last executing test programs: 12m4.137617781s ago: executing program 1 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000200"], 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x1) 12m3.419758634s ago: executing program 1 (id=186): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003f4ffffff3d2e69000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 12m3.035882947s ago: executing program 1 (id=188): r0 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, 0x0, 0x0, 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x100}) 12m2.083904266s ago: executing program 1 (id=189): syz_emit_ethernet(0x3b4, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbb"], 0x0) 12m1.905637114s ago: executing program 1 (id=192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0xf8, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb81000f008848000f0f00000c0f00000005004f8f6021006800000911907800000000ffffffff070b387f00000100000000018913ab640101010a010102ffffffffac1414aa4404af618684ffffffff00067825e6e60710efcaf65e827bbc47b33f082efb6b050b05032f533c624d935d010a1baed63e89302973061258f3891c40913ac3e81f8fd759035d43050df4610b720e7ecc7e2d4a3d065978ca62679801cc123705f86bad020bcc1e82ad37f17b5b950212120ce48587024eae1a95424ffa5400df0512bc34e39b15a285c1505d72c273be1e38004e204e22001e9078c2fe0001800000009a772c48"], 0x0) 11m58.929186413s ago: executing program 1 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0xb635773f04ebbeec, 0x810, 0xffffffffffffffff, 0xca1a9000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "7464fbe08eb369"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e9840)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "8ed195df08363c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000039840)={0x0, 0x0, "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", "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"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x3}, @sack_perm, @sack_perm, @mss={0x2, 0x6}, @timestamp], 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x160, 0x0, 0x148, 0x0, 0x148, 0x240, 0x240, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}, {0x3f00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 11m41.283091353s ago: executing program 32 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0xb635773f04ebbeec, 0x810, 0xffffffffffffffff, 0xca1a9000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "7464fbe08eb369"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000e9840)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x4, "8ed195df08363c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000039840)={0x0, 0x0, "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", "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"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x3}, @sack_perm, @sack_perm, @mss={0x2, 0x6}, @timestamp], 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x160, 0x0, 0x148, 0x0, 0x148, 0x240, 0x240, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}, {0x3f00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 6m8.993418058s ago: executing program 4 (id=1086): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) 6m8.036067519s ago: executing program 4 (id=1095): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0, 0xffffffffffffffff, {}, 0x1}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000280)={0x1d, r0, 0x1, {0x0, 0xf0, 0x3}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0x404c0d5) 6m7.740057112s ago: executing program 4 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x58d9, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x30}}, 0x2000004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xb}, {0x1, 0xfff2}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xf8, 0xf8, 0x0, 0x2b0, 0x398, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "23d6eb5c3e1597414aab894c685206260c91f9e86793623b5db1828eb179"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2b0}}, {{@ipv6={@empty, @private1, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'gre0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x4, @ipv4=@rand_addr=0x64010100, 0x4e23}}}, {{@ipv6={@private0, @mcast2, [], [], 'tunl0\x00', 'bond_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000a4be96b000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r5, 0x0, 0x6}, 0x18) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r7, r6, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r7, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180)='tunl0\x00'}, 0x30) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000008010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400038008000240fffffffe08000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001708000240000000"], 0xd8}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000400)=[{&(0x7f00000004c0)='~', 0x1}], 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r8}, 0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r9, 0x0, 0xcf, 0x0, &(0x7f0000000200)) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ac1e010100000a01010100"/20], 0x14) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0x35, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) 6m7.422036353s ago: executing program 4 (id=1098): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x28, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e0d0000bf2dfe", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m6.405013763s ago: executing program 4 (id=1110): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m3.957065353s ago: executing program 4 (id=1115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, &(0x7f0000001340), 0x0, 0x0) 5m47.96596486s ago: executing program 33 (id=1115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, &(0x7f0000001340), 0x0, 0x0) 12.154981336s ago: executing program 3 (id=2561): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2}}}) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) 10.840383341s ago: executing program 3 (id=2563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4080, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.46453524s ago: executing program 2 (id=2566): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$FIBMAP(r5, 0x1, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 9.395792647s ago: executing program 3 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x8, 0x1, 0x9, 0xc, 0x2, 0xc}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x9, 0x7, 0x7ff}}]}}}]}, 0x60}}, 0x44080) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0x10, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x400c804) r10 = socket$inet(0x2, 0x2, 0x1) connect$inet(r10, &(0x7f0000000180)={0x2, 0xffff, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) 9.206617675s ago: executing program 5 (id=2570): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) connect$ax25(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$FIBMAP(r5, 0x1, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 8.077886446s ago: executing program 3 (id=2577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4080, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.942628692s ago: executing program 5 (id=2578): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f707"], 0x54}}, 0x0) 7.941359566s ago: executing program 2 (id=2579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000800)={r1, 0x5, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000000010000000400000500000000000200", @ANYRES32=0x1, @ANYBLOB="f80400"/20, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0300000000000007000000000b0000000000000000000000000000006da73301019269343b738dfc34847f51891ed040bfb24e8d28dff30ad5fbde531e7b3852b4c06869c65b14768dd6ecfe791bb6b598aef834bfe86d9e3674780955c8f80de182c2106d973f2a28e4c0681fb39de8789827c4da0885fd67d106ec671108bb557f075d09ce67f02d935ba5f17c5aa0ded3f59f37362bcdf83401328119897091cb3ccc07d5093ecf421b9d213b08cb57c0efda78ea449f717f0aa3f333b112ccc3873b4b0a24fd1e4cf97c831deac6b7ba5d9e11560480984d1b01ab099f60535f8889f11e7f4e"], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000040)={0x180000000000000, 0x6d7c, 0x6, 0x9, 0x100288, 0x8000000000000000, 0x75, 0x8}, &(0x7f0000000080)={0x6, 0x3, 0x8, 0x9, 0x4, 0x7, 0x400, 0xb}, &(0x7f00000001c0)={0x7, 0x6, 0x23, 0xd95, 0x9, 0xae2d, 0xa, 0x7}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xfffffffffffffffc]}, 0x8}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r1}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000540)={0x0, 0x2710}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000440000000000000000000000000000fe8000200000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000019021100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a00100000000000000000004000170009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001900000000000c0015000000000000000000"], 0x27c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x49, 0x6, @random="7c1c5f3dd6d6"}, 0x14) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000100)=0xcce4, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r7}, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000640)={'pimreg\x00', 0x2}) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 7.815420197s ago: executing program 2 (id=2581): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x8881}, 0x0) 7.778828271s ago: executing program 5 (id=2582): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x5, 0x8f, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x8c, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0xf968, 0x1e}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x5, 0x80}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x3, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x60, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x10, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x0, 0x81, 0x2, 0x8, 0x5}, 0x55, &(0x7f0000000440)={0x5, 0xf, 0x55, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x9, 0xff00, 0x3, [0xffc000, 0x2e, 0x180]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x10, 0x5, 0x401, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4b, "87340258ca216d4ab266ea1e8f68deb1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x1, 0x0, 0xf}, @wireless={0xb, 0x10, 0x1, 0x4, 0x35, 0x1, 0x8, 0x2, 0x4}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_disconnect(r4) shutdown(r3, 0x0) 7.648577736s ago: executing program 2 (id=2583): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x656}, {@broadcast}, {@multicast1, 0xffd200}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.322970849s ago: executing program 0 (id=2584): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x8, 0x1, 0x9, 0xc, 0x2, 0xc}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x9, 0x7, 0x7ff}}]}}}]}, 0x60}}, 0x44080) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0x10, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x400c804) r11 = socket$inet(0x2, 0x2, 0x1) connect$inet(r11, &(0x7f0000000180)={0x2, 0xffff, @remote}, 0x10) sendmmsg$inet(r11, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) 6.485795147s ago: executing program 3 (id=2585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4080, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.958009096s ago: executing program 6 (id=2586): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty}}) 5.640191816s ago: executing program 0 (id=2587): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty}}) 4.612799215s ago: executing program 5 (id=2588): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.676630632s ago: executing program 6 (id=2589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) r2 = syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x0, 0x10000}, 0x0, &(0x7f00000002c0)) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0xc10800, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f00000000c0)) (fail_nth: 2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0xffffffff, 0xbf23, 0x200, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) socket$netlink(0x10, 0x3, 0x12) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x19, 0x0, 0x1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) io_uring_setup(0x39e5, &(0x7f0000000300)={0x0, 0x1d6, 0x80, 0x3, 0x2ab}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.820887171s ago: executing program 6 (id=2590): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$afs(&(0x7f0000000200)=ANY=[@ANYBLOB="2399a235f1c801001db4bba4d3877c3e6194db1aa93eab00002e726561646f6e6c7900f2507b855a3a203f278cdc0ef5c89e8e4084c3469db1ecd924c5672e20552557748d457bd42a27947ff78166470a9917810c03fa4fda0ccbc670372c269d25a94bac7a2e4fa7a5c2f1a47111"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, "4a349800000000806913220909000909000a48"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002880)=0x9) r1 = socket$phonet(0x23, 0x2, 0x1) rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x208f3d63}}, 0x20, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x541b, &(0x7f00000007c0)=0x8) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r3, 0x0) (fail_nth: 2) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000100)='cifs\x00', 0x1000, 0x0) 1.81886044s ago: executing program 0 (id=2591): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000800)={r1, 0x5, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000000010000000400000500000000000200", @ANYRES32=0x1, @ANYBLOB="f80400"/20, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0300000000000007000000000b0000000000000000000000000000006da73301019269343b738dfc34847f51891ed040bfb24e8d28dff30ad5fbde531e7b3852b4c06869c65b14768dd6ecfe791bb6b598aef834bfe86d9e3674780955c8f80de182c2106d973f2a28e4c0681fb39de8789827c4da0885fd67d106ec671108bb557f075d09ce67f02d935ba5f17c5aa0ded3f59f37362bcdf83401328119897091cb3ccc07d5093ecf421b9d213b08cb57c0efda78ea449f717f0aa3f333b112ccc3873b4b0a24fd1e4cf97c831deac6b7ba5d9e11560480984d1b01ab099f60535f8889f11e7f4e"], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000040)={0x180000000000000, 0x6d7c, 0x6, 0x9, 0x100288, 0x8000000000000000, 0x75, 0x8}, &(0x7f0000000080)={0x6, 0x3, 0x8, 0x9, 0x4, 0x7, 0x400, 0xb}, &(0x7f00000001c0)={0x7, 0x6, 0x23, 0xd95, 0x9, 0xae2d, 0xa, 0x7}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xfffffffffffffffc]}, 0x8}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r1}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000540)={0x0, 0x2710}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000440000000000000000000000000000fe8000200000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000019021100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a00100000000000000000004000170009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001900000000000c0015000000000000000000"], 0x27c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x49, 0x6, @random="7c1c5f3dd6d6"}, 0x14) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000100)=0xcce4, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r7}, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000640)={'pimreg\x00', 0x2}) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 1.791717488s ago: executing program 2 (id=2592): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x4f424752, 0x0, 0xa, [{0x0, 0xfffffffe}, {0x10}, {}, {0xffff5e49, 0x2}, {0x6}, {0x0, 0x4}, {0xfffffffc}, {0xfffffffe, 0x80000000}], 0x0, 0x0, 0x6, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000000c0), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) 1.707965453s ago: executing program 3 (id=2593): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x4f424752, 0x0, 0xa, [{0x0, 0xfffffffe}, {0x10}, {}, {0xffff5e49, 0x2}, {0x6}, {0x0, 0x4}, {0xfffffffc}, {0xfffffffe, 0x80000000}], 0x0, 0x0, 0x6, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000000c0), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) 1.697228333s ago: executing program 0 (id=2594): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @remote, @empty}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 1.087804579s ago: executing program 6 (id=2595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2820, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1cc, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'Z'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "1f9595f86d406c2943c8c95eeefbc4500e54c410cf7982921b08daf8c8"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x25ec, 0x3, 0x0, 0x1, [{0x10e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x10b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "085b5c83d3acb816af1e1bc218e31b4cf1a3779d7ce62508b4c28024707c2c70da59d90fdec9fb590075d3a9f7a7cfa4a2543b321191e5bd11cc4e5c5e3ffd1ef52e230f08b9b74dc9f756fd099e4497e91544cd75b6dfd677c3bb82d1e78b222f109f7f137f9a2c9ad43cf8202854aa033c8bc688274f24313c6b9025c2b250b30e211ecda3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "622aedec5a54c37758cdc49a90efcb9061b5789130ca7343900e9e0356ee7caec05574206432aee756b7bbc759f8473249c3dc660420a241ece1c6599c120aa3151e46e19ec8270495d6ea2a8d8164215ad3dd78e4231cb7d5b908612bf4dca174e494c59c9695407683cf8727a78ba1626272b46bdadf20071f86409e99f9ebccf4f83dc0d0ef6bc999c358664a1932270df5d931e9712a11fcf6c7ad5a6b6e1a441de732b6199af128380a2c6b84a68d6a2fd146b2fc"}, @NFTA_DATA_VALUE={0x96, 0x1, "a1612e81a999b6e58d1071a49171729856d1f8bb253427aa24023f22a3de372c23be90e61b7c6561040f5febf895a3d8ed33a6440af78d545b9648acb16ecc57dee86e68ee56ebbe138b7974cbbff9f693dec2ebdfe508fcd94148f6725213ed66b3cda083761efc4ede8eecc3d7be9b2eb49e1f112c9cec0502cd1bc69fdeec7567d973c5d6e3b5387aca6bfb7aae140bab"}, @NFTA_DATA_VALUE={0x4f, 