last executing test programs: 20.831838939s ago: executing program 0 (id=749): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet(0x2, 0x3, 0x6) r7 = dup3(r5, r6, 0x0) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000000}) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 15.980120039s ago: executing program 2 (id=758): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 14.276708438s ago: executing program 2 (id=763): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x2, 0x9, 0x100000000000008, 0xfffffffe, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x9d8, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4609035208070000000000000003003e00810000002701000038000000b00100c69280f2ea967f060007000000468320000100000400017f000000000000000070070000000000000058970000070000000b00000000040000000000805d5d93bd9aed8150be245eb57c20275df23dd4c0a790d184cb0fd06fc61360db201ff5e3b747d53373a968d5dff14ccac501f02fe320a27d63cbc8abbc8bee8130a4849dd5bf877e733c6917ea5757bda54eba462981a44f0e8100"/268], 0x1b2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 13.554913064s ago: executing program 0 (id=764): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r3, 0xe7d4c009da6c1985}, {r3, 0x201}], 0x2, 0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, 0x0) 11.246826025s ago: executing program 1 (id=768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x174}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r3, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001480)="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", 0x597}], 0x1}}], 0x1, 0x8000) 9.914199466s ago: executing program 1 (id=769): sched_setscheduler(0x0, 0x2, 0x0) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001240)='./file0\x00', 0x0, 0x28db800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x408040, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x1000f) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) syz_open_procfs(0x0, &(0x7f00000001c0)='limits\x00') set_mempolicy(0x3, &(0x7f0000001200)=0x7, 0x3) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) ftruncate(r3, 0x30) 9.314844851s ago: executing program 1 (id=770): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {0x0}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000005c0)}], 0x4}}], 0x4, 0xf000000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.889348713s ago: executing program 4 (id=771): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r6, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0xfce) 8.855469063s ago: executing program 1 (id=772): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x1401, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x800) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)={0x0, 0xd, 0x1e, {0x1e, 0x1, "bf3e9cd0491d53f042d39cf5ad70eb69f0702dcb7f60ea6d016cfd16"}}, &(0x7f00000001c0)={0x0, 0x3, 0xd, @string={0xd, 0x3, "17a77f2b0f8a4efcfe6785"}}, &(0x7f0000000400)={0x0, 0xf, 0xb1, {0x5, 0xf, 0xb1, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x554529e, 0xf00, 0x0, [0xc03f, 0xffc000, 0xf, 0x30, 0xff3fcf, 0x30]}, @generic={0x85, 0x10, 0x1, "f37488cdc2fb0670e83c771929cf9af03a549fa73334a41f7e7e5b2130a12488da683f6d107a809b12ee423217e2a580fc4ad853319c60797b8bb36bfb60bed91ce218bcfffe5023042709d84e2468a8c5027a88e74d24a52727dd9f4fd428719034651104eb99072a8366412544dae26cf668bf579d05deeee4a2d328092994797e"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x85, 0x65, 0xa2, 0x7, "8473a7f5", "3a5aa5af"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0xd8, 0x8, 0x0, 0x74, 0xffff}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000ac0)={0xfffffffc, 0x0, 0x0, 'queue1\x00', 0xfffffbfc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x8, 0x2}, 0x5}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r7, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) syz_emit_ethernet(0x86, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "44c108fc5c47c72626fe2f7cfa25b602ed48a4e23aa1fa1930cef821fa9ef26d", "78b501b40402b3f74ca615813e0a1261", {"b6b63b29d2396379bcc0226ed355261e", "4842183ff3929a0d1927f2044ca14ce4"}}}}}}}, 0x0) 8.208549423s ago: executing program 3 (id=773): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r0, 0x0) 8.129650684s ago: executing program 2 (id=774): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x0, 0x8000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='gid\"Xvo\xae\xd5\xe6^\xb7\x85=\x16\xfd\xffp\xa4O\xb2v\xcf\x88\xe1\x04\nD\xc4\axL\r\xbc\xe0^h\xb0\aYP\x85,\x8aB@Q\x02\x83\xa9W\x88\xcb\xe6KB\xaf/;s\x00\xba\xee', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbc&\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xc4\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\xb8\x90\xfe\x04\xe7U\xf3x\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h$\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s Xr4\xc2qB\x85\xf0\xd7\x84\'\xa3\xf1\xd9<\xb9k\x00\x00\x00\x00\xfa\"\xa3\x17|FV\xc8r\x98\xf9\x88y6\xba\xf6\xe3\xbb\xd6\'5\x10\xc6\'\x83\xf0\xae\xcd\x90\xe3H\x9eH\x04\x12\xcd\xee\xec\x03\x9f\xe8\xce=\xfb\n5e\xbcV\xc3\x94!\x19\xe67\xc4\xd5:v\xbe\xc0\x00\x9e\x1f\x16X\xc7Z\x81\b\xc0\bB\xb2\xf9\xd4\xcc\xfa&\xd6\x8f9\xa2\xb6i\x9ako\xf9\x02\xeb3\x9a\x9f\x93\xefCsVd\xe1\\\x98\x8b\x05/\xba3\xd0\xf5\xa2\x19\xc1\xc2b\f\xde\xd7\x7f\x10\xf5\xa1\x1c^\'\x0f\x0f\x81\x18]\b\xdd!Z9\xe0o\x7f\xd3\x93\x187*\x8fP|-Y\xf8\xf1\x1fT)\xcd\x16\xd4\xfa\xcc\x0fN\xa1g\x13\xfb\xf4\xaa\xd8\xe7g\x03\f\x1f\f\x8039\x8c\x96\x98\t\xb3\x00\t\xc7\x9a\xf2\xd4\x97\xc0\xb9\xae\x9f{\xda\x10\xe0\xb2\xec\"', 0x0) 8.108296491s ago: executing program 3 (id=775): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x40003, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) brk(0x400000ffc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r6, 0x5, 0x40000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xd}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x101}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xb}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x79}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xdb}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xa0}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) 8.094702779s ago: executing program 0 (id=776): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x3e, 0x107, 0x3, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 7.086797557s ago: executing program 4 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0xa6ff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d08, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setrlimit(0xb, &(0x7f0000000400)={0xa4, 0x804}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x804) 6.919934492s ago: executing program 0 (id=778): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000004, 0xffffffffffffffff, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES32=0x0, @ANYBLOB="03000000010000001800128008000100677265000c000280080006000a"], 0x38}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x8) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000040)=@bcast) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000180)={0x0, &(0x7f0000000380)}) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200) 6.767019715s ago: executing program 3 (id=779): r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x1, 0xce5, 0xbc7}) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r4 = openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x40000000001000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) setreuid(0xee01, 0xee01) fallocate(r4, 0x1, 0x9, 0x81) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.460768631s ago: executing program 2 (id=780): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0xa, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r5, 0x4020940d, 0x0) 6.09183588s ago: executing program 4 (id=781): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/105, 0xffffffc4}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000640)={0x0, 0x989680}) 5.760768615s ago: executing program 3 (id=782): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xe3, &(0x7f00000008c0)=""/227}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x141040, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000680)=0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9a}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x90c7c79e824d5862}, 0x8000) socket$packet(0x11, 0x3, 0x300) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r3 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e23, 0x8, @empty, 0x8}}, 0x2, 0x9}, &(0x7f00000000c0)=0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d09000200f02564090000000008000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.052266663s ago: executing program 4 (id=783): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000018c0), 0x100, 0x0) pwritev2(r0, 0x0, 0x0, 0x2, 0xffffff5a, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mkdir(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) utime(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) utime(&(0x7f0000001080)='./cgroup.cpu/cgroup.procs\x00', 0x0) 4.868316286s ago: executing program 2 (id=784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rpcgss_update_slack\x00', r0, 0x0, 0x12d}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="13", 0x1}], 0x1}}], 0x2, 0x20004840) 3.361644916s ago: executing program 4 (id=785): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) socket$rxrpc(0x21, 0x2, 0xa) write$6lowpan_control(r3, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r5 = landlock_create_ruleset(0x0, 0x0, 0x1) landlock_restrict_self(r5, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x78) socket$nl_route(0x10, 0x3, 0x0) 3.262425363s ago: executing program 3 (id=786): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x10, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r5, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) syz_open_procfs(0x0, 0x0) 3.260034485s ago: executing program 1 (id=787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24000840) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 3.112622646s ago: executing program 2 (id=788): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r5 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x0}, 0x94) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7f, 0x0) writev(r6, 0x0, 0x0) writev(r6, 0x0, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @multicast2}, 0xc) r7 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r7, 0x0, 0x0, 0x0, 0x80800}) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, 0x0, 0x0) r8 = dup3(r0, r5, 0x0) write$cgroup_int(r8, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.048196649s ago: executing program 0 (id=789): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x80702) r7 = dup2(r6, r6) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x0, 0xfffffffffffffffe}) 1.966857729s ago: executing program 3 (id=790): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, 0x0, r4}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) fstatfs(r3, &(0x7f0000000140)=""/166) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r6 = dup(r5) fallocate(r6, 0x10, 0x0, 0x72000) 822.103581ms ago: executing program 0 (id=791): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[@ANYBLOB="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"], 0x3518}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r7, 0x5437, 0x200000000000000) 135.971584ms ago: executing program 1 (id=792): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0xa, 0x6, '\x00', 0x80001f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0x800, 0xff, 0xfffffffffffffff7, 0x3e00000000000000, 0x10004, 0x46a9, 0x9, 0x8]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x20}}, 0xa800) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1a, 0x0}, 0x4040095) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 0s ago: executing program 4 (id=793): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x4, 0x0, [{0x0, 0xf}, {0x20010}, {}, {0x1000000}, {0x3}, {0x2fe}, {0x0, 0x7ff}], 0xf, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): :sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.565468][ T30] audit: type=1400 audit(1754321102.699:92): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.CujYNx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.622332][ T30] audit: type=1400 audit(1754321102.709:93): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.652359][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.670467][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.671540][ T30] audit: type=1400 audit(1754321102.739:94): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.706129][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.706162][ T30] audit: type=1400 audit(1754321102.739:95): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="gadgetfs" ino=5930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.741321][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.749728][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.786977][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.795679][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.814978][ T5847] veth0_macvtap: entered promiscuous mode [ 74.870543][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881344][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.917616][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.930795][ T5847] veth1_macvtap: entered promiscuous mode [ 74.949219][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.998707][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.088728][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.230993][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.243264][ T5853] Bluetooth: hci0: command tx timeout [ 75.272457][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.280230][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.403232][ T5853] Bluetooth: hci1: command tx timeout [ 75.429648][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.565113][ T5853] Bluetooth: hci4: command tx timeout [ 75.570560][ T5853] Bluetooth: hci3: command tx timeout [ 75.587455][ T5965] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 75.628818][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.643278][ T5853] Bluetooth: hci2: command tx timeout [ 75.695354][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.695516][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.703397][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.723412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.723749][ T5965] overlayfs: missing 'lowerdir' [ 75.761765][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.801166][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.957526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.957712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.966093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.434731][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.442822][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.453944][ T5952] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.469855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.115962][ T5952] usb 3-1: config 0 has an invalid interface number: 142 but max is 