last executing test programs: 21.166990586s ago: executing program 0 (id=242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x22052, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x820b6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0000ffff00", "145e54984bc282b16c6e668d6ddc0632fb80abbd6d46d334a8762b1af71b229e", "5d1cb6db", "5e10eb5d68aabead"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=r1], 0x38}}, 0x0) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f0000000740)=""/4096, &(0x7f0000001740)=0x1000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x10001, 0x5}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000005) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xa100) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x0, @name="ba7d9de699680bd106fdca6bd9d8fcfc68471711d11fadc39b8155318ae276ec"}, 0x8, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"040000000000000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000007ff4a70f3"}, 0x4000c, 0x1}) read(r4, &(0x7f0000000100)=""/125, 0x7d) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 16.945919349s ago: executing program 2 (id=250): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x181) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x8c400, 0x0) timer_create(0x5, &(0x7f0000000440)={0x0, 0xe, 0x4, @thr={&(0x7f00000002c0)="84d65bd1b0c97f940bf722684bd94babecf713d9d19d0bb1187486b5f3969390bc075da5849474011e85ba4aaf647f447abd29b80d874b70de6bdbc42622630d152fdefa233f9ece023f8a67d9fa4652bf3673a2b02a47966bc8edcaf7a42ed666f56347ca925a0a84fe66bc9c68c3aeb055e32673b34fa80e4c615834e88e03763bededeab2c587dd37ac0b17c2e32228f31a0d804181358bc44999a3bc7b08d3f7bd1fb7adf712eb1b7142d2bbaa0881", &(0x7f0000000380)="3ffea31388f005ed319cf37bcc43299e0cb83d072a0c2296f59c2eeff96402016f69a5b04ef800b3a277d3adad2c668583218909fb0747f30da2b762d5b882fc16edc5f6715749866c99a4d2b31dcd3424633063af4e0af4370f753cbdbc36c57bd445f0045309bd6d9210ff7a01c5435938dfccf8f98e8f324be43d234f9c655d5d49f136283f030d45ffa416e0f8b43a44b2f9e26b70087820bd0033872b8f3b68a229a745aaf70e07559485164b20fb3681ac042e7ecc7c8358a486"}}, &(0x7f0000000480)) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, r8, 0x8a, &(0x7f00000000c0)=""/138}) move_pages(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00004cc000/0x4000)=nil], &(0x7f00000004c0)=[0x1, 0x4, 0x2], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 16.607460333s ago: executing program 0 (id=251): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r3, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10000, 0x590f}}, './file0\x00'}) sendmsg$nl_netfilter(r10, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x26c, 0x0, 0x8, 0x301, 0x70bd29, 0x25dfdbfb, {0x3, 0x0, 0x3}, [@generic="89acf95e94d9a412fdebd91eaf1e38217d84cfe31e3eebaca1ea1d8f6036e94c03bf9110bcff47829b5aaa444c46f660133d7a5396a27d72530da73e2798b5798197d72cb9c2be27b4171282c0a442c3ef9e1daed5bf6984922c08ff3cca170b051940254da48b0a74d3bd8c2bf882253a06e9b7f54ed0ecab5d93117fff4296", @generic="b07b7555f3b9bb20ffde4ac109544409d268c3d05ead72bd4cc57911423b889d7095f14f5bc9352eda97723fb59b5e60e495989fb9556af022edc02724fd75f4c3b752804dbff977d4c59de9f91a5b4f224b746d0b30c4e96354ef26b51519832bd59ea93e7f7a8bd983f0c16ac01f36b9e413cc33143ef32f72b5571174c7fd7fd3d509de6111a1c7fa6b9d857ce7dcfa6921649c96833bc4dfea1aae35807ebbed236c23927d", @generic="12340db427109c9fb347c074662273e59b40c940aa3705eb4f09d5136140b45078642d668cfc45b3437ef9f7a10cb50d399f61004c5ccb565f1a7f10e559bd4b96a01f37", @typed={0x8, 0xe8, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xd4, 0x10b, 0x0, 0x0, @binary="c96abaa07cc9d928d13f2fc62c5d6a9821dca703333cdfb64dd31b3c06ba3a5422bb1309455260547f1b4e5d010e4c5a8436b2193f756da04b12a4110f6b39a6310b4891e20bc9a29dadb98db31bda98d0e303b61cb1c23ad5189a25453a92f0a04300ae6e5516b90838124ff9d2e47bdda22c6c9ddf28182b35fd93d12dbacbdf711467e24c1ead2e1b1fa13b7c51b3941b31cc694f812c928df5cfc158c8091499785547885ad2bdaf7fd2a8ed874c656bb6a8214f90f9eed95feb901e57567be5d0c0bcd4455a1de5cf2f7a09410c"}, @typed={0x4, 0x13c}, @typed={0x4, 0x66}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24000004}, 0x80d5) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r11, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES32=r11, @ANYBLOB="eb"], 0x40c}}, 0x0) 15.757621451s ago: executing program 1 (id=253): openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xb2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79e}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80d4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x9, 0x2000) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x8000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xffffffff, 0x80000006, 0x200000400}, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0x9) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000e, 0x50, r6, 0xe8c8000) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) 15.700195961s ago: executing program 0 (id=254): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x82, 0x48) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x200, @local, 0x44}}, 0x81, 0x1}, &(0x7f0000000500)=0x90) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket(0x2b, 0x1, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 13.395263766s ago: executing program 3 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) get_robust_list(0x0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x5) io_submit(0x0, 0x0, 0x0) shutdown(r5, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000240)={0x0, 0x7f}, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8923, 0x0) syz_open_pts(r3, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043d2a33f139ce3a8d277e4f97fa346d0eaaaaaaaaaa109ccd0bbae9000000"], 0x11) creat(0x0, 0xba) fremovexattr(r3, &(0x7f0000000280)=@known='trusted.overlay.upper\x00') r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r7, 0x0, 0x2, 0x0, &(0x7f0000000100)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) 11.959069402s ago: executing program 3 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f7, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008811) socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) syz_emit_ethernet(0x4a, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) 