0x1, "b60c3ab85b9c4585262dd44d6b786e5cc93cf8235ad7cdc4eb6034b9ebf387db592dc3120d0a5650a343f53549700225b3c28e19ca38e63f6de3b3eda5a3951762c3617d08b7bfb60d9ff2"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x12d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "67077225c56b0b59cebda11808f771b2344139f33697a648bcce450201d5d79a9bae76fea78a83bf9aab4267c931d11d66128c3205de8fff284a67881f3fd99793590f5a764f23c4e6e8350d26c02022eae82afc707aea5f527c35f3255d4beb27989d2f9e818675c01073d9bfa86401e2901976ba98f805c4b6f9fc691822476dfc2c072308c30d4674c5423d0e2d6407"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "f84910f8d13386425e3e665937683244411a2ff9c50c8dd17653925abf0bb0c6807c6fdaded43eab6107d5ed1e08aba1a00ad34aba2afdf37e0eb2d98dab4a919566c10b4be4c3fa5ab77c2ede2b60d86fdf9d3366c497d3017a2283ae2a09e64ea206c08ddab578b81b6fc9c3d4b8a26a2c311029c97d891ac5d2a9f8723a1fd4670d11a9c1014d152fb07d2904cca7b14748dee91b10e032290042c6c92057202e0ad17bcee196f734bc36e4bd3c761cd128cb7fb79dc83455f111b3505c7155a30660f41aa1b710f49197122df5239a01cbafec"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_KEY={0x1044, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "2f4272b2eb1a0192c4c5785a1627e18b410847bd46ab1a92b630302bccdc9e1df5bd83ef561af3050dfa8edce183b4381f59399f0bb51bd8998948fc6aa9c61939a1d3f4b9ac4486be649c18b69f4accb2586b8ee7fa56ce1464ee66604a5d2335cc9610a181fb19ef3ea436d30932a77c76fe19948dbbc22adc3675f30ca1a347c77ae6734bd9be3a1c9fb800167645717619225ddec8aaa39da1a41c288969983603e89cffd15abb6ab7137dff"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x120000000000000}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2888}, 0x1, 0x0, 0x0, 0x400c4}, 0x40) 984.693777ms ago: executing program 6 (id=2596): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000340)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) (async) ftruncate(r3, 0x51a9497) (async) pipe(&(0x7f0000000340)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa8040, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000003c0)="0f3066bad104b802000000ef66b868000f00d066baf80cb850d26387ef66bafc0cb8c1000000efb900040000b800000000ba008000000f30f3440f1eee262e440fd54300430f79000f01c967460f582a", 0x50}], 0x1, 0x2, &(0x7f0000000480), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000480)={0x100002, 0x0, [0x6, 0x956, 0x39, 0xdd, 0xffffffff, 0x3, 0x8, 0x6]}) r6 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x90}, 0x840) 395.637223ms ago: executing program 5 (id=2597): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000800)={r1, 0x5, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000000010000000400000500000000000200", @ANYRES32=0x1, @ANYBLOB="f80400"/20, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0300000000000007000000000b0000000000000000000000000000006da73301019269343b738dfc34847f51891ed040bfb24e8d28dff30ad5fbde531e7b3852b4c06869c65b14768dd6ecfe791bb6b598aef834bfe86d9e3674780955c8f80de182c2106d973f2a28e4c0681fb39de8789827c4da0885fd67d106ec671108bb557f075d09ce67f02d935ba5f17c5aa0ded3f59f37362bcdf83401328119897091cb3ccc07d5093ecf421b9d213b08cb57c0efda78ea449f717f0aa3f333b112ccc3873b4b0a24fd1e4cf97c831deac6b7ba5d9e11560480984d1b01ab099f60535f8889f11e7f4e"], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000040)={0x180000000000000, 0x6d7c, 0x6, 0x9, 0x100288, 0x8000000000000000, 0x75, 0x8}, &(0x7f0000000080)={0x6, 0x3, 0x8, 0x9, 0x4, 0x7, 0x400, 0xb}, &(0x7f00000001c0)={0x7, 0x6, 0x23, 0xd95, 0x9, 0xae2d, 0xa, 0x7}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xfffffffffffffffc]}, 0x8}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r1}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000540)={0x0, 0x2710}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000440000000000000000000000000000fe8000200000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000019021100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400000000000000000000000000000000000000000000000000ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a001000000000000000000040001700090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050019"], 0x27c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x49, 0x6, @random="7c1c5f3dd6d6"}, 0x14) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000100)=0xcce4, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}}, 0x0) sendto$packet(r4, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000640)={'pimreg\x00', 0x2}) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 303.75507ms ago: executing program 0 (id=2598): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 207.031162ms ago: executing program 0 (id=2599): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 206.02111ms ago: executing program 5 (id=2600): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2}}}) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) 60.011892ms ago: executing program 2 (id=2601): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103330250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x3, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$inet_mptcp(0x2, 0x1, 0x106) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0xa, 0x1}, {0xfff1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40c5}, 0x4000) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x20000001, 0x4) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket(0x1e, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 0s ago: executing program 6 (id=2602): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) r0 = syz_usb_connect(0x4, 0x13e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xa, 0x85, 0x4b, 0x40, 0xbb4, 0xa96, 0xbd1f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x7, 0xf, 0xad, 0x3a, 0x0, [], [{{0x9, 0x5, 0xe, 0x8, 0x8, 0x0, 0xa, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x6, 0x9, 0x7, [@generic={0x60, 0x22, "dc4c7091d7f4c23cea6154bd854e374f542e87f44eba959951884698a6b19373b337040e3d3bd9c8c19468e1ff228a2fc95c1440df80dca198c98b97d59099bbd8edb0abd10e270b071e75484cff8e34a1879a4be815733ee5f5dab8e3f3"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x98, 0x6, 0x1, [@generic={0x74, 0xe, "c06c46ef170763091196282c3b882504271518989e45dc8e837166d1cef24abd8d24a6edfd4aaf152722d8d331ff182ff6c36a1e7cd6d3fbd7ee5d5dfaead3a3490670fbb8ec96d21c97c1d36ca5a77a6190f86f9b28326d86278d1ed9d7114264c6b7d419792eb8c92b2e8e1b14136dafe4"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x0, 0x0, 0x4}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x3, 0x44}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x7, 0x61, 0x19}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x3f, 0x2, 0xff}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="1a0103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ype=1400 audit(1733459060.627:2039): avc: denied { append } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 575.517019][ T29] audit: type=1400 audit(1733459060.657:2040): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 575.543519][ T29] audit: type=1400 audit(1733459060.687:2041): avc: denied { create } for pid=10991 comm="syz.2.1398" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 575.604468][T10990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.732782][T10997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.740159][T10997] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 575.753029][T10997] bond1: (slave vti0): Error -95 calling set_mac_address [ 575.936132][T11009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11009 comm=syz.2.1405 [ 576.654311][T11009] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 576.693923][T11009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.777906][T11009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.784965][T11009] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 576.819684][T11009] bond1: (slave vti0): Error -95 calling set_mac_address [ 576.882158][T11024] ip_vti0: entered promiscuous mode [ 576.887500][T11024] vlan2: entered promiscuous mode [ 577.106416][ T5917] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 577.238574][T11041] netlink: 'syz.3.1419': attribute type 10 has an invalid length. [ 577.263705][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 577.270031][ T5917] usb 6-1: config index 0 descriptor too short (expected 1051, got 27) [ 577.835579][ T5917] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 577.853669][ T5917] usb 6-1: config 0 has no interface number 0 [ 577.860523][ T5917] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 577.901376][ T5917] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 578.072677][ T5917] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 578.113476][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.198926][ T5917] usb 6-1: Product: syz [ 578.203216][ T5917] usb 6-1: Manufacturer: syz [ 578.208026][ T5917] usb 6-1: SerialNumber: syz [ 578.222690][ T5917] usb 6-1: config 0 descriptor?? [ 579.056025][T11053] wireguard1: entered promiscuous mode [ 579.061575][T11053] wireguard1: entered allmulticast mode [ 579.077035][ T5917] radio-si470x 6-1:0.35: this is not a si470x device. [ 579.115390][ T5917] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 579.935147][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 579.935163][ T29] audit: type=1400 audit(1733459065.177:2096): avc: denied { bind } for pid=11067 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 579.968819][ T29] audit: type=1400 audit(1733459065.207:2097): avc: denied { setopt } for pid=11067 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 580.039356][ T29] audit: type=1400 audit(1733459065.277:2098): avc: denied { connect } for pid=11044 comm="syz.3.1420" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 580.081824][ T29] audit: type=1400 audit(1733459065.277:2099): avc: denied { setopt } for pid=11044 comm="syz.3.1420" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 580.371008][ T5917] usb 6-1: USB disconnect, device number 6 [ 581.412826][ T29] audit: type=1400 audit(1733459066.237:2100): avc: denied { prog_run } for pid=11074 comm="syz.6.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 581.902311][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 582.652521][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1437'. [ 582.665380][T11091] xt_CONNSECMARK: invalid mode: 0 [ 582.673867][ T29] audit: type=1400 audit(1733459067.887:2101): avc: denied { create } for pid=11093 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 582.682446][T11089] netlink: 'syz.0.1434': attribute type 10 has an invalid length. [ 582.703755][ T29] audit: type=1400 audit(1733459067.907:2102): avc: denied { getopt } for pid=11093 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 582.750108][ T29] audit: type=1400 audit(1733459067.987:2103): avc: denied { getopt } for pid=11090 comm="syz.5.1437" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.983821][ T29] audit: type=1400 audit(1733459068.137:2104): avc: denied { ioctl } for pid=11097 comm="syz.6.1438" path="socket:[27016]" dev="sockfs" ino=27016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 583.041589][ T29] audit: type=1400 audit(1733459068.267:2105): avc: denied { create } for pid=11106 comm="syz.6.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 583.078603][T11109] netlink: 'syz.3.1439': attribute type 10 has an invalid length. [ 583.245176][T11109] team0: Port device netdevsim0 added [ 583.460290][T11112] netlink: 'syz.3.1439': attribute type 10 has an invalid length. [ 583.807649][T11117] xt_CONNSECMARK: invalid mode: 0 [ 583.885107][T11112] team0: Port device netdevsim0 removed [ 583.939513][T11112] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 585.933793][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 585.933811][ T29] audit: type=1400 audit(1733459070.937:2122): avc: denied { mounton } for pid=11143 comm="syz.2.1452" path="/278/bus" dev="tmpfs" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 586.012158][ T29] audit: type=1400 audit(1733459070.937:2123): avc: denied { unlink } for pid=11143 comm="syz.2.1452" name="#4b" dev="tmpfs" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 586.257781][ T29] audit: type=1400 audit(1733459070.937:2124): avc: denied { mount } for pid=11143 comm="syz.2.1452" name="/" dev="overlay" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 586.265306][T11149] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 586.453792][ T29] audit: type=1400 audit(1733459071.307:2125): avc: denied { read write } for pid=6868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.549226][ T29] audit: type=1400 audit(1733459071.307:2126): avc: denied { open } for pid=6868 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.706023][ T29] audit: type=1400 audit(1733459071.307:2127): avc: denied { ioctl } for pid=6868 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.758521][ T29] audit: type=1400 audit(1733459071.327:2128): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 586.972695][T11168] wireguard2: entered promiscuous mode [ 586.978386][T11168] wireguard2: entered allmulticast mode [ 587.208287][ T29] audit: type=1400 audit(1733459071.327:2129): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.937239][ T29] audit: type=1400 audit(1733459071.327:2130): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.962203][ T29] audit: type=1400 audit(1733459071.327:2131): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 588.183584][T11175] pim6reg1: entered promiscuous mode [ 588.190598][T11175] pim6reg1: entered allmulticast mode [ 588.980062][T11173] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 591.903895][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 591.903916][ T29] audit: type=1400 audit(1733459076.887:2153): avc: denied { mounton } for pid=11179 comm="syz.6.1462" path="/52/bus" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 591.932979][ T29] audit: type=1400 audit(1733459076.887:2154): avc: denied { unlink } for pid=11179 comm="syz.6.1462" name="#4d" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 593.033082][T11184] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 593.087296][ T29] audit: type=1400 audit(1733459076.887:2155): avc: denied { mount } for pid=11179 comm="syz.6.1462" name="/" dev="overlay" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 593.111358][ T29] audit: type=1400 audit(1733459077.207:2156): avc: denied { create } for pid=11189 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 593.131260][ T29] audit: type=1400 audit(1733459077.217:2157): avc: denied { create } for pid=11189 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 593.150993][ T29] audit: type=1400 audit(1733459077.927:2158): avc: denied { bind } for pid=11189 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 593.201831][ T29] audit: type=1400 audit(1733459077.927:2159): avc: denied { read } for pid=11189 comm="syz.3.1464" dev="nsfs" ino=4026533225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 593.272115][ T29] audit: type=1400 audit(1733459077.927:2160): avc: denied { open } for pid=11189 comm="syz.3.1464" path="net:[4026533225]" dev="nsfs" ino=4026533225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 593.320968][ T29] audit: type=1400 audit(1733459077.937:2161): avc: denied { create } for pid=11189 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 593.382897][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1472'. [ 593.391953][ T29] audit: type=1400 audit(1733459078.217:2162): avc: denied { setopt } for pid=11189 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 593.426335][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 593.460993][T11205] xt_CONNSECMARK: invalid mode: 0 [ 593.471018][T11202] xt_CONNSECMARK: invalid mode: 0 [ 593.770805][T11210] pim6reg1: entered promiscuous mode [ 593.776161][T11210] pim6reg1: entered allmulticast mode [ 594.595169][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 596.704155][T11208] delete_channel: no stack [ 597.535405][T11222] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 597.644906][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 597.644923][ T29] audit: type=1400 audit(1733459082.887:2205): avc: denied { create } for pid=11231 comm="syz.5.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 597.850550][ T29] audit: type=1400 audit(1733459083.087:2206): avc: denied { write } for pid=11231 comm="syz.5.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 597.905708][ T29] audit: type=1400 audit(1733459083.147:2207): avc: denied { create } for pid=11231 comm="syz.5.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 597.946853][ T29] audit: type=1400 audit(1733459083.147:2208): avc: denied { shutdown } for pid=11231 comm="syz.5.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 598.052766][T11240] pim6reg1: entered promiscuous mode [ 598.058297][T11240] pim6reg1: entered allmulticast mode [ 598.129315][ T29] audit: type=1400 audit(1733459083.147:2209): avc: denied { read } for pid=11231 comm="syz.5.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 598.149516][ T29] audit: type=1400 audit(1733459083.337:2210): avc: denied { write } for pid=11233 comm="syz.3.