1 [ 77.124713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 77.132978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 77.143318][ T5952] usb 3-1: config 0 has no interface number 0 [ 77.149667][ T5952] usb 3-1: config 0 interface 1 has no altsetting 0 [ 77.160755][ T5952] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 77.170250][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.179627][ T5952] usb 3-1: Product: syz [ 77.184238][ T5952] usb 3-1: Manufacturer: syz [ 77.189561][ T5952] usb 3-1: SerialNumber: syz [ 77.214861][ T5952] usb 3-1: config 0 descriptor?? [ 77.299202][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.317792][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.327271][ T5853] Bluetooth: hci0: command tx timeout [ 77.483823][ T5853] Bluetooth: hci1: command tx timeout [ 77.529637][ T5952] msi2500 3-1:0.1: Registered as swradio24 [ 77.541630][ T5978] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.554464][ T5952] msi2500 3-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 77.568076][ T5978] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.581167][ T5978] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.611486][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.625230][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.637604][ T5978] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.647807][ T5853] Bluetooth: hci3: command tx timeout [ 77.653287][ T5168] Bluetooth: hci4: command tx timeout [ 77.668646][ T5952] videodev: could not get a free minor [ 77.679599][ T5952] msi2500 3-1:0.142: Failed to register as video device (-23) [ 77.742264][ T5952] msi2500 3-1:0.142: probe with driver msi2500 failed with error -23 [ 77.753156][ T5853] Bluetooth: hci2: command tx timeout [ 77.777501][ T5952] usb 3-1: USB disconnect, device number 2 [ 77.854476][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.879474][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 77.879490][ T30] audit: type=1400 audit(1754321106.189:118): avc: denied { map_create } for pid=5986 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.885780][ T5987] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 77.921791][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.947558][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.968019][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.992316][ T30] audit: type=1400 audit(1754321106.189:119): avc: denied { map_read map_write } for pid=5986 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.112277][ T30] audit: type=1400 audit(1754321106.189:120): avc: denied { create } for pid=5986 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.194827][ T30] audit: type=1400 audit(1754321106.189:121): avc: denied { connect } for pid=5986 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.290792][ T30] audit: type=1400 audit(1754321106.189:122): avc: denied { ioctl } for pid=5986 comm="syz.1.9" path="socket:[7574]" dev="sockfs" ino=7574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.353397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.385586][ T5996] syz.3.4 (5996): attempted to duplicate a private mapping with mremap. This is not supported. [ 78.620409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.673968][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 78.708037][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 78.817597][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 78.826468][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 78.834736][ T30] audit: type=1400 audit(1754321106.589:123): avc: denied { create } for pid=5992 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.856567][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 78.865110][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 78.872552][ T30] audit: type=1400 audit(1754321106.689:124): avc: denied { read write } for pid=5991 comm="syz.3.4" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.951708][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.283339][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 79.290769][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 79.298798][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 79.314350][ T30] audit: type=1400 audit(1754321106.689:125): avc: denied { open } for pid=5991 comm="syz.3.4" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.372156][ T9] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 79.422004][ T9] hid-generic 0001:0080:0544.0001: hidraw0: HID v1.ff Device [syz1] on syz0 [ 79.425502][ T30] audit: type=1400 audit(1754321107.259:126): avc: denied { write } for pid=5995 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.597934][ T30] audit: type=1400 audit(1754321107.909:127): avc: denied { create } for pid=6005 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.872967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 81.061670][ T6004] fido_id[6004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.266767][ T1208] cfg80211: failed to load regulatory.db [ 82.895593][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 82.895609][ T30] audit: type=1400 audit(1754321111.209:142): avc: denied { write } for pid=6036 comm="syz.1.18" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.043291][ T30] audit: type=1400 audit(1754321111.209:143): avc: denied { open } for pid=6036 comm="syz.1.18" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.207254][ T30] audit: type=1400 audit(1754321111.209:144): avc: denied { ioctl } for pid=6036 comm="syz.1.18" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.506724][ T30] audit: type=1400 audit(1754321111.299:145): avc: denied { allowed } for pid=6036 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.589597][ T30] audit: type=1400 audit(1754321111.309:146): avc: denied { create } for pid=6036 comm="syz.1.18" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.613880][ T30] audit: type=1400 audit(1754321111.319:147): avc: denied { map } for pid=6036 comm="syz.1.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.383862][ T30] audit: type=1400 audit(1754321111.319:148): avc: denied { read write } for pid=6036 comm="syz.1.18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.408668][ T30] audit: type=1400 audit(1754321111.429:149): avc: denied { read write } for pid=6036 comm="syz.1.18" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.432068][ T30] audit: type=1400 audit(1754321111.429:150): avc: denied { open } for pid=6036 comm="syz.1.18" path="/dev/video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.455894][ T30] audit: type=1400 audit(1754321111.489:151): avc: denied { write } for pid=6036 comm="syz.1.18" path="socket:[8598]" dev="sockfs" ino=8598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.489962][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 84.565001][ T6049] ceph: No mds server is up or the cluster is laggy [ 84.586082][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 84.960618][ T6057] vlan2: entered promiscuous mode [ 84.965864][ T6057] bond0: entered promiscuous mode [ 84.974092][ T6057] bond_slave_0: entered promiscuous mode [ 84.981751][ T6057] bond_slave_1: entered promiscuous mode [ 85.175765][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 85.181788][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 85.720076][ T6061] Zero length message leads to an empty skb [ 86.269301][ T6064] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 86.988533][ T6071] veth3: entered promiscuous mode [ 87.025769][ T6078] vlan2: entered allmulticast mode [ 87.180774][ T6080] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 88.020289][ T6086] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 88.645547][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 88.645564][ T30] audit: type=1400 audit(1754321116.749:166): avc: denied { write } for pid=6082 comm="syz.0.29" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.674083][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.707197][ T6072] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 88.713944][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.818720][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 88.854440][ T6091] vhci_hcd: connection closed [ 88.855931][ T5978] vhci_hcd: stop threads [ 88.869462][ T5978] vhci_hcd: release socket [ 88.889372][ T6094] veth3: entered promiscuous mode [ 88.912539][ T5978] vhci_hcd: disconnect device [ 89.785658][ T30] audit: type=1400 audit(1754321118.089:167): avc: denied { create } for pid=6102 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.130944][ T30] audit: type=1400 audit(1754321118.089:168): avc: denied { connect } for pid=6102 comm="syz.0.33" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.338285][ T30] audit: type=1400 audit(1754321118.099:169): avc: denied { write } for pid=6102 comm="syz.0.33" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.358437][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.374787][ T30] audit: type=1326 audit(1754321118.489:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 90.403393][ T30] audit: type=1326 audit(1754321118.489:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 90.426592][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.600022][ T30] audit: type=1400 audit(1754321118.849:172): avc: denied { create } for pid=6112 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.645157][ T30] audit: type=1400 audit(1754321118.859:173): avc: denied { ioctl } for pid=6112 comm="syz.1.35" path="socket:[7921]" dev="sockfs" ino=7921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.681128][ T30] audit: type=1400 audit(1754321118.859:174): avc: denied { bind } for pid=6112 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.182882][ T30] audit: type=1400 audit(1754321119.489:175): avc: denied { name_bind } for pid=6119 comm="syz.2.37" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 94.246598][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 94.246611][ T30] audit: type=1400 audit(1754321122.559:183): avc: denied { rename } for pid=6148 comm="syz.4.45" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 94.459443][ T30] audit: type=1400 audit(1754321122.599:184): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 96.716100][ T30] audit: type=1400 audit(1754321125.029:185): avc: denied { ioctl } for pid=6177 comm="syz.2.51" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.229668][ T30] audit: type=1400 audit(1754321125.099:186): avc: denied { read write } for pid=6177 comm="syz.2.51" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 97.253114][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.721889][ T30] audit: type=1400 audit(1754321125.099:187): avc: denied { open } for pid=6177 comm="syz.2.51" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 97.938147][ T30] audit: type=1400 audit(1754321125.389:188): avc: denied { write } for pid=6172 comm="syz.0.50" name="route" dev="proc" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 98.640570][ T6194] netlink: 'syz.2.54': attribute type 2 has an invalid length. [ 99.133111][ T30] audit: type=1400 audit(1754321125.389:189): avc: denied { setopt } for pid=6172 comm="syz.0.50" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.155269][ T30] audit: type=1400 audit(1754321126.109:190): avc: denied { ioctl } for pid=6182 comm="syz.1.52" path="/dev/video0" dev="devtmpfs" ino=932 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 99.430197][ T30] audit: type=1400 audit(1754321127.739:191): avc: denied { create } for pid=6195 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.520213][ T6201] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 99.546795][ T6201] CIFS: Unable to determine destination address [ 99.914572][ T30] audit: type=1400 audit(1754321128.229:192): avc: denied { mount } for pid=6196 comm="syz.4.55" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 100.353276][ T30] audit: type=1400 audit(1754321128.249:193): avc: denied { bind } for pid=6197 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.889666][ T30] audit: type=1400 audit(1754321128.249:194): avc: denied { listen } for pid=6197 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.946519][ T30] audit: type=1400 audit(1754321128.399:195): avc: denied { read } for pid=6197 comm="syz.3.57" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.981398][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 101.133171][ T30] audit: type=1400 audit(1754321128.399:196): avc: denied { open } for pid=6197 comm="syz.3.57" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.158952][ T30] audit: type=1400 audit(1754321128.399:197): avc: denied { ioctl } for pid=6197 comm="syz.3.57" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.184332][ T30] audit: type=1400 audit(1754321128.629:198): avc: denied { bind } for pid=6206 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.909935][ T30] audit: type=1400 audit(1754321128.629:199): avc: denied { name_bind } for pid=6206 comm="syz.2.59" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 101.933177][ T30] audit: type=1400 audit(1754321128.629:200): avc: denied { node_bind } for pid=6206 comm="syz.2.59" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 102.736973][ T6223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.555632][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 104.555648][ T30] audit: type=1400 audit(1754321132.869:206): avc: denied { name_bind } for pid=6235 comm="syz.3.67" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 104.636376][ T6241] syz.3.67 uses obsolete (PF_INET,SOCK_PACKET) [ 104.702090][ T30] audit: type=1400 audit(1754321132.869:207): avc: denied { node_bind } for pid=6235 comm="syz.3.67" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 105.204994][ T30] audit: type=1400 audit(1754321133.519:208): avc: denied { ioctl } for pid=6235 comm="syz.3.67" path="socket:[8938]" dev="sockfs" ino=8938 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.386706][ T30] audit: type=1400 audit(1754321134.699:209): avc: denied { create } for pid=6256 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.469431][ T30] audit: type=1400 audit(1754321134.699:210): avc: denied { bind } for pid=6256 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.457970][ T30] audit: type=1400 audit(1754321134.699:211): avc: denied { accept } for pid=6256 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.582258][ T30] audit: type=1400 audit(1754321134.699:212): avc: denied { setopt } for pid=6256 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.985667][ T30] audit: type=1400 audit(1754321134.699:213): avc: denied { read } for pid=6256 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.693597][ T30] audit: type=1400 audit(1754321136.829:214): avc: denied { read } for pid=6273 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.568198][ T6285] kvm: kvm [6283]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 110.588324][ T6285] kvm: kvm [6283]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 110.609844][ T30] audit: type=1400 audit(1754321138.919:215): avc: denied { create } for pid=6294 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.611036][ T6285] kvm: kvm [6283]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 111.093182][ T30] audit: type=1400 audit(1754321138.979:216): avc: denied { create } for pid=6294 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 111.673166][ T30] audit: type=1326 audit(1754321139.929:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6bd8eb69 code=0x7ffc0000 [ 111.823482][ T30] audit: type=1326 audit(1754321139.929:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6bd8eb69 code=0x7ffc0000 [ 111.846996][ T30] audit: type=1326 audit(1754321139.929:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbe6bd8eb69 code=0x7ffc0000 [ 111.870722][ T30] audit: type=1326 audit(1754321139.929:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6bd8eb69 code=0x7ffc0000 [ 112.434389][ T30] audit: type=1326 audit(1754321139.929:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6bd8eb69 code=0x7ffc0000 [ 112.460456][ T30] audit: type=1326 audit(1754321139.929:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbe6bd8eb69 code=0x7ffc0000 [ 112.493425][ T30] audit: type=1326 audit(1754321139.929:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6bd8eb69 code=0x7ffc0000 [ 112.566058][ T30] audit: type=1326 audit(1754321139.929:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6bd8eb69 code=0x7ffc0000 [ 116.779111][ T6346] tipc: Started in network mode [ 116.869118][ T6346] tipc: Node identity 6e7d2b8f1a13, cluster identity 4711 [ 116.878425][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 116.878440][ T30] audit: type=1400 audit(1754321145.189:251): avc: denied { write } for pid=6347 comm="syz.4.92" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.926141][ T30] audit: type=1400 audit(1754321145.239:252): avc: denied { map } for pid=6347 comm="syz.4.92" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.934771][ T6346] tipc: Enabled bearer , priority 0 [ 117.031264][ T6355] syzkaller0: entered promiscuous mode [ 117.356917][ T6355] syzkaller0: entered allmulticast mode [ 117.701959][ T6346] tipc: Resetting bearer [ 118.023421][ T1208] tipc: Node number set to 1953377167 [ 118.633551][ T6345] tipc: Resetting bearer [ 119.565062][ T6345] tipc: Disabling bearer [ 120.329051][ T30] audit: type=1400 audit(1754321148.129:253): avc: denied { block_suspend } for pid=6365 comm="syz.2.95" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.529769][ T6359] kvm: kvm [6358]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5065 [ 120.602227][ T30] audit: type=1400 audit(1754321148.889:254): avc: denied { getopt } for pid=6367 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.632340][ T6359] kvm: kvm [6358]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xaba0 [ 120.649287][ T6374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6374 comm=syz.4.96 [ 120.710176][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.717938][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.879404][ T6380] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.902189][ T30] audit: type=1400 audit(1754321149.189:255): avc: denied { write } for pid=6375 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.202379][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.222137][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.318530][ T5978] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.459280][ T30] audit: type=1400 audit(1754321149.769:256): avc: denied { connect } for pid=6393 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.904529][ T5978] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.122545][ T30] audit: type=1400 audit(1754321149.829:257): avc: denied { write } for pid=6393 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.229410][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.329375][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.211685][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.102'. [ 123.222307][ T6404] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 124.338372][ T30] audit: type=1400 audit(1754321152.649:258): avc: denied { create } for pid=6409 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.874089][ T6417] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.894582][ T30] audit: type=1400 audit(1754321154.209:259): avc: denied { ioctl } for pid=6407 comm="syz.1.105" path="socket:[9466]" dev="sockfs" ino=9466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.691921][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 127.700872][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 131.268460][ T30] audit: type=1400 audit(1754321159.579:260): avc: denied { create } for pid=6467 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.769886][ T30] audit: type=1400 audit(1754321159.639:261): avc: denied { mounton } for pid=6467 comm="syz.0.116" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 132.929927][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.936524][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.154556][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.163447][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 133.172319][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 133.220965][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.279744][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.371049][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.415031][ T1208] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.539664][ T30] audit: type=1400 audit(1754321161.839:262): avc: denied { create } for pid=6482 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.752111][ T30] audit: type=1400 audit(1754321161.849:263): avc: denied { accept } for pid=6482 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.765232][ T6485] sp0: Synchronizing with TNC [ 133.774184][ T5969] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.946379][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.079653][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.090475][ T1208] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.099881][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.119802][ T30] audit: type=1400 audit(1754321162.299:264): avc: denied { search } for pid=5512 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.569159][ T1208] usb 4-1: config 0 descriptor?? [ 134.575623][ T30] audit: type=1400 audit(1754321162.429:265): avc: denied { search } for pid=5512 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.609359][ T30] audit: type=1400 audit(1754321162.429:266): avc: denied { search } for pid=5512 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.611968][ T5969] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.644801][ T5969] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.651562][ T5969] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 134.661189][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.688147][ T6481] [U] è [ 134.697609][ T5969] usb 5-1: config 0 descriptor?? [ 134.699703][ T30] audit: type=1400 audit(1754321162.429:267): avc: denied { read } for pid=5512 comm="dhcpcd" name="n100" dev="tmpfs" ino=2310 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.736511][ T30] audit: type=1400 audit(1754321162.429:268): avc: denied { open } for pid=5512 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2310 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.761357][ T30] audit: type=1400 audit(1754321162.429:269): avc: denied { getattr } for pid=5512 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2310 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.732326][ T5969] logitech-djreceiver 0003:046D:C52F.0003: hidraw0: USB HID v8.00 Device [HID 046d:c52f] on usb-dummy_hcd.4-1/input0 [ 135.758493][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 135.860909][ T1208] usb 4-1: string descriptor 0 read error: -71 [ 135.881146][ T1208] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 135.883951][ T5969] usb 5-1: USB disconnect, device number 2 [ 135.977106][ T1208] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 136.033142][ T1208] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 136.215307][ T1208] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 136.222888][ T1208] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 136.241054][ T1208] usb 4-1: USB disconnect, device number 2 [ 136.274756][ T6500] fido_id[6500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 136.454247][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 136.454263][ T30] audit: type=1400 audit(1754321164.759:274): avc: denied { read write } for pid=6501 comm="syz.1.126" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.600706][ T30] audit: type=1400 audit(1754321164.759:275): avc: denied { open } for pid=6501 comm="syz.1.126" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.735470][ T6503] hub 2-0:1.0: USB hub found [ 136.745499][ T6503] hub 2-0:1.0: 1 port detected [ 137.087475][ T30] audit: type=1400 audit(1754321164.759:276): avc: denied { ioctl } for pid=6501 comm="syz.1.126" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.572093][ T30] audit: type=1400 audit(1754321165.879:277): avc: denied { create } for pid=6514 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.128655][ T30] audit: type=1400 audit(1754321166.119:278): avc: denied { write } for pid=6514 comm="syz.1.130" path="socket:[10483]" dev="sockfs" ino=10483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.429702][ T30] audit: type=1400 audit(1754321167.729:279): avc: denied { open } for pid=6523 comm="syz.2.132" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 139.450273][ T6516] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 139.771059][ T30] audit: type=1400 audit(1754321167.729:280): avc: denied { ioctl } for pid=6523 comm="syz.2.132" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 139.796230][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.009676][ T30] audit: type=1400 audit(1754321167.759:281): avc: denied { append } for pid=6513 comm="syz.0.129" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.032466][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.555211][ T6544] ALSA: seq fatal error: cannot create timer (-22) [ 144.033062][ T30] audit: type=1400 audit(1754321172.309:282): avc: denied { create } for pid=6551 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.154752][ T30] audit: type=1400 audit(1754321172.309:283): avc: denied { write } for pid=6551 comm="syz.1.139" path="socket:[9649]" dev="sockfs" ino=9649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.574598][ T30] audit: type=1400 audit(1754321172.709:284): avc: denied { create } for pid=6563 comm="syz.4.140" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.736756][ T5982] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.744791][ T30] audit: type=1400 audit(1754321172.989:285): avc: denied { write } for pid=6563 comm="syz.4.140" name="file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.059392][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.070687][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.081193][ T30] audit: type=1400 audit(1754321172.999:286): avc: denied { open } for pid=6563 comm="syz.4.140" path="/32/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.107242][ T5982] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 145.117519][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.125745][ T30] audit: type=1400 audit(1754321173.009:287): avc: denied { ioctl } for pid=6563 comm="syz.4.140" path="/32/file0" dev="tmpfs" ino=185 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.165065][ T5982] usb 3-1: config 0 descriptor?? [ 145.368690][ T30] audit: type=1400 audit(1754321173.639:288): avc: denied { unlink } for pid=5847 comm="syz-executor" name="file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.674468][ T5982] hid_parser_main: 131 callbacks suppressed [ 145.674481][ T5982] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 145.722763][ T5982] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 145.733389][ T6573] syz.4.142: attempt to access beyond end of device [ 145.733389][ T6573] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.795459][ T5982] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0004/input/input7 [ 145.876927][ T30] audit: type=1400 audit(1754321174.189:289): avc: denied { write } for pid=6565 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.196897][ T5982] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 146.646951][ T5969] IPVS: starting estimator thread 0... [ 146.654407][ T30] audit: type=1400 audit(1754321174.289:290): avc: denied { read } for pid=5202 comm="acpid" name="event4" dev="devtmpfs" ino=2797 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.687217][ T5982] usb 3-1: USB disconnect, device number 3 [ 146.696417][ T30] audit: type=1400 audit(1754321174.289:291): avc: denied { open } for pid=5202 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2797 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.755929][ T6580] IPVS: using max 70 ests per chain, 168000 per kthread [ 147.132819][ T6579] fido_id[6579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 149.832479][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 149.832496][ T30] audit: type=1400 audit(1754321178.139:294): avc: denied { read } for pid=6606 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.317327][ T6604] mmap: syz.1.149 (6604) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.599443][ T6618] netlink: 'syz.0.151': attribute type 10 has an invalid length. [ 150.609316][ T6618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.151'. [ 150.620197][ T6618] dummy0: entered promiscuous mode [ 150.640003][ T6618] bridge0: port 3(dummy0) entered blocking state [ 150.647063][ T6618] bridge0: port 3(dummy0) entered disabled state [ 150.655525][ T6618] dummy0: entered allmulticast mode [ 151.000961][ T30] audit: type=1400 audit(1754321178.789:295): avc: denied { connect } for pid=6614 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.287888][ T30] audit: type=1400 audit(1754321179.039:296): avc: denied { write } for pid=6591 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.871336][ T6631] Invalid source name [ 151.875517][ T6631] UBIFS error (pid: 6631): cannot open "usrquota", error -22 [ 151.879870][ T30] audit: type=1400 audit(1754321180.179:297): avc: denied { mounton } for pid=6626 comm="syz.1.156" path="/30/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.896714][ T30] audit: type=1400 audit(1754321181.209:298): avc: denied { read write } for pid=6641 comm="syz.1.159" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 152.935798][ T6639] bridge1: entered promiscuous mode [ 153.023578][ T30] audit: type=1400 audit(1754321181.239:299): avc: denied { open } for pid=6641 comm="syz.1.159" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 153.061774][ T30] audit: type=1400 audit(1754321181.319:300): avc: denied { execute } for pid=6638 comm="syz.3.158" path="/26/bus" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.336845][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.513739][ T30] audit: type=1400 audit(1754321181.829:301): avc: denied { getopt } for pid=6638 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.566685][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 153.596034][ T5899] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 153.629623][ T5899] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 153.641675][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.033272][ T5899] usb 5-1: Product: syz [ 154.486538][ T5899] usb 5-1: Manufacturer: syz [ 154.491318][ T5899] usb 5-1: SerialNumber: syz [ 154.507175][ T5899] usb 5-1: config 0 descriptor?? [ 154.531627][ T5899] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 154.607303][ T5899] usb 5-1: Detected FT232B [ 155.457998][ T6667] warning: `syz.4.