11.866296703s ago: executing program 0 (id=257): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20) getpid() openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80840, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xac, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd110010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7", 0x0, 0x31, 0x6000000000000000}, 0x50) 10.109977683s ago: executing program 3 (id=259): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x54}}, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.980797798s ago: executing program 0 (id=260): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x381844, 0x80) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4008030) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r7], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x24004050) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r8, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1002, 0x2}) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) 9.939079808s ago: executing program 1 (id=261): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000440)={0x0, 0xcc17, 0x10, 0x2, 0x2ee}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffff000206000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002400128009000100626f6e64000000001400028005000100040000000500150001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x5) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) userfaultfd(0x80000) close(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00\x00\x00\b\x00\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r3}, 0x38) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x600, 0x4) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 9.171223783s ago: executing program 2 (id=262): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x82, 0x48) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x800, 0x8204, 0xff, 0x6, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e20, 0x200, @local, 0x44}}, 0x81, 0x1}, &(0x7f0000000500)=0x90) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket(0x2b, 0x1, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 8.751093532s ago: executing program 4 (id=263): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r5 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r5, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000800)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5ea, 0x0, 0x30, 0x0, @in={0x2, 0x4e21, @loopback}, @ib={0x1b, 0xfffe, 0x0, {"00000000000000000000000000000001"}, 0x80000003, 0x3, 0x4}}}, 0x118) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 8.544908332s ago: executing program 1 (id=264): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40100) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffeff9, 0x0, 0x3, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x3, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xc2, 0x1000, 0x1, 0x8, 0x8}, 0x2, 0x1, 0x10000, 0x4, 0x10001, 0x15, 0x1b, 0x1e, 0x2, 0x7, {0x9, 0x0, 0xfffffffe, 0xffffff7c, 0x1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendto$inet(r3, &(0x7f00000000c0)="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", 0x508, 0x6000000000004010, 0x0, 0x0) 8.459535288s ago: executing program 2 (id=265): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) epoll_create(0x3ff) syz_open_dev$sg(&(0x7f0000000540), 0x9, 0x80000) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x7d, 0x0, 0x7ffe, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE(r3, 0x40084d02, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x4ff9c, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 8.164676689s ago: executing program 3 (id=266): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000"], 0x7c}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x10001011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x8) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000091000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b700000000000000950000000000000056d5ec0b6c904661f7b067106aa49499c79dd1f20dc1c7da4546c75243e1ee9419dc33717cc837b86a0c08ff8fb0cc6398df345d2d91920ad64dcf8ede0650ba9240ea4926490ece0df8bf67003b6b2eab3ce16964e0a552d17d777e62f57f09dbe79fb25dd03b"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mknodat(r1, 0x0, 0x10, 0xfffffffc) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)="0b0312002e00640002004754", 0xc, 0x0, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2778) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x40001) 6.817278983s ago: executing program 3 (id=267): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x62207}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x4}]}}}]}, 0x40}, 0x1, 0x4000, 0x0, 0x44000}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f00000028c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x14, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x28, 0x2c, 0x0, @local, @ipv4={'\x00', '\xff\xff', @empty}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private0}}}}}, 0x5e) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) 6.055963992s ago: executing program 4 (id=268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}}], 0x1, 0x8014) listen(r1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20008004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x4}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x2, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x800) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 5.275192641s ago: executing program 2 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008811) socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) syz_emit_ethernet(0x4a, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) 5.259369698s ago: executing program 1 (id=270): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20) getpid() openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80840, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x3, 0x2090) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xac, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd110010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7", 