last executing test programs: 21m6.00846283s ago: executing program 32 (id=78): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x40f5, 0x0, 0x0}, {0x4, 0x201, 0x0, &(0x7f0000000080)}], 0x3}) 20m37.522139787s ago: executing program 33 (id=564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000030000400000200001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m24.258610874s ago: executing program 34 (id=710): r0 = syz_open_dev$radio(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) preadv(r0, &(0x7f00000033c0)=[{&(0x7f00000003c0)=""/207, 0xcf}], 0x1, 0x6, 0xfffffffe) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) fallocate(r0, 0x35, 0x5bbdc086, 0x2) 18m1.296245588s ago: executing program 35 (id=2579): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) timer_create(0x1, 0x0, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(r2, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x77359400}}, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832f2440f01f9c4e1fd5aa13c9c43713e77760f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x1, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 17m27.333163317s ago: executing program 0 (id=2953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x82823b2b84352706}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 17m25.459761911s ago: executing program 0 (id=2974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000c40)=@x86={0xaf, 0xd, 0x1c, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0x8, 0xfd, 0x0, 0x1, 0x6, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) 17m25.069459429s ago: executing program 0 (id=2979): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) sendto$inet6(r3, &(0x7f0000000880)="cd", 0x1, 0x48880, 0x0, 0x0) 17m25.023326518s ago: executing program 0 (id=2980): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) 17m24.961791783s ago: executing program 0 (id=2982): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x100d76}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 17m24.575585903s ago: executing program 0 (id=2986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 17m24.363930267s ago: executing program 36 (id=2986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 17m14.039592466s ago: executing program 7 (id=3105): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 17m13.743573442s ago: executing program 7 (id=3108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 17m13.61959436s ago: executing program 7 (id=3111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 17m12.857088236s ago: executing program 7 (id=3119): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 17m12.793063332s ago: executing program 7 (id=3121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 17m12.594358352s ago: executing program 7 (id=3124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 17m12.452970158s ago: executing program 37 (id=3124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 16m4.405042857s ago: executing program 8 (id=4007): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 16m4.262825335s ago: executing program 8 (id=4009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m4.03199028s ago: executing program 8 (id=4014): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 16m3.125765047s ago: executing program 8 (id=4023): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1004, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$binder(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 16m3.033653248s ago: executing program 8 (id=4025): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x2c402, 0x1b4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x45102200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000380), 0x0, 0x1}}, 0x40) 16m2.231601416s ago: executing program 8 (id=4040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m2.113722749s ago: executing program 38 (id=4040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m5.239758588s ago: executing program 9 (id=4702): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 15m4.521350393s ago: executing program 9 (id=4706): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x48a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = io_uring_setup(0x8a8, &(0x7f00000005c0)={0x0, 0x3961, 0x100, 0x2, 0x18}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000006a00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 15m4.290980986s ago: executing program 9 (id=4707): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 15m2.143018014s ago: executing program 9 (id=4724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1004, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 15m1.994142578s ago: executing program 9 (id=4726): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) 15m1.655662895s ago: executing program 9 (id=4729): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$overlay(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x20a242a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) 15m1.485936284s ago: executing program 39 (id=4729): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$overlay(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x20a242a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) 13m12.516833422s ago: executing program 4 (id=5675): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 13m11.402682132s ago: executing program 4 (id=5683): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) 13m11.123763236s ago: executing program 4 (id=5685): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x20000804) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 13m10.335126105s ago: executing program 4 (id=5698): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 13m9.936946552s ago: executing program 4 (id=5690): socket$inet6(0xa, 0x4, 0xfffffff9) socket(0x9, 0x4, 0x8a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000f80)) 13m9.361929055s ago: executing program 4 (id=5693): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x15) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 13m8.922744814s ago: executing program 40 (id=5693): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x15) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 15.292003796s ago: executing program 3 (id=8625): syz_open_dev$sndctrl(&(0x7f0000000000), 0x4000000000006, 0x300) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) io_uring_setup(0x2471, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(r4, 0x0, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) 13.047447865s ago: executing program 6 (id=8638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x1ff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x983aec03fbdf90b8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) 12.025328768s ago: executing program 3 (id=8641): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.343102707s ago: executing program 6 (id=8643): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 9.684343989s ago: executing program 3 (id=8646): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)={[{}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.293040215s ago: executing program 2 (id=8647): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a77", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250a0000000c009900040000001f000000090007004274e10ad400000038005080110001004573423a66b52879b9aaa8aea900000005000900000000001000040063ab779f3ed393349d9877cb0800030005ac0f0048005080090001002c9c62f04800000009000100c8f0e8899f0000000500090001000000090001008d6cc839b1000000050009000000000004000500040006000800088004000100"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) 7.393866802s ago: executing program 2 (id=8650): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 7.292683671s ago: executing program 6 (id=8653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r3 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x7af6, 0x1, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r3], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.268071921s ago: executing program 3 (id=8654): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 6.973059447s ago: executing program 3 (id=8655): socket$inet(0x2, 0xa, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x1, 0x1012) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0) 6.94415536s ago: executing program 6 (id=8656): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0xd3, 0x12, 0x36, 0x10, 0x9fb, 0x602a, 0xfd36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xaa, 0x72, 0x59}}]}}]}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 6.302888601s ago: executing program 2 (id=8658): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x82, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000f00), 0x0, 0xc0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 6.048502248s ago: executing program 5 (id=8660): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) 5.926555937s ago: executing program 6 (id=8661): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r4, &(0x7f0000002f40)=""/4084, 0x1007) 5.217276869s ago: executing program 3 (id=8665): getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x40}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2e, 0x9, 0x7fff, {0xe, @esp_ip4_spec={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2fe, 0x8}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10, 0x8f75, [0x6, 0x3]}, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x30}, @empty, 0x2, 0x34}, {0x0, @empty, 0x8, 0xd, [0x7ff, 0x6f8]}, 0xffffffff7fffffff, 0x5}}}) syz_open_dev$dri(0x0, 0xffffffff, 0x200) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket(0x22, 0x6, 0x0) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="d90d23001e9a23bd0b30bc19c88b251ddd1f101e83ee9e34c8f520d2a8c471ff4b4d126743b0dcd5be147e9476bbd7d717a6dd3c240a65f49291f21f7766826c7e2eb80eb730ad1a36b4c7495c4eff24eb6fd919212cbc0921476e0a47253a0000326ea85594000000000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd94}, 0x1, 0x0, 0x0, 0x40008c0}, 0xc0014) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') 4.972759058s ago: executing program 5 (id=8666): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x40040) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 4.915463259s ago: executing program 1 (id=8667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 4.314835473s ago: executing program 6 (id=8668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) recvmsg(0xffffffffffffffff, 0x0, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f00000002c0)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 3.954612101s ago: executing program 1 (id=8669): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x6, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.84296398s ago: executing program 2 (id=8670): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x6a, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.031689165s ago: executing program 5 (id=8671): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.023029314s ago: executing program 1 (id=8672): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'ovf\x00', 0x1, 0x10, 0x4}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x7c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x2, 0x1, 0x1b}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/50, 0x32, 0x1, 0xd}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}, 0x1000}, @increfs={0x40046304, 0x2}, @enter_looper, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, 0x3}], 0x65, 0x0, &(0x7f00000002c0)="a67e2bf6f381695e35fe0f1815f4fefbdb7aa5b6eaebdfb2e3bfddcb4a1caf29a5093c93bc330d27689023ff19992c572ac04686346fd948bbd72270f3b996f52b862551aa5dcd56365870b904f948c4bc19356e70fcc28550b171fafd1e4f1ec13e477161"}) sched_setscheduler(r2, 0x5, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) 2.995801717s ago: executing program 5 (id=8673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xb, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x3ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a2ef124708900"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000006c0)=[{0x0}], 0x1, 0x42d8, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000002c0)=[@enter_looper, @request_death={0x400c630e, 0x1}, @free_buffer], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.863292869s ago: executing program 1 (id=8674): socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) prlimit64(0x0, 0xe, &(0x7f0000002440)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) add_key$keyring(0x0, &(0x7f00000023c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000002b000701fefffffffbdbdf25037c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.826785387s ago: executing program 2 (id=8675): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1.896427676s ago: executing program 5 (id=8676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000340)) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r6, 0x0) 1.561138504s ago: executing program 2 (id=8677): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0, 0x11, 0x80000, 0x0, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) add_key$fscrypt_provisioning(&(0x7f0000002240), 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$TCFLSH(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x32) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x2e) 1.245529544s ago: executing program 1 (id=8678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaa"], 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) 419.730669ms ago: executing program 5 (id=8679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) shmctl$SHM_STAT(0x0, 0xd, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x891d, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) 0s ago: executing program 1 (id=8680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): icast mode [ 921.943927][ T30] audit: type=1400 audit(1759625172.762:1366): avc: denied { setopt } for pid=26434 comm="syz.2.7334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 921.964737][T26420] veth1_to_bond: left allmulticast mode [ 921.970954][T26420] bond_slave_1: left allmulticast mode [ 921.983939][T26420] veth0_to_team: left allmulticast mode [ 921.993574][T26420] team_slave_0: left allmulticast mode [ 922.345935][T26420] veth1_to_team: left allmulticast mode [ 922.352133][ T30] audit: type=1400 audit(1759625172.762:1367): avc: denied { connect } for pid=26434 comm="syz.2.7334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 922.376554][T26420] team_slave_1: left allmulticast mode [ 922.386750][T26420] veth0_to_batadv: left allmulticast mode [ 922.401543][T26420] batadv_slave_0: left allmulticast mode [ 922.407564][ T30] audit: type=1400 audit(1759625172.762:1368): avc: denied { write } for pid=26434 comm="syz.2.7334" lport=28443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 922.424637][T26420] xfrm0: left allmulticast mode [ 922.434095][T26420] veth0_to_hsr: left allmulticast mode [ 922.441699][ T30] audit: type=1400 audit(1759625172.762:1369): avc: denied { read } for pid=26434 comm="syz.2.7334" lport=28443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 922.450704][T26420] hsr_slave_0: left allmulticast mode [ 922.524331][T26420] veth1_to_hsr: left allmulticast mode [ 922.540806][T26420] hsr_slave_1: left allmulticast mode [ 922.563902][T26420] veth1_virt_wifi: left allmulticast mode [ 922.569756][T26420] veth0_virt_wifi: left allmulticast mode [ 922.575797][T26420] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 922.582955][T26420] veth1_vlan: left allmulticast mode [ 922.658382][T26420] vlan0: left allmulticast mode [ 922.665774][T26420] vlan1: left allmulticast mode [ 922.670943][T26420] macvlan0: left allmulticast mode [ 922.681268][T26420] macvlan1: left allmulticast mode [ 922.686465][T26420] ipvlan0: left allmulticast mode [ 922.692033][T26420] ipvlan1: left allmulticast mode [ 922.697038][T26420] veth0_vlan: left allmulticast mode [ 922.724948][T26420] veth1_macvtap: left allmulticast mode [ 922.731481][T26420] veth0_macvtap: left allmulticast mode [ 922.737853][T26420] macvtap0: left allmulticast mode [ 922.743547][T26420] macsec0: left allmulticast mode [ 922.749155][T26420] geneve0: left allmulticast mode [ 922.772411][T26420] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 