775958147.710:1654): avc: denied { relabelfrom } for pid=14871 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1016.806518][ T30] audit: type=1400 audit(1775958147.747:1655): avc: denied { relabelto } for pid=14871 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1017.637887][T14878] SET target dimension over the limit! [ 1017.912194][T14876] xt_CT: No such helper "snmp_trap" [ 1017.933150][ T30] audit: type=1400 audit(1775958148.047:1656): avc: denied { read write } for pid=14871 comm="syz.1.1921" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1018.014570][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1018.020934][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1018.077942][ T30] audit: type=1400 audit(1775958148.047:1657): avc: denied { open } for pid=14871 comm="syz.1.1921" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1018.155040][ T30] audit: type=1400 audit(1775958148.065:1658): avc: denied { remount } for pid=14871 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1018.983163][T14893] syz_tun: entered allmulticast mode [ 1019.067634][T14894] syz_tun: left allmulticast mode [ 1019.658025][ T30] audit: type=1400 audit(1775958150.498:1659): avc: denied { setopt } for pid=14899 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1019.772960][ T30] audit: type=1400 audit(1775958150.592:1660): avc: denied { bind } for pid=14899 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1019.863831][ T30] audit: type=1400 audit(1775958150.657:1661): avc: denied { listen } for pid=14899 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1020.457673][ T30] audit: type=1400 audit(1775958151.247:1662): avc: denied { append } for pid=14913 comm="syz.4.1928" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1020.587956][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 1020.808513][ T30] audit: type=1400 audit(1775958151.565:1663): avc: denied { map } for pid=14913 comm="syz.4.1928" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1022.372602][T14937] trusted_key: encrypted_key: insufficient parameters specified [ 1022.385949][T14937] capability: warning: `syz.3.1933' uses deprecated v2 capabilities in a way that may be insecure [ 1022.400071][T14938] kAFS: unable to lookup cell 'ÿ' [ 1023.270048][T14945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.997173][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 1028.399222][T14987] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1028.458582][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 1028.512386][ T30] audit: type=1400 audit(1775958158.733:1664): avc: denied { bind } for pid=14986 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1028.870888][ T30] audit: type=1400 audit(1775958159.089:1665): avc: denied { connect } for pid=14991 comm="syz.0.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1030.564340][T15012] SET target dimension over the limit! [ 1030.942734][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1954'. [ 1031.378961][T12635] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1031.731037][T15022] blktrace: Concurrent blktraces are not allowed on loop4 [ 1031.760342][ T30] audit: type=1400 audit(1775958161.803:1666): avc: denied { connect } for pid=15019 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1031.852232][ T30] audit: type=1400 audit(1775958161.803:1667): avc: denied { setopt } for pid=15019 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1032.046709][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 1033.326903][T15036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1033.886448][T15044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1959'. [ 1034.542671][T15046] 9pnet_virtio: no channels available for device syz [ 1034.551159][T15046] siw: device registration error -23 [ 1034.559854][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 1036.183909][T15056] IPv6: Can't replace route, no match found [ 1036.193753][T15056] IPv6: Can't replace route, no match found [ 1036.605992][T15060] syz_tun: entered allmulticast mode [ 1036.636184][T15060] syz_tun: left allmulticast mode [ 1037.701620][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 1038.711402][T15074] ufs: You didn't specify the type of your ufs filesystem [ 1038.711402][T15074] [ 1038.711402][T15074] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1038.711402][T15074] [ 1038.711402][T15074] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1038.742203][T15074] ufs: ufstype=old is supported read-only [ 1038.748884][T15074] ufs: ufs_fill_super(): bad magic number [ 1038.756955][T15074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1969'. [ 1040.369355][ T30] audit: type=1400 audit(1775958169.795:1668): avc: denied { read write } for pid=15092 comm="syz.0.1973" name="file1" dev="tmpfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1040.882249][ T30] audit: type=1400 audit(1775958169.795:1669): avc: denied { open } for pid=15092 comm="syz.0.1973" path="/394/file1" dev="tmpfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1041.369451][T15099] netlink: 'syz.0.1973': attribute type 7 has an invalid length. [ 1041.574783][ T30] audit: type=1400 audit(1775958170.805:1670): avc: denied { accept } for pid=15092 comm="syz.0.