0x0, 0x31, 0x6000000000000000}, 0x50) 4.833552584s ago: executing program 4 (id=271): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x82, 0x48) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x800, 0x8204, 0xff, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000500)) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() acct(&(0x7f0000000000)='./bus\x00') acct(0x0) socket(0x2b, 0x1, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 4.666341424s ago: executing program 0 (id=272): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) listen(r4, 0x5b) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'vlan0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0xffffffd9, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)={0x0, 0x8}) 3.558126222s ago: executing program 2 (id=273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r4, 0x8000000000000000, 0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$nl_route(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = memfd_secret(0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, r6, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r6) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0xf2) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xbd}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x1000, 0xc, 0x9, 0x1015, r7, 0x1, '\x00', 0x0, r6, 0x4, 0x1, 0x1, 0x3}, 0x50) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 3.48098515s ago: executing program 1 (id=274): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000440)={0x0, 0xcc17, 0x10, 0x2, 0x2ee}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffff000206000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000002400128009000100626f6e64000000001400028005000100040000000500150001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x5) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) userfaultfd(0x80000) close(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00\x00\x00\b\x00\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000880), 0x8e5b, r3}, 0x38) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x600, 0x4) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 2.849879777s ago: executing program 4 (id=275): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x347}, 0x94) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x1000003, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x38, {0x2, 0x4e22, @empty}, 'ip6gre0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010327bd7000ffdbdf250200000800000000f9"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYBLOB="31032cb57000fbee4dfd4ee07108"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) set_mempolicy(0x8000, &(0x7f0000000240)=0x4, 0x6) 2.207111146s ago: executing program 2 (id=276): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400a40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000068000100fdfc0000fbdbdf25020000001800000004000b008b1993a63e53438830a581eaf24ab9083c326a0958bbc295e0fdd5d35b4903a1d9ba241a9a944abf09fb332b73571fdcf088441fe5e3c2f440e8d6faef3528f80d63dfb5ec3633765f533222538058f8db9c865a9692f4cdac1d4f275c5ffdc3405dfc3ebe5fb379f89acc8e125a23711f15ead25e926d99c5add57f379cc664a24ea83fe971e4207e327f988dda9211680311d0374df971ba0c6e2eca09c0d72141280d9ee806c2cb5d0c972892971693972ddc19cf038ae71ea77ee95a64c4d4668fce196e63623cc3356cb16d"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf250235128bdde67ec0a3000b0001edff00"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x8, 0xf60, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) shutdown(r8, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.138953722s ago: executing program 1 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000001100)=0x3fa, 0x4) mount$nfs(&(0x7f0000000480)='\\(\x00o\xa2]\xb6d\x0fO\x1a\x96e,\xb6k\xc38\x17\x9f\x9a\xe5\x83{\xa3\xc1[{\xf1\x9bS\x17\x8b\xf6\x02\xdf\xaf]\xf8#\xba0\x02\xfcD\x9a\f\xad/Z\a_\x18q[Cm5\x9eq\xbe\xd1G\xdb\xab\x86\xcf\xb0\x8f\xb3\x99\xd3\x9f\xb4\xb5\x02E\xbb\xb4\\\xb5\xd8\xb2\xe3\x9e\xb5G\n\xd7\xb3\xd2\xa4U\xcb\xf5&.\xd4\xc7>\xcf\xcd%\x0e\xcb\'\x9e\x82\nDN\x81G\xad\x00'/124, &(0x7f0000000440)='.\x00', &(0x7f0000000080), 0x80001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{0x80, 0x81, 0x10, 0xc}, {0x1, 0x7, 0x7, 0xffffffff}]}, 0x10) r3 = socket(0x1, 0x2, 0x200) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x0, 0x0, 0x0) bind$vsock_stream(r3, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) connect$llc(r5, &(0x7f0000000100)={0x1a, 0xf, 0x8a, 0x6, 0x6, 0xf, @random="000000001df4"}, 0x10) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0x958d, 0x1, 0x0, 0x180, 0x8, 0x2}, 0x30, 0x0) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x81}], 0x1, 0x2121, 0x0) landlock_restrict_self(r6, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @random="0000e8ffffff"}, 0x14) 984.662011ms ago: executing program 4 (id=278): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r5 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r5, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000800)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5ea, 0x0, 0x30, 0x0, @in={0x2, 0x4e21, @loopback}, @ib={0x1b, 0xfffe, 0x0, {"00000000000000000000000000000001"}, 0x80000003, 0x3, 0x4}}}, 0x118) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 94.183125ms ago: executing program 4 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008811) socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) syz_emit_ethernet(0x4a, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) 0s ago: executing program 3 (id=280): rmdir(&(0x7f0000000180)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}, 0x9}], 0x1, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = userfaultfd(0x80001) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x25, 0x0, &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000000c0)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac", 0x33}], 0x1) write$P9_RGETATTR(r5, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x1081, {0x4, 0x3, 0x3}, 0x168, 0x0, 0xee00, 0x2, 0x2800000000000000, 0xff, 0xd, 0xff, 0x100000000, 0x1, 0x10001, 