922.799196][T26420] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 922.817544][T26420] bond0: left allmulticast mode [ 922.828259][T26420] ip6erspan0: left allmulticast mode [ 922.842975][T26420] ipip0: left allmulticast mode [ 922.860014][T26420] gtp0: left allmulticast mode [ 922.875487][ T30] audit: type=1400 audit(1759625173.641:1370): avc: denied { nlmsg_read } for pid=26439 comm="syz.2.7335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 922.875709][T26420] vxlan0: left allmulticast mode [ 922.944422][T26420] gtp1: left allmulticast mode [ 922.953784][T26420] sit1: left allmulticast mode [ 922.975376][T26420] ip6tnl1: left allmulticast mode [ 922.993650][T26420] vlan2: left allmulticast mode [ 922.998647][T26420] gretap0: left allmulticast mode [ 923.004039][T26420] ip6gre1: left allmulticast mode [ 923.009190][T26420] bridge1: left allmulticast mode [ 923.014389][T26420] @: left allmulticast mode [ 923.019106][T26420] bridge2: left allmulticast mode [ 923.024383][T26420] syztnl1: left allmulticast mode [ 923.029507][T26420] bridge3: left allmulticast mode [ 923.035412][T26420] bond1: left promiscuous mode [ 923.040181][T26420] wireguard0: left promiscuous mode [ 924.453446][ T30] audit: type=1400 audit(1759625175.109:1371): avc: denied { name_bind } for pid=26459 comm="syz.5.7341" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 924.483808][T26460] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 925.474239][ T30] audit: type=1400 audit(1759625176.073:1372): avc: denied { create } for pid=26475 comm="syz.2.7346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 925.510089][ T30] audit: type=1400 audit(1759625176.092:1373): avc: denied { connect } for pid=26475 comm="syz.2.7346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 925.551963][ T30] audit: type=1400 audit(1759625176.138:1374): avc: denied { bind } for pid=26475 comm="syz.2.7346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 925.708103][ T30] audit: type=1400 audit(1759625176.138:1375): avc: denied { listen } for pid=26475 comm="syz.2.7346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 925.728799][ T30] audit: type=1400 audit(1759625176.138:1376): avc: denied { accept } for pid=26475 comm="syz.2.7346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 925.748603][ T30] audit: type=1400 audit(1759625176.157:1377): avc: denied { bind } for pid=26473 comm="syz.6.7344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 925.768227][ T30] audit: type=1400 audit(1759625176.251:1378): avc: denied { read } for pid=26475 comm="syz.2.7346" path="socket:[113233]" dev="sockfs" ino=113233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 926.215840][ T30] audit: type=1400 audit(1759625176.251:1379): avc: denied { write } for pid=26475 comm="syz.2.7346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 929.627846][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7357'. [ 930.059150][ T30] audit: type=1400 audit(1759625180.357:1380): avc: denied { connect } for pid=26526 comm="syz.5.7362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 930.387158][ T30] audit: type=1400 audit(1759625180.647:1381): avc: denied { read } for pid=26537 comm="syz.1.7365" path="socket:[113304]" dev="sockfs" ino=113304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 932.008921][T26551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.062482][ T30] audit: type=1400 audit(1759625182.209:1382): avc: denied { map } for pid=26555 comm="syz.2.7371" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 932.214865][ T30] audit: type=1400 audit(1759625182.209:1383): avc: denied { execute } for pid=26555 comm="syz.2.7371" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 932.678199][ T30] audit: type=1400 audit(1759625182.808:1384): avc: denied { bind } for pid=26566 comm="syz.1.7373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 932.805198][ T30] audit: type=1400 audit(1759625182.827:1385): avc: denied { node_bind } for pid=26566 comm="syz.1.7373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 933.362484][ T30] audit: type=1400 audit(1759625183.304:1386): avc: denied { read } for pid=5907 comm="kworker/0:4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=113332 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 936.017010][ T30] audit: type=1400 audit(1759625185.726:1387): avc: denied { create } for pid=26606 comm="syz.2.7386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 936.183403][ T30] audit: type=1400 audit(1759625185.745:1388): avc: denied { setopt } for pid=26606 comm="syz.2.7386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 936.558420][ T30] audit: type=1400 audit(1759625186.437:1389): avc: denied { getopt } for pid=26614 comm="syz.5.7388" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 937.288094][ T30] audit: type=1400 audit(1759625186.671:1390): avc: denied { connect } for pid=26618 comm="syz.5.7390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 937.308344][ T30] audit: type=1400 audit(1759625186.671:1391): avc: denied { write } for pid=26618 comm="syz.5.7390" path="socket:[114565]" dev="sockfs" ino=114565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 937.779046][ T30] audit: type=1400 audit(1759625187.578:1392): avc: denied { connect } for pid=26626 comm="syz.2.7393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 938.049005][ T30] audit: type=1400 audit(1759625187.831:1393): avc: denied { shutdown } for pid=26626 comm="syz.2.7393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 938.467475][T26641] Invalid ELF header magic: != ELF [ 938.475083][ T30] audit: type=1400 audit(1759625188.224:1394): avc: denied { module_load } for pid=26640 comm="syz.1.7395" path="/844/bus" dev="tmpfs" ino=4635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 939.547100][ T5907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5907 comm=kworker/0:4 [ 939.973593][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 940.041723][T26650] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 942.494665][T26693] vlan1: entered promiscuous mode [ 942.499796][T26693] vlan1: entered allmulticast mode [ 942.508226][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7413'. [ 945.487043][ T5907] libceph: connect (1)[c::]:6789 error -22 [ 945.493039][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 945.516165][T26726] gfs2: gfs2 mount does not exist [ 946.031561][ T5907] libceph: connect (1)[c::]:6789 error -22 [ 946.037509][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 946.347873][T26724] ceph: No mds server is up or the cluster is laggy [ 946.371473][T19775] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 946.380289][T26736] lo: left allmulticast mode [ 946.403486][T26736] tunl0: left allmulticast mode [ 946.442891][T26736] gre0: left allmulticast mode [ 946.468660][T26736] erspan0: left allmulticast mode [ 946.488696][T26736] ip_vti0: left allmulticast mode [ 946.499390][T26736] ip6_vti0: left allmulticast mode [ 946.510041][T26736] sit0: left allmulticast mode [ 946.511846][T26739] netlink: 'syz.3.7424': attribute type 1 has an invalid length. [ 946.532770][T26736] ip6tnl0: left allmulticast mode [ 946.538014][T26736] ip6gre0: left allmulticast mode [ 946.546279][T26736] ip6gretap0: left allmulticast mode [ 946.551906][T26736] vcan0: left allmulticast mode [ 946.559767][T26736] bond0: left allmulticast mode [ 946.567673][T26736] team0: left allmulticast mode [ 946.572810][T19775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.584164][T19775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.594275][T19775] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 946.608287][T26736] dummy0: left allmulticast mode [ 946.613360][T26736] nlmon0: left allmulticast mode [ 946.618668][T19775] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 946.628226][T26736] caif0: left allmulticast mode [ 946.634156][T26736] batadv0: left allmulticast mode [ 946.639631][T19775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.649032][T26736] veth0: left allmulticast mode [ 946.655017][T19775] usb 3-1: config 0 descriptor?? [ 946.660183][T26736] veth1: left allmulticast mode [ 946.665215][T26736] wg0: left allmulticast mode [ 946.670023][T26736] wg1: left allmulticast mode [ 946.685828][T26736] wg2: left allmulticast mode [ 946.690704][T26736] veth0_to_bridge: left allmulticast mode [ 946.697599][T26736] bridge_slave_0: left allmulticast mode [ 946.703376][T26747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7424'. [ 946.713011][T26736] veth1_to_bridge: left allmulticast mode [ 946.748789][T26736] bridge_slave_1: left allmulticast mode [ 946.754626][T26736] veth0_to_bond: left allmulticast mode [ 946.761743][T26736] bond_slave_0: left allmulticast mode [ 946.787078][T26736] veth1_to_bond: left allmulticast mode [ 946.799212][T26736] bond_slave_1: left allmulticast mode [ 946.810560][T26736] veth0_to_team: left allmulticast mode [ 946.816365][T26736] team_slave_0: left allmulticast mode [ 946.824286][T26736] veth1_to_team: left allmulticast mode [ 946.830074][T26736] team_slave_1: left allmulticast mode [ 946.836379][T26736] veth0_to_batadv: left allmulticast mode [ 946.842629][T26736] batadv_slave_0: left allmulticast mode [ 946.848516][T26736] xfrm0: left allmulticast mode [ 946.853979][T26736] veth0_to_hsr: left allmulticast mode [ 946.859823][T26736] hsr0: left allmulticast mode [ 946.866609][T26736] hsr_slave_0: left allmulticast mode [ 946.880990][T26736] veth1_virt_wifi: left allmulticast mode [ 946.912756][T26736] veth0_virt_wifi: left allmulticast mode [ 946.919323][T26736] net veth1_virt_wifi »»»»»»: left allmulticast mode [ 946.926126][T26736] veth1_macvtap: left allmulticast mode [ 947.098657][T26736] veth0_macvtap: left allmulticast mode [ 947.104505][T26736] macvtap0: left allmulticast mode [ 947.131857][T19775] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 947.312300][T26736] macsec0: left allmulticast mode [ 947.317545][T26736] geneve0: left allmulticast mode [ 947.322842][T26736] geneve1: left allmulticast mode [ 947.328061][T26736] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 947.335274][T26736] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 947.377319][T26736] geneve2: left allmulticast mode [ 947.390989][T26736] gre1: left allmulticast mode [ 947.404064][T26736] macvlan2: left allmulticast mode [ 947.422356][T26736] macvlan3: left allmulticast mode [ 947.433898][T26736] gre2: left allmulticast mode [ 947.530442][T26736] bond1: left allmulticast mode [ 947.535520][T26736] gretap1: left allmulticast mode [ 947.541542][T26736] bridge1: left allmulticast mode [ 947.546742][T26736] bond2: left allmulticast mode [ 947.551860][T26736] ip6tnl1: left allmulticast mode [ 947.563400][T26736] @: left allmulticast mode [ 947.568510][T26736] sit1: left allmulticast mode [ 947.584435][T26736] veth2: left allmulticast mode [ 947.597830][T26736] veth3: left allmulticast mode [ 947.602970][T26736] sit2: left allmulticast mode [ 947.608464][T26736] veth4: left allmulticast mode [ 947.785135][T26736] veth5: left allmulticast mode [ 948.093404][T26736] ip6gre1: left allmulticast mode [ 948.098756][T26736] bridge2: left allmulticast mode [ 948.109167][T26736] veth6: left allmulticast mode [ 948.124831][T26736] veth7: left allmulticast mode [ 948.140913][T26736] bond3: left allmulticast mode [ 948.163378][T26736] ip6erspan0: left allmulticast mode [ 948.187582][T26736] bridge3: left allmulticast mode [ 948.199654][T26736] bridge4: left allmulticast mode [ 948.205952][T26736] gre3: left allmulticast mode [ 948.216257][T26736] vlan0: left allmulticast mode [ 948.221259][T26736] gretap0: left allmulticast mode [ 948.227503][T26736] mac80211_hwsim hwsim32 wlan2: left allmulticast mode [ 948.279597][T26736] bond5: left promiscuous mode [ 948.291208][T26736] bond6: left promiscuous mode [ 948.312788][T26739] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 948.314739][T26743] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 949.574700][T19775] usb 3-1: USB disconnect, device number 33 [ 950.731891][T26799] overlayfs: failed to clone upperpath [ 950.843227][T26802] fuse: Bad value for 'user_id' [ 950.848978][T26802] fuse: Bad value for 'user_id' [ 951.313342][ T30] audit: type=1804 audit(1759625200.150:1395): pid=26808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.7444" name="file0" dev="ramfs" ino=113659 res=1 errno=0 [ 951.449090][T26810] futex_wake_op: syz.3.7445 tries to shift op by 32; fix this program [ 951.841144][T26813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7446'. [ 952.166675][ T30] audit: type=1400 audit(1759625201.039:1396): avc: denied { read append } for pid=26820 comm="syz.2.7450" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 952.304044][ T30] audit: type=1400 audit(1759625201.039:1397): avc: denied { open } for pid=26820 comm="syz.2.7450" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 952.396865][ T30] audit: type=1400 audit(1759625201.254:1398): avc: denied { ioctl } for pid=26820 comm="syz.2.7450" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 953.166277][T26840] : entered promiscuous mode [ 956.000721][ T30] audit: type=1400 audit(1759625204.481:1399): avc: denied { bind } for pid=26857 comm="syz.5.7459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 959.369089][T26901] netlink: 'syz.5.7469': attribute type 12 has an invalid length. [ 962.682929][T26938] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.7480'. [ 962.708043][T26938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7480'. [ 962.872527][T26949] syz_tun: entered allmulticast mode [ 962.924917][T26949] dvmrp1: entered allmulticast mode [ 963.418281][T26948] syz_tun: left allmulticast mode [ 965.869451][T19794] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 966.313392][T19794] usb 3-1: Using ep0 maxpacket: 16 [ 966.330317][T19794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.343075][T19794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 966.358547][T19794] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 966.369070][T19794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.526684][T19794] usb 3-1: config 0 descriptor?? [ 967.093108][T19794] HID 045e:07da: Invalid code 65791 type 1 [ 967.140529][T19794] HID 045e:07da: Invalid code 768 type 1 [ 967.149009][T19794] HID 045e:07da: Invalid code 769 type 1 [ 967.154829][T19794] HID 045e:07da: Invalid code 770 type 1 [ 967.160462][T19794] HID 045e:07da: Invalid code 771 type 1 [ 967.166214][T19794] HID 045e:07da: Invalid code 772 type 1 [ 967.171837][T19794] HID 045e:07da: Invalid code 773 type 1 [ 967.178430][T19794] HID 045e:07da: Invalid code 774 type 1 [ 967.184058][T19794] HID 045e:07da: Invalid code 775 type 1 [ 967.190293][T19794] HID 045e:07da: Invalid code 776 type 1 [ 967.200155][T19794] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0041/input/input67 [ 967.338630][T19794] microsoft 0003:045E:07DA.0041: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 968.429341][T19794] usb 3-1: USB disconnect, device number 34 [ 970.363479][T27011] Invalid source name [ 970.367537][T27011] UBIFS error (pid: 27011): cannot open "./file0", error -22 [ 970.385925][ T30] audit: type=1400 audit(1759625218.054:1400): avc: denied { create } for pid=27008 comm="syz.3.7499" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 970.457472][ T30] audit: type=1400 audit(1759625218.063:1401): avc: denied { mounton } for pid=27008 comm="syz.3.7499" path="/151/file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 970.675563][ T30] audit: type=1400 audit(1759625218.110:1402): avc: denied { unlink } for pid=23570 comm="syz-executor" name="file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 972.581616][T27049] netlink: 'syz.1.7513': attribute type 1 has an invalid length. [ 973.624283][T27049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7513'. [ 973.677527][T27049] bond3: entered promiscuous mode [ 973.686303][T27049] bond3: entered allmulticast mode [ 973.699572][T27049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 973.926599][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 973.933143][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 974.006647][ T30] audit: type=1400 audit(1759625221.449:1403): avc: denied { setopt } for pid=27072 comm="syz.3.7521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 