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1042.527931][T15108] syz_tun: entered allmulticast mode [ 1042.558775][T15108] syz_tun: left allmulticast mode [ 1043.767211][T10517] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1044.980040][T15139] ufs: You didn't specify the type of your ufs filesystem [ 1044.980040][T15139] [ 1044.980040][T15139] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1044.980040][T15139] [ 1044.980040][T15139] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1045.013240][T15139] ufs: ufstype=old is supported read-only [ 1045.019564][T15139] ufs: ufs_fill_super(): bad magic number [ 1045.035091][T15137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1984'. [ 1045.167376][T10517] usb 5-1: Using ep0 maxpacket: 8 [ 1045.211122][T10517] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1045.211158][T10517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.246398][T10517] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1045.310909][T15134] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1982'. [ 1045.467724][ T30] audit: type=1400 audit(1775958174.586:1671): avc: denied { name_bind } for pid=15127 comm="syz.1.1982" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1045.488679][T10517] pvrusb2: ********** [ 1045.488694][T10517] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1045.488707][T10517] pvrusb2: Important functionality might not be entirely working. [ 1045.488716][T10517] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1045.488726][T10517] pvrusb2: ********** [ 1045.666979][ T2336] pvrusb2: Invalid write control endpoint [ 1046.120316][ T30] audit: type=1400 audit(1775958174.642:1672): avc: denied { setopt } for pid=15140 comm="syz.3.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1046.182212][ T5878] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1046.220388][ T2336] pvrusb2: Invalid write control endpoint [ 1046.228745][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1046.301072][T15153] SELinux: syz.4.1979 (15153) set checkreqprot to 1. This is no longer supported. [ 1046.731804][ T30] audit: type=1400 audit(1775958175.437:1673): avc: denied { setcheckreqprot } for pid=15119 comm="syz.4.1979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1046.753324][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1046.849962][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1046.920600][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 1046.927327][ T30] audit: type=1400 audit(1775958175.512:1674): avc: denied { create } for pid=15119 comm="syz.4.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1046.927490][ T5878] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1046.961891][ T2336] pvrusb2: Device being rendered inoperable [ 1046.968253][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1046.981150][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1046.989191][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.004762][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1047.018361][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1047.030109][ T5878] usb 1-1: config 0 descriptor?? [ 1047.047922][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1047.058958][ T5878] as10x_usb: device has been detected [ 1047.262927][T15157] ceph: No mds server is up or the cluster is laggy [ 1047.274033][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1047.305056][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1047.422699][ T5878] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1047.487257][ T5878] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1047.543640][ T5878] as10x_usb: error during firmware upload part1 [ 1047.550476][ T5878] Registered device nBox DVB-T Dongle [ 1047.752627][ T5878] usb 1-1: USB disconnect, device number 16 [ 1047.794878][ T5878] Unregistered device nBox DVB-T Dongle [ 1047.797852][ T5878] as10x_usb: device has been disconnected [ 1047.879855][T10517] usb 5-1: USB disconnect, device number 25 [ 1048.735278][T15177] kAFS: unable to lookup cell 'ÿ' [ 1049.134731][T15184] overlayfs: failed to clone upperpath [ 1049.552066][T15187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.560301][ T5878] IPVS: starting estimator thread 0... [ 1049.688413][T15186] IPVS: using max 70 ests per chain, 168000 per kthread [ 1050.199080][T12635] Bluetooth: hci3: unexpected event 0x08 length: 9 > 4 [ 1050.917520][ T5878] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1051.180835][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 1051.194565][ T5878] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1051.234381][ T5878] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1051.265292][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.304094][ T5878] usb 3-1: Product: syz [ 1051.314020][ T5878] usb 3-1: Manufacturer: syz [ 1051.330372][ T5878] usb 3-1: SerialNumber: syz [ 1051.368530][ T5878] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1051.408221][ T5878] r8152-cfgselector 3-1: config 0 descriptor?? [ 1051.603964][T15204] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1996'. [ 