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 598.923723][ T29] audit: type=1400 audit(1733459084.157:2211): avc: denied { setopt } for pid=11241 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 599.461553][ T29] audit: type=1400 audit(1733459084.597:2212): avc: denied { create } for pid=11239 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 599.482883][ T29] audit: type=1400 audit(1733459084.657:2213): avc: denied { sys_admin } for pid=11239 comm="syz.2.1484" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 600.166891][ T29] audit: type=1400 audit(1733459085.407:2214): avc: denied { name_bind } for pid=11245 comm="syz.6.1483" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 600.978502][T11261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11261 comm=syz.5.1487 [ 600.994328][T11261] netlink: 'syz.5.1487': attribute type 1 has an invalid length. [ 601.033001][T11261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.161456][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 601.191772][T11269] xt_CONNSECMARK: invalid mode: 0 [ 601.303311][T11261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.797348][T11261] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 602.151829][T11261] bond2: (slave vti0): Error -95 calling set_mac_address [ 602.866159][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 602.866177][ T29] audit: type=1400 audit(1733459088.107:2224): avc: denied { write } for pid=11286 comm="syz.5.1497" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 603.961464][ T29] audit: type=1400 audit(1733459089.147:2225): avc: denied { mounton } for pid=11291 comm="syz.0.1500" path="/322/bus" dev="tmpfs" ino=1748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 604.230726][ T29] audit: type=1400 audit(1733459089.157:2226): avc: denied { unlink } for pid=11291 comm="syz.0.1500" name="#4f" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 604.346337][ T29] audit: type=1400 audit(1733459089.167:2227): avc: denied { mount } for pid=11291 comm="syz.0.1500" name="/" dev="overlay" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 604.416831][ T29] audit: type=1400 audit(1733459089.587:2228): avc: denied { bind } for pid=11296 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 604.451861][ T29] audit: type=1400 audit(1733459089.587:2229): avc: denied { setopt } for pid=11296 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 604.473168][ T29] audit: type=1400 audit(1733459089.617:2230): avc: denied { write } for pid=11298 comm="syz.5.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 604.494321][ T29] audit: type=1400 audit(1733459089.617:2231): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.536939][ T29] audit: type=1400 audit(1733459089.617:2232): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.580727][ T29] audit: type=1400 audit(1733459089.617:2233): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.622001][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1506'. [ 605.910734][T11342] netlink: 'syz.5.1517': attribute type 1 has an invalid length. [ 605.933225][T11342] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1517'. [ 607.153763][ T5917] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 607.334054][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 607.347494][ T5917] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 607.428943][ T5917] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.627302][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.717539][ T5917] usb 6-1: Product: syz [ 607.726145][ T5917] usb 6-1: Manufacturer: syz [ 607.737037][ T5917] usb 6-1: SerialNumber: syz [ 607.959611][ T5917] cdc_ncm 6-1:1.0: bind() failure [ 607.976664][ T5917] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 607.983472][ T5917] cdc_ncm 6-1:1.1: bind() failure [ 608.046583][ T5917] usb 6-1: USB disconnect, device number 7 [ 608.171163][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 608.171179][ T29] audit: type=1400 audit(1733459093.407:2291): avc: denied { shutdown } for pid=11348 comm="syz.5.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 608.300438][ T29] audit: type=1400 audit(1733459093.537:2292): avc: denied { create } for pid=11391 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 608.322269][ T29] audit: type=1400 audit(1733459093.567:2293): avc: denied { write } for pid=11391 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 608.345347][T11393] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 608.362468][ T29] audit: type=1400 audit(1733459093.587:2294): avc: denied { nlmsg_write } for pid=11391 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 608.407018][ T29] audit: type=1400 audit(1733459093.587:2295): avc: denied { write } for pid=11391 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.453681][ T29] audit: type=1400 audit(1733459093.677:2296): avc: denied { read } for pid=11396 comm="syz.2.1534" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 608.508089][ T29] audit: type=1400 audit(1733459093.687:2297): avc: denied { open } for pid=11396 comm="syz.2.1534" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 608.584731][ T29] audit: type=1400 audit(1733459093.687:2298): avc: denied { ioctl } for pid=11396 comm="syz.2.1534" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 608.668875][ T29] audit: type=1400 audit(1733459093.877:2299): avc: denied { connect } for pid=11380 comm="syz.3.1528" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 608.787993][ T29] audit: type=1400 audit(1733459093.877:2300): avc: denied { write } for pid=11380 comm="syz.3.1528" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 608.896656][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'. [ 608.943541][T11408] xt_CONNSECMARK: invalid mode: 0 [ 609.531066][T11422] wireguard1: entered promiscuous mode [ 609.537048][T11422] wireguard1: entered allmulticast mode [ 612.740859][T11455] pim6reg1: entered promiscuous mode [ 612.746299][T11455] pim6reg1: entered allmulticast mode [ 614.191452][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 614.191468][ T29] audit: type=1400 audit(1733459099.427:2332): avc: denied { ioctl } for pid=11473 comm="syz.0.1561" path="socket:[28266]" dev="sockfs" ino=28266 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 614.226038][T11474] syzkaller1: entered promiscuous mode [ 614.231773][T11474] syzkaller1: entered allmulticast mode [ 614.340086][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1562'. [ 614.571436][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 614.585621][ T29] audit: type=1400 audit(1733459099.827:2333): avc: denied { setopt } for pid=11479 comm="syz.3.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 614.619135][ T29] audit: type=1400 audit(1733459099.847:2334): avc: denied { create } for pid=11486 comm="syz.5.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 614.662371][ T29] audit: type=1400 audit(1733459099.877:2335): avc: denied { mounton } for pid=11479 comm="syz.3.1563" path="/314/file0" dev="tmpfs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 614.771270][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1571'. [ 614.780509][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1571'. [ 615.025342][T11502] pim6reg1: entered promiscuous mode [ 615.030681][T11502] pim6reg1: entered allmulticast mode [ 615.743763][ T29] audit: type=1400 audit(1733459100.277:2336): avc: denied { write } for pid=11493 comm="syz.0.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 615.799127][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1571'. [ 615.808392][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1571'. [ 616.687261][ T29] audit: type=1400 audit(1733459101.857:2337): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 618.099877][T11515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.339835][ T29] audit: type=1400 audit(1733459103.477:2338): avc: denied { bind } for pid=11517 comm="syz.2.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 618.502488][ T29] audit: type=1400 audit(1733459103.487:2339): avc: denied { connect } for pid=11517 comm="syz.2.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 618.639835][T11516] syzkaller1: entered promiscuous mode [ 618.654684][T11516] syzkaller1: entered allmulticast mode [ 618.763234][ T29] audit: type=1400 audit(1733459103.567:2340): avc: denied { read write } for pid=11517 comm="syz.2.1576" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 618.787507][ T29] audit: type=1400 audit(1733459103.567:2341): avc: denied { open } for pid=11517 comm="syz.2.1576" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 620.501442][ T29] audit: type=1400 audit(1733459105.737:2342): avc: denied { accept } for pid=11548 comm="syz.2.1587" laddr=172.20.20.170 lport=40988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 621.001358][T11552] pim6reg1: entered promiscuous mode [ 621.006719][T11552] pim6reg1: entered allmulticast mode [ 621.075310][ T29] audit: type=1400 audit(1733459106.027:2343): avc: denied { create } for pid=11548 comm="syz.2.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 622.064281][ T29] audit: type=1400 audit(1733459107.247:2344): avc: denied { read } for pid=11558 comm="syz.0.1588" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 622.455949][ T29] audit: type=1400 audit(1733459107.247:2345): avc: denied { open } for pid=11558 comm="syz.0.1588" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 622.567022][ T29] audit: type=1400 audit(1733459107.747:2346): avc: denied { read } for pid=11558 comm="syz.0.1588" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 622.614513][ T29] audit: type=1400 audit(1733459107.747:2347): avc: denied { open } for pid=11558 comm="syz.0.1588" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 622.638628][ T29] audit: type=1400 audit(1733459107.747:2348): avc: denied { write } for pid=11558 comm="syz.0.1588" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 622.655299][T11558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.671148][ T29] audit: type=1400 audit(1733459107.787:2349): avc: denied { read } for pid=11563 comm="syz.6.1591" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 622.691545][ T29] audit: type=1400 audit(1733459107.837:2350): avc: denied { ioctl } for pid=11554 comm="syz.3.1589" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 622.717534][ T29] audit: type=1400 audit(1733459107.837:2351): avc: denied { set_context_mgr } for pid=11554 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 622.748412][T11548] delete_channel: no stack [ 622.904447][T11574] netlink: 'syz.5.1595': attribute type 10 has an invalid length. [ 622.907488][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1596'. [ 622.956750][T11574] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 623.167319][T11581] pim6reg: entered allmulticast mode [ 624.027021][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.146656][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1604'. [ 625.283258][T11606] delete_channel: no stack [ 625.302225][T11609] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 625.558327][T11617] netlink: 'syz.0.1609': attribute type 10 has an invalid length. [ 625.574451][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 625.574474][ T29] audit: type=1400 audit(1733459110.817:2422): avc: denied { write } for pid=11610 comm="syz.5.1608" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 626.375373][ T29] audit: type=1400 audit(1733459110.877:2423): avc: denied { bind } for pid=11611 comm="syz.6.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 626.401909][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.411722][ T29] audit: type=1400 audit(1733459110.877:2424): avc: denied { connect } for pid=11611 comm="syz.6.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 626.445735][ T29] audit: type=1400 audit(1733459110.897:2425): avc: denied { read write } for pid=11611 comm="syz.6.1606" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 626.491224][T11617] team0: Port device netdevsim0 added [ 626.524414][ T29] audit: type=1400 audit(1733459110.897:2426): avc: denied { open } for pid=11611 comm="syz.6.1606" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 626.805103][ T29] audit: type=1400 audit(1733459112.047:2427): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 626.954852][T11636] pim6reg1: entered promiscuous mode [ 626.960208][T11636] pim6reg1: entered allmulticast mode [ 627.879502][T11641] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1618'. [ 629.037950][ T29] audit: type=1400 audit(1733459114.277:2428): avc: denied { ioctl } for pid=11642 comm="syz.2.1619" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 629.157749][ T29] audit: type=1400 audit(1733459114.397:2429): avc: denied { egress } for pid=10586 comm="kworker/0:0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 629.201944][ T29] audit: type=1400 audit(1733459114.397:2430): avc: denied { sendto } for pid=10586 comm="kworker/0:0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 630.043700][ T29] audit: type=1400 audit(1733459115.237:2431): avc: denied { write } for pid=11642 comm="syz.2.1619" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 630.942753][T11671] netlink: 'syz.5.1627': attribute type 10 has an invalid length. [ 631.074189][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 631.074205][ T29] audit: type=1400 audit(1733459116.317:2435): avc: denied { mount } for pid=11679 comm="syz.0.1631" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 631.303237][ T29] audit: type=1400 audit(1733459116.527:2436): avc: denied { write } for pid=11685 comm="syz.5.1633" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 631.333128][ T29] audit: type=1400 audit(1733459116.567:2437): avc: denied { module_request } for pid=11679 comm="syz.0.1631" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 631.544194][ T29] audit: type=1400 audit(1733459116.787:2438): avc: denied { read } for pid=11688 comm="syz.5.1634" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 631.597507][ T29] audit: type=1400 audit(1733459116.787:2439): avc: denied { open } for pid=11688 comm="syz.5.1634" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 631.814415][T11694] xt_CONNSECMARK: invalid mode: 0 [ 631.852410][ T29] audit: type=1400 audit(1733459117.087:2440): avc: denied { getopt } for pid=11693 comm="syz.2.1635" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 632.080029][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'. [ 633.192396][ T29] audit: type=1400 audit(1733459118.277:2441): avc: denied { create } for pid=11712 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 633.368019][ T29] audit: type=1400 audit(1733459118.277:2442): avc: denied { ioctl } for pid=11712 comm="syz.3.1644" path="socket:[29300]" dev="sockfs" ino=29300 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 633.430324][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 633.433805][ T29] audit: type=1400 audit(1733459118.667:2443): avc: denied { bind } for pid=11720 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 633.460700][T11724] xt_CONNSECMARK: invalid mode: 0 [ 633.480197][T11725] pim6reg: entered allmulticast mode [ 633.482542][ T29] audit: type=1400 audit(1733459118.677:2444): avc: denied { setopt } for pid=11720 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 633.629965][T11734] netlink: 'syz.3.1652': attribute type 10 has an invalid length. [ 633.659801][T11734] bond0: (slave netdevsim0): Releasing backup interface [ 633.680513][T11734] team0: Port device netdevsim0 added [ 636.025879][T11765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11765 comm=syz.5.1662 [ 636.073689][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1661'. [ 636.138982][T11765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.266293][T11770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.300482][T11770] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 636.338401][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 636.349176][T11770] bond3: (slave vti0): Error -95 calling set_mac_address [ 636.417573][T11774] xt_CONNSECMARK: invalid mode: 0 [ 637.765763][T11791] syzkaller1: entered promiscuous mode [ 637.771273][T11791] syzkaller1: entered allmulticast mode [ 637.880669][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 638.133119][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 638.133135][ T29] audit: type=1400 audit(1733459123.367:2449): avc: denied { create } for pid=11805 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 638.189376][ T29] audit: type=1400 audit(1733459123.407:2450): avc: denied { listen } for pid=11805 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 638.230675][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1676'. [ 638.261244][T11810] xt_CONNSECMARK: invalid mode: 0 [ 638.303367][ T29] audit: type=1400 audit(1733459123.407:2451): avc: denied { accept } for pid=11805 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 638.451138][ T29] audit: type=1400 audit(1733459123.467:2452): avc: denied { connect } for pid=11805 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 638.722999][T11807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.769807][ T29] audit: type=1400 audit(1733459124.007:2453): avc: denied { ioctl } for pid=11805 comm="syz.3.1674" path="socket:[29405]" dev="sockfs" ino=29405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 638.833729][ T29] audit: type=1400 audit(1733459124.057:2454): avc: denied { create } for pid=11805 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 638.873993][ T29] audit: type=1400 audit(1733459124.067:2455): avc: denied { connect } for pid=11805 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 638.940649][ T29] audit: type=1400 audit(1733459124.067:2456): avc: denied { write } for pid=11805 comm="syz.3.1674" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 639.017805][ T29] audit: type=1400 audit(1733459124.177:2457): avc: denied { connect } for pid=11819 comm="syz.5.