974.829417][ T30] audit: type=1400 audit(1759625222.235:1404): avc: denied { setopt } for pid=27080 comm="syz.3.7523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 975.620907][ T30] audit: type=1400 audit(1759625222.796:1405): avc: denied { mounton } for pid=27087 comm="syz.2.7525" path="/618/file0" dev="tmpfs" ino=3398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 978.269128][ T48] page_pool_release_retry() stalled pool shutdown: id 84, 3329 inflight 365 sec [ 979.941402][ T60] bridge_slave_1: left promiscuous mode [ 979.947836][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.268201][ T60] bridge_slave_0: left promiscuous mode [ 980.310182][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.576086][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7538'. [ 980.750838][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7538'. [ 980.762397][T27145] netlink: 'syz.3.7539': attribute type 1 has an invalid length. [ 983.153801][T27169] overlayfs: failed to clone upperpath [ 984.974216][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.005159][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.019876][ T60] bond0 (unregistering): Released all slaves [ 985.494483][T27145] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 987.153528][ T60] hsr_slave_0: left promiscuous mode [ 987.182346][ T60] hsr_slave_1: left promiscuous mode [ 987.194440][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.208490][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.918966][T27225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7559'. [ 988.527392][T27229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7559'. [ 989.417899][ T60] team0 (unregistering): Port device team_slave_1 removed [ 989.462346][ T60] team0 (unregistering): Port device team_slave_0 removed [ 990.595286][T27250] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7567'. [ 990.604880][T27250] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7567'. [ 990.726298][T27260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7569'. [ 994.996051][T27292] warn_alloc: 1 callbacks suppressed [ 994.996064][T27292] syz.6.7580: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 995.020000][T27292] CPU: 1 UID: 0 PID: 27292 Comm: syz.6.7580 Not tainted syzkaller #0 PREEMPT(full) [ 995.020021][T27292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 995.020032][T27292] Call Trace: [ 995.020038][T27292] [ 995.020046][T27292] dump_stack_lvl+0x16c/0x1f0 [ 995.020074][T27292] warn_alloc+0x248/0x3a0 [ 995.020104][T27292] ? __pfx_warn_alloc+0x10/0x10 [ 995.020146][T27292] ? hash_netport4_resize+0x1d8/0x1c50 [ 995.020166][T27292] ? __vmalloc_node_noprof+0xad/0xf0 [ 995.020197][T27292] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 995.020233][T27292] ? hash_netport4_resize+0x1d8/0x1c50 [ 995.020260][T27292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 995.020291][T27292] ? ___kmalloc_large_node+0xed/0x160 [ 995.020321][T27292] __kvmalloc_node_noprof+0x431/0x9c0 [ 995.020344][T27292] ? hash_netport4_resize+0x1d8/0x1c50 [ 995.020363][T27292] ? trace_kmalloc+0x2b/0xd0 [ 995.020384][T27292] ? __kmalloc_noprof+0x34f/0x880 [ 995.020411][T27292] ? hash_netport4_resize+0x1d8/0x1c50 [ 995.020436][T27292] ? hash_netport4_resize+0x1d8/0x1c50 [ 995.020455][T27292] hash_netport4_resize+0x1d8/0x1c50 [ 995.020476][T27292] ? __pfx_hash_netport4_add+0x10/0x10 [ 995.020495][T27292] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 995.020523][T27292] ? __pfx___mutex_lock+0x10/0x10 [ 995.020555][T27292] ? __pfx_hash_netport4_resize+0x10/0x10 [ 995.020579][T27292] call_ad.constprop.0+0x36d/0x940 [ 995.020597][T27292] ? __pfx_hash_netport4_resize+0x10/0x10 [ 995.020619][T27292] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 995.020667][T27292] ? __pfx___nla_validate_parse+0x10/0x10 [ 995.020709][T27292] ? __nla_parse+0x40/0x60 [ 995.020739][T27292] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 995.020766][T27292] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 995.020789][T27292] ? process_srcu+0x910/0x1920 [ 995.020835][T27292] ? find_held_lock+0x2b/0x80 [ 995.020868][T27292] nfnetlink_rcv_msg+0x9f9/0x1200 [ 995.020891][T27292] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 995.020904][T27292] ? __lock_acquire+0x62e/0x1ce0 [ 995.020929][T27292] ? avc_has_perm_noaudit+0x149/0x3b0 [ 995.020950][T27292] netlink_rcv_skb+0x155/0x420 [ 995.020966][T27292] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 995.020979][T27292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 995.021001][T27292] ? ns_capable+0xd7/0x110 [ 995.021018][T27292] nfnetlink_rcv+0x1b3/0x430 [ 995.021030][T27292] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 995.021041][T27292] ? netlink_deliver_tap+0x1ae/0xd30 [ 995.021054][T27292] ? selinux_netlink_send+0x578/0x830 [ 995.021065][T27292] ? is_vmalloc_addr+0x86/0xa0 [ 995.021085][T27292] netlink_unicast+0x5aa/0x870 [ 995.021103][T27292] ? __pfx_netlink_unicast+0x10/0x10 [ 995.021118][T27292] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 995.021138][T27292] netlink_sendmsg+0x8c8/0xdd0 [ 995.021156][T27292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 995.021178][T27292] ____sys_sendmsg+0xa95/0xc70 [ 995.021196][T27292] ? copy_msghdr_from_user+0x10a/0x160 [ 995.021210][T27292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 995.021231][T27292] ? __pfx_futex_wake_mark+0x10/0x10 [ 995.021248][T27292] ___sys_sendmsg+0x134/0x1d0 [ 995.021263][T27292] ? __pfx____sys_sendmsg+0x10/0x10 [ 995.021295][T27292] __sys_sendmsg+0x16d/0x220 [ 995.021309][T27292] ? __pfx___sys_sendmsg+0x10/0x10 [ 995.021323][T27292] ? __x64_sys_futex+0x1e0/0x4c0 [ 995.021345][T27292] do_syscall_64+0xcd/0x4e0 [ 995.021361][T27292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.021373][T27292] RIP: 0033:0x7fb621f8eec9 [ 995.021383][T27292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.021395][T27292] RSP: 002b:00007fb622d80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 995.021406][T27292] RAX: ffffffffffffffda RBX: 00007fb6221e5fa0 RCX: 00007fb621f8eec9 [ 995.021413][T27292] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 995.021420][T27292] RBP: 00007fb622011f91 R08: 0000000000000000 R09: 0000000000000000 [ 995.021427][T27292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.021434][T27292] R13: 00007fb6221e6038 R14: 00007fb6221e5fa0 R15: 00007fff0428cd18 [ 995.021448][T27292] [ 995.021453][T27292] Mem-Info: [ 995.425896][T27292] active_anon:97257 inactive_anon:0 isolated_anon:0 [ 995.425896][T27292] active_file:21246 inactive_file:41471 isolated_file:0 [ 995.425896][T27292] unevictable:1792 dirty:194 writeback:0 [ 995.425896][T27292] slab_reclaimable:9113 slab_unreclaimable:133344 [ 995.425896][T27292] mapped:35296 shmem:85671 pagetables:1779 [ 995.425896][T27292] sec_pagetables:0 bounce:0 [ 995.425896][T27292] kernel_misc_reclaimable:0 [ 995.425896][T27292] free:1132411 free_pcp:26534 free_cma:0 [ 995.471488][T27292] Node 0 active_anon:389028kB inactive_anon:0kB active_file:84956kB inactive_file:165680kB unevictable:5632kB isolated(anon):0kB isolated(file):0kB mapped:141156kB dirty:776kB writeback:0kB shmem:341148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:14768kB pagetables:6964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 995.503734][T27292] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 995.533786][T27292] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 995.563591][T27292] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 995.569325][T27292] Node 0 DMA32 free:632116kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:389028kB inactive_anon:0kB active_file:84956kB inactive_file:165680kB unevictable:5632kB writepending:776kB zspages:0kB present:3129332kB managed:2547940kB mlocked:0kB bounce:0kB free_pcp:76760kB local_pcp:32468kB free_cma:0kB [ 995.602602][T27292] lowmem_reserve[]: 0 0 0 0 0 [ 995.607275][T27292] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 995.636487][T27292] lowmem_reserve[]: 0 0 0 0 0 [ 995.641169][T27292] Node 1 Normal free:3882168kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:29376kB local_pcp:14560kB free_cma:0kB [ 995.673919][T27292] lowmem_reserve[]: 0 0 0 0 0 [ 995.678630][T27292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 995.691222][T27292] Node 0 DMA32: 1196*4kB (UE) 1170*8kB (UE) 639*16kB (UME) 984*32kB (U) 653*64kB (UME) 192*128kB (UME) 100*256kB (UME) 46*512kB (UME) 28*1024kB (UME) 7*2048kB (U) 102*4096kB (M) = 632176kB [ 995.709856][T27292] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 995.721325][T27292] Node 1 Normal: 204*4kB (UE) 47*8kB (UE) 37*16kB (UE) 238*32kB (UME) 88*64kB (UME) 24*128kB (UME) 8*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 941*4096kB (M) = 3882168kB [ 995.739298][T27292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 995.748871][T27292] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 995.758159][T27292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 995.767689][T27292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 995.777068][T27292] 148384 total pagecache pages [ 995.781814][T27292] 0 pages in swap cache [ 995.785959][T27292] Free swap = 124996kB [ 995.790083][T27292] Total swap = 124996kB [ 995.794236][T27292] 2097051 pages RAM [ 995.798010][T27292] 0 pages HighMem/MovableOnly [ 995.802660][T27292] 428424 pages reserved [ 995.806798][T27292] 0 pages cma reserved [ 996.540710][ T30] audit: type=1400 audit(1759625242.542:1406): avc: denied { read write } for pid=27305 comm="syz.2.7585" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 996.603798][ T30] audit: type=1400 audit(1759625242.542:1407): avc: denied { open } for pid=27305 comm="syz.2.7585" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 997.499899][ T30] audit: type=1400 audit(1759625243.431:1408): avc: denied { ioctl } for pid=27310 comm="syz.2.7586" path="socket:[115315]" dev="sockfs" ino=115315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.638924][T27316] netlink: 'syz.5.7589': attribute type 10 has an invalid length. [ 998.051384][ T30] audit: type=1800 audit(1759625243.964:1409): pid=27323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.7600" name="file1" dev="tmpfs" ino=7371 res=0 errno=0 [ 1003.741834][T27395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7609'. [ 1003.754681][T27395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7609'. [ 1008.366451][ T30] audit: type=1400 audit(1759625253.599:1410): avc: denied { mount } for pid=27437 comm="syz.3.7619" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1008.367867][T27452] tipc: Enabled bearer , priority 0 [ 1008.944184][T27454] syzkaller0: entered promiscuous mode [ 1008.982104][T27454] syzkaller0: entered allmulticast mode [ 1009.059647][T27452] tipc: Resetting bearer [ 1010.070564][T27450] tipc: Resetting bearer [ 1010.303112][T27450] tipc: Disabling bearer [ 1010.438717][T27466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7626'. [ 1010.563047][ T30] audit: type=1400 audit(1759625255.657:1411): avc: denied { bind } for pid=27468 comm="syz.1.7628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1011.901942][ T30] audit: type=1400 audit(1759625256.901:1412): avc: denied { setopt } for pid=27468 comm="syz.1.7628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1013.449923][T27506] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7636'. [ 1015.100602][T27537] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1015.119859][T27537] netlink: 'syz.2.7644': attribute type 11 has an invalid length. [ 1015.591315][ T30] audit: type=1400 audit(1759625259.997:1413): avc: denied { setopt } for pid=27534 comm="syz.3.7645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1018.735770][T27560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7652'. [ 1022.646080][T27596] netlink: 'syz.3.7661': attribute type 2 has an invalid length. [ 1022.653954][T27596] netlink: 'syz.3.7661': attribute type 1 has an invalid length. [ 1022.661731][T27596] netlink: 'syz.3.7661': attribute type 1 has an invalid length. [ 1024.686183][T27618] netlink: 'syz.6.7666': attribute type 2 has an invalid length. [ 1024.694662][T27618] netlink: 'syz.6.7666': attribute type 1 has an invalid length. [ 1024.702785][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7666'. [ 1024.728838][T27619] tipc: Enabling of bearer rejected, failed to enable media [ 1025.493323][ T30] audit: type=1400 audit(1759625269.183:1414): avc: denied { bind } for pid=27621 comm="syz.2.7669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1026.216441][ T30] audit: type=1400 audit(1759625269.183:1415): avc: denied { listen } for pid=27621 comm="syz.2.7669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1026.266413][ T30] audit: type=1400 audit(1759625269.257:1416): avc: denied { accept } for pid=27621 comm="syz.2.7669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1026.577559][T27644] overlayfs: failed to clone upperpath [ 1027.723988][T27656] netlink: 'syz.3.7677': attribute type 4 has an invalid length. [ 1028.885498][T27677] netlink: 'syz.5.7682': attribute type 12 has an invalid length. [ 1029.332708][T27679] overlayfs: failed to clone upperpath [ 1029.372391][T27681] batadv_slave_0: entered promiscuous mode [ 1029.381843][T27681] batadv_slave_0: left allmulticast mode [ 1029.457071][T27683] tipc: Enabling of bearer rejected, failed to enable media [ 1031.883929][ T30] audit: type=1326 audit(1759625275.599:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.2.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1031.949901][ T30] audit: type=1326 audit(1759625275.599:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.2.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1032.441535][ T30] audit: type=1326 audit(1759625275.871:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.2.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1032.542454][ T30] audit: type=1326 audit(1759625275.880:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.2.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1032.605725][T27733] bond0: entered promiscuous mode [ 1032.637007][T27733] bond0: left promiscuous mode [ 1032.642598][ T30] audit: type=1326 audit(1759625275.880:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.2.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1032.745031][ T30] audit: type=1326 audit(1759625275.880:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.2.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1032.771573][ T30] audit: type=1326 audit(1759625275.918:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.2.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1032.819453][ T30] audit: type=1326 audit(1759625275.918:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27716 comm="syz.2.