1051.748938][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1996'. [ 1051.767551][ T30] audit: type=1400 audit(1775958180.528:1675): avc: denied { read write } for pid=15200 comm="syz.1.1996" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1051.809430][ T30] audit: type=1400 audit(1775958180.528:1676): avc: denied { open } for pid=15200 comm="syz.1.1996" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1051.929551][ T5878] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1051.951520][ T5878] r8152-cfgselector 3-1: bad CDC descriptors [ 1052.497497][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 1052.600736][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1994'. [ 1055.106039][T15236] syz.3.2001 (15236): attempted to duplicate a private mapping with mremap. This is not supported. [ 1055.233259][ T5878] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 1055.276155][ T5877] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1055.340938][T15244] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 1055.348949][T15244] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2001'. [ 1055.737755][T15243] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1055.930099][ T5877] usb 1-1: device descriptor read/64, error -71 [ 1056.437454][T15255] kAFS: unable to lookup cell 'ÿ' [ 1056.559200][ T5877] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1057.261050][ T5877] usb 1-1: device descriptor read/64, error -71 [ 1057.392277][ T5877] usb usb1-port1: attempt power cycle [ 1057.625058][ T30] audit: type=1400 audit(1775958186.031:1677): avc: denied { read } for pid=15264 comm="syz.0.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1057.912351][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 1058.471377][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 1061.285270][T15307] ufs: You didn't specify the type of your ufs filesystem [ 1061.285270][T15307] [ 1061.285270][T15307] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1061.285270][T15307] [ 1061.285270][T15307] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1061.316349][T15307] ufs: ufstype=old is supported read-only [ 1061.323731][T15307] ufs: ufs_fill_super(): bad magic number [ 1061.345274][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2014'. [ 1061.616164][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 1063.810561][T15324] SET target dimension over the limit! [ 1065.721411][ T30] audit: type=1400 audit(1775958193.545:1678): avc: denied { getopt } for pid=15332 comm="syz.0.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1066.504002][T10517] libceph: connect (1)[c::]:6789 error -101 [ 1066.510500][T10517] libceph: mon0 (1)[c::]:6789 connect error [ 1066.610529][T15348] ceph: No mds server is up or the cluster is laggy [ 1066.947508][ T30] audit: type=1400 audit(1775958194.659:1679): avc: denied { create } for pid=15358 comm="syz.1.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1068.339410][T15377] ufs: You didn't specify the type of your ufs filesystem [ 1068.339410][T15377] [ 1068.339410][T15377] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1068.339410][T15377] [ 1068.339410][T15377] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1068.370385][T15377] ufs: ufstype=old is supported read-only [ 1068.376361][T15377] ufs: ufs_fill_super(): bad magic number [ 1068.384577][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 1070.800134][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 1071.325092][T15406] hfs: can't find a HFS filesystem on dev nullb0 [ 1072.010155][T15417] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 1072.611470][ T30] audit: type=1400 audit(1775958199.487:1680): avc: denied { bind } for pid=15412 comm="syz.3.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1073.606694][T15417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.648378][T15417] bond0: (slave team0): Enslaving as an active interface with an up link [ 1076.220688][ T5878] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1077.146164][T15469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.155147][T15469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.416401][T15474] netlink: 'syz.2.2041': attribute type 4 has an invalid length. [ 1077.429883][ T30] audit: type=1400 audit(1775958204.503:1681): avc: denied { name_bind } for pid=15466 comm="syz.2.2041" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1079.404650][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1079.427622][ T5878] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1079.440962][ T5878] usb 1-1: can't read configurations, error -71 [ 1079.824662][T15498] ufs: You didn't specify the type of your ufs filesystem [ 1079.824662][T15498] [ 1079.824662][T15498] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1079.824662][T15498] [ 1079.824662][T15498] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1079.855765][T15498] ufs: ufstype=old is supported read-only [ 1079.863483][T15498] ufs: ufs_fill_super(): bad magic number [ 1079.887329][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 1080.286027][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 