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 640.204632][ T29] audit: type=1400 audit(1733459124.827:2458): avc: denied { unlink } for pid=11825 comm="syz.3.1681" name="#53" dev="tmpfs" ino=1794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 640.719213][T11829] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 642.708550][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 643.531260][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 643.531276][ T29] audit: type=1400 audit(1733459128.767:2496): avc: denied { read } for pid=11861 comm="syz.0.1692" dev="nsfs" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 643.607122][T11852] delete_channel: no stack [ 643.664958][ T29] audit: type=1400 audit(1733459128.797:2497): avc: denied { open } for pid=11861 comm="syz.0.1692" path="net:[4026533014]" dev="nsfs" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 643.726292][ T29] audit: type=1400 audit(1733459128.957:2498): avc: denied { ioctl } for pid=11861 comm="syz.0.1692" path="socket:[29507]" dev="sockfs" ino=29507 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 643.729251][T11862] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1692'. [ 643.804491][ T29] audit: type=1400 audit(1733459129.047:2499): avc: denied { create } for pid=11866 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 643.813333][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1692'. [ 643.845620][ T29] audit: type=1400 audit(1733459129.067:2500): avc: denied { ioctl } for pid=11866 comm="syz.3.1693" path="socket:[30013]" dev="sockfs" ino=30013 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 644.071230][ T29] audit: type=1400 audit(1733459129.217:2501): avc: denied { mounton } for pid=11864 comm="syz.5.1687" path="/288/bus" dev="tmpfs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 644.373471][ T29] audit: type=1400 audit(1733459129.227:2502): avc: denied { unlink } for pid=11864 comm="syz.5.1687" name="#55" dev="tmpfs" ino=1569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 644.434532][ T29] audit: type=1400 audit(1733459129.237:2503): avc: denied { mount } for pid=11864 comm="syz.5.1687" name="/" dev="overlay" ino=1564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 644.456965][ T29] audit: type=1400 audit(1733459129.617:2504): avc: denied { recv } for pid=11864 comm="syz.5.1687" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=34992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 644.509165][ T29] audit: type=1400 audit(1733459129.647:2505): avc: denied { append } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 644.649963][T11878] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1697'. [ 644.659348][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1697'. [ 644.812524][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1703'. [ 644.937253][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 644.959111][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 644.972802][T11899] netlink: 'syz.6.1707': attribute type 10 has an invalid length. [ 645.008739][T11899] syz_tun: entered promiscuous mode [ 645.030937][T11899] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 645.361556][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1711'. [ 648.195087][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 648.535662][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 648.535677][ T29] audit: type=1400 audit(1733459133.777:2608): avc: denied { read } for pid=11963 comm="syz.0.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 648.674996][ T29] audit: type=1400 audit(1733459133.907:2609): avc: denied { read write } for pid=11963 comm="syz.0.1729" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 648.770006][ T29] audit: type=1400 audit(1733459133.917:2610): avc: denied { open } for pid=11963 comm="syz.0.1729" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 649.302445][ T29] audit: type=1400 audit(1733459133.917:2611): avc: denied { ioctl } for pid=11963 comm="syz.0.1729" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 649.383852][ T29] audit: type=1400 audit(1733459133.987:2612): avc: denied { accept } for pid=11958 comm="syz.3.1727" laddr=172.20.20.170 lport=55616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 649.531623][ T29] audit: type=1400 audit(1733459134.007:2613): avc: denied { recv } for pid=8936 comm="udevd" saddr=10.128.0.169 src=42214 daddr=10.128.1.62 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 649.558569][ T29] audit: type=1400 audit(1733459134.097:2614): avc: denied { create } for pid=11965 comm="syz.5.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 649.585131][ T29] audit: type=1400 audit(1733459134.097:2615): avc: denied { ioctl } for pid=11965 comm="syz.5.1731" path="socket:[30760]" dev="sockfs" ino=30760 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 649.712935][T11984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1738'. [ 649.722115][ T29] audit: type=1400 audit(1733459134.767:2616): avc: denied { name_bind } for pid=11977 comm="syz.3.1735" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 649.744646][ T29] audit: type=1400 audit(1733459134.767:2617): avc: denied { node_bind } for pid=11977 comm="syz.3.1735" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 650.805981][ T5863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 651.885155][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 651.905197][ T5863] usb 1-1: device descriptor read/all, error -71 [ 652.920740][T12025] netlink: 'syz.6.1753': attribute type 10 has an invalid length. [ 652.963304][T12025] team0: Port device netdevsim0 added [ 653.038794][T12022] pim6reg1: entered promiscuous mode [ 653.044683][T12022] pim6reg1: entered allmulticast mode [ 653.709575][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 653.709590][ T29] audit: type=1400 audit(1733459138.947:2633): avc: denied { read } for pid=12035 comm="syz.2.1756" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 653.772366][ T29] audit: type=1400 audit(1733459138.947:2634): avc: denied { open } for pid=12035 comm="syz.2.1756" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 653.819980][ T29] audit: type=1400 audit(1733459139.027:2635): avc: denied { setopt } for pid=12031 comm="syz.6.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 653.843776][ T29] audit: type=1400 audit(1733459139.027:2636): avc: denied { create } for pid=12031 comm="syz.6.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 653.847730][ T29] audit: type=1400 audit(1733459139.027:2637): avc: denied { write } for pid=12031 comm="syz.6.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 653.931489][ T29] audit: type=1400 audit(1733459139.147:2638): avc: denied { unmount } for pid=10271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 653.959049][ T29] audit: type=1400 audit(1733459139.167:2639): avc: denied { name_bind } for pid=12035 comm="syz.2.1756" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 654.360847][T12049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12049 comm=syz.6.1760 [ 654.555359][T12049] netlink: 'syz.6.1760': attribute type 1 has an invalid length. [ 654.572552][T12049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.629160][T12052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12052 comm=syz.5.1762 [ 654.694632][T12052] netlink: 'syz.5.1762': attribute type 1 has an invalid length. [ 654.723187][T12049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.733115][T12049] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 654.744412][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 654.747179][T12049] bond1: (slave vti0): Error -95 calling set_mac_address [ 654.777066][ T29] audit: type=1400 audit(1733459139.997:2640): avc: denied { egress } for pid=12041 comm="syz.0.1758" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 654.871333][ T29] audit: type=1400 audit(1733459139.997:2641): avc: denied { sendto } for pid=12041 comm="syz.0.1758" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 654.896646][T12052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.106690][T12056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.116467][T12056] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 655.160167][T12056] bond4: (slave vti0): Error -95 calling set_mac_address [ 656.982478][T12082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12082 comm=syz.0.1769 [ 657.200085][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 659.122483][ T29] audit: type=1400 audit(1733459143.907:2642): avc: denied { write } for pid=12092 comm="syz.2.1774" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 659.443722][ T29] audit: type=1400 audit(1733459143.967:2643): avc: denied { read } for pid=12092 comm="syz.2.1774" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 659.634129][ T29] audit: type=1400 audit(1733459143.967:2644): avc: denied { open } for pid=12092 comm="syz.2.1774" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 660.555642][ T29] audit: type=1400 audit(1733459144.017:2645): avc: denied { ioctl } for pid=12092 comm="syz.2.1774" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 660.587289][ T29] audit: type=1400 audit(1733459144.837:2646): avc: denied { read } for pid=12100 comm="syz.0.1775" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 660.776710][T12094] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 660.833733][ T29] audit: type=1400 audit(1733459144.837:2647): avc: denied { open } for pid=12100 comm="syz.0.1775" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 660.903924][ T29] audit: type=1400 audit(1733459144.947:2648): avc: denied { mount } for pid=12100 comm="syz.0.1775" name="/" dev="ramfs" ino=30329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 660.961827][ T29] audit: type=1400 audit(1733459145.007:2649): avc: denied { bpf } for pid=12100 comm="syz.0.1775" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 660.982815][ T29] audit: type=1400 audit(1733459145.027:2650): avc: denied { prog_load } for pid=12100 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 661.005354][ T29] audit: type=1400 audit(1733459145.027:2651): avc: denied { perfmon } for pid=12100 comm="syz.0.1775" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 661.095131][T12118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12118 comm=syz.6.1778 [ 661.132963][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'. [ 661.197348][T12121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1781'. [ 661.921857][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1788'. [ 661.933908][T12141] xt_CONNSECMARK: invalid mode: 0 [ 662.067850][T12142] pim6reg1: entered promiscuous mode [ 662.073226][T12142] pim6reg1: entered allmulticast mode [ 664.192607][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 664.192623][ T29] audit: type=1400 audit(1733459149.417:2690): avc: denied { name_bind } for pid=12122 comm="syz.5.1782" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 664.318878][T12152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1793'. [ 664.376121][ T29] audit: type=1400 audit(1733459149.607:2691): avc: denied { read } for pid=12153 comm="syz.6.1794" dev="nsfs" ino=4026534150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 664.483948][ T29] audit: type=1400 audit(1733459149.607:2692): avc: denied { open } for pid=12153 comm="syz.6.1794" path="net:[4026534150]" dev="nsfs" ino=4026534150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 664.512449][T12154] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1794'. [ 665.490379][ T29] audit: type=1400 audit(1733459149.947:2693): avc: denied { create } for pid=12157 comm="syz.0.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 665.509965][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1794'. [ 666.095361][ T29] audit: type=1400 audit(1733459150.227:2694): avc: denied { egress } for pid=12157 comm="syz.0.1795" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 666.173755][ T29] audit: type=1400 audit(1733459150.227:2695): avc: denied { sendto } for pid=12157 comm="syz.0.1795" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 666.256592][ T29] audit: type=1400 audit(1733459150.297:2696): avc: denied { bind } for pid=12157 comm="syz.0.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 666.321649][T12163] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 666.329652][ T29] audit: type=1400 audit(1733459150.377:2697): avc: denied { connect } for pid=12157 comm="syz.0.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 666.340819][T12163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1797'. [ 666.367409][ T29] audit: type=1400 audit(1733459150.587:2698): avc: denied { prog_run } for pid=12157 comm="syz.0.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 666.413816][ T29] audit: type=1400 audit(1733459150.917:2699): avc: denied { read write } for pid=12157 comm="syz.0.1795" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 667.523552][T12189] xt_CONNSECMARK: invalid mode: 0 [ 667.794185][T12196] pim6reg1: entered promiscuous mode [ 667.799563][T12196] pim6reg1: entered allmulticast mode [ 669.280500][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 669.280515][ T29] audit: type=1400 audit(1733459154.517:2726): avc: denied { create } for pid=12194 comm="syz.3.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 669.380716][ T29] audit: type=1400 audit(1733459154.527:2727): avc: denied { watch } for pid=12206 comm="syz.5.1808" path="/311/file0" dev="tmpfs" ino=1687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 669.460413][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 669.497261][ T29] audit: type=1400 audit(1733459154.527:2728): avc: denied { watch_sb watch_reads } for pid=12206 comm="syz.5.1808" path="/311/file0" dev="tmpfs" ino=1687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 670.003692][ T29] audit: type=1400 audit(1733459154.567:2729): avc: denied { unmount } for pid=10271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 670.124025][T12215] pim6reg1: entered promiscuous mode [ 670.129408][T12215] pim6reg1: entered allmulticast mode [ 671.816163][ T29] audit: type=1400 audit(1733459155.917:2730): avc: denied { connect } for pid=12216 comm="syz.6.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 672.307051][ T29] audit: type=1400 audit(1733459157.197:2731): avc: denied { read } for pid=12216 comm="syz.6.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 672.327093][ T29] audit: type=1400 audit(1733459157.207:2732): avc: denied { read write } for pid=12216 comm="syz.6.1810" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.351183][ T29] audit: type=1400 audit(1733459157.207:2733): avc: denied { open } for pid=12216 comm="syz.6.1810" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.375887][ T29] audit: type=1400 audit(1733459157.217:2734): avc: denied { ioctl } for pid=12216 comm="syz.6.1810" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.463761][ T29] audit: type=1400 audit(1733459157.687:2735): avc: denied { shutdown } for pid=12216 comm="syz.6.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 672.833727][ T5863] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 673.044752][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 673.072712][ T5863] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 673.532769][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 673.580368][ T5863] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.591268][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.603651][ T5863] usb 1-1: Product: syz [ 673.607842][ T5863] usb 1-1: Manufacturer: syz [ 673.612444][ T5863] usb 1-1: SerialNumber: syz [ 673.629881][T12236] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1817'. [ 673.632934][T12237] xt_CONNSECMARK: invalid mode: 0 [ 673.649637][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1817'. [ 673.840376][ T5863] cdc_ncm 1-1:1.0: bind() failure [ 673.862558][ T5863] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 673.910282][ T5863] cdc_ncm 1-1:1.1: bind() failure [ 673.954070][ T5863] usb 1-1: USB disconnect, device number 9 [ 676.408750][T12267] netlink: 'syz.3.1828': attribute type 10 has an invalid length. [ 677.293053][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 677.293072][ T29] audit: type=1400 audit(1733459161.647:2739): avc: denied { setopt } for pid=12266 comm="syz.3.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 677.323709][ T29] audit: type=1400 audit(1733459161.647:2740): avc: denied { create } for pid=12266 comm="syz.3.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 677.353651][ T29] audit: type=1400 audit(1733459161.647:2741): avc: denied { write } for pid=12266 comm="syz.3.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 677.373926][ T29] audit: type=1400 audit(1733459161.647:2742): avc: denied { nlmsg_write } for pid=12266 comm="syz.3.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 677.519204][ T29] audit: type=1400 audit(1733459162.757:2743): avc: denied { create } for pid=12269 comm="syz.2.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 678.723900][T12281] IPv6: NLM_F_REPLACE set, but no existing node found! [ 678.790749][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'. [ 679.923641][ T29] audit: type=1400 audit(1733459164.987:2744): avc: denied { create } for pid=12294 comm="syz.5.1838" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 680.665689][ T29] audit: type=1400 audit(1733459164.987:2745): avc: denied { ioctl } for pid=12294 comm="syz.5.1838" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30660 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 680.752869][ T29] audit: type=1400 audit(1733459164.987:2746): avc: denied { read } for pid=12294 comm="syz.5.1838" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 680.792906][ T29] audit: type=1400 audit(1733459165.937:2747): avc: denied { create } for pid=12302 comm="syz.3.