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.498423][ T30] audit: type=1400 audit(1754321183.809:302): avc: denied { create } for pid=6669 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.759606][ T6648] process 'syz.1.159' launched './file0' with NULL argv: empty string added [ 155.783505][ T30] audit: type=1400 audit(1754321184.079:303): avc: denied { execute_no_trans } for pid=6641 comm="syz.1.159" path="/31/file0" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.022773][ T30] audit: type=1400 audit(1754321185.279:304): avc: denied { unmount } for pid=6684 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.653997][ T5899] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 157.681547][ T5899] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 157.706849][ T5899] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 157.775576][ T5899] usb 5-1: USB disconnect, device number 3 [ 157.791273][ T5899] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 157.805838][ T5899] ftdi_sio 5-1:0.0: device disconnected [ 159.552505][ T30] audit: type=1400 audit(1754321187.859:305): avc: denied { read write } for pid=6702 comm="syz.4.172" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.613296][ T30] audit: type=1400 audit(1754321187.859:306): avc: denied { open } for pid=6702 comm="syz.4.172" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.647191][ T30] audit: type=1400 audit(1754321187.869:307): avc: denied { read write } for pid=6702 comm="syz.4.172" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.674581][ T30] audit: type=1400 audit(1754321187.869:308): avc: denied { open } for pid=6702 comm="syz.4.172" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.777837][ T30] audit: type=1400 audit(1754321187.869:309): avc: denied { ioctl } for pid=6702 comm="syz.4.172" path="/dev/udmabuf" dev="devtmpfs" ino=701 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.403958][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 163.540382][ T30] audit: type=1400 audit(1754321191.729:310): avc: denied { mounton } for pid=6743 comm="syz.4.179" path="/proc/152/task" dev="proc" ino=10908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 163.588237][ T30] audit: type=1400 audit(1754321191.849:311): avc: denied { ioctl } for pid=6741 comm="syz.2.180" path="socket:[9866]" dev="sockfs" ino=9866 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.675297][ T30] audit: type=1400 audit(1754321191.989:312): avc: denied { read } for pid=6753 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.185329][ T6752] ptrace attach of "./syz-executor exec"[5846] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ team0  8  G\x0b \x09   € €  @  \x5c \x5c      @ €<  $  user_linkup        [ 165.807635][ T30] audit: type=1400 audit(1754321194.029:313): avc: denied { write } for pid=6762 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.279903][ T30] audit: type=1400 audit(1754321196.119:314): avc: denied { setopt } for pid=6775 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.572060][ T30] audit: type=1400 audit(1754321196.869:315): avc: denied { unlink } for pid=6781 comm="syz.4.187" name="#1" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.595981][ T30] audit: type=1400 audit(1754321196.879:316): avc: denied { mount } for pid=6781 comm="syz.4.187" name="/" dev="overlay" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 170.642366][ T30] audit: type=1400 audit(1754321198.949:317): avc: denied { append } for pid=6788 comm="syz.1.188" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.538490][ T30] audit: type=1400 audit(1754321199.769:318): avc: denied { ioctl } for pid=6794 comm="syz.3.189" path="socket:[10971]" dev="sockfs" ino=10971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.922435][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 173.820161][ T30] audit: type=1400 audit(1754321201.759:319): avc: denied { write } for pid=6809 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.152136][ T6819] dummy0: left allmulticast mode [ 174.160946][ T6819] bridge0: port 3(dummy0) entered disabled state [ 174.249399][ T6819] bridge_slave_0: left allmulticast mode [ 174.256117][ T6819] bridge_slave_0: left promiscuous mode [ 174.262368][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.275651][ T6819] bridge_slave_1: left allmulticast mode [ 174.281378][ T6819] bridge_slave_1: left promiscuous mode [ 174.374318][ T6828] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 174.391038][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.471762][ T6819] bond0: (slave bond_slave_0): Releasing backup interface [ 174.493879][ T6830] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 174.587012][ T6819] bond0: (slave bond_slave_1): Releasing backup interface [ 174.589961][ T6819] team0: Port device team_slave_0 removed [ 174.591211][ T6819] team0: Port device team_slave_1 removed [ 174.591367][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.591917][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.640886][ T6824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=6824 comm=syz.4.194 [ 175.158164][ T6830] syz.4.194 (6830) used greatest stack depth: 21040 bytes left [ 175.545074][ T30] audit: type=1400 audit(1754321203.769:320): avc: denied { bind } for pid=6836 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.545123][ T30] audit: type=1400 audit(1754321203.769:321): avc: denied { node_bind } for pid=6836 comm="syz.0.199" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 176.684539][ T6847] ======================================================= [ 176.684539][ T6847] WARNING: The mand mount option has been deprecated and [ 176.684539][ T6847] and is ignored by this kernel. Remove the mand [ 176.684539][ T6847] option from the mount to silence this warning. [ 176.684539][ T6847] ======================================================= [ 178.272874][ T30] audit: type=1400 audit(1754321206.549:322): avc: denied { append } for pid=6848 comm="syz.4.201" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 179.716974][ T30] audit: type=1400 audit(1754321207.489:323): avc: denied { create } for pid=6858 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 179.717022][ T30] audit: type=1400 audit(1754321207.549:324): avc: denied { setopt } for pid=6858 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 179.821095][ T6862] tipc: Started in network mode [ 179.821123][ T6862] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 179.821181][ T6862] tipc: Enabling of bearer rejected, failed to enable media [ 180.722225][ T6865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.175567][ T30] audit: type=1400 audit(1754321209.489:325): avc: denied { read } for pid=6879 comm="syz.4.210" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.435188][ T30] audit: type=1400 audit(1754321209.489:326): avc: denied { open } for pid=6879 comm="syz.4.210" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.476183][ T30] audit: type=1400 audit(1754321209.729:327): avc: denied { connect } for pid=6866 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.520780][ T30] audit: type=1400 audit(1754321209.729:328): avc: denied { read } for pid=6866 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.016718][ T6899] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 182.016718][ T6899] program syz.4.212 not setting count and/or reply_len properly [ 183.428644][ T6905] bridge2: entered allmulticast mode [ 184.450735][ T6916] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 184.470493][ T6916] PKCS7: Only support pkcs7_signedData type [ 184.543117][ T30] audit: type=1400 audit(1754321212.849:329): avc: denied { append } for pid=6911 comm="syz.0.218" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.211492][ T30] audit: type=1400 audit(1754321213.509:330): avc: denied { create } for pid=6927 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 185.313915][ T6930] overlayfs: failed to clone upperpath [ 185.476825][ T30] audit: type=1326 audit(1754321213.779:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 185.673331][ T30] audit: type=1326 audit(1754321213.779:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 185.703648][ T30] audit: type=1326 audit(1754321213.779:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 185.727093][ T30] audit: type=1326 audit(1754321213.779:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 185.786589][ T30] audit: type=1326 audit(1754321213.779:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 185.817765][ T30] audit: type=1326 audit(1754321213.779:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 185.938837][ T30] audit: type=1326 audit(1754321213.789:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 186.023877][ T30] audit: type=1326 audit(1754321213.789:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 186.136527][ T30] audit: type=1326 audit(1754321213.789:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff21a58eb69 code=0x7ffc0000 [ 189.459807][ T6974] evm: overlay not supported [ 191.619922][ T6990] netlink: 8210 bytes leftover after parsing attributes in process `syz.0.233'. [ 191.637445][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 191.637463][ T30] audit: type=1400 audit(1754321219.949:385): avc: denied { mount } for pid=6992 comm="syz.3.238" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 192.098947][ T6979] netlink: 8210 bytes leftover after parsing attributes in process `syz.0.233'. [ 192.367931][ T30] audit: type=1400 audit(1754321220.679:386): avc: denied { create } for pid=6998 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.687975][ T30] audit: type=1800 audit(1754321220.999:387): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.239" name="/" dev="tmpfs" ino=36 res=0 errno=0 [ 192.804415][ T7008] rdma_op ffff88802bf931f0 conn xmit_rdma 0000000000000000 [ 193.200737][ T30] audit: type=1400 audit(1754321221.099:388): avc: denied { bind } for pid=7002 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.652957][ T30] audit: type=1400 audit(1754321221.889:389): avc: denied { setopt } for pid=7007 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.936868][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.959840][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.067137][ T7018] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 194.073857][ T7018] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.111775][ T7018] vhci_hcd vhci_hcd.0: Device attached [ 194.152393][ T7026] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 194.159398][ T7026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.246352][ T7018] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.264331][ T7026] vhci_hcd vhci_hcd.0: Device attached [ 194.285012][ T7018] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 194.291676][ T7018] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.323449][ T1208] vhci_hcd: vhci_device speed not set [ 194.360591][ T7018] vhci_hcd vhci_hcd.0: Device attached [ 194.414614][ T1208] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 194.517859][ T7018] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 194.524570][ T7018] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.615422][ T7018] vhci_hcd vhci_hcd.0: Device attached [ 195.616076][ T7026] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 195.622811][ T7026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.733143][ T7026] vhci_hcd vhci_hcd.0: Device attached [ 195.791674][ T7032] vhci_hcd: connection closed [ 195.792416][ T7019] vhci_hcd: connection reset by peer [ 195.794333][ T7027] vhci_hcd: connection closed [ 195.805808][ T12] vhci_hcd: stop threads [ 195.830082][ T7042] vhci_hcd: connection closed [ 195.833470][ T12] vhci_hcd: release socket [ 195.847449][ T7039] vhci_hcd: connection closed [ 195.876228][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.916568][ T12] vhci_hcd: disconnect device [ 195.930830][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.942507][ T12] vhci_hcd: stop threads [ 195.952588][ T12] vhci_hcd: release socket [ 195.962746][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.974324][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 195.980452][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 195.987940][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 195.994061][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 196.000879][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 196.073414][ T12] vhci_hcd: disconnect device [ 196.134967][ T12] vhci_hcd: stop threads [ 196.163166][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.206540][ T12] vhci_hcd: release socket [ 196.488399][ T12] vhci_hcd: disconnect device [ 196.835543][ T12] vhci_hcd: stop threads [ 196.839834][ T12] vhci_hcd: release socket [ 196.879845][ T12] vhci_hcd: disconnect device [ 196.905856][ T12] vhci_hcd: stop threads [ 196.910223][ T12] vhci_hcd: release socket [ 196.915530][ T12] vhci_hcd: disconnect device [ 198.009045][ T6390] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 198.653690][ T6390] usb 5-1: Using ep0 maxpacket: 16 [ 199.551641][ T7081] netlink: 64 bytes leftover after parsing attributes in process `syz.3.254'. [ 199.583624][ T1208] vhci_hcd: vhci_device speed not set [ 199.957773][ T6390] usb 5-1: device descriptor read/all, error -71 [ 201.422428][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 201.458993][ T30] audit: type=1400 audit(1754321229.759:390): avc: denied { listen } for pid=7096 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.557386][ T30] audit: type=1400 audit(1754321229.829:391): avc: denied { accept } for pid=7096 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.923610][ T5168] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 202.625869][ T7116] syz.1.263: attempt to access beyond end of device [ 202.625869][ T7116] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 205.840418][ T30] audit: type=1400 audit(1754321234.149:392): avc: denied { setopt } for pid=7138 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.960311][ T30] audit: type=1400 audit(1754321234.219:393): avc: denied { getopt } for pid=7138 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.819311][ T30] audit: type=1400 audit(1754321236.129:394): avc: denied { listen } for pid=7151 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.840015][ T30] audit: type=1400 audit(1754321236.129:395): avc: denied { write } for pid=7151 comm="syz.3.270" path="socket:[11604]" dev="sockfs" ino=11604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.394982][ T30] audit: type=1400 audit(1754321236.669:396): avc: denied { create } for pid=7154 