1080.331396][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 1080.871339][T15496] ceph: No mds server is up or the cluster is laggy [ 1080.916444][T15512] ip6tnl0: Caught tx_queue_len zero misconfig [ 1081.122874][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2048'. [ 1081.445497][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 1081.563690][T15530] xt_hashlimit: max too large, truncated to 1048576 [ 1082.881095][T15512] bridge0: port 3(dummy0) entered disabled state [ 1082.943772][T15512] dummy0 (unregistering): left allmulticast mode [ 1083.016658][T15512] dummy0 (unregistering): left promiscuous mode [ 1083.026177][T15512] bridge0: port 3(dummy0) entered disabled state [ 1083.068523][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 1083.145213][ T5878] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1083.307939][T15543] SET target dimension over the limit! [ 1083.609558][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1083.616124][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1083.904127][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 1084.263128][T15549] : entered promiscuous mode [ 1084.700959][ T5878] usb 2-1: device descriptor read/all, error -71 [ 1085.191461][T15559] binder: 15552:15559 ioctl c0306201 200000000040 returned -14 [ 1085.506610][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2055'. [ 1085.519943][T15555] netlink: 'syz.2.2055': attribute type 39 has an invalid length. [ 1087.925214][ T30] audit: type=1400 audit(1775958213.974:1682): avc: denied { getopt } for pid=15573 comm="syz.1.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1088.646092][T15584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2065'. [ 1090.527175][T15610] kAFS: unable to lookup cell 'ÿ' [ 1091.416188][ T30] audit: type=1400 audit(1775958217.305:1683): avc: denied { ioctl } for pid=15617 comm="syz.3.2075" path="socket:[42663]" dev="sockfs" ino=42663 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1091.544455][T10517] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1091.805709][T10517] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1091.827996][T10517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.854319][T10517] usb 2-1: Product: syz [ 1091.869083][T10517] usb 2-1: Manufacturer: syz [ 1092.448341][T10517] usb 2-1: SerialNumber: syz [ 1092.496565][T10517] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1092.534082][ T5863] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1093.692553][ T5863] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1093.701179][ T5863] ath9k_htc: Failed to initialize the device [ 1093.801399][ T5863] usb 2-1: ath9k_htc: USB layer deinitialized [ 1094.674189][T15642] max out of range [ 1094.801884][ T30] audit: type=1400 audit(1775958220.693:1684): avc: denied { remount } for pid=15634 comm="syz.4.2078" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1095.370946][ T30] audit: type=1400 audit(1775958221.357:1685): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1095.611278][T10517] usb 2-1: USB disconnect, device number 13 [ 1096.330432][ T30] audit: type=1400 audit(1775958220.835:1686): avc: denied { shutdown } for pid=15648 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1096.385017][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 1096.394328][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 1096.405190][ T30] audit: type=1400 audit(1775958220.854:1687): avc: denied { write } for pid=15648 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1096.611753][T15654] ceph: No mds server is up or the cluster is laggy [ 1097.504701][ T30] audit: type=1326 audit(1775958222.351:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.3.2086" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d3039c819 code=0x0 [ 1097.894483][T15665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.142286][ T30] audit: type=1400 audit(1775958222.716:1689): avc: denied { setattr } for pid=15650 comm="syz.4.2082" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1098.192477][T15678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2088'. [ 1098.484244][T15679] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2087'. [ 1098.484244][ T30] audit: type=1400 audit(1775958223.268:1690): avc: denied { nlmsg_read } for pid=15677 comm="syz.1.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1099.902856][T15696] kAFS: unable to lookup cell 'ÿ' [ 1101.815795][T15707] orangefs_mount: mount request failed with -4 [ 1102.100034][T15716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2095'. [ 1103.074060][T15725] kAFS: unable to lookup cell 'ÿ' [ 1103.791440][T15728] netlink: 'syz.2.2099': attribute type 10 has an invalid length. [ 1105.584656][T15747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1106.225879][T15748] netlink: 'syz.2.2103': attribute type 10 has an invalid length. [ 1106.241517][T15748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.260428][T15748] bond0: (slave team0): Enslaving as an active interface with an up link [ 1108.235105][T15779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1108.387092][T15781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1108.394404][T15781] IPv6: NLM_F_CREATE should be set when creating new route [ 1108.401855][T15781] IPv6: NLM_F_CREATE should be set when creating new route [ 1108.409357][T15781] IPv6: NLM_F_CREATE should be set when creating new route [ 1108.684830][ T30] audit: type=1400 audit(1775958232.757:1691): avc: denied { remount } for pid=15776 comm="syz.4.2111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1109.340838][T15792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2112'. [ 1110.511862][ T30] audit: type=1400 audit(1775958234.357:1692): avc: denied { associate } for pid=15800 comm="syz.4.2115" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1110.776592][T15804] EXT4-fs (nbd4): unable to read superblock [ 1111.122088][ T30] audit: type=1400 audit(1775958234.666:1693): avc: denied { read } for pid=15800 comm="syz.4.2115" lport=55015 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1111.429557][T15813] kAFS: unable to lookup cell 'ÿ' [ 1111.793123][ T30] audit: type=1400 audit(1775958235.723:1694): avc: denied { mount } for pid=15805 comm="syz.3.2116" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1111.831117][T12635] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1112.063966][T15821] netlink: 'syz.4.2119': attribute type 39 has an invalid length. [ 1112.477952][ T30] audit: type=1400 audit(1775958236.350:1695): avc: denied { listen } for pid=15822 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1112.599257][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 1112.731793][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2121'. [ 1113.310730][T15827] nbd: socks must be embedded in a SOCK_ITEM attr [ 1115.929472][T15842] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2123'. [ 1116.831411][ T7223] udevd[7223]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1116.845571][ T7768] udevd[7768]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1119.715864][ T30] audit: type=1400 audit(1775958243.135:1696): avc: denied { kexec_image_load } for pid=15873 comm="syz.0.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1119.812073][T15875] Cannot find del_set index 2 as target [ 1121.893095][T15897] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 1121.901127][T15897] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2137'. [ 1121.927446][T15897] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1122.361705][T15899] kAFS: unable to lookup cell 'ÿ' [ 1122.406991][T15246] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1122.591792][T15901] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2138'. [ 1123.457328][T15904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.466291][T15904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.232955][ C0] hrtimer: interrupt took 30896 ns [ 1125.080378][T15246] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1125.157923][T15246] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1125.194624][T15246] usb 2-1: can't read configurations, error -71 [ 1126.036460][T10725] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1127.507875][ T30] audit: type=1326 audit(1775958250.425:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.4.2145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf05b9c819 code=0x0 [ 1128.144194][T12635] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1128.733677][T15951] SET target dimension over the limit! [ 1129.931802][ T30] audit: type=1400 audit(1775958252.212:1698): avc: denied { ioctl } for pid=15942 comm="syz.0.2148" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1130.831108][T15968] team0: entered allmulticast mode [ 1130.836296][T15968] team_slave_0: entered allmulticast mode [ 1130.842115][T15968] team_slave_1: entered allmulticast mode [ 1130.848571][T15968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2152'. [ 1130.857530][T15968] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1132.570584][T15980] /dev/nullb0: Can't open blockdev [ 1133.158301][T15980] orangefs_mount: mount request failed with -4 [ 1133.543388][T15977] netlink: 'syz.4.2155': attribute type 10 has an invalid length. [ 1133.551464][T15977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2155'. [ 1133.685744][T15982] netlink: 'syz.4.2155': attribute type 23 has an invalid length. [ 1134.673431][T15989] kAFS: unable to lookup cell 'ÿ' [ 1134.918828][ T30] audit: type=1326 audit(1775958257.359:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.0.2160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab4d39c819 code=0x0 [ 1135.368531][T16005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.701428][ T30] audit: type=1326 audit(1775958257.649:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1135.728304][ T30] audit: type=1326 audit(1775958257.649:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1135.753288][ T30] audit: type=1326 audit(1775958257.649:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1135.776940][ T30] audit: type=1326 audit(1775958257.649:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1135.801224][ T30] audit: type=1326 audit(1775958257.649:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1135.921859][T16009] SET target dimension over