0x7fff, 0x419, 0x4, 0xe800000, 0x4, 0x3, 0x5}}, 0xa0) write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='nr0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) kernel console output (not intermixed with test programs): [ 48.899069][ T30] audit: type=1400 audit(1784156850.293:103): avc: denied { write } for pid=5427 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.027829][ T30] audit: type=1400 audit(1784156850.423:104): avc: denied { write } for pid=5427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.120195][ T30] audit: type=1400 audit(1784156850.513:105): avc: denied { write } for pid=5441 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.497185][ T30] audit: type=1400 audit(1784156850.893:106): avc: denied { transition } for pid=5449 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.524077][ T30] audit: type=1400 audit(1784156850.893:107): avc: denied { noatsecure } for pid=5449 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.550759][ T30] audit: type=1400 audit(1784156850.893:108): avc: denied { write } for pid=5449 comm="sh" path="pipe:[3860]" dev="pipefs" ino=3860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 49.573371][ T30] audit: type=1400 audit(1784156850.893:109): avc: denied { rlimitinh } for pid=5449 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.592967][ T30] audit: type=1400 audit(1784156850.893:110): avc: denied { siginh } for pid=5449 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.171395][ T30] audit: type=1400 audit(1784156853.563:111): avc: denied { write } for pid=5459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.215803][ T30] audit: type=1400 audit(1784156853.613:112): avc: denied { write } for pid=5470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.931794][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 53.931820][ T30] audit: type=1400 audit(1784156855.323:123): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.981629][ T30] audit: type=1400 audit(1784156855.373:124): avc: denied { write } for pid=5554 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.389843][ T30] audit: type=1400 audit(1784156855.783:125): avc: denied { write } for pid=5558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.447011][ T30] audit: type=1400 audit(1784156855.843:126): avc: denied { write } for pid=5569 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.615765][ T30] audit: type=1400 audit(1784156856.013:127): avc: denied { write } for pid=5572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.672951][ T30] audit: type=1400 audit(1784156856.073:128): avc: denied { write } for pid=5583 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 61.225133][ T30] audit: type=1400 audit(1784156862.623:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.249106][ T30] audit: type=1400 audit(1784156862.643:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.252305][ T5594] cgroup: Unknown subsys name 'net' [ 61.278000][ T30] audit: type=1400 audit(1784156862.673:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.395423][ T5594] cgroup: Unknown subsys name 'cpuset' [ 61.403208][ T5594] cgroup: Unknown subsys name 'rlimit' [ 61.513844][ T30] audit: type=1400 audit(1784156862.903:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.547231][ T30] audit: type=1400 audit(1784156862.913:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.568012][ T30] audit: type=1400 audit(1784156862.913:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.589465][ T30] audit: type=1400 audit(1784156862.913:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.619440][ T30] audit: type=1400 audit(1784156862.923:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 61.636284][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 61.644695][ T30] audit: type=1400 audit(1784156862.923:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.676786][ T30] audit: type=1400 audit(1784156863.053:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.616689][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.624143][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.634466][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.642151][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.644618][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.650663][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.665094][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.666664][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.673400][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.684148][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.688412][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.703265][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.703438][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.711311][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.719172][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.725977][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.734609][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.740522][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.755637][ T4928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.763412][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.764227][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.772072][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.780112][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.788017][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.809871][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.820994][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.906789][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.914205][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.029335][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.048892][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.056111][ T5609] bridge_slave_0: entered allmulticast mode [ 66.062961][ T5609] bridge_slave_0: entered promiscuous mode [ 66.097328][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.104483][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.111566][ T5609] bridge_slave_1: entered allmulticast mode [ 66.118463][ T5609] bridge_slave_1: entered promiscuous mode [ 66.135295][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.142419][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.149685][ T5607] bridge_slave_0: entered allmulticast mode [ 66.156554][ T5607] bridge_slave_0: entered promiscuous mode [ 66.189356][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.196522][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.203866][ T5607] bridge_slave_1: entered allmulticast mode [ 66.210674][ T5607] bridge_slave_1: entered promiscuous mode [ 66.250777][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.264249][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.271395][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.278754][ T5608] bridge_slave_0: entered allmulticast mode [ 66.285553][ T5608] bridge_slave_0: entered promiscuous mode [ 66.304621][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.325269][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.332490][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.339746][ T5608] bridge_slave_1: entered allmulticast mode [ 66.346623][ T5608] bridge_slave_1: entered promiscuous mode [ 66.355660][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.389967][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.407017][ T5609] team0: Port device team_slave_0 added [ 66.438447][ T5609] team0: Port device team_slave_1 added [ 66.444185][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.451313][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.458528][ T5613] bridge_slave_0: entered allmulticast mode [ 66.465401][ T5613] bridge_slave_0: entered promiscuous mode [ 66.474031][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.489081][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.496286][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.503568][ T5606] bridge_slave_0: entered allmulticast mode [ 66.510218][ T5606] bridge_slave_0: entered promiscuous mode [ 66.529233][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.536543][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.544150][ T5613] bridge_slave_1: entered allmulticast mode [ 66.550815][ T5613] bridge_slave_1: entered promiscuous mode [ 66.558612][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.569203][ T5607] team0: Port device team_slave_0 added [ 66.575017][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.582095][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.589285][ T5606] bridge_slave_1: entered allmulticast mode [ 66.596065][ T5606] bridge_slave_1: entered promiscuous mode [ 66.603165][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.610187][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.636218][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.662629][ T5607] team0: Port device team_slave_1 added [ 66.675085][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.682107][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.708330][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.753156][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.765199][ T5608] team0: Port device team_slave_0 added [ 66.779076][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.788532][ T5616] Bluetooth: hci0: command tx timeout [ 66.790927][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.805551][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.815953][ T5608] team0: Port device team_slave_1 added [ 66.821969][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.829186][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.855083][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.865689][ T50] Bluetooth: hci1: command tx timeout [ 66.867110][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.871772][ T5611] Bluetooth: hci4: command tx timeout [ 66.878363][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.878383][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.878714][ T5625] Bluetooth: hci2: command tx timeout [ 66.884707][ T5616] Bluetooth: hci3: command tx timeout [ 66.978848][ T5613] team0: Port device team_slave_0 added [ 66.992138][ T5606] team0: Port device team_slave_0 added [ 67.001518][ T5609] hsr_slave_0: entered promiscuous mode [ 67.007730][ T5609] hsr_slave_1: entered promiscuous mode [ 67.016208][ T5613] team0: Port device team_slave_1 added [ 67.029145][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.036244][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.062161][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.074577][ T5606] team0: Port device team_slave_1 added [ 67.099572][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.106626][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.132723][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.156632][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.163671][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.189652][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.211498][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.218654][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.244662][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.259194][ T5607] hsr_slave_0: entered promiscuous mode [ 67.265453][ T5607] hsr_slave_1: entered promiscuous mode [ 67.271309][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 67.277175][ T5607] Cannot create hsr debugfs directory [ 67.283361][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.290278][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.316235][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.332304][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.339447][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.365465][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.465344][ T5608] hsr_slave_0: entered promiscuous mode [ 67.471376][ T5608] hsr_slave_1: entered promiscuous mode [ 67.478176][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 67.483966][ T5608] Cannot create hsr debugfs directory [ 67.520820][ T5606] hsr_slave_0: entered promiscuous mode [ 67.527568][ T5606] hsr_slave_1: entered promiscuous mode [ 67.533600][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 