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 208.710232][ T30] audit: type=1400 audit(1754321236.679:397): avc: denied { ioctl } for pid=7154 comm="syz.3.271" path="socket:[11607]" dev="sockfs" ino=11607 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 208.741696][ T30] audit: type=1400 audit(1754321236.679:398): avc: denied { bind } for pid=7154 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.317292][ T7108] tipc: Enabling of bearer rejected, failed to enable media [ 209.373153][ T7158] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 210.129151][ T7170] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 210.135678][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 210.145419][ T7170] vhci_hcd vhci_hcd.0: Device attached [ 210.687396][ T5969] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 210.695466][ T7164] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 210.827068][ T30] audit: type=1400 audit(1754321238.989:399): avc: denied { mount } for pid=7165 comm="syz.4.275" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 211.270619][ T30] audit: type=1400 audit(1754321239.029:400): avc: denied { unmount } for pid=7165 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 211.283387][ T7171] vhci_hcd: connection closed [ 211.300872][ T6070] vhci_hcd: stop threads [ 211.310223][ T6070] vhci_hcd: release socket [ 211.315251][ T6070] vhci_hcd: disconnect device [ 211.448884][ T30] audit: type=1400 audit(1754321239.699:401): avc: denied { getopt } for pid=7177 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 212.821013][ T30] audit: type=1400 audit(1754321241.119:402): avc: denied { sys_module } for pid=7183 comm="syz.2.278" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 214.346118][ T30] audit: type=1400 audit(1754321242.619:403): avc: denied { read } for pid=7213 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.685380][ T30] audit: type=1400 audit(1754321242.999:404): avc: denied { read open } for pid=7221 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.540415][ T30] audit: type=1400 audit(1754321243.019:405): avc: denied { getattr } for pid=7221 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.443229][ T5969] vhci_hcd: vhci_device speed not set [ 216.725477][ T30] audit: type=1400 audit(1754321245.039:406): avc: denied { read } for pid=7235 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.124606][ T30] audit: type=1400 audit(1754321245.439:407): avc: denied { add_name } for pid=7220 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.363175][ T30] audit: type=1400 audit(1754321245.459:408): avc: denied { create } for pid=7220 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.548136][ T30] audit: type=1400 audit(1754321245.459:409): avc: denied { write } for pid=7220 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2822 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.603211][ T30] audit: type=1400 audit(1754321245.459:410): avc: denied { append } for pid=7220 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2822 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.147377][ T30] audit: type=1400 audit(1754321246.459:411): avc: denied { remove_name } for pid=7255 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2822 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.496948][ T30] audit: type=1400 audit(1754321246.459:412): avc: denied { unlink } for pid=7255 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2822 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.815469][ T7265] tipc: Started in network mode [ 218.820637][ T7265] tipc: Node identity ac14140f, cluster identity 4711 [ 218.833578][ T7265] tipc: New replicast peer: 255.255.255.255 [ 218.842433][ T7265] tipc: Enabled bearer , priority 10 [ 219.595137][ T30] audit: type=1400 audit(1754321247.899:413): avc: denied { getopt } for pid=7269 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.973848][ T919] tipc: Node number set to 2886997007 [ 220.640187][ T7279] could not allocate digest TFM handle cryptd(blake2b-160) [ 221.371270][ T30] audit: type=1400 audit(1754321249.419:414): avc: denied { shutdown } for pid=7295 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.174893][ T30] audit: type=1400 audit(1754321250.479:415): avc: denied { setopt } for pid=7308 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.805238][ T30] audit: type=1400 audit(1754321255.059:416): avc: denied { ioctl } for pid=7330 comm="syz.4.304" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 227.225855][ T30] audit: type=1400 audit(1754321255.229:417): avc: denied { create } for pid=7334 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.264915][ T30] audit: type=1400 audit(1754321255.229:418): avc: denied { connect } for pid=7334 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.295467][ T30] audit: type=1400 audit(1754321255.229:419): avc: denied { write } for pid=7334 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.968343][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 229.375781][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 230.666511][ T7368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.312'. [ 232.509156][ T7387] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 232.655584][ T7387] bond1: entered promiscuous mode [ 232.700294][ T7387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.760263][ T7394] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 233.486553][ T7390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.654324][ T7390] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 233.710118][ T7390] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 233.754205][ T7390] bond1: (slave vcan1): making interface the new active one [ 234.003173][ T7390] vcan1: entered promiscuous mode [ 234.009090][ T7390] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 236.149812][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 236.180848][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'. [ 238.094182][ T30] audit: type=1400 audit(1754321266.309:420): avc: denied { mount } for pid=7444 comm="syz.1.326" name="/" dev="autofs" ino=12681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 238.237307][ T30] audit: type=1400 audit(1754321266.379:421): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 240.233158][ T7456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.324530][ T30] audit: type=1400 audit(1754321268.279:422): avc: denied { remove_name } for pid=7451 comm="syz.1.329" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.483141][ T30] audit: type=1400 audit(1754321268.279:423): avc: denied { unlink } for pid=7451 comm="syz.1.329" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 241.950763][ T7468] bridge3: entered promiscuous mode [ 243.203633][ T30] audit: type=1400 audit(1754321271.329:424): avc: denied { accept } for pid=7485 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.607836][ T30] audit: type=1400 audit(1754321272.809:425): avc: denied { read } for pid=7489 comm="syz.1.335" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 244.633421][ T30] audit: type=1400 audit(1754321272.809:426): avc: denied { open } for pid=7489 comm="syz.1.335" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 245.403903][ T30] audit: type=1400 audit(1754321273.309:427): avc: denied { ioctl } for pid=7493 comm="syz.4.337" path="mnt:[4026533070]" dev="nsfs" ino=4026533070 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.948742][ T7517] Bluetooth: MGMT ver 1.23 [ 246.011110][ T7511] bridge1: entered promiscuous mode [ 246.107959][ T7516] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 246.595811][ T7516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.616790][ T7519] ip6tnl1: entered allmulticast mode [ 246.885551][ T7519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.903424][ T7519] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 246.914508][ T7519] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 248.195417][ T30] audit: type=1400 audit(1754321276.059:428): avc: denied { write } for pid=7526 comm="syz.0.343" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.788495][ T30] audit: type=1400 audit(1754321278.099:429): avc: denied { ioctl } for pid=7535 comm="syz.3.345" path="socket:[12121]" dev="sockfs" ino=12121 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.958246][ T30] audit: type=1400 audit(1754321279.889:430): avc: denied { setopt } for pid=7549 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.034820][ T30] audit: type=1400 audit(1754321279.939:431): avc: denied { ioctl } for pid=7549 comm="syz.2.348" path="socket:[13068]" dev="sockfs" ino=13068 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.503288][ T7558] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 252.564999][ T7562] overlayfs: failed to clone upperpath [ 253.172453][ T30] audit: type=1400 audit(1754321281.019:432): avc: denied { watch } for pid=7561 comm="syz.2.351" path="/79/bus/file1" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 253.271119][ T7558] bond1: entered promiscuous mode [ 253.285753][ T7558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.293688][ T30] audit: type=1400 audit(1754321281.019:433): avc: denied { watch_sb watch_reads } for pid=7561 comm="syz.2.351" path="/79/bus/file1" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 253.515411][ T7572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.578604][ T7572] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 253.589023][ T7572] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 253.655039][ T7572] bond1: (slave vcan1): making interface the new active one [ 253.662500][ T7572] vcan1: entered promiscuous mode [ 253.674893][ T7572] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 255.870264][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.104903][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.640893][ T30] audit: type=1400 audit(1754321285.939:434): avc: denied { getopt } for pid=7599 comm="syz.2.359" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.741049][ T919] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 264.913068][ T919] usb 2-1: Using ep0 maxpacket: 16 [ 264.945719][ T919] usb 2-1: config 6 has an invalid interface number: 28 but max is 3 [ 264.983228][ T919] usb 2-1: config 6 has an invalid interface number: 4 but max is 3 [ 265.047799][ T919] usb 2-1: config 6 has an invalid interface number: 86 but max is 3 [ 265.193595][ T919] usb 2-1: config 6 has an invalid interface number: 191 but max is 3 [ 265.201776][ T919] usb 2-1: config 6 has no interface number 0 [ 265.721566][ T919] usb 2-1: config 6 has no interface number 1 [ 265.771134][ T919] usb 2-1: config 6 has no interface number 2 [ 265.793060][ T919] usb 2-1: config 6 has no interface number 3 [ 265.799206][ T919] usb 2-1: config 6 interface 28 altsetting 0 endpoint 0x2 has invalid maxpacket 1576, setting to 64 [ 265.833087][ T919] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 266.043054][ T919] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 266.083274][ T919] usb 2-1: config 6 interface 86 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 266.241477][ T919] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 268.981817][ T919] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 268.991863][ T919] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 269.021174][ T919] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 269.043020][ T919] usb 2-1: config 6 interface 86 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 269.084808][ T919] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 269.101772][ T919] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 269.112834][ T919] usb 2-1: config 6 interface 4 has no altsetting 0 [ 269.119522][ T919] usb 2-1: config 6 interface 86 has no altsetting 0 [ 269.128609][ T919] usb 2-1: config 6 interface 191 has no altsetting 0 [ 269.136398][ T919] usb 2-1: string descriptor 0 read error: -71 [ 269.142830][ T919] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 269.152255][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.165790][ T919] usb 2-1: can't set config #6, error -71 [ 269.173806][ T919] usb 2-1: USB disconnect, device number 2 [ 269.227959][ T30] audit: type=1400 audit(1754321297.539:435): avc: denied { create } for pid=7674 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 269.415855][ T30] audit: type=1400 audit(1754321297.619:436): avc: denied { getopt } for pid=7674 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 269.825889][ T7683] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[7683] [ 271.457511][ T30] audit: type=1400 audit(1754321299.749:437): avc: denied { sqpoll } for pid=7685 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 272.063563][ T7697] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 272.468995][ T30] audit: type=1400 audit(1754321300.419:438): avc: denied { ioctl } for pid=7692 comm="syz.1.381" path="socket:[13356]" dev="sockfs" ino=13356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.478921][ T7697] netlink: 'syz.0.382': attribute type 10 has an invalid length. [ 272.654241][ T7697] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 272.685112][ T30] audit: type=1400 audit(1754321300.929:439): avc: denied { shutdown } for pid=7690 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.040341][ T7697] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 273.383101][ T30] audit: type=1400 audit(1754321301.629:440): avc: denied { firmware_load } for pid=7696 comm="syz.0.382" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 273.780568][ T7697] syz.0.382 (7697) used greatest stack depth: 19752 bytes left [ 274.145312][ T7710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.249564][ T7734] capability: warning: `syz.0.389' uses 32-bit capabilities (legacy support in use) [ 276.259299][ T6389] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 276.279675][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 276.630176][ T6389] usb 5-1: Using ep0 maxpacket: 32 [ 276.714606][ T6389] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 276.734779][ T6389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.746600][ T7738] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 276.834059][ T6389] usb 5-1: config 0 descriptor?? [ 277.066525][ T7738] bond0: (slave wlan1): Releasing backup interface [ 277.953527][ T30] audit: type=1400 audit(1754321306.239:441): avc: denied { connect } for pid=7745 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 278.544527][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 279.953089][ T30] audit: type=1400 audit(1754321308.209:442): avc: denied { setcurrent } for pid=7754 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 280.081994][ T6389] usb 5-1: can't set config #0, error -71 [ 280.108892][ T30] audit: type=1400 audit(1754321308.419:443): avc: denied { ioctl } for pid=7766 comm="syz.2.399" path="socket:[14504]" dev="sockfs" ino=14504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.282215][ T6389] usb 5-1: USB disconnect, device number 6 [ 280.476446][ T7769] : entered promiscuous mode [ 281.241028][ T7779] binder: 7774:7779 ioctl c0306201 0 returned -14 [ 281.830229][ T30] audit: type=1400 