the limit! [ 1136.029849][ T30] audit: type=1326 audit(1775958257.649:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1136.094289][ T30] audit: type=1326 audit(1775958257.649:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1136.565974][T16016] Trying to write to read-only block-device nullb0 [ 1136.802833][ T30] audit: type=1326 audit(1775958257.649:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1136.826432][ T30] audit: type=1326 audit(1775958257.649:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c719c819 code=0x7ffc0000 [ 1137.465817][T16023] SET target dimension over the limit! [ 1138.553145][T10517] libceph: connect (1)[c::]:6789 error -101 [ 1138.570658][T10517] libceph: mon0 (1)[c::]:6789 connect error [ 1138.578638][T16029] ceph: No mds server is up or the cluster is laggy [ 1138.826466][T16038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2167'. [ 1138.835822][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 1138.859962][T16038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2167'. [ 1138.869084][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 1138.951264][T16038] netlink: 810 bytes leftover after parsing attributes in process `syz.4.2167'. [ 1139.667631][T12635] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1139.745358][T16046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2169'. [ 1140.555847][T16053] SET target dimension over the limit! [ 1140.983886][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1140.983904][ T30] audit: type=1400 audit(1775958263.039:1774): avc: denied { name_bind } for pid=16056 comm="syz.4.2183" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1143.129790][T16085] SET target dimension over the limit! [ 1143.788474][ C0] ------------[ cut here ]------------ [ 1143.794497][ C0] ODEBUG: free active (active state 0) object: ffff88802fceac90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1143.807447][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.3.2178/16082 [ 1143.817675][ C0] Modules linked in: [ 1143.821992][ C0] CPU: 0 UID: 0 PID: 16082 Comm: syz.3.2178 Tainted: G L syzkaller #0 PREEMPT(full) [ 1143.832972][ C0] Tainted: [L]=SOFTLOCKUP [ 1143.837384][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1143.847570][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1143.853451][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d c2 08 e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac c6 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1143.873139][ C0] RSP: 0000:ffffc90000007a38 EFLAGS: 00010246 [ 1143.879304][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1143.887404][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e45110 [ 1143.895408][ C0] RBP: 0000000000000001 R08: ffff88802fceac90 R09: ffffffff8bb2bba0 [ 1143.903380][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 1143.911402][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7d0250 R15: ffffc90000007b38 [ 1143.919420][ C0] FS: 00007f6d311ed6c0(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 1143.928401][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1143.935016][ C0] CR2: 00007f6d31189ff8 CR3: 0000000084763000 CR4: 00000000003526f0 [ 1143.943049][ C0] Call Trace: [ 1143.946341][ C0] [ 1143.949223][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1143.954884][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1143.960761][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1143.966355][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1143.972494][ C0] ? mark_held_locks+0x40/0x70 [ 1143.977336][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1143.982778][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1143.988006][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1143.993202][ C0] kfree+0x38f/0x6b0 [ 1143.997135][ C0] rose_timer_expiry+0x53f/0x630 [ 1144.002129][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1144.007608][ C0] call_timer_fn+0x19a/0x670 [ 1144.012235][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1144.017402][ C0] ? debug_object_activate+0x331/0x490 [ 1144.022911][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1144.028449][ C0] ? mark_held_locks+0x40/0x70 [ 1144.033251][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1144.038809][ C0] __run_timers+0x757/0xb30 [ 1144.043372][ C0] ? __pfx___run_timers+0x10/0x10 [ 1144.048505][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1144.053586][ C0] run_timer_base+0x114/0x190 [ 1144.058350][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1144.063604][ C0] run_timer_softirq+0x1a/0x50 [ 1144.068435][ C0] handle_softirqs+0x1eb/0x9e0 [ 1144.073239][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1144.078584][ C0] __irq_exit_rcu+0xef/0x150 [ 1144.083195][ C0] irq_exit_rcu+0x9/0x30 [ 1144.087474][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1144.093178][ C0] [ 1144.096123][ C0] [ 1144.099099][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1144.105105][ C0] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 1144.111051][ C0] Code: 20 48 c7 c7 e0 1d 1b 8c e8 2d e7 90 f5 e8 f8 16 e4 f5 eb ac 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c6 20 1e 1b 8c 