67.539309][ T5606] Cannot create hsr debugfs directory [ 67.548865][ T5613] hsr_slave_0: entered promiscuous mode [ 67.555136][ T5613] hsr_slave_1: entered promiscuous mode [ 67.561011][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 67.566964][ T5613] Cannot create hsr debugfs directory [ 67.836939][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.847417][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.873866][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.883358][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.890971][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.900280][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.913261][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.922477][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.992344][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.001643][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.011561][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.021980][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.029908][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.039257][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.047094][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.056482][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.135262][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.144252][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.152554][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.161913][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.169669][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.178434][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.198899][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.208425][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.285918][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.295546][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.305234][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.326460][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.335456][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.348454][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.357740][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.378567][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.387240][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.402566][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.439221][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.452594][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.464248][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.471917][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.480477][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.491010][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.498487][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.511900][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.519010][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.527221][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.537191][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.545341][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.553787][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.595783][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.625047][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.632139][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.652987][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.663075][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.670182][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.731978][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.758051][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.765224][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.796119][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.803286][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.864648][ T5616] Bluetooth: hci0: command tx timeout [ 68.896024][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.927656][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.943459][ T5616] Bluetooth: hci4: command tx timeout [ 68.944526][ T5611] Bluetooth: hci2: command tx timeout [ 68.948881][ T5616] Bluetooth: hci3: command tx timeout [ 68.954362][ T5611] Bluetooth: hci1: command tx timeout [ 68.984339][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.022394][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.037338][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.044494][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.068686][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.075862][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.125057][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.132217][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.164934][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.172090][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.399041][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.528747][ T5609] veth0_vlan: entered promiscuous mode [ 69.565562][ T5609] veth1_vlan: entered promiscuous mode [ 69.659166][ T5609] veth0_macvtap: entered promiscuous mode [ 69.697988][ T5609] veth1_macvtap: entered promiscuous mode [ 69.778569][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.808989][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.856978][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.866684][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.880169][ T1027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.891907][ T1027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.916651][ T1027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.943671][ T1027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.054981][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.151206][ T5608] veth0_vlan: entered promiscuous mode [ 70.168462][ T3369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.179602][ T3369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.201480][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.222485][ T5608] veth1_vlan: entered promiscuous mode [ 70.249109][ T5606] veth0_vlan: entered