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1034.064241][T27748] ref_ctr increment failed for inode: 0xdc6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888030b3cb40 [ 1034.090229][T27752] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7704'. [ 1034.619873][T27766] overlayfs: failed to clone upperpath [ 1035.207809][T19794] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1035.417991][T19794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.428220][T19794] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1035.450547][T19794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.655014][T19794] usb 3-1: config 0 descriptor?? [ 1035.673718][T19794] pwc: Askey VC010 type 2 USB webcam detected. [ 1036.936756][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7715'. [ 1036.981211][T19794] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1037.030048][ T30] audit: type=1400 audit(1759625280.379:1425): avc: denied { firmware_load } for pid=27780 comm="syz.5.7715" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1037.062768][T19794] pwc: recv_control_msg error -32 req 02 val 2700 [ 1037.089582][T19794] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1037.236506][T27783] syz.5.7715 (27783) used greatest stack depth: 19720 bytes left [ 1037.263926][T19794] pwc: recv_control_msg error -32 req 04 val 1000 [ 1037.749739][T19794] pwc: recv_control_msg error -32 req 04 val 1300 [ 1037.760231][T19794] pwc: recv_control_msg error -32 req 04 val 1400 [ 1037.776827][T19794] pwc: recv_control_msg error -32 req 02 val 2000 [ 1037.785718][T19794] pwc: recv_control_msg error -32 req 02 val 2100 [ 1037.805412][T19794] pwc: recv_control_msg error -32 req 04 val 1500 [ 1037.826915][T19794] pwc: recv_control_msg error -32 req 02 val 2500 [ 1037.846887][T19794] pwc: recv_control_msg error -32 req 02 val 2400 [ 1037.951507][T19794] pwc: recv_control_msg error -32 req 02 val 2600 [ 1038.097336][ T48] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=48 comm=kworker/1:1 [ 1038.110352][T27796] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955 [ 1038.338057][T19794] pwc: recv_control_msg error -71 req 02 val 2800 [ 1038.398438][T19794] pwc: recv_control_msg error -71 req 04 val 1100 [ 1038.416246][T19794] pwc: recv_control_msg error -71 req 04 val 1200 [ 1038.443583][T19794] pwc: Registered as video103. [ 1038.456173][T19794] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 1038.475153][T19794] usb 3-1: USB disconnect, device number 35 [ 1039.334536][T27811] netlink: 'syz.2.7723': attribute type 4 has an invalid length. [ 1039.342430][T27811] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7723'. [ 1039.750418][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1039.756932][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1039.842456][T27811] : renamed from bond0 [ 1041.098850][T27833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7730'. [ 1041.545109][T27833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7730'. [ 1043.286062][T19794] page_pool_release_retry() stalled pool shutdown: id 84, 3329 inflight 426 sec [ 1043.404781][T27849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7733'. [ 1043.581086][ T30] audit: type=1400 audit(1759625286.534:1426): avc: denied { map } for pid=27851 comm="syz.2.7735" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1046.747381][T27854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7733'. [ 1046.907291][T27885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.119434][T27899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1052.679436][ T30] audit: type=1400 audit(1759625295.037:1427): avc: denied { create } for pid=27951 comm="syz.3.7760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1053.138850][ T30] audit: type=1400 audit(1759625295.037:1428): avc: denied { ioctl } for pid=27951 comm="syz.3.7760" path="socket:[117396]" dev="sockfs" ino=117396 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1053.174783][T19794] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1053.375464][T19794] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1053.427157][T19794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.526794][T19794] usb 3-1: config 0 descriptor?? [ 1054.371278][T19794] ath6kl: Failed to read usb control message: -32 [ 1054.372369][T27949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.377846][T19794] ath6kl: Unable to read the bmi data from the device: -32 [ 1054.394689][T27949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.455257][T19794] ath6kl: unable to read target info byte count: -32 [ 1054.599184][T19794] ath6kl: Failed to init ath6kl core: -32 [ 1055.057180][T19794] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 1055.209482][T19794] usb 3-1: USB disconnect, device number 36 [ 1056.396404][ T30] audit: type=1400 audit(1759625298.526:1429): avc: denied { setopt } for pid=27992 comm="syz.1.7770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1058.131294][ T30] audit: type=1400 audit(1759625300.135:1430): avc: denied { ioctl } for pid=28013 comm="syz.2.7777" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1059.389641][T28027] tipc: Enabling of bearer rejected, failed to enable media [ 1059.571983][T28032] netlink: 'syz.5.7781': attribute type 1 has an invalid length. [ 1066.244992][T28119] tipc: Enabling of bearer rejected, failed to enable media [ 1067.365661][T28136] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7810'. [ 1067.699807][T19794] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1067.755778][T28148] netlink: 'syz.5.7812': attribute type 2 has an invalid length. [ 1067.763733][T28148] netlink: 'syz.5.7812': attribute type 1 has an invalid length. [ 1067.771495][T28148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7812'. [ 1068.032034][T19794] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1068.043234][T19794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1068.060382][T19794] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1068.069960][T19794] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1068.090304][T19794] usb 3-1: Product: syz [ 1068.101048][T19794] usb 3-1: Manufacturer: syz [ 1068.106196][T19794] usb 3-1: SerialNumber: syz [ 1068.113937][T19794] usb 3-1: config 0 descriptor?? [ 1068.124306][T19794] usb 3-1: selecting invalid altsetting 0 [ 1068.962186][T19775] usb 3-1: USB disconnect, device number 37 [ 1072.489421][T28203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7827'. [ 1072.498356][T28203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7827'. [ 1072.519827][T28203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7827'. [ 1072.600663][T28207] netlink: 'syz.3.7828': attribute type 2 has an invalid length. [ 1072.608629][T28207] netlink: 'syz.3.7828': attribute type 1 has an invalid length. [ 1072.616415][T28207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7828'. [ 1073.145492][ T30] audit: type=1400 audit(1759625314.194:1431): avc: denied { mounton } for pid=28214 comm="syz.5.7833" path="/1443/file0" dev="tmpfs" ino=7666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1077.251489][ T30] audit: type=1400 audit(1759625318.029:1432): avc: denied { connect } for pid=28265 comm="syz.2.7849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1077.689146][T28256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7845'. [ 1077.698222][T28256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7845'. [ 1079.871629][T28299] tipc: Enabling of bearer rejected, failed to enable media [ 1082.498688][T28347] trusted_key: encrypted_key: insufficient parameters specified [ 1082.921197][ T30] audit: type=1400 audit(1759625323.342:1433): avc: denied { watch } for pid=28348 comm="syz.6.7875" path="pipe:[119007]" dev="pipefs" ino=119007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1083.014867][ T30] audit: type=1400 audit(1759625323.370:1434): avc: denied { setattr } for pid=28348 comm="syz.6.7875" name="" dev="pipefs" ino=119007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1083.403034][ T30] audit: type=1400 audit(1759625323.670:1435): avc: denied { unmount } for pid=28352 comm="syz.6.7876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1083.854954][ T30] audit: type=1400 audit(1759625323.894:1436): avc: denied { mounton } for pid=28357 comm="syz.2.7878" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1084.194170][T28363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7879'. [ 1084.269103][T28368] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1086.537154][T28394] netlink: 'syz.3.7889': attribute type 39 has an invalid length. [ 1086.938691][T19785] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1087.083222][T28405] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7890'. [ 1087.688922][T19785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.704846][T19785] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1088.111509][T19785] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1088.120642][T19785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.130569][T19785] usb 3-1: config 0 descriptor?? [ 1089.508323][T28440] tipc: Enabling of bearer rejected, failed to enable media [ 1090.177197][ T30] audit: type=1800 audit(1759625330.133:1437): pid=28447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.7904" name="file1" dev="tmpfs" ino=5199 res=0 errno=0 [ 1091.717961][T28464] overlayfs: failed to clone upperpath [ 1092.438263][T28466] tipc: Enabling of bearer rejected, failed to enable media [ 1095.078769][T28491] batadv_slave_0: entered promiscuous mode [ 1095.346066][ T30] audit: type=1400 audit(1759625334.923:1438): avc: denied { ioctl } for pid=28497 comm="syz.5.7920" path="socket:[120106]" dev="sockfs" ino=120106 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1095.648717][T19794] usb 3-1: USB disconnect, device number 38 [ 1102.356630][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7943'. [ 1102.383095][T28593] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7943'. [ 1102.399586][T28593] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7943'. [ 1102.429980][T28593] 9pnet_fd: Insufficient options for proto=fd [ 1102.896112][T28602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7945'. [ 1105.325505][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1105.332030][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1105.360871][ T30] audit: type=1400 audit(1759625344.333:1439): avc: denied { setopt } for pid=28615 comm="syz.1.7949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1105.679870][T28620] 9pnet_fd: Insufficient options for proto=fd [ 1107.312815][T28651] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7958'. [ 1108.030731][T19794] page_pool_release_retry() stalled pool shutdown: id 84, 3329 inflight 486 sec [ 1111.142068][ T30] audit: type=1400 audit(1759625349.309:1440): avc: denied { create } for pid=28684 comm="syz.3.7965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1111.252665][ T30] audit: type=1400 audit(1759625349.346:1441): avc: denied { sys_admin } for pid=28684 comm="syz.3.7965" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1111.717527][T28701] tipc: Enabling of bearer rejected, failed to enable media [ 1113.518677][T28728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7977'. [ 1113.968248][T28735] tipc: Enabling of bearer rejected, failed to enable media [ 1114.228100][ T30] audit: type=1400 audit(1759625352.630:1442): avc: denied { read write } for pid=28741 comm="syz.2.7981" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1114.231529][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.277602][T28743] UHID_CREATE from different security context by process 2096 (syz.2.7981), this is not allowed. [ 1114.296095][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.309915][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.326736][T28725] orangefs_mount: mount request failed with -4 [ 1114.402955][ T30] audit: type=1400 audit(1759625352.630:1443): avc: denied { open } for pid=28741 comm="syz.2.7981" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1114.567780][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.590922][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.620278][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.644850][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.664184][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.671680][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.681302][T19775] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1114.696415][T19775] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.43 Device [syz1] on syz1 [ 1114.739659][T28750] bridge0: port 1(gretap0) entered disabled state [ 1114.869414][T28750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.881477][T28750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.196574][ T30] audit: type=1400 audit(1759625353.528:1444): avc: denied { create } for pid=28758 comm="syz.6.7987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1115.825490][T28750] veth1_macvtap: left allmulticast mode [ 1116.137237][ T30] audit: type=1400 audit(1759625354.398:1445): avc: denied { read } for pid=28776 comm="syz.6.7990" path="socket:[119683]" dev="sockfs" ino=119683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1116.180269][ T48] syz1: Port: 1 Link DOWN [ 1117.163461][ T30] audit: type=1400 audit(1759625355.370:1446): avc: denied { read write } for pid=28787 comm="syz.2.7993" name="mouse0" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1117.210540][ T30] audit: type=1400 audit(1759625355.417:1447): avc: denied { open } for pid=28787 comm="syz.2.7993" path="/dev/input/mouse0" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1119.348876][ T30] audit: type=1400 audit(1759625357.400:1448): avc: denied { override_creds } for pid=28803 comm="syz.2.7996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1122.790606][T28841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8003'. [ 1123.238573][T28846] netlink: 296 bytes leftover after parsing attributes in process `syz.6.8009'. [ 1124.079252][T28857] tipc: Enabled bearer , priority 0 [ 1124.087035][T28857] syzkaller0: entered promiscuous mode [ 1124.092523][T28857] syzkaller0: entered allmulticast mode [ 1124.289687][T28862] tipc: Resetting bearer [ 1124.802937][T28856] tipc: Resetting bearer [ 1125.087077][T28856] tipc: Disabling bearer [ 1125.369443][T28873] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1126.207364][T28873] orangefs_mount: mount request failed with -4 [ 1127.129826][T28885] netlink: 165 bytes leftover after parsing attributes in process `syz.6.8018'. [ 1128.060521][T28893] syzkaller0: entered promiscuous mode [ 1128.090530][T28893] syzkaller0: entered allmulticast mode [ 1129.155218][ T30] audit: type=1400 audit(1759625367.130:1449): avc: denied { mount } for pid=28905 comm="syz.2.8026" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1129.597846][ T30] audit: type=1400 audit(1759625367.972:1450): avc: denied { unmount } for pid=16522 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1129.707420][T28917] tipc: Enabling of bearer rejected, failed to enable media [ 1130.348029][T28926] tipc: Enabling of bearer rejected, failed to enable media [ 1131.813079][T28956] netlink: 'syz.5.8037': attribute type 1 has an invalid length. [ 1132.424821][T28963] tipc: Started in network mode [ 1132.430335][T28963] tipc: Node identity 4, cluster identity 4711 [ 1132.437963][T28963] tipc: Node number set to 4 [ 1133.491649][T28977] tipc: Enabling of bearer rejected, failed to enable media [ 1134.107917][T28994] tipc: Enabling of bearer rejected, failed to enable media [ 1134.205569][T28998] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8049'. [ 1136.127923][T29045] trusted_key: encrypted_key: insufficient parameters specified [ 1137.475129][T29057] team0 (unregistering): Port device team_slave_0 removed [ 1137.483000][T29057] team0 (unregistering): Port device team_slave_1 removed [ 1138.599199][ T30] audit: type=1400 audit(1759625376.409:1451): avc: denied { relabelfrom } for pid=29072 comm="syz.3.8065" name="NETLINK" dev="sockfs" ino=122154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1138.730552][ T30] audit: type=1400 audit(1759625376.409:1452): avc: denied { relabelto } for pid=29072 comm="syz.3.8065" name="NETLINK" dev="sockfs" ino=122154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 1138.837158][ T30] audit: type=1326 audit(1759625376.540:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.1.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958e38eec9 code=0x7ffc0000 [ 1138.859069][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8064'. [ 1138.885841][ T30] audit: type=1326 audit(1759625376.568:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.1.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f958e38eec9 code=0x7ffc0000 [ 1138.914862][ T30] audit: type=1326 audit(1759625376.568:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.1.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958e38eec9 code=0x7ffc0000 [ 1138.947010][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8064'. [ 1138.957508][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8064'. [ 1138.967896][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8064'. [ 1138.978145][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8064'. [ 1139.114897][ T30] audit: type=1326 audit(1759625376.568:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.1.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f958e38eec9 code=0x7ffc0000 [ 1139.151944][ T30] audit: type=1326 audit(1759625376.577:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.1.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958e38eec9 code=0x7ffc0000 [ 1140.480975][ T30] audit: type=1326 audit(1759625376.577:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.1.