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 680.829330][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'. [ 680.838542][ T29] audit: type=1400 audit(1733459165.947:2748): avc: denied { write } for pid=12302 comm="syz.3.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 681.173696][T10586] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 682.303685][T10586] usb 6-1: Using ep0 maxpacket: 8 [ 682.311893][T10586] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 682.375586][T12326] pim6reg1: entered promiscuous mode [ 682.380981][T12326] pim6reg1: entered allmulticast mode [ 682.964349][T10586] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 683.045646][T10586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.137673][T10586] usb 6-1: Product: syz [ 683.159757][T10586] usb 6-1: Manufacturer: syz [ 683.193696][T10586] usb 6-1: SerialNumber: syz [ 683.372650][T12335] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1852'. [ 683.563386][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1854'. [ 683.638920][T10586] cdc_ncm 6-1:1.0: bind() failure [ 683.646470][T10586] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 683.653271][T10586] cdc_ncm 6-1:1.1: bind() failure [ 683.671235][T10586] usb 6-1: USB disconnect, device number 8 [ 683.835907][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 683.835924][ T29] audit: type=1400 audit(1733459169.017:2753): avc: denied { accept } for pid=12344 comm="syz.6.1856" laddr=172.20.20.170 lport=50233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 683.859257][T12344] delete_channel: no stack [ 683.925628][ T29] audit: type=1400 audit(1733459169.017:2754): avc: denied { create } for pid=12344 comm="syz.6.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 683.981341][ T29] audit: type=1400 audit(1733459169.077:2755): avc: denied { ioctl } for pid=12344 comm="syz.6.1856" path="socket:[31504]" dev="sockfs" ino=31504 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 684.913452][ T29] audit: type=1400 audit(1733459169.467:2756): avc: denied { write } for pid=12347 comm="syz.6.1857" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 684.987029][ T29] audit: type=1400 audit(1733459169.497:2757): avc: denied { read } for pid=12347 comm="syz.6.1857" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 685.041851][ T29] audit: type=1400 audit(1733459169.497:2758): avc: denied { open } for pid=12347 comm="syz.6.1857" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 685.067223][ T29] audit: type=1400 audit(1733459169.507:2759): avc: denied { ioctl } for pid=12347 comm="syz.6.1857" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 685.765989][ T29] audit: type=1400 audit(1733459170.787:2760): avc: denied { connect } for pid=12366 comm="syz.3.1864" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 685.910037][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.572098][T12390] pim6reg1: entered promiscuous mode [ 687.577535][T12390] pim6reg1: entered allmulticast mode [ 690.037074][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 690.655141][T12411] xt_CONNSECMARK: invalid mode: 0 [ 691.110419][T12400] delete_channel: no stack [ 691.344418][T12414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12414 comm=syz.5.1878 [ 691.417991][T12414] netlink: 'syz.5.1878': attribute type 1 has an invalid length. [ 691.527785][T12414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 691.833926][T12427] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1884'. [ 693.686355][ T29] audit: type=1400 audit(1733459178.897:2761): avc: denied { read } for pid=12446 comm="syz.3.1891" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 693.709335][ T29] audit: type=1400 audit(1733459178.897:2762): avc: denied { open } for pid=12446 comm="syz.3.1891" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 693.733431][ T29] audit: type=1400 audit(1733459178.927:2763): avc: denied { write } for pid=12446 comm="syz.3.1891" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 693.771366][T12446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.043773][T10586] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 694.193793][T10586] usb 1-1: Using ep0 maxpacket: 8 [ 694.207264][T10586] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 694.222704][T10586] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.232921][T10586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.241431][T10586] usb 1-1: Product: syz [ 694.247787][T10586] usb 1-1: Manufacturer: syz [ 694.253917][T10586] usb 1-1: SerialNumber: syz [ 694.473247][T10586] cdc_ncm 1-1:1.0: bind() failure [ 694.501697][T10586] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 694.520834][T10586] cdc_ncm 1-1:1.1: bind() failure [ 694.553248][T10586] usb 1-1: USB disconnect, device number 10 [ 695.427028][T12485] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1904'. [ 696.484897][T12496] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1908'. [ 696.531669][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 696.918470][T12510] pim6reg1: entered promiscuous mode [ 696.923846][T12510] pim6reg1: entered allmulticast mode [ 698.044483][ T29] audit: type=1400 audit(1733459183.277:2764): avc: denied { ioctl } for pid=12507 comm="syz.3.1912" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 698.182892][ T29] audit: type=1400 audit(1733459183.277:2765): avc: denied { set_context_mgr } for pid=12507 comm="syz.3.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 698.456691][T12518] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1915'. [ 698.483822][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 698.656436][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1916'. [ 698.821120][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 699.364312][T12535] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1921'. [ 699.380571][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 699.482916][T12539] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 699.669133][T12543] pim6reg1: entered promiscuous mode [ 699.674647][T12543] pim6reg1: entered allmulticast mode [ 701.925973][T12541] delete_channel: no stack [ 702.054240][ T29] audit: type=1400 audit(1733459187.267:2766): avc: denied { create } for pid=12554 comm="syz.0.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 702.123894][T12561] __nla_validate_parse: 1 callbacks suppressed [ 702.123912][T12561] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1928'. [ 702.529721][T12567] pim6reg1: entered promiscuous mode [ 702.535161][T12567] pim6reg1: entered allmulticast mode [ 705.620906][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 705.733647][ T29] audit: type=1400 audit(1733459190.967:2767): avc: denied { write } for pid=12593 comm="syz.0.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 705.823876][T12595] netlink: 'syz.3.1939': attribute type 10 has an invalid length. [ 706.091910][T12601] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 706.769885][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1950'. [ 706.784740][T12619] netlink: 'syz.6.1951': attribute type 10 has an invalid length. [ 707.034975][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1953'. [ 707.263888][ T29] audit: type=1400 audit(1733459192.367:2768): avc: denied { read } for pid=12630 comm="syz.5.1956" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 707.971823][T12652] netlink: 'syz.0.1964': attribute type 10 has an invalid length. [ 708.557903][T12658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1967'. [ 712.157108][ T29] audit: type=1400 audit(1733459197.207:2769): avc: denied { recv } for pid=12686 comm="syz.3.1976" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=34992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 712.313538][ T29] audit: type=1400 audit(1733459197.327:2770): avc: denied { mounton } for pid=12686 comm="syz.3.1976" path="/391/bus" dev="tmpfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 712.414339][ T29] audit: type=1400 audit(1733459197.337:2771): avc: denied { unlink } for pid=12686 comm="syz.3.1976" name="#5b" dev="tmpfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 712.442634][ T29] audit: type=1400 audit(1733459197.347:2772): avc: denied { mount } for pid=12686 comm="syz.3.1976" name="/" dev="overlay" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 712.486612][ T29] audit: type=1400 audit(1733459197.467:2773): avc: denied { prog_load } for pid=12690 comm="syz.6.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 712.506266][ T29] audit: type=1400 audit(1733459197.467:2774): avc: denied { bpf } for pid=12690 comm="syz.6.1978" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 712.527371][ T29] audit: type=1400 audit(1733459197.467:2775): avc: denied { perfmon } for pid=12690 comm="syz.6.1978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 712.548419][ T29] audit: type=1400 audit(1733459197.487:2776): avc: denied { create } for pid=12694 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 712.569642][ T29] audit: type=1400 audit(1733459197.487:2777): avc: denied { write } for pid=12694 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 712.590174][ T29] audit: type=1400 audit(1733459197.497:2778): avc: denied { read } for pid=12694 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 712.610866][ T29] audit: type=1400 audit(1733459197.587:2779): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 712.708583][T12701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1980'. [ 712.756419][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1983'. [ 712.756985][T12701] netlink: 'syz.0.1980': attribute type 10 has an invalid length. [ 714.824163][T12718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.629305][T12748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1999'. [ 715.648538][T12748] netlink: 'syz.2.1999': attribute type 10 has an invalid length. [ 715.719114][T12751] netlink: 'syz.5.2000': attribute type 10 has an invalid length. [ 715.954471][T12763] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2004'. [ 715.964061][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 717.042414][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2013'. [ 717.319589][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 718.216041][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 718.216052][ T29] audit: type=1400 audit(1733459203.377:2842): avc: denied { getopt } for pid=12796 comm="syz.5.2017" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 718.302650][ T29] audit: type=1400 audit(1733459203.537:2843): avc: denied { create } for pid=12801 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.355589][ T29] audit: type=1400 audit(1733459203.597:2844): avc: denied { bind } for pid=12801 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.422393][ T29] audit: type=1400 audit(1733459203.617:2845): avc: denied { listen } for pid=12801 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.520308][ T29] audit: type=1400 audit(1733459203.617:2846): avc: denied { connect } for pid=12801 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.553232][ T29] audit: type=1400 audit(1733459203.617:2847): avc: denied { read } for pid=12801 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.581509][ T29] audit: type=1400 audit(1733459203.617:2848): avc: denied { read write } for pid=12801 comm="syz.2.2018" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 718.614613][ T29] audit: type=1400 audit(1733459203.617:2849): avc: denied { open } for pid=12801 comm="syz.2.2018" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 718.922656][T12823] overlayfs: failed to resolve './file1': -2 [ 719.036565][ T29] audit: type=1400 audit(1733459203.617:2850): avc: denied { ioctl } for pid=12801 comm="syz.2.2018" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 719.207395][ T29] audit: type=1400 audit(1733459203.627:2851): avc: denied { shutdown } for pid=12801 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 720.353173][T12850] pim6reg1: entered promiscuous mode [ 720.358586][T12850] pim6reg1: entered allmulticast mode [ 721.925663][T12856] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2038'. [ 721.974144][T12856] netlink: 'syz.5.2038': attribute type 10 has an invalid length. [ 722.307591][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2045'. [ 723.473683][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 723.473701][ T29] audit: type=1400 audit(1733459208.587:2905): avc: denied { create } for pid=12866 comm="syz.3.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 723.500908][ T29] audit: type=1400 audit(1733459208.587:2906): avc: denied { module_request } for pid=12866 comm="syz.3.2043" kmod="net-pf-10-proto-1-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 723.673747][ T29] audit: type=1400 audit(1733459208.827:2907): avc: denied { module_request } for pid=12866 comm="syz.3.2043" kmod="net-pf-10-proto-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 723.718994][ T29] audit: type=1400 audit(1733459208.897:2908): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.743347][ T29] audit: type=1400 audit(1733459208.897:2909): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.768044][ T29] audit: type=1400 audit(1733459208.897:2910): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.794295][ T29] audit: type=1400 audit(1733459208.897:2911): avc: denied { recv } for pid=12870 comm="syz.0.2044" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=34992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 723.819998][ T29] audit: type=1400 audit(1733459208.937:2912): avc: denied { prog_load } for pid=12884 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 723.839234][ T29] audit: type=1400 audit(1733459208.937:2913): avc: denied { bpf } for pid=12884 comm="syz.3.2049" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 723.859950][ T29] audit: type=1400 audit(1733459208.937:2914): avc: denied { perfmon } for pid=12884 comm="syz.3.2049" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 724.061296][T12887] delete_channel: no stack [ 724.182258][T12895] delete_channel: no stack [ 725.854985][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 726.240607][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2071'. [ 726.261541][T12947] netlink: 'syz.5.2071': attribute type 10 has an invalid length. [ 727.460251][T12957] delete_channel: no stack [ 729.142027][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 729.142043][ T29] audit: type=1400 audit(1733459214.377:2963): avc: denied { read } for pid=12975 comm="syz.0.2081" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 729.180052][ T29] audit: type=1400 audit(1733459214.377:2964): avc: denied { open } for pid=12975 comm="syz.0.2081" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 729.491684][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2079'. [ 729.567201][ T29] audit: type=1400 audit(1733459214.807:2965): avc: denied { read } for pid=12975 comm="syz.0.2081" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 729.710298][ T29] audit: type=1400 audit(1733459214.837:2966): avc: denied { open } for pid=12975 comm="syz.0.2081" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 729.736815][T12988] delete_channel: no stack [ 729.940981][ T29] audit: type=1400 audit(1733459214.897:2967): avc: denied { write } for pid=12975 comm="syz.0.2081" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 730.602062][T12975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.106885][ T29] audit: type=1400 audit(1733459217.347:2968): avc: denied { ioctl } for pid=13005 comm="syz.6.2090" path="socket:[34066]" dev="sockfs" ino=34066 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 732.527340][T13016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.313433][ T29] audit: type=1400 audit(1733459218.457:2969): avc: denied { sys_module } for pid=13005 comm="syz.6.2090" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 733.360916][ T29] audit: type=1400 audit(1733459218.467:2970): avc: denied { execmem } for pid=13033 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 733.409817][ T29] audit: type=1400 audit(1733459218.497:2971): avc: denied { read } for pid=13032 comm="syz.3.2094" dev="nsfs" ino=4026533225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 733.451659][ T29] audit: type=1400 audit(1733459218.497:2972): avc: denied { open } for pid=13032 comm="syz.3.2094" path="net:[4026533225]" dev="nsfs" ino=4026533225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 734.223737][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 734.223754][ T29] audit: type=1400 audit(1733459219.457:2990): avc: denied { create } for pid=13042 comm="syz.3.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 734.250878][ T29] audit: type=1400 audit(1733459219.457:2991): avc: denied { write } for pid=13042 comm="syz.3.