audit(1754321309.489:444): avc: denied { ioctl } for pid=7774 comm="syz.0.401" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.211139][ T30] audit: type=1400 audit(1754321309.509:445): avc: denied { set_context_mgr } for pid=7774 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 282.726523][ T7796] openvswitch: netlink: Message has 4 unknown bytes. [ 283.034119][ T30] audit: type=1400 audit(1754321311.349:446): avc: denied { bind } for pid=7782 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 288.402806][ T30] audit: type=1400 audit(1754321316.469:447): avc: denied { read } for pid=7834 comm="syz.1.414" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.266593][ T7893] Bluetooth: MGMT ver 1.23 [ 294.387593][ T7896] capability: warning: `syz.3.430' uses deprecated v2 capabilities in a way that may be insecure [ 294.526884][ T30] audit: type=1400 audit(1754321322.839:448): avc: denied { watch watch_reads } for pid=7898 comm="syz.0.432" path="/88" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 294.561730][ T30] audit: type=1400 audit(1754321322.869:449): avc: denied { bind } for pid=7898 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 294.590774][ T30] audit: type=1400 audit(1754321322.869:450): avc: denied { listen } for pid=7898 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 294.832052][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 295.091771][ T7903] input: syz0 as /devices/virtual/input/input8 [ 297.280601][ T7933] netlink: 132 bytes leftover after parsing attributes in process `syz.3.438'. [ 298.483074][ T30] audit: type=1400 audit(1754321326.519:451): avc: denied { name_connect } for pid=7935 comm="syz.1.439" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 299.250096][ T30] audit: type=1400 audit(1754321327.559:452): avc: denied { read } for pid=7946 comm="syz.4.441" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 299.318755][ T7949] veth0: entered promiscuous mode [ 299.866033][ T30] audit: type=1400 audit(1754321327.589:453): avc: denied { open } for pid=7946 comm="syz.4.441" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 300.140416][ T30] audit: type=1326 audit(1754321327.829:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9158eb69 code=0x7ffc0000 [ 300.405732][ T7965] veth0: left promiscuous mode [ 300.916752][ T30] audit: type=1326 audit(1754321327.829:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9158eb69 code=0x7ffc0000 [ 300.940922][ T30] audit: type=1326 audit(1754321328.499:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9a9158eb69 code=0x7ffc0000 [ 300.964696][ T30] audit: type=1326 audit(1754321328.509:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9158eb69 code=0x7ffc0000 [ 301.161973][ T30] audit: type=1326 audit(1754321328.509:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9158eb69 code=0x7ffc0000 [ 302.753054][ T919] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 303.463029][ T919] usb 2-1: Using ep0 maxpacket: 16 [ 304.353120][ T30] audit: type=1400 audit(1754321332.649:459): avc: denied { write } for pid=7987 comm="syz.3.449" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 304.861656][ T919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.894985][ T919] usb 2-1: no configurations [ 304.918457][ T919] usb 2-1: can't read configurations, error -22 [ 306.099949][ T30] audit: type=1400 audit(1754321334.409:460): avc: denied { read } for pid=8002 comm="syz.1.463" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 306.421656][ T30] audit: type=1400 audit(1754321334.439:461): avc: denied { open } for pid=8002 comm="syz.1.463" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 306.445727][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.650068][ T8020] overlayfs: failed to clone lowerpath [ 308.635883][ T30] audit: type=1400 audit(1754321335.939:462): avc: denied { mount } for pid=8006 comm="syz.2.455" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 308.643654][ T8020] overlayfs: failed to clone upperpath [ 311.308641][ T30] audit: type=1400 audit(1754321339.539:463): avc: denied { map } for pid=8024 comm="syz.4.457" path="socket:[14061]" dev="sockfs" ino=14061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.454135][ T30] audit: type=1400 audit(1754321339.539:464): avc: denied { read accept } for pid=8024 comm="syz.4.457" path="socket:[14061]" dev="sockfs" ino=14061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 313.928890][ T30] audit: type=1400 audit(1754321341.859:465): avc: denied { ioctl } for pid=8040 comm="syz.3.461" path="socket:[15016]" dev="sockfs" ino=15016 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 316.681753][ T30] audit: type=1400 audit(1754321344.989:466): avc: denied { write } for pid=8060 comm="syz.3.466" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 316.704662][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.067805][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.074125][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.087398][ T30] audit: type=1400 audit(1754321344.989:467): avc: denied { open } for pid=8060 comm="syz.3.466" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 317.305441][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 317.346904][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 318.491604][ T8085] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 318.991392][ T8085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.094757][ T8093] ip6tnl1: entered allmulticast mode [ 319.327863][ T8093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.342100][ T8093] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 319.952843][ T8093] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 321.257416][ T8105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.402450][ T8121] binder: 8118:8121 ioctl c0306201 0 returned -14 [ 323.792870][ T30] audit: type=1400 audit(1754321352.019:468): avc: denied { connect } for pid=8132 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.336162][ T30] audit: type=1400 audit(1754321352.279:469): avc: denied { bind } for pid=8132 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 324.357180][ T30] audit: type=1400 audit(1754321352.309:470): avc: denied { setopt } for pid=8132 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 324.470428][ T30] audit: type=1400 audit(1754321352.409:471): avc: denied { write } for pid=8132 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.492628][ T8140] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 326.157497][ T8143] input: syz0 as /devices/virtual/input/input9 [ 326.891215][ T8164] trusted_key: encrypted_key: insufficient parameters specified [ 327.395710][ T30] audit: type=1400 audit(1754321355.689:472): avc: denied { bind } for pid=8159 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 327.424892][ T30] audit: type=1400 audit(1754321355.689:473): avc: denied { accept } for pid=8159 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 328.489750][ T8182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.146154][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 331.282348][ T6390] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 331.692100][ T6390] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.160611][ T6390] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 332.900579][ T6390] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 332.916961][ T6390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.008401][ T30] audit: type=1400 audit(1754321362.309:474): avc: denied { map } for pid=8225 comm="syz.3.501" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 334.263077][ T30] audit: type=1400 audit(1754321362.559:475): avc: denied { call } for pid=8225 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 334.290229][ T6390] usb 1-1: can't set config #27, error -71 [ 334.744010][ T6390] usb 1-1: USB disconnect, device number 2 [ 336.727374][ T30] audit: type=1400 audit(1754321365.029:476): avc: denied { getopt } for pid=8250 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.783636][ T8252] block device autoloading is deprecated and will be removed. [ 336.940079][ T8264] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 336.949001][ T8264] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 336.961142][ T8264] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 337.003126][ T8264] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 337.135747][ T6389] IPVS: starting estimator thread 0... [ 337.196644][ T8265] macsec1: entered promiscuous mode [ 337.238251][ T8265] bridge0: entered promiscuous mode [ 337.253673][ T8266] IPVS: using max 36 ests per chain, 86400 per kthread [ 337.303498][ T8265] bridge0: port 3(macsec1) entered blocking state [ 337.310151][ T8265] bridge0: port 3(macsec1) entered disabled state [ 337.322158][ T8265] macsec1: entered allmulticast mode [ 337.328169][ T8265] bridge0: entered allmulticast mode [ 337.340996][ T8265] macsec1: left allmulticast mode [ 337.362383][ T8265] bridge0: left allmulticast mode [ 337.398936][ T8265] bridge0: left promiscuous mode [ 337.440087][ T8276] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 337.508807][ T30] audit: type=1400 audit(1754321365.779:477): avc: denied { read } for pid=8267 comm="syz.4.511" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.687216][ T8279] sctp: [Deprecated]: syz.4.511 (pid 8279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.687216][ T8279] Use struct sctp_sack_info instead [ 337.733614][ T8280] ip6tnl1: entered allmulticast mode [ 337.752491][ T30] audit: type=1400 audit(1754321365.779:478): avc: denied { open } for pid=8267 comm="syz.4.511" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.842991][ T8281] tipc: New replicast peer: 0.0.0.0 [ 337.849327][ T8281] tipc: Enabled bearer , priority 10 [ 337.870615][ T8268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.887826][ T8268] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 337.959523][ T8276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.170185][ T8268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.178556][ T8268] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 338.657366][ T8268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.664450][ T8268] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 338.675070][ T8268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.682662][ T8268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 338.701462][ T8268] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.707969][ T8268] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 339.094613][ T8293] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 339.104918][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.515'. [ 339.158828][ T30] audit: type=1400 audit(1754321367.409:479): avc: denied { write } for pid=8289 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 340.102807][ T5168] Bluetooth: hci0: command 0x0406 tx timeout [ 340.203008][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 340.974006][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 340.974804][ T5168] Bluetooth: hci2: command 0x0406 tx timeout [ 340.986078][ T5168] Bluetooth: hci4: command 0x0406 tx timeout [ 341.774917][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.783477][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.123777][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 342.314303][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 343.013066][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 343.019786][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 343.022930][ T5168] Bluetooth: hci2: command 0x0406 tx timeout [ 343.248709][ T8322] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 343.314534][ T6388] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 343.523918][ T8321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 343.530473][ T8321] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 343.602951][ T6388] usb 4-1: Using ep0 maxpacket: 16 [ 343.640755][ T30] audit: type=1400 audit(1754321371.949:480): avc: denied { append } for pid=8319 comm="syz.4.522" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 345.181136][ T8322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.213074][ T30] audit: type=1400 audit(1754321371.949:481): avc: denied { map } for pid=8319 comm="syz.4.522" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 345.236556][ T8321] vhci_hcd vhci_hcd.0: Device attached [ 345.243098][ T30] audit: type=1400 audit(1754321371.949:482): avc: denied { execute } for pid=8319 comm="syz.4.522" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 345.312433][ T8326] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 345.636171][ T8322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8322 comm=syz.1.521 [ 345.663629][ T5168] Bluetooth: hci0: connection err: -111 [ 345.997348][ T6390] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 346.053924][ T8323] vhci_hcd: connection reset by peer [ 346.061653][ T6070] vhci_hcd: stop threads [ 346.066431][ T6070] vhci_hcd: release socket [ 346.076486][ T6070] vhci_hcd: disconnect device [ 346.560291][ T6388] usb 4-1: unable to get BOS descriptor or descriptor too short [ 346.610337][ T6388] usb 4-1: no configurations [ 346.620153][ T6388] usb 4-1: can't read configurations, error -22 [ 347.134270][ T8352] sit1: entered allmulticast mode [ 350.343002][ T919] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 350.743748][ T30] audit: type=1400 audit(1754321378.779:483): avc: denied { setopt } for pid=8381 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.762957][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.167642][ T6390] vhci_hcd: vhci_device speed not set [ 351.257585][ T919] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 351.297880][ T919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.541207][ T919] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 351.593088][ T919] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 351.624692][ T919] usb 4-1: Product: syz [ 351.638978][ T919] usb 4-1: Manufacturer: syz [ 351.644312][ T919] usb 4-1: SerialNumber: syz [ 351.672566][ T919] usb 4-1: config 0 descriptor?? [ 351.689250][ T919] usb 4-1: selecting invalid altsetting 0 [ 351.865707][ T8391] loop7: detected capacity change from 0 to 16384 [ 352.376573][ T919] usb 4-1: USB disconnect, device number 5 [ 352.573444][ T8392] loop7: detected capacity change from 16384 to 0 [ 352.602645][ C0] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 352.774945][ T30] audit: type=1400 audit(1754321381.079:484): avc: denied { write } for pid=8395 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 352.794872][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.831569][ T30] audit: type=1400 audit(1754321381.109:485): avc: denied { accept } for pid=8395 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 355.418773][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 357.649280][ T919] IPVS: starting estimator thread 0... [ 358.083024][ T8461] IPVS: using max 48 ests per chain, 115200 per kthread [ 358.391563][ T8470] vivid-003: ================= START STATUS ================= [ 358.403453][ T8470] vivid-003: Radio HW Seek Mode: Bounded [ 358.410237][ T8470] vivid-003: Radio Programmable HW Seek: false [ 358.419947][ T8470] vivid-003: RDS Rx I/O Mode: Block I/O [ 358.429081][ T8470] vivid-003: Generate RBDS Instead of RDS: false [ 358.438622][ T8470] vivid-003: RDS Reception: true [ 358.449799][ T8470] vivid-003: RDS Program Type: 0 inactive [ 358.456259][ T8470] vivid-003: RDS PS Name: inactive [ 358.463098][ T8470] vivid-003: RDS Radio Text: inactive [ 358.468601][ T8470] vivid-003: RDS Traffic Announcement: false inactive [ 358.827948][ T8470] vivid-003: RDS Traffic Program: false inactive [ 358.835454][ T8470] vivid-003: RDS Music: false inactive [ 358.883938][ T8470] vivid-003: ================== END STATUS ================== [ 358.897655][ T8457] pim6reg: entered allmulticast mode [ 360.137130][ T30] audit: type=1400 audit(1754321388.379:486): avc: denied { mount } for pid=8476 comm="syz.3.555" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 360.647974][ T30] audit: type=1400 audit(1754321388.399:487): avc: denied { search } for pid=8476 comm="syz.3.555" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.675717][ T30] audit: type=1400 audit(1754321388.399:488): avc: denied { search } for pid=8476 comm="syz.3.555" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.708440][ T30] audit: type=1400 audit(1754321388.399:489): avc: denied { read open } for pid=8476 comm="syz.3.555" path="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.741600][ T30] audit: type=1400 audit(1754321388.419:490): avc: denied { search } for pid=8476 comm="syz.3.555" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.034165][ T8487] overlayfs: missing 'lowerdir' [ 361.233239][ T8487] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 361.721613][ T30] audit: type=1400 audit(1754321390.029:491): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 363.753238][ T30] audit: type=1400 audit(1754321391.919:492): avc: denied { setopt } for pid=8504 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.814348][ T30] audit: type=1400 audit(1754321391.929:493): avc: denied { read } for pid=8504 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 364.379748][ T30] audit: type=1400 audit(1754321392.689:494): avc: denied { read } for pid=8504 comm="syz.3.561" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.588976][ T8516] netlink: 'syz.0.562': attribute type 4 has an invalid length. [ 364.615328][ T8516] netlink: 'syz.0.562': attribute type 4 has an invalid length. [ 364.629489][ T30] audit: type=1400 audit(1754321392.749:495): avc: denied { bind } for pid=8510 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 364.879278][ T8524] kAFS: No cell specified [ 365.360822][ T8518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=8518 comm=syz.0.562 [ 365.884101][ T6390] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 366.466371][ T6390] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 366.534927][ T6390] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 366.585512][ T6390] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.594821][ T6390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.646304][ T8530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 366.711934][ T6390] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 367.979607][ T8544] pim6reg: entered allmulticast mode [ 369.443799][ T5969] usb 2-1: USB disconnect, device number 5 [ 371.584525][ T8589] serio: Serial port ptm0 [ 374.675660][ T8638] syz_tun: entered allmulticast mode [ 376.564178][ T8653] bridge4: entered promiscuous mode [ 377.907663][ T8672] bridge3: entered promiscuous mode [ 378.289128][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.297274][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.694946][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 379.371875][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 379.371913][ T30] audit: type=1400 audit(1754321407.669:497): avc: denied { write } for pid=8678 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 380.299733][ T30] audit: type=1400 audit(1754321408.359:498): avc: denied { listen } for pid=8684 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 380.341422][ T30] audit: type=1400 audit(1754321408.369:499): avc: denied { setopt } for pid=8684 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 380.983035][ T30] audit: type=1400 audit(1754321408.989:500): avc: denied { remount } for pid=8691 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 381.011971][ T8695] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 381.072791][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.134478][ T8695] ip6tnl1: entered allmulticast mode [ 381.412641][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.422294][ T8695] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 381.477717][ T8695] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 386.002200][ T30] audit: type=1400 audit(1754321414.299:501): avc: denied { connect } for pid=8727 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 387.973255][ T8743] vivid-000: kernel_thread() failed [ 391.617641][ T30] audit: type=1400 audit(1754321419.479:502): avc: denied { setopt } for pid=8781 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 392.570471][ T8799] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 392.570471][ T8799] program syz.0.622 not setting count and/or reply_len properly [ 393.007766][ T8801] netlink: 148 bytes leftover after parsing attributes in process `syz.2.621'. [ 395.410196][ T30] audit: type=1400 audit(1754321423.699:503): avc: denied { shutdown } for pid=8814 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 396.133321][ T30] audit: type=1400 audit(1754321424.399:504): avc: denied { mount } for pid=8827 comm="syz.2.628" name="/" dev="hugetlbfs" ino=16109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 399.172080][ T6390] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 399.290532][ T30] audit: type=1400 audit(1754321427.479:505): avc: denied { recv } for pid=5972 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.33 dest=45442 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 399.432196][ T8843] Falling back ldisc for ttyS3. [ 401.619721][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.638'. [ 401.628755][ T8874] team_slave_0: entered promiscuous mode [ 401.634694][ T8874] team_slave_1: entered promiscuous mode [ 401.641259][ T30] audit: type=1400 audit(1754321429.919:506): avc: denied { bind } for pid=8868 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.661069][ T30] audit: type=1400 audit(1754321429.919:507): avc: denied { setopt } for pid=8868 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 402.103564][ T8872] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 402.620169][ T8891] pim6reg: entered allmulticast mode [ 402.838304][ T8892] could not allocate digest TFM handle vmac64(aes-arm) [ 403.733934][ T5168] Bluetooth: hci2: command 0x0406 tx timeout [ 407.036177][ T8922] netlink: 124 bytes leftover after parsing attributes in process `syz.3.647'. [ 407.538585][ T8935] tipc: New replicast peer: 0.0.0.0 [ 407.547148][ T8935] tipc: Enabled bearer , priority 10 [ 407.874422][ T8939] trusted_key: encrypted_key: insufficient parameters specified [ 407.896426][ T6390] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 408.073243][ T6390] usb 4-1: Using ep0 maxpacket: 8 [ 408.190947][ T6390] usb 4-1: config 4 has an invalid interface number: 38 but max is 0 [ 408.202294][ T6390] usb 4-1: config 4 has no interface number 0 [ 408.580254][ T6390] usb 4-1: config 4 interface 38 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 408.592061][ T6390] usb 4-1: config 4 interface 38 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 408.625443][ T6390] usb 4-1: config 4 interface 38 has no altsetting 0 [ 408.672013][ T6390] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=55.58 [ 408.681213][ T6389] tipc: Node number set to 4269801488 [ 408.691813][ T6390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.722418][ T6390] usb 4-1: Product: syz [ 408.868333][ T6390] usb 4-1: Manufacturer: syz [ 408.897839][ T6390] usb 4-1: SerialNumber: syz [ 409.342891][ T6390] usb 4-1: can't set config #4, error -71 [ 409.350235][ T6390] usb 4-1: USB disconnect, device number 7 [ 409.419280][ T8946] netlink: 'syz.1.653': attribute type 4 has an invalid length. [ 409.465517][ T8946] netlink: 'syz.1.653': attribute type 4 has an invalid length. [ 409.484938][ T8946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=8946 comm=syz.1.653 [ 410.543407][ T30] audit: type=1400 audit(1754321438.849:508): avc: denied { name_bind } for pid=8955 comm="syz.4.657" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 410.954303][ T8964] syz_tun: entered allmulticast mode [ 412.662998][ T6388] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 412.940862][ T6388] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 413.233382][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'. [ 413.301810][ T6388] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 413.442705][ T6388] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 413.462078][ T6388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.879954][ T8978] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 413.891938][ T6388] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.901591][ T6388] usb 5-1: USB disconnect, device number 7 [ 415.123005][ T5952] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 415.786538][ T5952] usb 2-1: config 0 has no interfaces? [ 415.792102][ T5952] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 415.822160][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.900119][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 416.900248][ T5952] usb 2-1: config 0 descriptor?? [ 417.449135][ T9026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.907615][ T5952] usb 2-1: USB disconnect, device number 6 [ 419.376231][ T30] audit: type=1400 audit(1754321447.669:509): avc: denied { bind } for pid=9040 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 425.606325][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 427.783079][ T9138] pim6reg: entered allmulticast mode [ 428.635498][ T30] audit: type=1400 audit(1754321456.899:510): avc: denied { create } for pid=9148 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 432.574088][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 434.360580][ T30] audit: type=1400 audit(1754321462.619:511): avc: denied { ioctl } for pid=9197 comm="syz.4.710" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 435.524910][ T9202] netlink: 'syz.3.709': attribute type 10 has an invalid length. [ 435.535973][ T9202] batman_adv: batadv0: Adding interface: wlan0 [ 435.542142][ T9202] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.573346][ T30] audit: type=1400 audit(1754321464.879:512): avc: denied { write } for pid=9208 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 437.089349][ T9202] batman_adv: batadv0: Interface activated: wlan0 [ 437.833152][ T30] audit: type=1800 audit(1754321466.139:513): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.717" name="file0" dev="tmpfs" ino=708 res=0 errno=0 [ 439.931855][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.940061][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.427343][ T5168] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 447.506898][ T9304] cgroup: Need name or subsystem set [ 448.316922][ T30] audit: type=1400 audit(1754321476.629:514): avc: denied { bind } for pid=9307 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 450.647900][ T30] audit: type=1400 audit(1754321478.259:515): avc: denied { read } for pid=9307 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 452.897886][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 456.914025][ T9378] netlink: 'syz.0.749': attribute type 10 has an invalid length. [ 456.929069][ T9378] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 457.261308][ T9378] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 457.722398][ T9316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.933771][ T9400] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 459.959498][ T9400] vxcan1: entered allmulticast mode [ 460.831849][ T30] audit: type=1400 audit(1754321488.109:516): avc: denied { nlmsg_write } for pid=9397 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 460.955025][ T5168] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 462.146576][ T30] audit: type=1400 audit(1754321490.459:517): avc: denied { module_request } for pid=9406 comm="syz.2.758" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 462.235886][ T9414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.758'. [ 463.156123][ T30] audit: type=1400 audit(1754321491.459:518): avc: denied { read } for pid=9415 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 464.759547][ T9431] libceph: resolve '4..' (ret=-3): failed [ 465.004990][ T5168] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 465.017163][ T5168] Bluetooth: hci2: Injecting HCI hardware error event [ 465.031640][ T5168] Bluetooth: hci2: hardware error 0x00 [ 465.598216][ T30] audit: type=1400 audit(1754321493.889:519): avc: denied { getopt } for pid=9434 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 465.919971][ T6388] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 467.067088][ T6388] usb 5-1: config index 0 descriptor too short (expected 32786, got 18) [ 467.077045][ T6388] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 467.090511][ T5168] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 467.167379][ T6388] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 467.304993][ T6388] usb 5-1: Manufacturer: syz [ 467.536735][ T6388] usb 5-1: config 0 descriptor?? [ 467.578590][ T6388] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 467.604020][ T6388] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 467.986317][ T6388] usb 5-1: USB disconnect, device number 8 [ 468.005903][ T6388] ftdi_sio 5-1:0.0: device disconnected [ 468.883743][ T6388] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 468.939389][ T9475] input: syz1 as /devices/virtual/input/input13 [ 469.846982][ T6388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.907646][ T6388] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 469.966281][ T6388] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 470.106136][ T30] audit: type=1400 audit(1754321498.419:520): avc: denied { read } for pid=9474 comm="syz.3.775" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 470.141312][ T6388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.152236][ T6388] usb 2-1: config 0 descriptor?? [ 470.930028][ T6388] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 471.730115][ T9467] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 471.917318][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 471.936053][ T6388] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 471.937312][ T9467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 471.945156][ T6388] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 472.061861][ T9512] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 472.069084][ T30] audit: type=1400 audit(1754321500.329:521): avc: denied { mounton } for