48 c7 c7 60 1e 1b 8c e9 f9 fe ff [ 1144.130709][ C0] RSP: 0000:ffffc90003aa75b0 EFLAGS: 00000283 [ 1144.136791][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 1144.144809][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e7920 [ 1144.152875][ C0] RBP: ffffffff8e7e7920 R08: 0000000000000000 R09: 0000000000000000 [ 1144.160891][ C0] R10: 0000000000080000 R11: 0000000000000000 R12: 0000000000000002 [ 1144.168956][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1144.177031][ C0] rcu_is_watching+0x12/0xc0 [ 1144.181671][ C0] lock_acquire+0x317/0x380 [ 1144.186228][ C0] avc_has_perm_noaudit+0x67/0x3b0 [ 1144.191354][ C0] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1144.196675][ C0] avc_has_perm+0xbd/0x1e0 [ 1144.201084][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 1144.206113][ C0] ? schedule_timeout+0x161/0x280 [ 1144.211132][ C0] selinux_socket_unix_may_send+0x1e6/0x2b0 [ 1144.217050][ C0] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1144.222785][ C0] ? __pfx_selinux_socket_unix_may_send+0x10/0x10 [ 1144.229247][ C0] ? __pfx_hook_unix_may_send+0x10/0x10 [ 1144.234783][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1144.240166][ C0] security_unix_may_send+0xc4/0x210 [ 1144.245463][ C0] unix_dgram_sendmsg+0xb76/0x1820 [ 1144.250583][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1144.256116][ C0] ? __might_fault+0x30/0x140 [ 1144.260829][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 1144.265605][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1144.271154][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1144.276424][ C0] ? rcu_is_watching+0x12/0xc0 [ 1144.281194][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 1144.286027][ C0] ? kfree+0x2ec/0x6b0 [ 1144.290092][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1144.294787][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1144.299999][ C0] ? irqentry_exit+0x180/0x670 [ 1144.304857][ C0] ? __pfx___might_resched+0x10/0x10 [ 1144.310158][ C0] __sys_sendmmsg+0x205/0x430 [ 1144.314875][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1144.320085][ C0] ? __pfx_do_futex+0x10/0x10 [ 1144.324777][ C0] ? xfd_validate_state+0x129/0x190 [ 1144.329969][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1144.334946][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1144.340129][ C0] do_syscall_64+0x106/0xf80 [ 1144.344724][ C0] ? clear_bhb_loop+0x40/0x90 [ 1144.349393][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.355291][ C0] RIP: 0033:0x7f6d3039c819 [ 1144.359683][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.379310][ C0] RSP: 002b:00007f6d311ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1144.387733][ C0] RAX: ffffffffffffffda RBX: 00007f6d30615fa0 RCX: 00007f6d3039c819 [ 1144.395689][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 1144.403689][ C0] RBP: 00007f6d30432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1144.411662][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.419648][ C0] R13: 00007f6d30616038 R14: 00007f6d30615fa0 R15: 00007ffd562e5998 [ 1144.427626][ C0] [ 1144.430659][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1144.437922][ C0] CPU: 0 UID: 0 PID: 16082 Comm: syz.3.2178 Tainted: G L syzkaller #0 PREEMPT(full) [ 1144.448857][ C0] Tainted: [L]=SOFTLOCKUP [ 1144.453164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1144.463197][ C0] Call Trace: [ 1144.466476][ C0] [ 1144.469302][ C0] dump_stack_lvl+0x100/0x190 [ 1144.473966][ C0] vpanic+0x552/0x970 [ 1144.477931][ C0] ? __pfx_vpanic+0x10/0x10 [ 1144.482435][ C0] panic+0xd1/0xe0 [ 1144.486133][ C0] ? __pfx_panic+0x10/0x10 [ 1144.490533][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1144.495642][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1144.501027][ C0] ? debug_print_object+0x18e/0x2a0 [ 1144.506224][ C0] __warn.cold+0x191/0x348 [ 1144.510631][ C0] __report_bug+0x296/0x3d0 [ 1144.515136][ C0] ? debug_print_object+0x18e/0x2a0 [ 1144.520357][ C0] ? __pfx___report_bug+0x10/0x10 [ 1144.525389][ C0] ? lock_acquire+0x1cf/0x380 [ 1144.530075][ C0] ? mark_held_locks+0x40/0x70 [ 1144.534847][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1144.540660][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1144.545875][ C0] report_bug_entry+0xe1/0x290 [ 1144.550684][ C0] ? debug_print_object+0x19b/0x2a0 [ 1144.556025][ C0] handle_bug+0x1cd/0x2a0 [ 1144.560358][ C0] exc_invalid_op+0x17/0x50 [ 1144.564870][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1144.569712][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1144.575520][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d c2 08 e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac c6 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1144.595124][ C0] RSP: 0000:ffffc90000007a38 EFLAGS: 00010246 [ 1144.601184][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1144.609151][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e45110 [ 1144.617102][ C0] RBP: 0000000000000001 R08: ffff88802fceac90 R09: ffffffff8bb2bba0 [ 1144.625049][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 1144.633027][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7d0250 R15: ffffc90000007b38 [ 1144.640990][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1144.646624][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1144.652274][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1144.658083][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1144.663630][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1144.669688][ C0] ? mark_held_locks+0x40/0x70 [ 1144.674432][ C0] ? kasan_quarantine_put+0x104/0x240 [ 1144.679788][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1144.684967][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1144.690062][ C0] kfree+0x38f/0x6b0 [ 1144.693944][ C0] rose_timer_expiry+0x53f/0x630 [ 1144.698868][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1144.704323][ C0] call_timer_fn+0x19a/0x670 [ 1144.708922][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1144.714020][ C0] ? debug_object_activate+0x331/0x490 [ 1144.719475][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1144.724933][ C0] ? mark_held_locks+0x40/0x70 [ 1144.729677][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1144.735129][ C0] __run_timers+0x757/0xb30 [ 1144.739629][ C0] ? __pfx___run_timers+0x10/0x10 [ 1144.744652][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1144.749682][ C0] run_timer_base+0x114/0x190 [ 1144.754346][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1144.759635][ C0] run_timer_softirq+0x1a/0x50 [ 1144.764418][ C0] handle_softirqs+0x1eb/0x9e0 [ 1144.769191][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1144.774462][ C0] __irq_exit_rcu+0xef/0x150 [ 1144.779033][ C0] irq_exit_rcu+0x9/0x30 [ 1144.783257][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1144.788876][ C0] [ 1144.791786][ C0] [ 1144.794695][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1144.800655][ C0] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 1144.806529][ C0] Code: 20 48 c7 c7 e0 1d 1b 8c e8 2d e7 90 f5 e8 f8 16 e4 f5 eb ac 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c6 20 1e 1b 8c 48 c7 c7 60 1e 1b 8c e9 f9 fe ff [ 1144.826143][ C0] RSP: 0000:ffffc90003aa75b0 EFLAGS: 00000283 [ 1144.832228][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 1144.840188][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e7920 [ 1144.848147][ C0] RBP: ffffffff8e7e7920 R08: 0000000000000000 R09: 0000000000000000 [ 1144.856103][ C0] R10: 0000000000080000 R11: 0000000000000000 R12: 0000000000000002 [ 1144.864055][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1144.872109][ C0] rcu_is_watching+0x12/0xc0 [ 1144.876690][ C0] lock_acquire+0x317/0x380 [ 1144.881176][ C0] avc_has_perm_noaudit+0x67/0x3b0 [ 1144.886282][ C0] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1144.891575][ C0] avc_has_perm+0xbd/0x1e0 [ 1144.895987][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 1144.900995][ C0] ? schedule_timeout+0x161/0x280 [ 1144.906009][ C0] selinux_socket_unix_may_send+0x1e6/0x2b0 [ 1144.911968][ C0] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1144.917708][ C0] ? __pfx_selinux_socket_unix_may_send+0x10/0x10 [ 1144.924113][ C0] ? __pfx_hook_unix_may_send+0x10/0x10 [ 1144.929659][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1144.935016][ C0] security_unix_may_send+0xc4/0x210 [ 1144.940288][ C0] unix_dgram_sendmsg+0xb76/0x1820 [ 1144.945385][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1144.950914][ C0] ? __might_fault+0x30/0x140 [ 1144.955592][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 1144.960336][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1144.965865][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1144.971144][ C0] ? rcu_is_watching+0x12/0xc0 [ 1144.975890][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 1144.980717][ C0] ? kfree+0x2ec/0x6b0 [ 1144.984783][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1144.989443][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1144.994626][ C0] ? irqentry_exit+0x180/0x670 [ 1144.999373][ C0] ? __pfx___might_resched+0x10/0x10 [ 1145.004638][ C0] __sys_sendmmsg+0x205/0x430 [ 1145.009316][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1145.014501][ C0] ? __pfx_do_futex+0x10/0x10 [ 1145.019171][ C0] ? xfd_validate_state+0x129/0x190 [ 1145.024369][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1145.029298][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1145.034480][ C0] do_syscall_64+0x106/0xf80 [ 1145.039084][ C0] ? clear_bhb_loop+0x40/0x90 [ 1145.043762][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.049633][ C0] RIP: 0033:0x7f6d3039c819 [ 1145.054026][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.073615][ C0] RSP: 002b:00007f6d311ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1145.082030][ C0] RAX: ffffffffffffffda RBX: 00007f6d30615fa0 RCX: 00007f6d3039c819 [ 1145.089997][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 1145.097980][ C0] RBP: 00007f6d30432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1145.105941][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.113911][ C0] R13: 00007f6d30616038 R14: 00007f6d30615fa0 R15: 00007ffd562e5998 [ 1145.121930][ C0] [ 1145.125287][ C0] Kernel Offset: disabled [ 1145.129599][ C0] Rebooting in 86400 seconds..