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 734.271765][ T29] audit: type=1400 audit(1733459219.467:2992): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 734.936474][ T29] audit: type=1400 audit(1733459219.467:2993): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.196184][ T29] audit: type=1400 audit(1733459219.467:2994): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 735.302317][ T29] audit: type=1400 audit(1733459219.467:2995): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 735.594820][ T29] audit: type=1400 audit(1733459220.057:2996): avc: denied { read } for pid=13045 comm="syz.0.2098" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 735.621909][T13054] netlink: 'syz.0.2099': attribute type 10 has an invalid length. [ 735.993631][ T29] audit: type=1400 audit(1733459220.057:2997): avc: denied { open } for pid=13045 comm="syz.0.2098" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 736.053763][ T29] audit: type=1400 audit(1733459220.487:2998): avc: denied { read } for pid=13050 comm="syz.2.2100" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 736.076700][ T29] audit: type=1400 audit(1733459220.487:2999): avc: denied { open } for pid=13050 comm="syz.2.2100" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 736.120086][T13050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.059701][T13065] delete_channel: no stack [ 737.900118][T13097] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2116'. [ 737.909226][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 738.261441][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2117'. [ 738.568601][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 738.954160][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 739.037106][T13123] netlink: 'syz.0.2124': attribute type 10 has an invalid length. [ 739.279703][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 739.279721][ T29] audit: type=1400 audit(1733459224.517:3066): avc: denied { ioctl } for pid=13121 comm="syz.5.2122" path="socket:[34918]" dev="sockfs" ino=34918 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 739.473950][T13133] pim6reg1: entered promiscuous mode [ 739.479272][T13133] pim6reg1: entered allmulticast mode [ 739.663692][ T29] audit: type=1400 audit(1733459224.727:3067): avc: denied { create } for pid=13130 comm="syz.6.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 740.303998][ T29] audit: type=1400 audit(1733459225.517:3068): avc: denied { ioctl } for pid=13121 comm="syz.5.2122" path="socket:[34917]" dev="sockfs" ino=34917 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 743.423820][T13129] delete_channel: no stack [ 743.462707][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2130'. [ 743.495635][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 743.551342][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 743.593941][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 743.772268][ T29] audit: type=1400 audit(1733459229.007:3069): avc: denied { name_bind } for pid=13158 comm="syz.6.2137" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 743.801962][ T29] audit: type=1400 audit(1733459229.037:3070): avc: denied { node_bind } for pid=13158 comm="syz.6.2137" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 743.967498][ T29] audit: type=1400 audit(1733459229.207:3071): avc: denied { read } for pid=13169 comm="syz.5.2142" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 744.094729][ T29] audit: type=1400 audit(1733459229.237:3072): avc: denied { open } for pid=13169 comm="syz.5.2142" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 744.144585][ T29] audit: type=1400 audit(1733459229.237:3073): avc: denied { ioctl } for pid=13169 comm="syz.5.2142" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 744.290349][ T29] audit: type=1400 audit(1733459229.517:3074): avc: denied { write } for pid=13169 comm="syz.5.2142" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 744.841478][ T29] audit: type=1400 audit(1733459230.067:3075): avc: denied { create } for pid=13160 comm="syz.3.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 744.898965][ T29] audit: type=1400 audit(1733459230.137:3076): avc: denied { sys_admin } for pid=13160 comm="syz.3.2138" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 744.958162][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 745.044557][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2146'. [ 746.287712][T13191] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 746.313712][ T29] audit: type=1400 audit(1733459231.537:3077): avc: denied { recv } for pid=13186 comm="syz.2.2145" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=34992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 746.347414][ T29] audit: type=1400 audit(1733459231.557:3078): avc: denied { read write } for pid=6868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 746.371921][ T29] audit: type=1400 audit(1733459231.557:3079): avc: denied { open } for pid=6868 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 746.396407][ T29] audit: type=1400 audit(1733459231.557:3080): avc: denied { ioctl } for pid=6868 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 746.422604][ T29] audit: type=1400 audit(1733459231.587:3081): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 746.444707][ T29] audit: type=1400 audit(1733459231.587:3082): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.466551][ T29] audit: type=1400 audit(1733459231.587:3083): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 746.586991][T13196] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 747.149985][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.286820][T13203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.418414][T13214] netlink: 'syz.5.2154': attribute type 10 has an invalid length. [ 747.980203][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'. [ 748.329121][T13218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.439251][T13225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.447449][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2161'. [ 748.815793][T13251] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2166'. [ 748.953771][T10586] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 749.677291][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 749.677307][ T29] audit: type=1400 audit(1733459234.917:3159): avc: denied { shutdown } for pid=13255 comm="syz.5.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 749.723689][T10586] usb 1-1: Using ep0 maxpacket: 8 [ 749.737908][T10586] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 749.756911][T10586] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.773669][T10586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.833673][T10586] usb 1-1: Product: syz [ 749.848879][T10586] usb 1-1: Manufacturer: syz [ 749.856007][T10586] usb 1-1: SerialNumber: syz [ 749.862861][ T29] audit: type=1400 audit(1733459235.097:3160): avc: denied { accept } for pid=13260 comm="syz.2.2170" laddr=172.20.20.170 lport=33142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 749.886076][ T29] audit: type=1400 audit(1733459235.097:3161): avc: denied { create } for pid=13260 comm="syz.2.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 749.944751][ T29] audit: type=1400 audit(1733459235.167:3162): avc: denied { ioctl } for pid=13260 comm="syz.2.2170" path="socket:[34387]" dev="sockfs" ino=34387 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 749.968729][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2171'. [ 749.971127][ T29] audit: type=1400 audit(1733459235.167:3163): avc: denied { ioctl } for pid=13260 comm="syz.2.2170" path="socket:[34386]" dev="sockfs" ino=34386 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 750.139071][T13260] delete_channel: no stack [ 750.233903][T10586] cdc_ncm 1-1:1.0: bind() failure [ 750.241619][T10586] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 750.249014][T10586] cdc_ncm 1-1:1.1: bind() failure [ 750.363180][T10586] usb 1-1: USB disconnect, device number 11 [ 751.372861][T13281] pim6reg1: entered promiscuous mode [ 751.378295][T13281] pim6reg1: entered allmulticast mode [ 753.082062][ T29] audit: type=1400 audit(1733459237.027:3164): avc: denied { bind } for pid=13279 comm="syz.6.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 754.281451][T13286] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 754.307168][T13287] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2177'. [ 754.597153][T13296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2180'. [ 755.253875][T13274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.280266][T13325] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2187'. [ 756.372581][ T29] audit: type=1400 audit(1733459241.607:3165): avc: denied { accept } for pid=13320 comm="syz.5.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 756.436324][T13330] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2190'. [ 756.491183][T13333] netlink: 'syz.2.2192': attribute type 10 has an invalid length. [ 756.534504][T13335] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2191'. [ 756.544968][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'. [ 757.413743][ T29] audit: type=1400 audit(1733459242.637:3166): avc: denied { mount } for pid=13346 comm="syz.5.2197" name="/" dev="ramfs" ino=34548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 758.892373][T13367] pim6reg1: entered promiscuous mode [ 758.897790][T13367] pim6reg1: entered allmulticast mode [ 759.979752][T13342] delete_channel: no stack [ 761.228046][T13370] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2202'. [ 761.247267][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2202'. [ 761.284071][ T29] audit: type=1400 audit(1733459246.507:3167): avc: denied { ioctl } for pid=13368 comm="syz.0.2203" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 761.632431][T13356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.802980][T13373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.831839][ T29] audit: type=1400 audit(1733459247.067:3168): avc: denied { write } for pid=13368 comm="syz.0.2203" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 761.861795][ T29] audit: type=1400 audit(1733459247.077:3169): avc: denied { read } for pid=13368 comm="syz.0.2203" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 761.885033][ T29] audit: type=1400 audit(1733459247.077:3170): avc: denied { open } for pid=13368 comm="syz.0.2203" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 762.761877][T13394] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2210'. [ 763.579656][T13401] netlink: 'syz.0.2212': attribute type 10 has an invalid length. [ 763.630456][ T29] audit: type=1400 audit(1733459248.867:3171): avc: denied { create } for pid=13406 comm="syz.6.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 763.804714][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2216'. [ 763.823255][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 763.886036][T13414] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2217'. [ 763.915516][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 763.949673][T13399] delete_channel: no stack [ 764.192040][ T29] audit: type=1400 audit(1733459249.427:3172): avc: denied { create } for pid=13404 comm="syz.5.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 764.340763][T13429] pim6reg1: entered promiscuous mode [ 764.346240][T13429] pim6reg1: entered allmulticast mode [ 764.484068][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'. [ 765.440749][ T29] audit: type=1400 audit(1733459250.677:3173): avc: denied { sys_admin } for pid=13404 comm="syz.5.2213" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 765.714376][ T29] audit: type=1400 audit(1733459250.947:3174): avc: denied { create } for pid=13436 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 765.829678][ T29] audit: type=1400 audit(1733459250.947:3175): avc: denied { listen } for pid=13436 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 765.898829][T13441] netlink: 'syz.2.2225': attribute type 10 has an invalid length. [ 765.925457][ T29] audit: type=1400 audit(1733459250.957:3176): avc: denied { accept } for pid=13436 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 766.015551][ T29] audit: type=1400 audit(1733459251.007:3177): avc: denied { connect } for pid=13436 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 766.093992][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2227'. [ 766.106771][T13446] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2227'. [ 766.424653][T13450] pim6reg1: entered promiscuous mode [ 766.430033][T13450] pim6reg1: entered allmulticast mode [ 770.439077][T13462] netlink: 'syz.6.2231': attribute type 10 has an invalid length. [ 771.567826][T13478] netlink: 'syz.0.2237': attribute type 10 has an invalid length. [ 771.804312][T13487] netlink: 'syz.6.2240': attribute type 20 has an invalid length. [ 771.828540][T13487] __nla_validate_parse: 1 callbacks suppressed [ 771.828556][T13487] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2240'. [ 771.844346][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2240'. [ 772.504149][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 773.586840][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2245'. [ 773.803683][T13503] delete_channel: no stack [ 773.819020][T13524] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2246'. [ 773.956081][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 775.271450][T13559] netlink: 'syz.5.2257': attribute type 10 has an invalid length. [ 775.503715][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 775.507096][T13568] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2258'. [ 775.542236][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 776.572869][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 776.645695][T13586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2265'. [ 777.366631][T13611] netlink: 'syz.3.2272': attribute type 10 has an invalid length. [ 777.776220][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 777.776257][ T29] audit: type=1400 audit(1733459262.877:3183): avc: denied { egress } for pid=13599 comm="syz.6.2270" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 778.157995][ T29] audit: type=1400 audit(1733459262.877:3184): avc: denied { sendto } for pid=13599 comm="syz.6.2270" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 778.207296][T13620] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2274'. [ 778.230077][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 778.567025][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2280'. [ 779.046001][T13644] pim6reg1: entered promiscuous mode [ 779.051373][T13644] pim6reg1: entered allmulticast mode [ 780.643294][ T29] audit: type=1400 audit(1733459265.627:3185): avc: denied { read write } for pid=13646 comm="syz.2.2284" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 780.683647][ T29] audit: type=1400 audit(1733459265.627:3186): avc: denied { open } for pid=13646 comm="syz.2.2284" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 780.980833][T13653] pim6reg1: entered promiscuous mode [ 780.986630][T13653] pim6reg1: entered allmulticast mode [ 782.194228][ T29] audit: type=1400 audit(1733459265.647:3187): avc: denied { ioctl } for pid=13646 comm="syz.2.2284" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 783.341146][T13658] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 786.915713][T13695] pim6reg1: entered promiscuous mode [ 786.921115][T13695] pim6reg1: entered allmulticast mode [ 788.799297][T13700] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2298'. [ 788.820686][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2298'. [ 789.293897][T13711] netlink: 'syz.6.2304': attribute type 10 has an invalid length. [ 790.591840][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2307'. [ 790.634688][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2308'. [ 790.794448][T13731] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2309'. [ 790.879159][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'. [ 790.985206][T13739] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2312'. [ 790.999322][T13737] netlink: 'syz.5.2311': attribute type 10 has an invalid length. [ 791.011681][T13739] netlink: 'syz.3.2312': attribute type 10 has an invalid length. [ 791.079423][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'. [ 791.341152][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2316'. [ 791.391019][T13745] netlink: 'syz.3.2315': attribute type 10 has an invalid length. [ 793.072931][ T29] audit: type=1400 audit(1733459278.307:3188): avc: denied { connect } for pid=13758 comm="syz.6.2318" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 793.125962][T13760] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2321'. [ 793.924611][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'. [ 794.542625][T13808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2334'. [ 794.635609][T13811] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2335'. [ 794.656393][T13811] netlink: 'syz.0.2335': attribute type 10 has an invalid length. [ 795.200316][T13826] netlink: 'syz.6.2341': attribute type 10 has an invalid length. [ 796.234807][T13828] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2342'. [ 796.309662][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 796.401461][T13834] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2344'. [ 796.474502][T13834] netlink: 'syz.6.2344': attribute type 10 has an invalid length. [ 796.673125][T13841] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2347'. [ 799.816371][T13869] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2354'. [ 800.102127][ T29] audit: type=1400 audit(1733459285.337:3189): avc: denied { create } for pid=13882 comm="syz.6.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 800.132854][T13883] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2362'. [ 800.174551][ T29] audit: type=1400 audit(1733459285.367:3190): avc: denied { write } for pid=13882 comm="syz.6.