pid=9487 comm="syz.0.778" path="/file0" dev="ramfs" ino=19827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 472.082898][ T6388] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -32 [ 472.377435][ T9506] bond4: (slave gretap1): making interface the new active one [ 472.937359][ T9506] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 473.658379][ T5952] usb 2-1: USB disconnect, device number 7 [ 474.737814][ T9529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 474.799960][ T9529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 474.807456][ T9529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 475.294688][ T30] audit: type=1400 audit(1754321503.569:522): avc: denied { append } for pid=9540 comm="syz.0.789" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 476.527480][ T30] audit: type=1400 audit(1754321504.839:523): avc: denied { append } for pid=9543 comm="syz.3.790" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 476.632389][ T9556] binder: 9555:9556 ioctl 4018620d 0 returned -22 [ 476.764318][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 476.811228][ T9556] binder: 9555:9556 ioctl c0306201 200000000540 returned -22 [ 476.843597][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 476.850525][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 476.852334][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 476.864163][ T9529] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 476.975074][ T9556] sp0: Synchronizing with TNC [ 477.047067][ T12] [ 477.049390][ T12] ===================================================== [ 477.056304][ T12] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 477.063731][ T12] 6.16.0-syzkaller-11489-gd2eedaa3909b #0 Not tainted [ 477.070460][ T12] ----------------------------------------------------- [ 477.077453][ T12] kworker/u8:0/12 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 477.085073][ T12] ffffffff8f79d298 (disc_data_lock){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 477.093226][ T12] [ 477.093226][ T12] and this task is already holding: [ 477.100569][ T12] ffffffff9b104cb8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 477.109233][ T12] which would create a new lock dependency: [ 477.115096][ T12] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 477.122745][ T12] [ 477.122745][ T12] but this new dependency connects a HARDIRQ-irq-safe lock: [ 477.132172][ T12] (&port_lock_key){-.-.}-{3:3} [ 477.132196][ T12] [ 477.132196][ T12] ... which became HARDIRQ-irq-safe at: [ 477.144702][ T12] lock_acquire+0x179/0x350 [ 477.149288][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 477.154563][ T12] serial8250_handle_irq+0x95/0xcb0 [ 477.159822][ T12] serial8250_default_handle_irq+0x9a/0x250 [ 477.165791][ T12] serial8250_interrupt+0xf5/0x1b0 [ 477.170970][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 477.176677][ T12] handle_irq_event+0xab/0x1e0 [ 477.181519][ T12] handle_edge_irq+0x3ca/0x9e0 [ 477.186350][ T12] __common_interrupt+0xdf/0x250 [ 477.191364][ T12] common_interrupt+0xba/0xe0 [ 477.196105][ T12] asm_common_interrupt+0x26/0x40 [ 477.201207][ T12] pv_native_safe_halt+0xf/0x20 [ 477.206131][ T12] default_idle+0x13/0x20 [ 477.210532][ T12] default_idle_call+0x6d/0xb0 [ 477.215361][ T12] do_idle+0x391/0x510 [ 477.219493][ T12] cpu_startup_entry+0x4f/0x60 [ 477.224322][ T12] start_secondary+0x21d/0x2b0 [ 477.229149][ T12] common_startup_64+0x13e/0x148 [ 477.234589][ T12] [ 477.234589][ T12] to a HARDIRQ-irq-unsafe lock: [ 477.241584][ T12] (disc_data_lock){.+.+}-{3:3} [ 477.241602][ T12] [ 477.241602][ T12] ... which became HARDIRQ-irq-unsafe at: [ 477.254545][ T12] ... [ 477.254552][ T12] lock_acquire+0x179/0x350 [ 477.261669][ T12] _raw_read_lock+0x5f/0x70 [ 477.266239][ T12] sp_get+0x18/0xf0 [ 477.270119][ T12] sixpack_receive_buf+0x59/0x1c90 [ 477.275291][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 477.280639][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 477.286511][ T12] flush_to_ldisc+0x268/0x730 [ 477.291267][ T12] process_one_work+0x9cf/0x1b70 [ 477.296275][ T12] worker_thread+0x6c8/0xf10 [ 477.300938][ T12] kthread+0x3c2/0x780 [ 477.305119][ T12] ret_from_fork+0x5d7/0x6f0 [ 477.309793][ T12] ret_from_fork_asm+0x1a/0x30 [ 477.314621][ T12] [ 477.314621][ T12] other info that might help us debug this: [ 477.314621][ T12] [ 477.324834][ T12] Possible interrupt unsafe locking scenario: [ 477.324834][ T12] [ 477.333126][ T12] CPU0 CPU1 [ 477.338482][ T12] ---- ---- [ 477.343819][ T12] lock(disc_data_lock); [ 477.348139][ T12] local_irq_disable(); [ 477.354870][ T12] lock(&port_lock_key); [ 477.361693][ T12] lock(disc_data_lock); [ 477.368527][ T12] [ 477.371967][ T12] lock(&port_lock_key); [ 477.376457][ T12] [ 477.376457][ T12] *** DEADLOCK *** [ 477.376457][ T12] [ 477.384592][ T12] 6 locks held by kworker/u8:0/12: [ 477.389672][ T12] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 477.400783][ T12] #1: ffffc90000117d10 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 477.411801][ T12] #2: ffff888142748ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x730 [ 477.420831][ T12] #3: ffff8880293930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 477.430136][ T12] #4: ffffffff9b104cb8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 477.439244][ T12] #5: ffff8880293930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 477.448534][ T12] [ 477.448534][ T12] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 477.458919][ T12] -> (&port_lock_key){-.-.}-{3:3} { [ 477.464113][ T12] IN-HARDIRQ-W at: [ 477.468062][ T12] lock_acquire+0x179/0x350 [ 477.474194][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 477.481021][ T12] serial8250_handle_irq+0x95/0xcb0 [ 477.487840][ T12] serial8250_default_handle_irq+0x9a/0x250 [ 477.495353][ T12] serial8250_interrupt+0xf5/0x1b0 [ 477.502087][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 477.509339][ T12] handle_irq_event+0xab/0x1e0 [ 477.515723][ T12] handle_edge_irq+0x3ca/0x9e0 [ 477.522106][ T12] __common_interrupt+0xdf/0x250 [ 477.528750][ T12] common_interrupt+0xba/0xe0 [ 477.535046][ T12] asm_common_interrupt+0x26/0x40 [ 477.541697][ T12] pv_native_safe_halt+0xf/0x20 [ 477.548267][ T12] default_idle+0x13/0x20 [ 477.554223][ T12] default_idle_call+0x6d/0xb0 [ 477.560617][ T12] do_idle+0x391/0x510 [ 477.566319][ T12] cpu_startup_entry+0x4f/0x60 [ 477.572714][ T12] start_secondary+0x21d/0x2b0 [ 477.579115][ T12] common_startup_64+0x13e/0x148 [ 477.585677][ T12] IN-SOFTIRQ-W at: [ 477.589627][ T12] lock_acquire+0x179/0x350 [ 477.595762][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 477.602584][ T12] serial8250_handle_irq+0x95/0xcb0 [ 477.609410][ T12] serial8250_default_handle_irq+0x9a/0x250 [ 477.616925][ T12] serial8250_interrupt+0xf5/0x1b0 [ 477.623726][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 477.630993][ T12] handle_irq_event+0xab/0x1e0 [ 477.637383][ T12] handle_edge_irq+0x3ca/0x9e0 [ 477.643768][ T12] __common_interrupt+0xdf/0x250 [ 477.650331][ T12] common_interrupt+0x61/0xe0 [ 477.656628][ T12] asm_common_interrupt+0x26/0x40 [ 477.663281][ T12] handle_softirqs+0x1dd/0x8e0 [ 477.669679][ T12] __irq_exit_rcu+0x109/0x170 [ 477.675978][ T12] irq_exit_rcu+0x9/0x30 [ 477.681857][ T12] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 477.689123][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 477.696723][ T12] console_flush_all+0x9a2/0xc60 [ 477.703290][ T12] console_unlock+0xd8/0x210 [ 477.709499][ T12] vprintk_emit+0x418/0x6d0 [ 477.715622][ T12] _printk+0xc7/0x100 [ 477.721223][ T12] kauditd_hold_skb+0x205/0x250 [ 477.727711][ T12] kauditd_send_queue+0x236/0x290 [ 477.734388][ T12] kauditd_thread+0x623/0xa70 [ 477.740703][ T12] kthread+0x3c2/0x780 [ 477.746397][ T12] ret_from_fork+0x5d7/0x6f0 [ 477.752966][ T12] ret_from_fork_asm+0x1a/0x30 [ 477.759376][ T12] INITIAL USE at: [ 477.763253][ T12] lock_acquire+0x179/0x350 [ 477.769334][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 477.776088][ T12] serial8250_do_set_termios+0x2cc/0x1730 [ 477.783362][ T12] serial8250_set_termios+0x6e/0x80 [ 477.790111][ T12] uart_set_options+0x31a/0x5f0 [ 477.796506][ T12] serial8250_console_setup+0x189/0x450 [ 477.803685][ T12] univ8250_console_setup+0x1eb/0x2e0 [ 477.810609][ T12] try_enable_preferred_console+0x2fd/0x530 [ 477.818036][ T12] register_console+0x3ab/0x11b0 [ 477.824508][ T12] univ8250_console_init+0x5f/0x90 [ 477.831171][ T12] console_init+0x14f/0x680 [ 477.837214][ T12] start_kernel+0x29f/0x4d0 [ 477.843253][ T12] x86_64_start_reservations+0x18/0x30 [ 477.850269][ T12] x86_64_start_kernel+0x130/0x190 [ 477.856930][ T12] common_startup_64+0x13e/0x148 [ 477.863402][ T12] } [ 477.865869][ T12] ... key at: [] port_lock_key+0x0/0x40 [ 477.873474][ T12] [ 477.873474][ T12] the dependencies between the lock to be acquired [ 477.873480][ T12] and HARDIRQ-irq-unsafe lock: [ 477.886928][ T12] -> (disc_data_lock){.+.+}-{3:3} { [ 477.892107][ T12] HARDIRQ-ON-R at: [ 477.896063][ T12] lock_acquire+0x179/0x350 [ 477.902192][ T12] _raw_read_lock+0x5f/0x70 [ 477.908346][ T12] sp_get+0x18/0xf0 [ 477.913789][ T12] sixpack_receive_buf+0x59/0x1c90 [ 477.920537][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 477.927450][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 477.934799][ T12] flush_to_ldisc+0x268/0x730 [ 477.941115][ T12] process_one_work+0x9cf/0x1b70 [ 477.947685][ T12] worker_thread+0x6c8/0xf10 [ 477.953903][ T12] kthread+0x3c2/0x780 [ 477.959599][ T12] ret_from_fork+0x5d7/0x6f0 [ 477.965826][ T12] ret_from_fork_asm+0x1a/0x30 [ 477.972236][ T12] SOFTIRQ-ON-R at: [ 477.976203][ T12] lock_acquire+0x179/0x350 [ 477.982348][ T12] _raw_read_lock+0x5f/0x70 [ 477.988481][ T12] sp_get+0x18/0xf0 [ 477.993914][ T12] sixpack_receive_buf+0x59/0x1c90 [ 478.000674][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 478.007607][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 478.014982][ T12] flush_to_ldisc+0x268/0x730 [ 478.021301][ T12] process_one_work+0x9cf/0x1b70 [ 478.027878][ T12] worker_thread+0x6c8/0xf10 [ 478.034108][ T12] kthread+0x3c2/0x780 [ 478.039804][ T12] ret_from_fork+0x5d7/0x6f0 [ 478.046015][ T12] ret_from_fork_asm+0x1a/0x30 [ 478.052402][ T12] INITIAL USE at: [ 478.056268][ T12] lock_acquire+0x179/0x350 [ 478.062325][ T12] _raw_write_lock_irq+0x36/0x50 [ 478.068811][ T12] sixpack_close+0x1e/0x2f0 [ 478.074867][ T12] tty_ldisc_close+0x114/0x1a0 [ 478.081253][ T12] tty_ldisc_kill+0x8e/0x150 [ 478.087395][ T12] tty_ldisc_release+0x210/0x2e0 [ 478.093890][ T12] tty_release_struct+0x23/0xe0 [ 478.100281][ T12] tty_release+0xe2d/0x1430 [ 478.106504][ T12] __fput+0x402/0xb70 [ 478.112029][ T12] task_work_run+0x14d/0x240 [ 478.118199][ T12] exit_to_user_mode_loop+0xeb/0x110 [ 478.125049][ T12] do_syscall_64+0x3f6/0x4c0 [ 478.131211][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.138643][ T12] INITIAL READ USE at: [ 478.142947][ T12] lock_acquire+0x179/0x350 [ 478.149456][ T12] _raw_read_lock+0x5f/0x70 [ 478.155947][ T12] sp_get+0x18/0xf0 [ 478.161725][ T12] sixpack_receive_buf+0x59/0x1c90 [ 478.168805][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 478.176072][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 478.183775][ T12] flush_to_ldisc+0x268/0x730 [ 478.190436][ T12] process_one_work+0x9cf/0x1b70 [ 478.197357][ T12] worker_thread+0x6c8/0xf10 [ 478.204004][ T12] kthread+0x3c2/0x780 [ 478.210043][ T12] ret_from_fork+0x5d7/0x6f0 [ 478.216607][ T12] ret_from_fork_asm+0x1a/0x30 [ 478.223341][ T12] } [ 478.225816][ T12] ... key at: [] disc_data_lock+0x18/0xfe0 [ 478.233682][ T12] ... acquired at: [ 478.237461][ T12] lock_acquire+0x179/0x350 [ 478.242119][ T12] _raw_read_lock+0x5f/0x70 [ 478.246766][ T12] sp_get+0x18/0xf0 [ 478.250724][ T12] sixpack_write_wakeup+0x20/0x390 [ 478.255979][ T12] tty_wakeup+0xe8/0x120 [ 478.260367][ T12] tty_port_default_wakeup+0x2a/0x40 [ 478.265803][ T12] serial8250_tx_chars+0x68e/0x860 [ 478.271068][ T12] __start_tx+0x3df/0x490 [ 478.275539][ T12] serial8250_start_tx+0x368/0x530 [ 478.280805][ T12] __uart_start+0x295/0x500 [ 478.285462][ T12] uart_write+0x218/0xb30 [ 478.289937][ T12] sixpack_receive_buf+0x3d3/0x1c90 [ 478.295286][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 478.300735][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 478.306616][ T12] flush_to_ldisc+0x268/0x730 [ 478.311548][ T12] process_one_work+0x9cf/0x1b70 [ 478.316646][ T12] worker_thread+0x6c8/0xf10 [ 478.321385][ T12] kthread+0x3c2/0x780 [ 478.325599][ T12] ret_from_fork+0x5d7/0x6f0 [ 478.330347][ T12] ret_from_fork_asm+0x1a/0x30 [ 478.335294][ T12] [ 478.337588][ T12] [ 478.337588][ T12] stack backtrace: [ 478.343444][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 478.343460][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.343472][ T12] Workqueue: events_unbound flush_to_ldisc [ 478.343499][ T12] Call Trace: [ 478.343505][ T12] [ 478.343510][ T12] dump_stack_lvl+0x116/0x1f0 [ 478.343528][ T12] check_irq_usage+0x7dc/0x920 [ 478.343544][ T12] ? __kasan_check_byte+0x13/0x50 [ 478.343559][ T12] ? check_path.constprop.0+0x24/0x50 [ 478.343576][ T12] ? __lock_acquire+0x12bc/0x1ce0 [ 478.343591][ T12] __lock_acquire+0x12bc/0x1ce0 [ 478.343609][ T12] ? lock_acquire+0x179/0x350 [ 478.343625][ T12] lock_acquire+0x179/0x350 [ 478.343641][ T12] ? sp_get+0x18/0xf0 [ 478.343654][ T12] ? ldsem_down_read_trylock+0x11a/0x180 [ 478.343665][ T12] ? ldsem_down_read_trylock+0x120/0x180 [ 478.343677][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 478.343690][ T12] _raw_read_lock+0x5f/0x70 [ 478.343704][ T12] ? sp_get+0x18/0xf0 [ 478.343715][ T12] sp_get+0x18/0xf0 [ 478.343727][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 478.343739][ T12] sixpack_write_wakeup+0x20/0x390 [ 478.343752][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 478.343765][ T12] tty_wakeup+0xe8/0x120 [ 478.343779][ T12] tty_port_default_wakeup+0x2a/0x40 [ 478.343789][ T12] serial8250_tx_chars+0x68e/0x860 [ 478.343802][ T12] __start_tx+0x3df/0x490 [ 478.343811][ T12] serial8250_start_tx+0x368/0x530 [ 478.343823][ T12] __uart_start+0x295/0x500 [ 478.343837][ T12] uart_write+0x218/0xb30 [ 478.343852][ T12] sixpack_receive_buf+0x3d3/0x1c90 [ 478.343866][ T12] ? ldsem_down_read_trylock+0x120/0x180 [ 478.343877][ T12] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 478.343889][ T12] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 478.343902][ T12] tty_ldisc_receive_buf+0x15a/0x1a0 [ 478.343919][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 478.343936][ T12] flush_to_ldisc+0x268/0x730 [ 478.343953][ T12] ? rcu_is_watching+0x12/0xc0 [ 478.343967][ T12] process_one_work+0x9cf/0x1b70 [ 478.343981][ T12] ? __pfx_process_one_work+0x10/0x10 [ 478.343994][ T12] ? assign_work+0x1a0/0x250 [ 478.344005][ T12] worker_thread+0x6c8/0xf10 [ 478.344018][ T12] ? __pfx_worker_thread+0x10/0x10 [ 478.344029][ T12] kthread+0x3c2/0x780 [ 478.344040][ T12] ? __pfx_kthread+0x10/0x10 [ 478.344050][ T12] ? rcu_is_watching+0x12/0xc0 [ 478.344063][ T12] ? __pfx_kthread+0x10/0x10 [ 478.344073][ T12] ret_from_fork+0x5d7/0x6f0 [ 478.344083][ T12] ? __pfx_kthread+0x10/0x10 [ 478.344092][ T12] ret_from_fork_asm+0x1a/0x30 [ 478.344113][ T12] [ 478.923676][ T5168] Bluetooth: hci4: command 0x0406 tx timeout