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f958e38eec9 code=0x7ffc0000 [ 1140.685168][ T30] audit: type=1326 audit(1759625376.577:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.1.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958e38eec9 code=0x7ffc0000 [ 1140.917399][ T30] audit: type=1326 audit(1759625376.577:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.1.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f958e38eec9 code=0x7ffc0000 [ 1143.581485][T29132] trusted_key: encrypted_key: insufficient parameters specified [ 1143.591212][T29132] tmpfs: Bad value for 'mpol' [ 1144.821180][T29136] Device name cannot be null; rc = [-22] [ 1145.024723][T29134] syz.1.8080 (29134): attempted to duplicate a private mapping with mremap. This is not supported. [ 1145.470541][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1145.470556][ T30] audit: type=1400 audit(1759625382.854:1470): avc: denied { mount } for pid=29154 comm="syz.1.8084" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1147.278219][T29171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.023852][T29179] bond0: (slave macvlan2): Opening slave failed [ 1148.757483][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8094'. [ 1149.615789][ T30] audit: type=1400 audit(1759625386.726:1471): avc: denied { create } for pid=29200 comm="syz.1.8096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1152.042074][ T30] audit: type=1400 audit(1759625388.850:1472): avc: denied { read write } for pid=29209 comm="syz.2.8099" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1152.069515][ T30] audit: type=1400 audit(1759625388.850:1473): avc: denied { open } for pid=29209 comm="syz.2.8099" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1153.220326][T29235] tipc: Enabling of bearer rejected, failed to enable media [ 1155.461191][T29253] tipc: Enabling of bearer rejected, failed to enable media [ 1156.739440][ T30] audit: type=1400 audit(1759625393.386:1474): avc: denied { accept } for pid=29282 comm="syz.3.8120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1159.161021][T29319] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 1159.168265][ T30] audit: type=1400 audit(1759625395.659:1475): avc: denied { relabelfrom } for pid=29318 comm="syz.1.8129" name="NETLINK" dev="sockfs" ino=122411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1159.615612][ T30] audit: type=1400 audit(1759625395.669:1476): avc: denied { relabelto } for pid=29318 comm="syz.1.8129" name="NETLINK" dev="sockfs" ino=122411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 1163.610288][T29365] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8142'. [ 1163.787190][T19775] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1164.299535][T19775] usb 3-1: Using ep0 maxpacket: 16 [ 1164.466370][T19775] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1164.481338][T19775] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1164.489447][T19775] usb 3-1: Product: syz [ 1164.493972][T19775] usb 3-1: SerialNumber: syz [ 1164.503685][T19775] usb 3-1: config 0 descriptor?? [ 1164.515051][T19775] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1164.521675][T19775] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1164.555596][T19775] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1164.757837][T29363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8141'. [ 1164.771016][T19775] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1164.789134][T19775] usb 3-1: USB disconnect, device number 39 [ 1166.623619][T29406] overlayfs: failed to clone upperpath [ 1168.642057][T29429] macsec1: entered promiscuous mode [ 1168.647329][T29429] bridge0: entered promiscuous mode [ 1168.656137][T29429] bridge0: port 1(macsec1) entered blocking state [ 1168.663086][T29429] bridge0: port 1(macsec1) entered disabled state [ 1168.672118][T29429] macsec1: entered allmulticast mode [ 1168.690147][T29429] macsec1: left allmulticast mode [ 1168.699620][T29429] bridge0: left promiscuous mode [ 1170.254383][T29448] tipc: Started in network mode [ 1170.329579][T29448] tipc: Node identity 080211000001, cluster identity 4711 [ 1170.336828][T29448] tipc: Enabled bearer , priority 0 [ 1170.974810][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1170.981201][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.700613][ T48] tipc: Node number set to 134418688 [ 1171.805443][ T30] audit: type=1400 audit(1759625407.024:1477): avc: denied { write } for pid=29456 comm="syz.2.8166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1172.528173][T29476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8170'. [ 1172.538608][T29476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8170'. [ 1172.889069][ T48] page_pool_release_retry() stalled pool shutdown: id 84, 3329 inflight 547 sec [ 1173.074846][ T30] audit: type=1400 audit(1759625408.568:1478): avc: denied { lock } for pid=29480 comm="syz.3.8174" path="socket:[122649]" dev="sockfs" ino=122649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1174.096000][ T30] audit: type=1326 audit(1759625409.625:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29490 comm="syz.6.8177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb621f8eec9 code=0x0 [ 1174.721254][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1174.734980][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1174.746300][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1174.757008][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1174.767785][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1174.778861][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1174.789942][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1174.800691][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8180'. [ 1176.486850][T29503] Bluetooth: hci0: command 0x0406 tx timeout [ 1177.083792][T29526] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1179.476543][T29545] __nla_validate_parse: 36 callbacks suppressed [ 1179.476562][T29545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8190'. [ 1179.568541][ T30] audit: type=1400 audit(1759625414.489:1480): avc: denied { accept } for pid=29538 comm="syz.5.8189" path="socket:[122921]" dev="sockfs" ino=122921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1186.421383][ T30] audit: type=1400 audit(1759625420.999:1481): avc: denied { map_create } for pid=29619 comm="syz.3.8208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1186.708996][ T30] audit: type=1400 audit(1759625420.999:1482): avc: denied { map_read map_write } for pid=29619 comm="syz.3.8208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1186.748503][ T30] audit: type=1400 audit(1759625420.999:1483): avc: denied { prog_load } for pid=29619 comm="syz.3.8208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1186.864851][ T30] audit: type=1400 audit(1759625420.999:1484): avc: denied { bpf } for pid=29619 comm="syz.3.8208" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1186.888801][ T30] audit: type=1400 audit(1759625420.999:1485): avc: denied { perfmon } for pid=29619 comm="syz.3.8208" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1186.909977][ T30] audit: type=1400 audit(1759625421.009:1486): avc: denied { prog_run } for pid=29619 comm="syz.3.8208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1187.046966][ T30] audit: type=1400 audit(1759625421.336:1487): avc: denied { create } for pid=29616 comm="syz.1.8207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1187.088815][T29631] block nbd2: shutting down sockets [ 1187.165746][ T30] audit: type=1400 audit(1759625421.504:1488): avc: denied { read write } for pid=16522 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1187.191731][ T30] audit: type=1400 audit(1759625421.504:1489): avc: denied { open } for pid=16522 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1187.216905][ T30] audit: type=1400 audit(1759625421.504:1490): avc: denied { ioctl } for pid=16522 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.296860][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8217'. [ 1192.440408][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1192.440425][ T30] audit: type=1400 audit(1759625426.789:1523): avc: denied { setopt } for pid=29683 comm="syz.5.8226" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1193.042873][ T30] audit: type=1800 audit(1759625426.789:1524): pid=29693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.8226" name="nullb0" dev="tmpfs" ino=6687 res=0 errno=0 [ 1193.428960][ T30] audit: type=1400 audit(1759625426.818:1525): avc: denied { bind } for pid=29685 comm="syz.3.8225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1193.456163][ T30] audit: type=1400 audit(1759625427.687:1526): avc: denied { create } for pid=29700 comm="syz.1.8229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1193.752688][ T30] audit: type=1400 audit(1759625427.687:1527): avc: denied { connect } for pid=29700 comm="syz.1.8229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1193.934443][ T30] audit: type=1400 audit(1759625428.108:1528): avc: denied { read } for pid=29705 comm="syz.2.8230" dev="nsfs" ino=4026533862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1194.507136][ T30] audit: type=1400 audit(1759625428.108:1529): avc: denied { open } for pid=29705 comm="syz.2.8230" path="net:[4026533862]" dev="nsfs" ino=4026533862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1194.532661][ T30] audit: type=1400 audit(1759625428.108:1530): avc: denied { create } for pid=29705 comm="syz.2.8230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1195.814731][ T30] audit: type=1400 audit(1759625429.942:1531): avc: denied { create } for pid=29723 comm="syz.5.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1196.233054][ T30] audit: type=1400 audit(1759625429.970:1532): avc: denied { bind } for pid=29723 comm="syz.5.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1197.833110][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1197.833126][ T30] audit: type=1400 audit(1759625431.822:1540): avc: denied { mount } for pid=29742 comm="syz.3.8240" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1198.222537][ T30] audit: type=1400 audit(1759625432.103:1541): avc: denied { create } for pid=29751 comm="syz.6.8242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1198.578396][ T30] audit: type=1400 audit(1759625432.112:1542): avc: denied { write } for pid=29751 comm="syz.6.8242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1199.690026][ T30] audit: type=1400 audit(1759625433.562:1543): avc: denied { create } for pid=29758 comm="syz.2.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1199.742013][ T30] audit: type=1400 audit(1759625433.562:1544): avc: denied { ioctl } for pid=29758 comm="syz.2.8245" path="socket:[123999]" dev="sockfs" ino=123999 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1200.188864][ T30] audit: type=1400 audit(1759625433.562:1545): avc: denied { read } for pid=29758 comm="syz.2.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1200.247439][ T30] audit: type=1400 audit(1759625433.693:1546): avc: denied { write } for pid=29758 comm="syz.2.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1200.269347][ T30] audit: type=1400 audit(1759625433.711:1547): avc: denied { bind } for pid=29769 comm="syz.5.8247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1200.301175][ T30] audit: type=1400 audit(1759625433.721:1548): avc: denied { setopt } for pid=29769 comm="syz.5.8247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1200.337564][ T30] audit: type=1400 audit(1759625434.039:1549): avc: denied { create } for pid=29773 comm="syz.1.8249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1201.772896][T19775] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1202.122872][T19775] usb 3-1: Using ep0 maxpacket: 32 [ 1202.129275][T19775] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.167625][T19775] usb 3-1: config 0 has no interfaces? [ 1202.178790][T19775] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1202.198164][T19775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.211293][T19775] usb 3-1: config 0 descriptor?? [ 1202.757388][ T48] usb 3-1: USB disconnect, device number 40 [ 1204.549751][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1204.549769][ T30] audit: type=1400 audit(1759625437.743:1564): avc: denied { create } for pid=29810 comm="syz.1.8256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1205.322884][ T30] audit: type=1400 audit(1759625438.819:1565): avc: denied { setopt } for pid=29824 comm="syz.5.8262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1205.391436][ T30] audit: type=1400 audit(1759625438.903:1566): avc: denied { bind } for pid=29824 comm="syz.5.8262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1205.918149][ T30] audit: type=1400 audit(1759625438.996:1567): avc: denied { name_connect } for pid=29820 comm="syz.1.8261" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1207.415539][ T30] audit: type=1326 audit(1759625440.802:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29822 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe98eec9 code=0x7ffc0000 [ 1207.442188][ T30] audit: type=1326 audit(1759625440.802:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29822 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe98eec9 code=0x7ffc0000 [ 1207.577992][ T30] audit: type=1326 audit(1759625440.951:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29822 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc6fe98eec9 code=0x7ffc0000 [ 1207.602222][ T30] audit: type=1326 audit(1759625440.951:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29822 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe98eec9 code=0x7ffc0000 [ 1207.743636][ T30] audit: type=1326 audit(1759625440.951:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29822 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe98eec9 code=0x7ffc0000 [ 1208.298292][ T30] audit: type=1326 audit(1759625440.998:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29822 comm="syz.3.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6fe98eec9 code=0x7ffc0000 [ 1210.357493][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1210.357504][ T30] audit: type=1400 audit(1759625443.552:1592): avc: denied { read } for pid=29858 comm="syz.2.8269" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1210.459587][ T30] audit: type=1400 audit(1759625443.552:1593): avc: denied { open } for pid=29858 comm="syz.2.8269" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1210.571352][ T30] audit: type=1400 audit(1759625443.748:1594): avc: denied { mount } for pid=29860 comm="syz.1.8270" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1211.883597][ T30] audit: type=1800 audit(1759625444.927:1595): pid=29882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.8275" name="bus" dev="tmpfs" ino=5644 res=0 errno=0 [ 1211.949295][ T30] audit: type=1400 audit(1759625444.927:1596): avc: denied { shutdown } for pid=29880 comm="syz.1.8275" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1212.333094][T29886] 9pnet_fd: p9_fd_create_tcp (29886): problem connecting socket to 127.0.0.1 [ 1217.517667][T29952] hugetlbfs: syz.1.8292 (29952): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1218.565119][ T30] audit: type=1400 audit(1759625450.867:1597): avc: denied { mount } for pid=29949 comm="syz.6.8294" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1218.641661][T29959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8297'. [ 1218.673121][ T30] audit: type=1400 audit(1759625450.885:1598): avc: denied { remount } for pid=29949 comm="syz.6.8294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1218.684705][T29959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8297'. [ 1218.796897][T29959] netlink: 'syz.1.8297': attribute type 11 has an invalid length. [ 1218.804824][T29959] netlink: 'syz.1.8297': attribute type 13 has an invalid length. [ 1218.869278][T29959] bridge0: entered allmulticast mode [ 1218.937365][ T30] audit: type=1400 audit(1759625451.568:1599): avc: denied { bind } for pid=29960 comm="syz.5.