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 802.384244][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'. [ 805.297759][T13929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2375'. [ 805.360768][T13929] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 805.393804][ T29] audit: type=1400 audit(1733459290.627:3191): avc: denied { create } for pid=13930 comm="syz.3.2376" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 805.487628][ T29] audit: type=1400 audit(1733459290.627:3192): avc: denied { ioctl } for pid=13930 comm="syz.3.2376" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37578 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 806.488528][ T29] audit: type=1400 audit(1733459290.627:3193): avc: denied { read } for pid=13930 comm="syz.3.2376" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 806.715193][T13942] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 808.484349][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.309921][T13967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2387'. [ 809.468020][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 810.591348][ T29] audit: type=1400 audit(1733459295.807:3194): avc: denied { bind } for pid=13989 comm="syz.0.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 810.648145][ T29] audit: type=1400 audit(1733459295.807:3195): avc: denied { setopt } for pid=13989 comm="syz.0.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 810.661054][T13995] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2396'. [ 810.720667][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2396'. [ 810.730135][ T29] audit: type=1400 audit(1733459295.957:3196): avc: denied { bind } for pid=13992 comm="syz.3.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 810.751503][ T29] audit: type=1400 audit(1733459295.977:3197): avc: denied { setopt } for pid=13992 comm="syz.3.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 811.919290][ T5917] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 812.978593][T14017] tipc: Failed to remove unknown binding: 66,1,1/0:3620665340/3620665342 [ 812.987424][T14017] tipc: Failed to remove unknown binding: 66,1,1/0:3620665340/3620665342 [ 813.980062][ T29] audit: type=1400 audit(1733459298.497:3198): avc: denied { connect } for pid=14018 comm="syz.6.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 814.001291][ T29] audit: type=1400 audit(1733459298.497:3199): avc: denied { write } for pid=14018 comm="syz.6.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 814.495401][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 815.477535][ T5917] usb 3-1: device descriptor read/all, error -71 [ 815.849070][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2407'. [ 815.858969][T14034] netlink: 'syz.2.2407': attribute type 10 has an invalid length. [ 815.870376][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 818.013630][T10586] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 819.123593][T10586] usb 7-1: Using ep0 maxpacket: 8 [ 819.721382][T10586] usb 7-1: unable to get BOS descriptor or descriptor too short [ 819.729823][T10586] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 819.737484][T10586] usb 7-1: can't read configurations, error -71 [ 820.233768][ T5917] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 820.413949][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 820.431746][ T5917] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 820.465671][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.484787][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.501220][ T5917] usb 1-1: Product: syz [ 820.522543][ T5917] usb 1-1: Manufacturer: syz [ 820.553230][ T5917] usb 1-1: SerialNumber: syz [ 821.931611][ T5917] cdc_ncm 1-1:1.0: bind() failure [ 822.472732][ T5917] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 822.480740][ T5917] cdc_ncm 1-1:1.1: bind() failure [ 822.495129][ T5917] usb 1-1: USB disconnect, device number 12 [ 823.411196][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 823.450809][T14135] xt_CONNSECMARK: invalid mode: 0 [ 826.659404][ T29] audit: type=1400 audit(1733459311.897:3200): avc: denied { bind } for pid=14164 comm="syz.6.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 826.679651][ T29] audit: type=1400 audit(1733459311.897:3201): avc: denied { setopt } for pid=14164 comm="syz.6.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 828.396404][ T29] audit: type=1400 audit(1733459313.597:3202): avc: denied { read } for pid=14193 comm="syz.3.2464" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 830.574858][T14222] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 830.582737][T14222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2472'. [ 830.709547][ T29] audit: type=1400 audit(1733459315.937:3203): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 830.761636][T14232] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2475'. [ 830.791650][ T29] audit: type=1400 audit(1733459316.017:3204): avc: denied { search } for pid=5483 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.813217][ T29] audit: type=1400 audit(1733459316.017:3205): avc: denied { read } for pid=5483 comm="dhcpcd" name="n101" dev="tmpfs" ino=9233 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 830.835217][ T29] audit: type=1400 audit(1733459316.017:3206): avc: denied { open } for pid=5483 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=9233 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 830.982467][ T29] audit: type=1400 audit(1733459316.017:3207): avc: denied { getattr } for pid=5483 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=9233 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 831.445917][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2479'. [ 832.053937][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2479'. [ 834.794396][T14274] netlink: 'syz.5.2489': attribute type 10 has an invalid length. [ 836.813450][ T29] audit: type=1400 audit(1733459322.037:3208): avc: denied { create } for pid=14294 comm="syz.0.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 836.933633][ T29] audit: type=1400 audit(1733459322.107:3209): avc: denied { bind } for pid=14294 comm="syz.0.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 837.093333][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'. [ 837.117947][ T29] audit: type=1400 audit(1733459322.227:3210): avc: denied { write } for pid=14294 comm="syz.0.2495" path="socket:[39340]" dev="sockfs" ino=39340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 839.395805][T10586] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 839.553717][T10586] usb 3-1: Using ep0 maxpacket: 8 [ 839.572457][T10586] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 839.625784][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2508'. [ 839.641203][T10586] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.650798][T10586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.270442][T10586] usb 3-1: Product: syz [ 840.274720][T10586] usb 3-1: Manufacturer: syz [ 840.279325][T10586] usb 3-1: SerialNumber: syz [ 840.620715][T10586] cdc_ncm 3-1:1.0: bind() failure [ 840.628962][T10586] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 840.636344][T10586] cdc_ncm 3-1:1.1: bind() failure [ 840.660528][T10586] usb 3-1: USB disconnect, device number 10 [ 841.616409][T14354] netlink: 'syz.5.2515': attribute type 10 has an invalid length. [ 842.240523][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2514'. [ 842.265426][T14357] netlink: 'syz.0.2514': attribute type 10 has an invalid length. [ 842.478869][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 842.494025][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2517'. [ 842.680399][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2523'. [ 842.898331][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2525'. [ 844.404212][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2531'. [ 845.380647][ T970] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 846.868877][ T970] usb 6-1: Using ep0 maxpacket: 8 [ 846.965635][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2540'. [ 846.986249][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2540'. [ 847.115283][ T970] usb 6-1: unable to get BOS descriptor or descriptor too short [ 847.135818][ T970] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 847.657127][ T970] usb 6-1: can't read configurations, error -71 [ 847.724981][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2540'. [ 847.843646][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2540'. [ 848.189018][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 851.162682][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2554'. [ 852.185431][T14496] netlink: 868 bytes leftover after parsing attributes in process `syz.3.2558'. [ 853.059823][T14501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.079941][T14515] kvm: kvm [14512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 854.096820][T14515] kvm: kvm [14512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 854.118498][T14515] kvm: kvm [14512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 854.190450][T14515] kvm: kvm [14512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 854.212835][T14515] kvm: kvm [14512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x250000f7ff [ 854.512587][T14515] kvm: kvm [14512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x250000ffff [ 854.523471][T14515] kvm_intel: kvm [14512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 855.462581][T14530] netlink: 868 bytes leftover after parsing attributes in process `syz.6.2569'. [ 855.929381][T14547] kvm: kvm [14546]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 855.948627][T14547] kvm: kvm [14546]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 855.959273][T14547] kvm: kvm [14546]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 855.983969][T14547] kvm: kvm [14546]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 855.996712][T14547] kvm_intel: kvm [14546]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 856.852830][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2578'. [ 857.545444][ T9202] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 858.123629][ T9202] usb 6-1: Using ep0 maxpacket: 8 [ 858.135491][ T9202] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 858.168835][ T9202] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.216550][ T9202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.255497][ T9202] usb 6-1: Product: syz [ 858.288856][ T9202] usb 6-1: Manufacturer: syz [ 858.316597][ T9202] usb 6-1: SerialNumber: syz [ 858.578505][ T9202] cdc_ncm 6-1:1.0: bind() failure [ 858.610344][ T9202] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 858.642611][ T9202] cdc_ncm 6-1:1.1: bind() failure [ 858.693244][ T9202] usb 6-1: USB disconnect, device number 11 [ 862.258641][T14605] FAULT_INJECTION: forcing a failure. [ 862.258641][T14605] name failslab, interval 1, probability 0, space 0, times 1 [ 862.271410][T14605] CPU: 1 UID: 0 PID: 14605 Comm: syz.6.2589 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 862.282171][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 862.292225][T14605] Call Trace: [ 862.295500][T14605] [ 862.298428][T14605] dump_stack_lvl+0x16c/0x1f0 [ 862.303112][T14605] should_fail_ex+0x497/0x5b0 [ 862.307793][T14605] ? fs_reclaim_acquire+0xae/0x150 [ 862.312921][T14605] should_failslab+0xc2/0x120 [ 862.317606][T14605] __kmalloc_noprof+0xcb/0x510 [ 862.322374][T14605] ? d_absolute_path+0x137/0x1b0 [ 862.327324][T14605] tomoyo_encode2+0x100/0x3e0 [ 862.332014][T14605] tomoyo_encode+0x29/0x50 [ 862.336433][T14605] tomoyo_realpath_from_path+0x19d/0x720 [ 862.342081][T14605] tomoyo_path_number_perm+0x248/0x590 [ 862.347539][T14605] ? tomoyo_path_number_perm+0x235/0x590 [ 862.353195][T14605] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 862.359204][T14605] ? irqentry_exit+0x3b/0x90 [ 862.363823][T14605] ? lockdep_hardirqs_on+0x7c/0x110 [ 862.369044][T14605] security_file_ioctl+0x9b/0x240 [ 862.374082][T14605] __x64_sys_ioctl+0xb7/0x200 [ 862.378771][T14605] do_syscall_64+0xcd/0x250 [ 862.383281][T14605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.389179][T14605] RIP: 0033:0x7ff84a37ff19 [ 862.393710][T14605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.413324][T14605] RSP: 002b:00007ff84b0b4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.421756][T14605] RAX: ffffffffffffffda RBX: 00007ff84a546080 RCX: 00007ff84a37ff19 [ 862.429729][T14605] RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000009 [ 862.437697][T14605] RBP: 00007ff84b0b40a0 R08: 0000000000000000 R09: 0000000000000000 [ 862.445668][T14605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.453638][T14605] R13: 0000000000000000 R14: 00007ff84a546080 R15: 00007ffdf2e0fae8 [ 862.461624][T14605] [ 862.465612][T14605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 862.523801][ T29] audit: type=1400 audit(1733459347.467:3211): avc: denied { map } for pid=14603 comm="syz.6.2589" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 862.523853][ T29] audit: type=1400 audit(1733459347.467:3212): avc: denied { write } for pid=14603 comm="syz.6.2589" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 862.523883][ T29] audit: type=1400 audit(1733459347.727:3213): avc: denied { create } for pid=14603 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 862.598267][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.988496][T14608] kAFS: No cell specified [ 862.992996][ T29] audit: type=1400 audit(1733459348.227:3214): avc: denied { mounton } for pid=14607 comm="syz.6.2590" path="/292/file0" dev="tmpfs" ino=1543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 863.308520][T14614] FAULT_INJECTION: forcing a failure. [ 863.308520][T14614] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 863.322002][T14614] CPU: 1 UID: 0 PID: 14614 Comm: syz.6.2590 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 863.332790][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 863.342865][T14614] Call Trace: [ 863.346152][T14614] [ 863.349095][T14614] dump_stack_lvl+0x16c/0x1f0 [ 863.353793][T14614] should_fail_ex+0x497/0x5b0 [ 863.358488][T14614] _copy_to_user+0x32/0xd0 [ 863.362898][T14614] simple_read_from_buffer+0xd0/0x160 [ 863.368299][T14614] proc_fail_nth_read+0x198/0x270 [ 863.373315][T14614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.378855][T14614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.384388][T14614] vfs_read+0x1df/0xbe0 [ 863.388532][T14614] ? __fget_files+0x1fc/0x3a0 [ 863.393195][T14614] ? __pfx___mutex_lock+0x10/0x10 [ 863.398208][T14614] ? __pfx_vfs_read+0x10/0x10 [ 863.402888][T14614] ? __fget_files+0x206/0x3a0 [ 863.407553][T14614] ksys_read+0x12b/0x250 [ 863.411779][T14614] ? __pfx_ksys_read+0x10/0x10 [ 863.416530][T14614] do_syscall_64+0xcd/0x250 [ 863.421022][T14614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.426996][T14614] RIP: 0033:0x7ff84a37e92c [ 863.431483][T14614] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 863.451108][T14614] RSP: 002b:00007ff84b0b4050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 863.459515][T14614] RAX: ffffffffffffffda RBX: 00007ff84a546080 RCX: 00007ff84a37e92c [ 863.467468][T14614] RDX: 000000000000000f RSI: 00007ff84b0b40b0 RDI: 0000000000000006 [ 863.475420][T14614] RBP: 00007ff84b0b40a0 R08: 0000000000000000 R09: 0000000000000000 [ 863.483374][T14614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.491328][T14614] R13: 0000000000000000 R14: 00007ff84a546080 R15: 00007ffdf2e0fae8 [ 863.499332][T14614] [ 863.502437][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.523617][T14611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.431252][T14628] netlink: 'syz.5.2597': attribute type 10 has an invalid length. [ 864.448518][T14617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.687467][ T29] audit: type=1400 audit(1733459349.927:3215): avc: denied { mounton } for pid=14642 comm="syz.6.2602" path="/295/bus" dev="tmpfs" ino=1560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 865.074863][ C0] ================================================================== [ 865.082967][ C0] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 865.090782][ C0] Read of size 8 at addr ffff888077c58498 by task syz.2.2601/14646 [ 865.098649][ C0] [ 865.100947][ C0] CPU: 0 UID: 0 PID: 14646 Comm: syz.2.2601 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 865.111694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 865.121735][ C0] Call Trace: [ 865.124999][ C0] [ 865.127826][ C0] dump_stack_lvl+0x116/0x1f0 [ 865.132492][ C0] print_report+0xc3/0x620 [ 865.136894][ C0] ? __virt_addr_valid+0x5e/0x590 [ 865.141902][ C0] ? __phys_addr+0xc6/0x150 [ 865.146393][ C0] kasan_report+0xd9/0x110 [ 865.150795][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 865.155894][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 865.161006][ C0] selinux_ip_output+0x1e0/0x1f0 [ 865.165961][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 865.171420][ C0] nf_hook_slow+0xbb/0x200 [ 865.175829][ C0] nf_hook+0x386/0x6d0 [ 865.179899][ C0] ? __pfx_dst_output+0x10/0x10 [ 865.184852][ C0] ? __pfx_nf_hook+0x10/0x10 [ 865.189428][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 865.195222][ C0] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 865.200751][ C0] ? __pfx_dst_output+0x10/0x10 [ 865.205587][ C0] ? __ip_make_skb+0x1150/0x1d00 [ 865.210511][ C0] ? do_csum+0x26f/0x2d0 [ 865.214738][ C0] __ip_local_out+0x339/0x640 [ 865.219406][ C0] ? __pfx_dst_output+0x10/0x10 [ 865.224258][ C0] ip_push_pending_frames+0xa0/0x5b0 [ 865.229553][ C0] ip_send_unicast_reply+0xd0e/0x1650 [ 865.234932][ C0] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 865.240737][ C0] ? __pfx_lock_release+0x10/0x10 [ 865.245757][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 865.250943][ C0] ? mark_lock+0xb5/0xc60 [ 865.255255][ C0] ? tcp_v4_send_reset+0xd35/0x2f20 [ 865.260441][ C0] tcp_v4_send_reset+0x129b/0x2f20 [ 865.265544][ C0] ? hlock_class+0x4e/0x130 [ 865.270034][ C0] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 865.275479][ C0] ? tcp_parse_options+0x1f5/0x11b0 [ 865.280668][ C0] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 865.286895][ C0] ? __asan_memmove+0x3c/0x60 [ 865.291581][ C0] ? tcp_v4_rcv+0x3715/0x4380 [ 865.296262][ C0] tcp_v4_rcv+0x3715/0x4380 [ 865.300862][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 865.305717][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 865.311186][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.315944][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 865.320782][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 865.326155][ C0] ip_local_deliver_finish+0x316/0x570 [ 865.331599][ C0] ip_local_deliver+0x18e/0x1f0 [ 865.336431][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 865.341785][ C0] ip_rcv+0x2c3/0x5d0 [ 865.345751][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 865.350237][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 865.356118][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 865.362519][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.367271][ C0] ? process_backlog+0x3f1/0x15f0 [ 865.372335][ C0] ? process_backlog+0x3f1/0x15f0 [ 865.377346][ C0] __netif_receive_skb+0x1d/0x160 [ 865.382357][ C0] process_backlog+0x443/0x15f0 [ 865.387209][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 865.392571][ C0] net_rx_action+0xa94/0x1010 [ 865.397237][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 865.402336][ C0] ? __pfx_mark_lock+0x10/0x10 [ 865.407082][ C0] ? mark_held_locks+0x9f/0xe0 [ 865.411830][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 865.417025][ C0] ? sched_clock+0x38/0x60 [ 865.421462][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 865.426399][ C0] ? mark_held_locks+0x9f/0xe0 [ 865.431155][ C0] handle_softirqs+0x213/0x8f0 [ 865.435910][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 865.441182][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 865.446284][ C0] do_softirq+0xb2/0xf0 [ 865.450424][ C0] [ 865.453335][ C0] [ 865.456246][ C0] __local_bh_enable_ip+0x100/0x120 [ 865.461426][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 865.466524][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 865.471448][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 865.476457][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 865.481813][ C0] ? hlock_class+0x4e/0x130 [ 865.486305][ C0] ? mark_lock+0xb5/0xc60 [ 865.490616][ C0] ? selinux_ip_postroute+0x73b/0xde0 [ 865.495971][ C0] ? __pfx_mark_lock+0x10/0x10 [ 865.500720][ C0] ? find_held_lock+0x2d/0x110 [ 865.505471][ C0] ? __ip_finish_output+0x49e/0x950 [ 865.510653][ C0] ? __pfx_lock_release+0x10/0x10 [ 865.515661][ C0] ? mark_held_locks+0x9f/0xe0 [ 865.520407][ C0] ip_finish_output2+0xc6c/0x2150 [ 865.525418][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 865.530859][ C0] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 865.535691][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 865.540876][ C0] __ip_finish_output+0x49e/0x950 [ 865.545883][ C0] ip_finish_output+0x35/0x380 [ 865.550630][ C0] ip_output+0x13b/0x2a0 [ 865.554856][ C0] ? __pfx_ip_output+0x10/0x10 [ 865.559613][ C0] ip_local_out+0x33e/0x4a0 [ 865.564102][ C0] __ip_queue_xmit+0x777/0x1970 [ 865.568942][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 865.574037][ C0] __tcp_transmit_skb+0x2b39/0x3df0 [ 865.579220][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 865.584748][ C0] ? __pfx_lock_release+0x10/0x10 [ 865.589758][ C0] ? ktime_get+0x206/0x300 [ 865.594157][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.599365][ C0] tcp_write_xmit+0x12b1/0x8560 [ 865.604291][ C0] ? __virt_addr_valid+0x5e/0x590 [ 865.609303][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 865.615357][ C0] ? __phys_addr_symbol+0x30/0x80 [ 865.620370][ C0] ? __check_object_size+0x488/0x710 [ 865.625638][ C0] tcp_sendmsg_locked+0x2ad7/0x3770 [ 865.630848][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 865.636385][ C0] ? tcp_sendmsg+0x20/0x50 [ 865.640788][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 865.646161][ C0] ? mark_held_locks+0x9f/0xe0 [ 865.650912][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 865.656185][ C0] tcp_sendmsg+0x2e/0x50 [ 865.660419][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 865.665349][ C0] inet_sendmsg+0xb9/0x140 [ 865.669754][ C0] ____sys_sendmsg+0x98c/0xc90 [ 865.674507][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 865.679947][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.685248][ C0] ___sys_sendmsg+0x135/0x1e0 [ 865.689907][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.695092][ C0] ? __pfx_lock_release+0x10/0x10 [ 865.700111][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 865.705319][ C0] ? __fget_files+0x206/0x3a0 [ 865.709979][ C0] __sys_sendmsg+0x16e/0x220 [ 865.714552][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 865.719658][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 865.724601][ C0] do_syscall_64+0xcd/0x250 [ 865.729091][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.734969][ C0] RIP: 0033:0x7f1bd6b7ff19 [ 865.739365][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.758953][ C0] RSP: 002b:00007f1bd49d5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.767356][ C0] RAX: ffffffffffffffda RBX: 00007f1bd6d46080 RCX: 00007f1bd6b7ff19 [ 865.775309][ C0] RDX: 00000000000052cc RSI: 0000000020000040 RDI: 0000000000000008 [ 865.783275][ C0] RBP: 00007f1bd6bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 865.791243][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.799201][ C0] R13: 0000000000000000 R14: 00007f1bd6d46080 R15: 00007ffd1bb933c8 [ 865.807177][ C0] [ 865.810198][ C0] [ 865.812501][ C0] The buggy address belongs to the object at ffff888077c58420 [ 865.812501][ C0] which belongs to the cache tw_sock_TCPv6 of size 288 [ 865.826705][ C0] The buggy address is located 120 bytes inside of [ 865.826705][ C0] allocated 288-byte region [ffff888077c58420, ffff888077c58540) [ 865.840828][ C0] [ 865.843129][ C0] The buggy address belongs to the physical page: [ 865.849515][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77c58 [ 865.858250][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 865.866726][ C0] memcg:ffff888034fc4901 [ 865.870943][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 865.878480][ C0] page_type: f5(slab) [ 865.882442][ C0] raw: 00fff00000000040 ffff88803068c280 dead000000000122 0000000000000000 [ 865.891006][ C0] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff888034fc4901 [ 865.899571][ C0] head: 00fff00000000040 ffff88803068c280 dead000000000122 0000000000000000 [ 865.908223][ C0] head: 0000000000000000 0000000080170017 00000001f5000000 ffff888034fc4901 [ 865.916874][ C0] head: 00fff00000000001 ffffea0001df1601 ffffffffffffffff 0000000000000000 [ 865.925522][ C0] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 865.934181][ C0] page dumped because: kasan: bad access detected [ 865.940574][ C0] page_owner tracks the page as allocated [ 865.946262][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 14646, tgid 14644 (syz.2.2601), ts 865068358798, free_ts 864583367054 [ 865.965687][ C0] post_alloc_hook+0x2d1/0x350 [ 865.970435][ C0] get_page_from_freelist+0xfce/0x2f80 [ 865.975874][ C0] __alloc_pages_noprof+0x223/0x25b0 [ 865.981141][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 865.986584][ C0] new_slab+0x2c9/0x410 [ 865.990719][ C0] ___slab_alloc+0xdac/0x1870 [ 865.995374][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 866.000727][ C0] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 866.006080][ C0] inet_twsk_alloc+0x120/0x970 [ 866.010826][ C0] tcp_time_wait+0x5f/0xe10 [ 866.015307][ C0] tcp_rcv_state_process+0x4935/0x4c40 [ 866.020751][ C0] tcp_v4_do_rcv+0x1ad/0xa90 [ 866.025326][ C0] tcp_v4_rcv+0x33a0/0x4380 [ 866.029806][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 866.035157][ C0] ip_local_deliver_finish+0x316/0x570 [ 866.040599][ C0] ip_local_deliver+0x18e/0x1f0 [ 866.045431][ C0] page last free pid 14635 tgid 14629 stack trace: [ 866.051908][ C0] free_unref_page+0x661/0x1080 [ 866.056738][ C0] __mmdrop+0xd5/0x460 [ 866.060787][ C0] __mmput+0x404/0x4c0 [ 866.064840][ C0] mmput+0x62/0x70 [ 866.068547][ C0] do_exit+0x9bf/0x2d70 [ 866.072688][ C0] do_group_exit+0xd3/0x2a0 [ 866.077176][ C0] get_signal+0x24ed/0x26c0 [ 866.081665][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 866.087196][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 866.092810][ C0] ret_from_fork_asm+0x1a/0x30 [ 866.097557][ C0] [ 866.099860][ C0] Memory state around the buggy address: [ 866.105469][ C0] ffff888077c58380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 866.113507][ C0] ffff888077c58400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 866.121551][ C0] >ffff888077c58480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 866.129589][ C0] ^ [ 866.134413][ C0] ffff888077c58500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 866.142451][ C0] ffff888077c58580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 866.150487][ C0] ================================================================== [ 866.158706][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 866.165913][ C0] CPU: 0 UID: 0 PID: 14646 Comm: syz.2.2601 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 866.176704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 866.186761][ C0] Call Trace: [ 866.190133][ C0] [ 866.192959][ C0] dump_stack_lvl+0x3d/0x1f0 [ 866.197575][ C0] panic+0x71d/0x800 [ 866.201457][ C0] ? mark_held_locks+0x9f/0xe0 [ 866.206210][ C0] ? __pfx_panic+0x10/0x10 [ 866.210626][ C0] ? irqentry_exit+0x3b/0x90 [ 866.215210][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.220394][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 866.225487][ C0] check_panic_on_warn+0xab/0xb0 [ 866.230403][ C0] end_report+0x117/0x180 [ 866.234719][ C0] kasan_report+0xe9/0x110 [ 866.239122][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 866.244221][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 866.249319][ C0] selinux_ip_output+0x1e0/0x1f0 [ 866.254242][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 866.259684][ C0] nf_hook_slow+0xbb/0x200 [ 866.264134][ C0] nf_hook+0x386/0x6d0 [ 866.268203][ C0] ? __pfx_dst_output+0x10/0x10 [ 866.273124][ C0] ? __pfx_nf_hook+0x10/0x10 [ 866.277697][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 866.283489][ C0] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 866.289021][ C0] ? __pfx_dst_output+0x10/0x10 [ 866.293862][ C0] ? __ip_make_skb+0x1150/0x1d00 [ 866.298785][ C0] ? do_csum+0x26f/0x2d0 [ 866.303016][ C0] __ip_local_out+0x339/0x640 [ 866.307691][ C0] ? __pfx_dst_output+0x10/0x10 [ 866.312528][ C0] ip_push_pending_frames+0xa0/0x5b0 [ 866.317803][ C0] ip_send_unicast_reply+0xd0e/0x1650 [ 866.323163][ C0] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 866.328961][ C0] ? __pfx_lock_release+0x10/0x10 [ 866.333974][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 866.339156][ C0] ? mark_lock+0xb5/0xc60 [ 866.343477][ C0] ? tcp_v4_send_reset+0xd35/0x2f20 [ 866.348668][ C0] tcp_v4_send_reset+0x129b/0x2f20 [ 866.353782][ C0] ? hlock_class+0x4e/0x130 [ 866.358295][ C0] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 866.363757][ C0] ? tcp_parse_options+0x1f5/0x11b0 [ 866.368944][ C0] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 866.375208][ C0] ? __asan_memmove+0x3c/0x60 [ 866.379895][ C0] ? tcp_v4_rcv+0x3715/0x4380 [ 866.384578][ C0] tcp_v4_rcv+0x3715/0x4380 [ 866.389100][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 866.393956][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 866.399420][ C0] ? rcu_is_watching+0x12/0xc0 [ 866.404191][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 866.409057][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 866.414435][ C0] ip_local_deliver_finish+0x316/0x570 [ 866.419887][ C0] ip_local_deliver+0x18e/0x1f0 [ 866.424736][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 866.430103][ C0] ip_rcv+0x2c3/0x5d0 [ 866.434090][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 866.438577][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 866.444478][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 866.450913][ C0] ? rcu_is_watching+0x12/0xc0 [ 866.455679][ C0] ? process_backlog+0x3f1/0x15f0 [ 866.460694][ C0] ? process_backlog+0x3f1/0x15f0 [ 866.465703][ C0] __netif_receive_skb+0x1d/0x160 [ 866.470714][ C0] process_backlog+0x443/0x15f0 [ 866.475549][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 866.480909][ C0] net_rx_action+0xa94/0x1010 [ 866.485576][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 866.490685][ C0] ? __pfx_mark_lock+0x10/0x10 [ 866.495430][ C0] ? mark_held_locks+0x9f/0xe0 [ 866.500179][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 866.505374][ C0] ? sched_clock+0x38/0x60 [ 866.509787][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 866.514625][ C0] ? mark_held_locks+0x9f/0xe0 [ 866.519373][ C0] handle_softirqs+0x213/0x8f0 [ 866.524123][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 866.529451][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 866.534547][ C0] do_softirq+0xb2/0xf0 [ 866.538687][ C0] [ 866.541597][ C0] [ 866.544509][ C0] __local_bh_enable_ip+0x100/0x120 [ 866.549700][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 866.554795][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 866.559723][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 866.564731][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 866.570100][ C0] ? hlock_class+0x4e/0x130 [ 866.574605][ C0] ? mark_lock+0xb5/0xc60 [ 866.579001][ C0] ? selinux_ip_postroute+0x73b/0xde0 [ 866.584357][ C0] ? __pfx_mark_lock+0x10/0x10 [ 866.589105][ C0] ? find_held_lock+0x2d/0x110 [ 866.593873][ C0] ? __ip_finish_output+0x49e/0x950 [ 866.599070][ C0] ? __pfx_lock_release+0x10/0x10 [ 866.604077][ C0] ? mark_held_locks+0x9f/0xe0 [ 866.608834][ C0] ip_finish_output2+0xc6c/0x2150 [ 866.613846][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 866.619290][ C0] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 866.624124][ C0] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 866.629317][ C0] __ip_finish_output+0x49e/0x950 [ 866.634329][ C0] ip_finish_output+0x35/0x380 [ 866.639078][ C0] ip_output+0x13b/0x2a0 [ 866.643303][ C0] ? __pfx_ip_output+0x10/0x10 [ 866.648051][ C0] ip_local_out+0x33e/0x4a0 [ 866.652642][ C0] __ip_queue_xmit+0x777/0x1970 [ 866.657477][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 866.662577][ C0] __tcp_transmit_skb+0x2b39/0x3df0 [ 866.667761][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 866.673315][ C0] ? __pfx_lock_release+0x10/0x10 [ 866.678354][ C0] ? ktime_get+0x206/0x300 [ 866.682775][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.687974][ C0] tcp_write_xmit+0x12b1/0x8560 [ 866.692822][ C0] ? __virt_addr_valid+0x5e/0x590 [ 866.697836][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 866.703889][ C0] ? __phys_addr_symbol+0x30/0x80 [ 866.708897][ C0] ? __check_object_size+0x488/0x710 [ 866.714173][ C0] tcp_sendmsg_locked+0x2ad7/0x3770 [ 866.719368][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 866.724903][ C0] ? tcp_sendmsg+0x20/0x50 [ 866.729307][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 866.734662][ C0] ? mark_held_locks+0x9f/0xe0 [ 866.739409][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 866.744681][ C0] tcp_sendmsg+0x2e/0x50 [ 866.748910][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 866.753835][ C0] inet_sendmsg+0xb9/0x140 [ 866.758238][ C0] ____sys_sendmsg+0x98c/0xc90 [ 866.762985][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 866.768426][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.773701][ C0] ___sys_sendmsg+0x135/0x1e0 [ 866.778358][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.783543][ C0] ? __pfx_lock_release+0x10/0x10 [ 866.788547][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 866.793734][ C0] ? __fget_files+0x206/0x3a0 [ 866.798398][ C0] __sys_sendmsg+0x16e/0x220 [ 866.802969][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 866.808061][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 866.812984][ C0] do_syscall_64+0xcd/0x250 [ 866.817477][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.823444][ C0] RIP: 0033:0x7f1bd6b7ff19 [ 866.827840][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.847445][ C0] RSP: 002b:00007f1bd49d5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.855848][ C0] RAX: ffffffffffffffda RBX: 00007f1bd6d46080 RCX: 00007f1bd6b7ff19 [ 866.863801][ C0] RDX: 00000000000052cc RSI: 0000000020000040 RDI: 0000000000000008 [ 866.871751][ C0] RBP: 00007f1bd6bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 866.879705][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.887656][ C0] R13: 0000000000000000 R14: 00007f1bd6d46080 R15: 00007ffd1bb933c8 [ 866.895612][ C0] [ 866.898892][ C0] Kernel Offset: disabled [ 866.903200][ C0] Rebooting in 86400 seconds..