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1219.300952][ T30] audit: type=1400 audit(1759625451.568:1600): avc: denied { node_bind } for pid=29960 comm="syz.5.8295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1219.360860][T29959] gretap0: left allmulticast mode [ 1219.388477][T29959] gretap0: left promiscuous mode [ 1219.408004][T29959] bridge0: port 1(gretap0) entered disabled state [ 1222.567998][T19785] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1222.745087][T19785] usb 3-1: Using ep0 maxpacket: 16 [ 1222.822208][T19785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.833541][T19785] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1222.847311][T19785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.862063][T19785] usb 3-1: config 0 descriptor?? [ 1223.053685][ T30] audit: type=1400 audit(1759625455.413:1601): avc: denied { mounton } for pid=30001 comm="syz.6.8308" path="/1861/file0" dev="tmpfs" ino=9848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1223.168649][ T30] audit: type=1400 audit(1759625455.478:1602): avc: denied { getopt } for pid=30001 comm="syz.6.8308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1223.329605][T19785] hid_parser_main: 73 callbacks suppressed [ 1223.329626][T19785] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0 [ 1223.342693][T19785] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0 [ 1223.350069][T19785] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0 [ 1223.357515][T19785] mcp2221 0003:04D8:00DD.0043: unknown main item tag 0x0 [ 1223.369039][T19785] mcp2221 0003:04D8:00DD.0043: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1223.593899][ C0] usb 3-1: input irq status -75 received [ 1224.057716][T29994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.074971][T29994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.087417][T29994] netlink: 'syz.2.8305': attribute type 1 has an invalid length. [ 1224.101533][ T48] usb 3-1: USB disconnect, device number 41 [ 1225.363071][T30023] sit3: entered allmulticast mode [ 1226.819141][ T9] kworker/0:0 (9) used greatest stack depth: 18184 bytes left [ 1228.586638][ T30] audit: type=1400 audit(1759625460.492:1603): avc: denied { mount } for pid=30039 comm="syz.5.8319" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1229.640795][T30063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8325'. [ 1229.661515][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8325'. [ 1229.835588][T30067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8327'. [ 1229.900864][ T30] audit: type=1400 audit(1759625461.820:1604): avc: denied { create } for pid=30058 comm="syz.2.8324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1231.159282][ T30] audit: type=1400 audit(1759625462.737:1605): avc: denied { mount } for pid=30075 comm="syz.3.8329" name="/" dev="rpc_pipefs" ino=124692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1233.265721][T30096] tipc: Enabling of bearer rejected, already enabled [ 1233.292833][T30096] tipc: Enabling of bearer rejected, failed to enable media [ 1234.667253][T30116] o2cb: This node has not been configured. [ 1234.673315][T30116] o2cb: Cluster check failed. Fix errors before retrying. [ 1234.680607][T30116] (syz.6.8338,30116,0):user_dlm_register:674 ERROR: status = -22 [ 1234.688410][T30116] (syz.6.8338,30116,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1234.992804][ T30] audit: type=1400 audit(1759625466.273:1606): avc: denied { mount } for pid=30108 comm="syz.6.8338" name="/" dev="ocfs2_dlmfs" ino=123820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1234.993901][ T30] audit: type=1400 audit(1759625466.282:1607): avc: denied { add_name } for pid=30108 comm="syz.6.8338" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1234.994160][ T30] audit: type=1400 audit(1759625466.282:1608): avc: denied { create } for pid=30108 comm="syz.6.8338" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1234.994291][ T30] audit: type=1400 audit(1759625466.291:1609): avc: denied { associate } for pid=30108 comm="syz.6.8338" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1234.994417][ T30] audit: type=1400 audit(1759625466.591:1610): avc: denied { ioctl } for pid=30109 comm="syz.2.8339" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1235.475315][ T30] audit: type=1400 audit(1759625466.927:1611): avc: denied { read append } for pid=30109 comm="syz.2.8339" name="video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1235.475458][ T30] audit: type=1400 audit(1759625466.927:1612): avc: denied { open } for pid=30109 comm="syz.2.8339" path="/dev/video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1235.475609][ T30] audit: type=1400 audit(1759625466.927:1613): avc: denied { ioctl } for pid=30109 comm="syz.2.8339" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x565e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1235.668453][ T30] audit: type=1400 audit(1759625467.171:1614): avc: denied { firmware_load } for pid=30114 comm="syz.5.8340" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1236.482426][T30130] bond0: Caught tx_queue_len zero misconfig [ 1236.692163][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.692215][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1236.764222][T30137] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8346'. [ 1238.044513][ T48] page_pool_release_retry() stalled pool shutdown: id 84, 3329 inflight 608 sec [ 1238.442689][T19785] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1238.782695][T19785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.792990][T19785] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1238.802065][T19785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.461907][T19785] usb 3-1: config 0 descriptor?? [ 1239.695785][T19785] pwc: Askey VC010 type 2 USB webcam detected. [ 1240.553396][T19785] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1240.877563][T19785] pwc: recv_control_msg error -32 req 02 val 2700 [ 1240.903994][T19785] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1240.933598][T19785] pwc: recv_control_msg error -32 req 04 val 1000 [ 1241.068838][T19785] pwc: recv_control_msg error -32 req 04 val 1300 [ 1241.076292][T19785] pwc: recv_control_msg error -32 req 04 val 1400 [ 1241.089123][T19785] pwc: recv_control_msg error -32 req 02 val 2000 [ 1241.096444][T19785] pwc: recv_control_msg error -32 req 02 val 2100 [ 1241.104175][T19785] pwc: recv_control_msg error -32 req 04 val 1500 [ 1241.111782][T19785] pwc: recv_control_msg error -32 req 02 val 2500 [ 1241.119005][T19785] pwc: recv_control_msg error -32 req 02 val 2400 [ 1241.126093][T19785] pwc: recv_control_msg error -32 req 02 val 2600 [ 1241.619549][T19785] pwc: recv_control_msg error -32 req 02 val 2900 [ 1241.881362][T19785] pwc: recv_control_msg error -71 req 04 val 1100 [ 1241.888244][T19785] pwc: recv_control_msg error -71 req 04 val 1200 [ 1241.896036][T19785] pwc: Registered as video103. [ 1241.910912][T19785] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 1241.964168][T19785] usb 3-1: USB disconnect, device number 42 [ 1243.631085][ T30] audit: type=1400 audit(1759625474.673:1615): avc: denied { write } for pid=30200 comm="syz.2.8366" name="vbi8" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1244.389914][ T30] audit: type=1400 audit(1759625475.271:1616): avc: denied { read } for pid=30200 comm="syz.2.8366" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1244.824037][T30209] binder: 30200:30209 ioctl c0306201 200000000040 returned -22 [ 1244.875753][ T30] audit: type=1400 audit(1759625475.271:1617): avc: denied { open } for pid=30200 comm="syz.2.8366" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1244.946229][ T30] audit: type=1400 audit(1759625475.486:1618): avc: denied { mount } for pid=30202 comm="syz.6.8367" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1244.996467][ T30] audit: type=1400 audit(1759625475.795:1619): avc: denied { ioctl } for pid=30200 comm="syz.2.8366" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1246.311743][ T30] audit: type=1400 audit(1759625477.161:1620): avc: denied { ioctl } for pid=30218 comm="syz.2.8370" path="socket:[125014]" dev="sockfs" ino=125014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1246.410427][T30225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8371'. [ 1246.419549][T30225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8371'. [ 1246.756182][ T30] audit: type=1400 audit(1759625477.170:1621): avc: denied { shutdown } for pid=30218 comm="syz.2.8370" lport=54301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1246.779380][ T30] audit: type=1400 audit(1759625477.600:1622): avc: denied { read } for pid=30218 comm="syz.2.8370" lport=54301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1248.557583][ T30] audit: type=1400 audit(1759625479.275:1623): avc: denied { unlink } for pid=30234 comm="syz.2.8374" name="#eb" dev="tmpfs" ino=4119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1248.855827][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8376'. [ 1248.865252][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8376'. [ 1252.481589][T30284] netlink: 'syz.1.8381': attribute type 1 has an invalid length. [ 1252.522637][T30284] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1252.560394][T30284] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1252.577574][ T30] audit: type=1400 audit(1759625483.044:1624): avc: denied { unmount } for pid=16522 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1252.859200][T30295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1253.486785][T30295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1254.427165][ T30] audit: type=1400 audit(1759625484.747:1625): avc: denied { mounton } for pid=30315 comm="syz.6.8391" path="/1878/file0" dev="tmpfs" ino=9942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1255.215573][T30328] netlink: 'syz.1.8392': attribute type 10 has an invalid length. [ 1255.749853][ T30] audit: type=1400 audit(1759625486.010:1626): avc: denied { read write } for pid=30308 comm="syz.2.8388" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1255.776230][ T30] audit: type=1400 audit(1759625486.010:1627): avc: denied { open } for pid=30308 comm="syz.2.8388" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1255.820012][ T30] audit: type=1400 audit(1759625486.028:1628): avc: denied { ioctl } for pid=30308 comm="syz.2.8388" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1256.510639][T30334] netlink: 'syz.2.8388': attribute type 30 has an invalid length. [ 1256.521406][ T30] audit: type=1400 audit(1759625486.636:1629): avc: denied { read } for pid=30308 comm="syz.2.8388" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1256.544543][ T30] audit: type=1400 audit(1759625486.636:1630): avc: denied { open } for pid=30308 comm="syz.2.8388" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1256.568372][ T30] audit: type=1400 audit(1759625486.636:1631): avc: denied { ioctl } for pid=30308 comm="syz.2.8388" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64ae scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1256.660520][T30337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8396'. [ 1256.838779][ T30] audit: type=1400 audit(1759625487.029:1632): avc: denied { connect } for pid=30336 comm="syz.1.8396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1257.123837][T30344] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8397'. [ 1257.474403][ T30] audit: type=1400 audit(1759625487.272:1633): avc: denied { sqpoll } for pid=30339 comm="syz.5.8397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1260.516651][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1260.516668][ T30] audit: type=1400 audit(1759625490.116:1637): avc: denied { lock } for pid=30358 comm="syz.5.8402" path="socket:[125201]" dev="sockfs" ino=125201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1260.875797][T30379] : entered promiscuous mode [ 1261.751511][ T30] audit: type=1400 audit(1759625491.622:1638): avc: denied { ioctl } for pid=30381 comm="syz.1.8408" path="socket:[125210]" dev="sockfs" ino=125210 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1264.107285][ T30] audit: type=1400 audit(1759625492.127:1639): avc: denied { write } for pid=30386 comm="syz.2.8410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1264.385159][ T30] audit: type=1400 audit(1759625492.183:1640): avc: denied { read } for pid=30386 comm="syz.2.8410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1264.689568][ T30] audit: type=1400 audit(1759625492.193:1641): avc: denied { ioctl } for pid=30386 comm="syz.2.8410" path="socket:[126128]" dev="sockfs" ino=126128 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1264.989080][ T30] audit: type=1400 audit(1759625494.297:1642): avc: denied { override_creds } for pid=30414 comm="syz.2.8414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1265.025840][ T30] audit: type=1400 audit(1759625494.653:1643): avc: denied { mounton } for pid=30420 comm="syz.6.8415" path="/1885/file0" dev="tmpfs" ino=9982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1265.116894][T30428] overlayfs: failed to clone lowerpath [ 1265.836977][T30437] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1266.450446][T30452] overlayfs: failed to clone upperpath [ 1267.732661][ T30] audit: type=1400 audit(1759625496.823:1644): avc: denied { create } for pid=30465 comm="syz.1.8425" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1267.835384][T30474] openvswitch: netlink: Message has 16 unknown bytes. [ 1268.500881][ T30] audit: type=1400 audit(1759625496.907:1645): avc: denied { unlink } for pid=14154 comm="syz-executor" name="file0" dev="tmpfs" ino=5816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1270.574915][ T30] audit: type=1400 audit(1759625499.863:1646): avc: denied { watch } for pid=30511 comm="syz.2.8436" path="/763/file0" dev="tmpfs" ino=4151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1270.969031][ T30] audit: type=1400 audit(1759625499.863:1647): avc: denied { watch_sb watch_reads } for pid=30511 comm="syz.2.8436" path="/763/file0" dev="tmpfs" ino=4151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1272.056835][T30531] veth3: left promiscuous mode [ 1272.728072][ T30] audit: type=1400 audit(1759625501.509:1648): avc: denied { create } for pid=30536 comm="syz.5.8440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1272.756422][ T30] audit: type=1400 audit(1759625501.519:1649): avc: denied { getopt } for pid=30536 comm="syz.5.8440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1272.803260][T30531] gtp0: left promiscuous mode [ 1273.134535][T30531] vxlan0: left promiscuous mode [ 1273.195192][T30531] gretap2: left promiscuous mode [ 1273.250937][T30531] bond3: left promiscuous mode [ 1273.754118][ T30] audit: type=1400 audit(1759625502.847:1650): avc: denied { bind } for pid=30548 comm="syz.3.8442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1275.631618][ T30] audit: type=1400 audit(1759625504.596:1651): avc: denied { connect } for pid=30568 comm="syz.3.8448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1275.799959][ T30] audit: type=1400 audit(1759625504.727:1652): avc: denied { read write } for pid=30558 comm="syz.2.8444" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1275.956802][ T30] audit: type=1400 audit(1759625504.727:1653): avc: denied { open } for pid=30558 comm="syz.2.8444" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1277.744761][ T30] audit: type=1400 audit(1759625506.579:1654): avc: denied { write } for pid=30597 comm="syz.2.8454" name="ip_vs" dev="proc" ino=4026534334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1277.897996][ T30] audit: type=1400 audit(1759625506.710:1655): avc: denied { watch } for pid=30605 comm="syz.6.8456" path="/1895" dev="tmpfs" ino=10031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1278.545361][ T30] audit: type=1400 audit(1759625507.327:1656): avc: denied { mount } for pid=30612 comm="syz.3.8459" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1281.428505][ T30] audit: type=1400 audit(1759625510.031:1657): avc: denied { ioctl } for pid=30633 comm="syz.2.8464" path="socket:[126332]" dev="sockfs" ino=126332 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1283.211188][ T30] audit: type=1326 audit(1759625511.686:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30628 comm="syz.6.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621f8eec9 code=0x7ffc0000 [ 1283.676076][ T30] audit: type=1326 audit(1759625511.686:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30628 comm="syz.6.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb621f8eec9 code=0x7ffc0000 [ 1283.815645][ T30] audit: type=1326 audit(1759625511.686:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30628 comm="syz.6.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621f8eec9 code=0x7ffc0000 [ 1283.913072][ T30] audit: type=1326 audit(1759625511.686:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30628 comm="syz.6.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb621f8eec9 code=0x7ffc0000 [ 1284.568953][ T30] audit: type=1400 audit(1759625512.313:1662): avc: denied { read } for pid=30646 comm="syz.1.8467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1284.588416][ T30] audit: type=1400 audit(1759625512.650:1663): avc: denied { getopt } for pid=30663 comm="syz.2.8471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1285.426064][T30672] netlink: 'syz.5.8473': attribute type 1 has an invalid length. [ 1285.961404][T30672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1285.988858][T30676] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 1286.072988][T30672] vlan3: entered allmulticast mode [ 1286.100523][T30672] veth1: entered allmulticast mode [ 1286.117455][T30672] bond2: (slave vlan3): Opening slave failed [ 1286.277113][ T30] audit: type=1400 audit(1759625514.549:1664): avc: denied { getopt } for pid=30683 comm="syz.3.8477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1286.521550][ T30] audit: type=1400 audit(1759625514.558:1665): avc: denied { ioctl } for pid=30683 comm="syz.3.8477" path="socket:[125551]" dev="sockfs" ino=125551 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1286.651700][T30684] netlink: 'syz.3.8477': attribute type 10 has an invalid length. [ 1286.685063][ T30] audit: type=1400 audit(1759625514.942:1666): avc: denied { write } for pid=30683 comm="syz.3.8477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1291.246744][ T30] audit: type=1400 audit(1759625520.208:1667): avc: denied { execute } for pid=30743 comm="syz.1.8491" dev="hugetlbfs" ino=126516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1291.744132][ T30] audit: type=1400 audit(1759625520.208:1668): avc: denied { execute_no_trans } for pid=30743 comm="syz.1.8491" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=126516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1296.114946][T30788] PKCS7: Unknown OID: [5] (bad) [ 1296.146838][T30788] PKCS7: Only support pkcs7_signedData type [ 1296.424095][ T30] audit: type=1400 audit(1759625524.791:1669): avc: denied { create } for pid=30785 comm="syz.6.8501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1296.471124][ T30] audit: type=1400 audit(1759625524.791:1670): avc: denied { accept } for pid=30785 comm="syz.6.8501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1299.057656][ T30] audit: type=1400 audit(1759625527.139:1671): avc: denied { mount } for pid=30807 comm="syz.6.8506" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1300.298013][T30823] netlink: 'syz.6.8510': attribute type 1 has an invalid length. [ 1300.597375][ T30] audit: type=1400 audit(1759625528.963:1672): avc: denied { accept } for pid=30819 comm="syz.1.8509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1301.518053][T30831] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1301.797748][ T30] audit: type=1400 audit(1759625530.076:1673): avc: denied { create } for pid=30834 comm="syz.1.8513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1301.961860][T30841] openvswitch: netlink: Message has 16 unknown bytes. [ 1302.175465][ T30] audit: type=1400 audit(1759625530.076:1674): avc: denied { ioctl } for pid=30834 comm="syz.1.8513" path="socket:[126670]" dev="sockfs" ino=126670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1302.200646][ T30] audit: type=1400 audit(1759625530.217:1675): avc: denied { connect } for pid=30834 comm="syz.1.8513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1302.284770][T13516] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1302.302062][T30835] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1302.357237][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.365776][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.488547][T29032] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1302.593586][T19785] page_pool_release_retry() stalled pool shutdown: id 84, 3329 inflight 668 sec [ 1304.519700][T30823] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1304.560824][T30823] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1304.593760][T30823] bond7 (unregistering): Released all slaves [ 1305.767825][ T30] audit: type=1400 audit(1759625533.790:1676): avc: denied { write } for pid=30870 comm="syz.2.8520" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1306.121874][T30882] hub 6-0:1.0: USB hub found [ 1306.207943][T30882] hub 6-0:1.0: 1 port detected [ 1307.165119][ T30] audit: type=1400 audit(1759625534.650:1677): avc: denied { bind } for pid=30872 comm="syz.6.8522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1307.194654][ T30] audit: type=1400 audit(1759625534.650:1678): avc: denied { name_bind } for pid=30872 comm="syz.6.8522" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1307.239137][T30884] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8521'. [ 1307.248271][ T30] audit: type=1400 audit(1759625534.650:1679): avc: denied { node_bind } for pid=30872 comm="syz.6.8522" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1307.564920][T30897] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1307.684700][ T30] audit: type=1400 audit(1759625535.464:1680): avc: denied { read write } for pid=30889 comm="syz.2.8526" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1307.715499][ T30] audit: type=1400 audit(1759625535.464:1681): avc: denied { open } for pid=30889 comm="syz.2.8526" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1307.810548][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1308.045552][ T30] audit: type=1400 audit(1759625535.474:1682): avc: denied { ioctl } for pid=30889 comm="syz.2.8526" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1308.822746][ T30] audit: type=1400 audit(1759625536.643:1683): avc: denied { create } for pid=30899 comm="syz.6.8527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1308.875135][T30909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8528'. [ 1309.197786][T30908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8528'. [ 1310.059296][T30925] batman_adv: batadv0: Adding interface: macsec1 [ 1310.065665][T30925] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.092824][T30925] batman_adv: batadv0: Interface activated: macsec1 [ 1313.621490][ T30] audit: type=1400 audit(1759625541.142:1684): avc: denied { mount } for pid=30963 comm="syz.2.8541" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1313.728422][T30970] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8542'. [ 1313.805594][T30975] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8542'. [ 1314.174560][T30982] veth13: entered promiscuous mode [ 1314.217151][T30982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8546'. [ 1314.990050][ T30] audit: type=1400 audit(1759625542.424:1685): avc: denied { unmount } for pid=16522 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1315.010117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.626609][ T30] audit: type=1400 audit(1759625543.022:1686): avc: denied { name_bind } for pid=30990 comm="syz.3.8548" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1315.915463][ T30] audit: type=1400 audit(1759625543.293:1687): avc: denied { mount } for pid=30994 comm="syz.1.8550" name="/" dev="ramfs" ino=126863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1315.937886][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.979386][T30995] overlayfs: failed to clone upperpath [ 1317.914679][ T30] audit: type=1400 audit(1759625545.164:1688): avc: denied { getopt } for pid=31010 comm="syz.6.8555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1318.200522][T31021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=31021 comm=syz.3.8558 [ 1318.213371][T31021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=31021 comm=syz.3.8558 [ 1318.618445][T31021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31021 comm=syz.3.8558 [ 1318.635943][T31021] IPv6: NLM_F_CREATE should be specified when creating new route [ 1318.921020][T31031] openvswitch: netlink: Message has 16 unknown bytes. [ 1319.982284][T31044] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1319.989458][T31044] overlayfs: failed to set xattr on upper [ 1319.995196][T31044] overlayfs: ...falling back to redirect_dir=nofollow. [ 1320.002158][T31044] overlayfs: ...falling back to index=off. [ 1320.007986][T31044] overlayfs: ...falling back to uuid=null. [ 1320.071871][T31045] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1320.459942][ T30] audit: type=1400 audit(1759625547.091:1689): avc: denied { mounton } for pid=31038 comm="syz.1.8564" path="/file0" dev="ramfs" ino=127010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1320.907349][T31059] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.8566'. [ 1322.086056][ T30] audit: type=1400 audit(1759625548.700:1690): avc: denied { write } for pid=31071 comm="syz.6.8569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1322.157179][ T30] audit: type=1400 audit(1759625548.700:1691): avc: denied { create } for pid=31071 comm="syz.6.8569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1322.226807][ T30] audit: type=1400 audit(1759625548.700:1692): avc: denied { read } for pid=31071 comm="syz.6.8569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1327.546192][ T30] audit: type=1400 audit(1759625554.153:1693): avc: denied { getopt } for pid=31136 comm="syz.5.8586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1327.638957][ T30] audit: type=1400 audit(1759625554.210:1694): avc: denied { getopt } for pid=31135 comm="syz.1.8585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1328.718259][ T30] audit: type=1400 audit(1759625555.257:1695): avc: denied { wake_alarm } for pid=31140 comm="syz.1.8587" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1331.123305][ T30] audit: type=1326 audit(1759625557.128:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31194 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1331.173875][ T30] audit: type=1326 audit(1759625557.128:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31194 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1331.402722][T31201] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8595'. [ 1331.494947][ T30] audit: type=1326 audit(1759625557.137:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31194 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1331.533889][ T30] audit: type=1326 audit(1759625557.137:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31194 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1331.576040][ T30] audit: type=1326 audit(1759625557.137:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31194 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1331.628962][ T30] audit: type=1326 audit(1759625557.137:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31194 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1331.655031][ T30] audit: type=1326 audit(1759625557.137:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31194 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09198eec9 code=0x7ffc0000 [ 1332.660656][T31219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8599'. [ 1332.742386][T31220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8599'. [ 1333.401961][T31236] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8602'. [ 1335.391692][T31258] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.8604'. [ 1335.701183][T31258] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' [ 1335.713462][T31258] CPU: 0 UID: 0 PID: 31258 Comm: syz.1.8604 Not tainted syzkaller #0 PREEMPT(full) [ 1335.713487][T31258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1335.713497][T31258] Call Trace: [ 1335.713503][T31258] [ 1335.713510][T31258] dump_stack_lvl+0x16c/0x1f0 [ 1335.713536][T31258] sysfs_warn_dup+0x7f/0xa0 [ 1335.713560][T31258] sysfs_do_create_link_sd+0x124/0x140 [ 1335.713584][T31258] sysfs_create_link+0x61/0xc0 [ 1335.713607][T31258] device_add+0x62c/0x1aa0 [ 1335.713625][T31258] ? __pfx_device_add+0x10/0x10 [ 1335.713639][T31258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1335.713662][T31258] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1335.713687][T31258] wiphy_register+0x1eb0/0x2b20 [ 1335.713708][T31258] ? netdev_run_todo+0x864/0x1320 [ 1335.713729][T31258] ? __dev_printk+0x1c0/0x270 [ 1335.713753][T31258] ? __pfx_wiphy_register+0x10/0x10 [ 1335.713783][T31258] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1335.713807][T31258] ieee80211_register_hw+0x253d/0x4120 [ 1335.713838][T31258] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1335.713860][T31258] ? __pfx___debug_object_init+0x10/0x10 [ 1335.713891][T31258] ? find_held_lock+0x2b/0x80 [ 1335.713913][T31258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1335.713934][T31258] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1335.713955][T31258] ? __hrtimer_setup+0x176/0x280 [ 1335.713977][T31258] mac80211_hwsim_new_radio+0x32c7/0x5650 [ 1335.714008][T31258] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1335.714027][T31258] ? __asan_memcpy+0x3c/0x60 [ 1335.714045][T31258] hwsim_new_radio_nl+0xba2/0x1330 [ 1335.714064][T31258] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1335.714089][T31258] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1335.714114][T31258] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1335.714142][T31258] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1335.714167][T31258] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1335.714198][T31258] ? bpf_lsm_capable+0x9/0x10 [ 1335.714216][T31258] ? security_capable+0x7e/0x260 [ 1335.714241][T31258] ? ns_capable+0xd7/0x110 [ 1335.714263][T31258] genl_rcv_msg+0x55c/0x800 [ 1335.714288][T31258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1335.714311][T31258] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1335.714330][T31258] ? __lock_acquire+0x62e/0x1ce0 [ 1335.714350][T31258] netlink_rcv_skb+0x155/0x420 [ 1335.714371][T31258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1335.714395][T31258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1335.714432][T31258] ? netlink_deliver_tap+0x1ae/0xd30 [ 1335.714451][T31258] ? selinux_netlink_send+0x578/0x830 [ 1335.714466][T31258] ? is_vmalloc_addr+0x86/0xa0 [ 1335.714494][T31258] genl_rcv+0x28/0x40 [ 1335.714517][T31258] netlink_unicast+0x5aa/0x870 [ 1335.714543][T31258] ? __pfx_netlink_unicast+0x10/0x10 [ 1335.714564][T31258] ? __asan_memset+0x23/0x50 [ 1335.714581][T31258] ? __build_skb_around+0x278/0x3b0 [ 1335.714612][T31258] netlink_sendmsg+0x8c8/0xdd0 [ 1335.714637][T31258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1335.714667][T31258] ____sys_sendmsg+0xa95/0xc70 [ 1335.714691][T31258] ? copy_msghdr_from_user+0x10a/0x160 [ 1335.714709][T31258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1335.714738][T31258] ? __pfx_futex_wake_mark+0x10/0x10 [ 1335.714761][T31258] ___sys_sendmsg+0x134/0x1d0 [ 1335.714781][T31258] ? __pfx____sys_sendmsg+0x10/0x10 [ 1335.714832][T31258] __sys_sendmsg+0x16d/0x220 [ 1335.714851][T31258] ? __pfx___sys_sendmsg+0x10/0x10 [ 1335.714869][T31258] ? __x64_sys_futex+0x1e0/0x4c0 [ 1335.714900][T31258] do_syscall_64+0xcd/0x4e0 [ 1335.714922][T31258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.714936][T31258] RIP: 0033:0x7f958e38eec9 [ 1335.714950][T31258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1335.714964][T31258] RSP: 002b:00007f958bdd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1335.714979][T31258] RAX: ffffffffffffffda RBX: 00007f958e5e6360 RCX: 00007f958e38eec9 [ 1335.714989][T31258] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 1335.714998][T31258] RBP: 00007f958e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1335.715007][T31258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.715016][T31258] R13: 00007f958e5e63f8 R14: 00007f958e5e6360 R15: 00007ffd43625908 [ 1335.715038][T31258] [ 1336.960641][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1337.008812][ T30] audit: type=1400 audit(1759625562.619:1762): avc: denied { setattr } for pid=31265 comm="syz.3.8611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1338.475654][ T30] audit: type=1400 audit(1759625564.377:1763): avc: denied { mount } for pid=31289 comm="syz.3.8616" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1339.165854][ T30] audit: type=1400 audit(1759625564.452:1764): avc: denied { bind } for pid=31290 comm="syz.1.8617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1339.201683][ T30] audit: type=1400 audit(1759625564.452:1765): avc: denied { write } for pid=31290 comm="syz.1.8617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1339.234339][ T30] audit: type=1400 audit(1759625564.452:1766): avc: denied { read } for pid=31290 comm="syz.1.8617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1339.660738][ T30] audit: type=1400 audit(1759625565.491:1767): avc: denied { append } for pid=31300 comm="syz.2.8619" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1341.001165][T31325] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1341.009995][T31325] bridge0: entered allmulticast mode [ 1341.240154][T31334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8628'. [ 1341.304060][T31332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8626'. [ 1342.367333][T31359] netlink: 'syz.5.8632': attribute type 12 has an invalid length. [ 1345.559544][T31389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8641'. [ 1349.370434][T31443] openvswitch: netlink: Message has 16 unknown bytes. [ 1349.645934][T31452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8656'. [ 1349.730592][T31454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8656'. [ 1349.755375][T31452] macvtap1: entered promiscuous mode [ 1349.763063][T31452] ip6gretap0: entered promiscuous mode [ 1349.794232][T31452] macvtap1: entered allmulticast mode [ 1349.823919][T31452] ip6gretap0: entered allmulticast mode [ 1349.842427][T31454] ip6gretap0: left allmulticast mode [ 1349.847825][T31454] ip6gretap0: left promiscuous mode [ 1350.167163][ T30] audit: type=1400 audit(1759625575.331:1768): avc: denied { setopt } for pid=31457 comm="syz.2.8658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1350.354050][ T30] audit: type=1400 audit(1759625575.490:1769): avc: denied { mount } for pid=31460 comm="syz.5.8659" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1350.547656][T31465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8662'. [ 1351.464202][T31475] ptrace attach of "./syz-executor exec"[14154] was attempted by "./syz-executor exec"[31475] [ 1351.508735][T31479] netlink: 'syz.5.8666': attribute type 1 has an invalid length. [ 1352.219597][ T30] audit: type=1400 audit(1759625577.239:1770): avc: denied { create } for pid=31476 comm="syz.5.8666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1352.532154][ T30] audit: type=1400 audit(1759625577.239:1771): avc: denied { write } for pid=31476 comm="syz.5.8666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1352.758632][T31482] macvlan2: entered promiscuous mode [ 1352.763965][T31482] macvlan2: entered allmulticast mode [ 1352.770439][T31482] bond3: entered promiscuous mode [ 1352.776400][T31482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1352.839733][T31482] bond3: left promiscuous mode [ 1353.302532][T31498] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 1353.337327][ T30] audit: type=1400 audit(1759625578.296:1772): avc: denied { create } for pid=31487 comm="syz.3.8665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1353.465852][T31509] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1353.474592][ T30] audit: type=1400 audit(1759625578.418:1773): avc: denied { ioctl } for pid=31508 comm="syz.1.8672" path="socket:[127550]" dev="sockfs" ino=127550 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1354.287499][T31518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8674'. [ 1354.330050][T19794] libceph: connect (1)[c::]:6789 error -101 [ 1354.719244][T31520] ceph: No mds server is up or the cluster is laggy [ 1354.742382][T19794] libceph: mon0 (1)[c::]:6789 connect error [ 1356.640828][T31542] tipc: Enabling of bearer rejected, failed to enable media [ 1356.707502][ T30] audit: type=1400 audit(1759625581.439:1774): avc: denied { map } for pid=31527 comm="syz.2.8677" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1356.781245][T31534] ================================================================== [ 1356.789336][T31534] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1356.796541][T31534] Read of size 8 at addr ffff8880600b8588 by task syz.2.8677/31534 [ 1356.804429][T31534] [ 1356.806753][T31534] CPU: 0 UID: 0 PID: 31534 Comm: syz.2.8677 Not tainted syzkaller #0 PREEMPT(full) [ 1356.806778][T31534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1356.806790][T31534] Call Trace: [ 1356.806797][T31534] [ 1356.806805][T31534] dump_stack_lvl+0x116/0x1f0 [ 1356.806834][T31534] print_report+0xcd/0x630 [ 1356.806858][T31534] ? __virt_addr_valid+0x81/0x610 [ 1356.806888][T31534] ? __phys_addr+0xe8/0x180 [ 1356.806923][T31534] ? __cpa_addr+0x1d3/0x220 [ 1356.806942][T31534] kasan_report+0xe0/0x110 [ 1356.806965][T31534] ? __cpa_addr+0x1d3/0x220 [ 1356.806989][T31534] __cpa_addr+0x1d3/0x220 [ 1356.807010][T31534] cpa_flush+0x28b/0x8a0 [ 1356.807034][T31534] ? __pfx_cpa_flush+0x10/0x10 [ 1356.807058][T31534] ? pgprot2cachemode+0x9a/0x130 [ 1356.807086][T31534] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1356.807114][T31534] ? drm_gem_get_pages+0x6a0/0xa10 [ 1356.807139][T31534] change_page_attr_set_clr+0x34e/0x4a0 [ 1356.807165][T31534] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1356.807200][T31534] _set_pages_array+0x1ab/0x2c0 [ 1356.807225][T31534] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1356.807246][T31534] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1356.807265][T31534] ? __pfx___might_resched+0x10/0x10 [ 1356.807295][T31534] drm_gem_shmem_mmap+0xc9/0x550 [ 1356.807313][T31534] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1356.807333][T31534] drm_gem_mmap_obj+0x1b5/0x560 [ 1356.807356][T31534] drm_gem_mmap+0x40b/0x620 [ 1356.807379][T31534] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1356.807400][T31534] ? vm_area_alloc+0x1f/0x160 [ 1356.807428][T31534] ? lockdep_init_map_type+0x5c/0x280 [ 1356.807451][T31534] __mmap_region+0x1306/0x27a0 [ 1356.807471][T31534] ? __pfx___mmap_region+0x10/0x10 [ 1356.807489][T31534] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1356.807515][T31534] ? audit_log_end+0x1f/0x30 [ 1356.807535][T31534] ? audit_log_end+0x1f/0x30 [ 1356.807554][T31534] ? common_lsm_audit+0x260/0x300 [ 1356.807605][T31534] ? __lock_acquire+0xb97/0x1ce0 [ 1356.807628][T31534] mmap_region+0x1ab/0x3f0 [ 1356.807643][T31534] ? __get_unmapped_area+0x267/0x440 [ 1356.807666][T31534] do_mmap+0xa3e/0x1210 [ 1356.807690][T31534] ? __pfx_do_mmap+0x10/0x10 [ 1356.807711][T31534] ? __pfx_down_write_killable+0x10/0x10 [ 1356.807740][T31534] vm_mmap_pgoff+0x29e/0x470 [ 1356.807765][T31534] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1356.807790][T31534] ? __fget_files+0x20e/0x3c0 [ 1356.807814][T31534] ksys_mmap_pgoff+0x32c/0x5c0 [ 1356.807835][T31534] ? __pfx_ksys_write+0x10/0x10 [ 1356.807856][T31534] __x64_sys_mmap+0x125/0x190 [ 1356.807878][T31534] do_syscall_64+0xcd/0x4e0 [ 1356.807903][T31534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.807930][T31534] RIP: 0033:0x7fb09198eec9 [ 1356.807948][T31534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.807968][T31534] RSP: 002b:00007fb09285e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1356.807989][T31534] RAX: ffffffffffffffda RBX: 00007fb091be6180 RCX: 00007fb09198eec9 [ 1356.808002][T31534] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 1356.808014][T31534] RBP: 00007fb091a11f91 R08: 0000000000000005 R09: 0000000100000000 [ 1356.808027][T31534] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1356.808039][T31534] R13: 00007fb091be6218 R14: 00007fb091be6180 R15: 00007ffe6d305828 [ 1356.808060][T31534] [ 1356.808067][T31534] [ 1357.138471][T31534] Allocated by task 31534: [ 1357.142871][T31534] kasan_save_stack+0x33/0x60 [ 1357.147532][T31534] kasan_save_track+0x14/0x30 [ 1357.152189][T31534] __kasan_kmalloc+0xaa/0xb0 [ 1357.156754][T31534] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1357.162108][T31534] drm_gem_get_pages+0x144/0xa10 [ 1357.167029][T31534] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1357.173076][T31534] drm_gem_shmem_mmap+0xc9/0x550 [ 1357.177994][T31534] drm_gem_mmap_obj+0x1b5/0x560 [ 1357.182824][T31534] drm_gem_mmap+0x40b/0x620 [ 1357.187314][T31534] __mmap_region+0x1306/0x27a0 [ 1357.192056][T31534] mmap_region+0x1ab/0x3f0 [ 1357.196451][T31534] do_mmap+0xa3e/0x1210 [ 1357.200597][T31534] vm_mmap_pgoff+0x29e/0x470 [ 1357.205166][T31534] ksys_mmap_pgoff+0x32c/0x5c0 [ 1357.209913][T31534] __x64_sys_mmap+0x125/0x190 [ 1357.214569][T31534] do_syscall_64+0xcd/0x4e0 [ 1357.219067][T31534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.224939][T31534] [ 1357.227340][T31534] The buggy address belongs to the object at ffff8880600b8500 [ 1357.227340][T31534] which belongs to the cache kmalloc-192 of size 192 [ 1357.241372][T31534] The buggy address is located 0 bytes to the right of [ 1357.241372][T31534] allocated 136-byte region [ffff8880600b8500, ffff8880600b8588) [ 1357.255845][T31534] [ 1357.258145][T31534] The buggy address belongs to the physical page: [ 1357.264532][T31534] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x600b8 [ 1357.273269][T31534] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1357.280799][T31534] page_type: f5(slab) [ 1357.284761][T31534] raw: 00fff00000000000 ffff88801b0263c0 0000000000000000 dead000000000001 [ 1357.293323][T31534] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1357.301878][T31534] page dumped because: kasan: bad access detected [ 1357.308279][T31534] page_owner tracks the page as allocated [ 1357.313980][T31534] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 13968, tgid 13968 (modprobe), ts 319382410528, free_ts 314592656775 [ 1357.333619][T31534] post_alloc_hook+0x1c0/0x230 [ 1357.338382][T31534] get_page_from_freelist+0x10a3/0x3a30 [ 1357.343916][T31534] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1357.349814][T31534] new_slab+0xa5/0x360 [ 1357.353869][T31534] ___slab_alloc+0xdc4/0x1ae0 [ 1357.358531][T31534] __slab_alloc.constprop.0+0x63/0x110 [ 1357.363976][T31534] __kmalloc_node_noprof+0x4dd/0x8a0 [ 1357.369240][T31534] alloc_slab_obj_exts+0x3a/0xd0 [ 1357.374163][T31534] new_slab+0x283/0x360 [ 1357.378336][T31534] ___slab_alloc+0xdc4/0x1ae0 [ 1357.382998][T31534] __slab_alloc.constprop.0+0x63/0x110 [ 1357.388440][T31534] kmem_cache_alloc_noprof+0x43f/0x6e0 [ 1357.393890][T31534] alloc_empty_file+0x55/0x1e0 [ 1357.398643][T31534] path_openat+0xda/0x2cb0 [ 1357.403039][T31534] do_filp_open+0x20b/0x470 [ 1357.407522][T31534] do_sys_openat2+0x11b/0x1d0 [ 1357.412182][T31534] page last free pid 5937 tgid 5937 stack trace: [ 1357.418483][T31534] __free_frozen_pages+0x7df/0x1160 [ 1357.423669][T31534] vfree+0x1fd/0xb50 [ 1357.427544][T31534] pcpu_balance_free+0x5fb/0xaf0 [ 1357.432468][T31534] pcpu_balance_workfn+0x9c2/0xe00 [ 1357.437563][T31534] process_one_work+0x9cc/0x1b70 [ 1357.442487][T31534] worker_thread+0x6c8/0xf10 [ 1357.447061][T31534] kthread+0x3c5/0x780 [ 1357.451110][T31534] ret_from_fork+0x56d/0x730 [ 1357.455689][T31534] ret_from_fork_asm+0x1a/0x30 [ 1357.460436][T31534] [ 1357.462745][T31534] Memory state around the buggy address: [ 1357.468359][T31534] ffff8880600b8480: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1357.476396][T31534] ffff8880600b8500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1357.484436][T31534] >ffff8880600b8580: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1357.492483][T31534] ^ [ 1357.496800][T31534] ffff8880600b8600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1357.504851][T31534] ffff8880600b8680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1357.512904][T31534] ================================================================== [ 1357.532372][ T30] audit: type=1400 audit(1759625581.467:1775): avc: denied { execute } for pid=31527 comm="syz.2.8677" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1357.603254][T31534] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1357.610469][T31534] CPU: 1 UID: 0 PID: 31534 Comm: syz.2.8677 Not tainted syzkaller #0 PREEMPT(full) [ 1357.619831][T31534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1357.629880][T31534] Call Trace: [ 1357.633153][T31534] [ 1357.636080][T31534] dump_stack_lvl+0x3d/0x1f0 [ 1357.640683][T31534] vpanic+0x640/0x6f0 [ 1357.644665][T31534] panic+0xca/0xd0 [ 1357.648378][T31534] ? __pfx_panic+0x10/0x10 [ 1357.652785][T31534] ? __cpa_addr+0x1d3/0x220 [ 1357.657283][T31534] ? preempt_schedule_common+0x44/0xc0 [ 1357.662745][T31534] ? preempt_schedule_thunk+0x16/0x30 [ 1357.668130][T31534] check_panic_on_warn+0xab/0xb0 [ 1357.673062][T31534] end_report+0x107/0x170 [ 1357.677390][T31534] kasan_report+0xee/0x110 [ 1357.681801][T31534] ? __cpa_addr+0x1d3/0x220 [ 1357.686286][T31534] __cpa_addr+0x1d3/0x220 [ 1357.690591][T31534] cpa_flush+0x28b/0x8a0 [ 1357.694805][T31534] ? __pfx_cpa_flush+0x10/0x10 [ 1357.699546][T31534] ? pgprot2cachemode+0x9a/0x130 [ 1357.704470][T31534] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1357.709822][T31534] ? drm_gem_get_pages+0x6a0/0xa10 [ 1357.714914][T31534] change_page_attr_set_clr+0x34e/0x4a0 [ 1357.720440][T31534] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1357.726489][T31534] _set_pages_array+0x1ab/0x2c0 [ 1357.731320][T31534] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1357.737364][T31534] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1357.743926][T31534] ? __pfx___might_resched+0x10/0x10 [ 1357.749191][T31534] drm_gem_shmem_mmap+0xc9/0x550 [ 1357.754101][T31534] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1357.760225][T31534] drm_gem_mmap_obj+0x1b5/0x560 [ 1357.765048][T31534] drm_gem_mmap+0x40b/0x620 [ 1357.769522][T31534] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1357.774518][T31534] ? vm_area_alloc+0x1f/0x160 [ 1357.779172][T31534] ? lockdep_init_map_type+0x5c/0x280 [ 1357.784514][T31534] __mmap_region+0x1306/0x27a0 [ 1357.789247][T31534] ? __pfx___mmap_region+0x10/0x10 [ 1357.794329][T31534] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1357.800284][T31534] ? audit_log_end+0x1f/0x30 [ 1357.804846][T31534] ? audit_log_end+0x1f/0x30 [ 1357.809404][T31534] ? common_lsm_audit+0x260/0x300 [ 1357.814425][T31534] ? __lock_acquire+0xb97/0x1ce0 [ 1357.819344][T31534] mmap_region+0x1ab/0x3f0 [ 1357.823729][T31534] ? __get_unmapped_area+0x267/0x440 [ 1357.828988][T31534] do_mmap+0xa3e/0x1210 [ 1357.833115][T31534] ? __pfx_do_mmap+0x10/0x10 [ 1357.837675][T31534] ? __pfx_down_write_killable+0x10/0x10 [ 1357.843285][T31534] vm_mmap_pgoff+0x29e/0x470 [ 1357.847848][T31534] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1357.852930][T31534] ? __fget_files+0x20e/0x3c0 [ 1357.857582][T31534] ksys_mmap_pgoff+0x32c/0x5c0 [ 1357.862313][T31534] ? __pfx_ksys_write+0x10/0x10 [ 1357.867135][T31534] __x64_sys_mmap+0x125/0x190 [ 1357.871787][T31534] do_syscall_64+0xcd/0x4e0 [ 1357.876261][T31534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.882125][T31534] RIP: 0033:0x7fb09198eec9 [ 1357.886510][T31534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.906090][T31534] RSP: 002b:00007fb09285e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1357.914470][T31534] RAX: ffffffffffffffda RBX: 00007fb091be6180 RCX: 00007fb09198eec9 [ 1357.922411][T31534] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 1357.930351][T31534] RBP: 00007fb091a11f91 R08: 0000000000000005 R09: 0000000100000000 [ 1357.938292][T31534] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1357.946232][T31534] R13: 00007fb091be6218 R14: 00007fb091be6180 R15: 00007ffe6d305828 [ 1357.954179][T31534] [ 1357.957361][T31534] Kernel Offset: disabled [ 1357.961657][T31534] Rebooting in 86400 seconds..