promiscuous mode [ 70.269578][ T3369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.278353][ T3369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.294469][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 70.294485][ T30] audit: type=1400 audit(1784156871.693:154): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.pBvAy8/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.316620][ T5608] veth0_macvtap: entered promiscuous mode [ 70.330290][ T30] audit: type=1400 audit(1784156871.693:155): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.355221][ T5606] veth1_vlan: entered promiscuous mode [ 70.360777][ T30] audit: type=1400 audit(1784156871.693:156): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.pBvAy8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.392281][ T30] audit: type=1400 audit(1784156871.693:157): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.404354][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.417289][ T30] audit: type=1400 audit(1784156871.693:158): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.pBvAy8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.432593][ T5608] veth1_macvtap: entered promiscuous mode [ 70.458089][ T30] audit: type=1400 audit(1784156871.693:159): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.pBvAy8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.480603][ T5613] veth0_vlan: entered promiscuous mode [ 70.492549][ T30] audit: type=1400 audit(1784156871.693:160): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.514678][ T30] audit: type=1400 audit(1784156871.733:161): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.538026][ T30] audit: type=1400 audit(1784156871.733:162): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="gadgetfs" ino=8250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.555721][ T5613] veth1_vlan: entered promiscuous mode [ 70.568764][ T30] audit: type=1400 audit(1784156871.733:163): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.575907][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.659966][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.750435][ T5611] Bluetooth: hci0: command tx timeout [ 71.755967][ T5616] Bluetooth: hci1: command tx timeout [ 71.761958][ T50] Bluetooth: hci3: command tx timeout [ 71.767736][ T5625] Bluetooth: hci2: command tx timeout [ 71.773808][ T5621] Bluetooth: hci4: command tx timeout [ 71.822413][ T5607] veth0_vlan: entered promiscuous mode [ 71.835155][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.870494][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.896236][ T5607] veth1_vlan: entered promiscuous mode [ 71.905389][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.923346][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.943519][ T5606] veth0_macvtap: entered promiscuous mode [ 71.958852][ T5606] veth1_macvtap: entered promiscuous mode [ 72.006430][ T5613] veth0_macvtap: entered promiscuous mode [ 72.030638][ T5613] veth1_macvtap: entered promiscuous mode [ 72.052231][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.098631][ T5607] veth0_macvtap: entered promiscuous mode [ 72.116007][ T5607] veth1_macvtap: entered promiscuous mode [ 72.144950][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.175099][ T3369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.206140][ T1027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.209076][ T3369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.223192][ T1027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.261996][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.273988][ T1027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.293009][ T1027] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.317209][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.445522][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.454028][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.455847][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.486198][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.574252][ T5806] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 72.666361][ T5807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5807 comm=syz.0.6 [ 72.858506][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.926882][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.050355][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.091756][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.130215][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.446987][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.498613][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.522234][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.823219][ T5621] Bluetooth: hci4: command tx timeout [ 73.829398][ T5611] Bluetooth: hci0: command tx timeout [ 73.835236][ T5616] Bluetooth: hci1: command tx timeout [ 73.840638][ T50] Bluetooth: hci3: command tx timeout [ 73.843453][ T5611] Bluetooth: hci2: command tx timeout [ 73.919850][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.930481][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.098296][ T5817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7'. [ 74.361433][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.371395][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.389613][ T5822] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 74.602820][ T5817] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.129952][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.147095][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.190799][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.202885][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.290751][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.329779][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.396643][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 75.396662][ T30] audit: type=1400 audit(1784156876.793:194): avc: denied { read write } for pid=5829 comm="syz.0.9" name="radio2" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.587916][ T30] audit: type=1400 audit(1784156876.793:195): avc: denied { open } for pid=5829 comm="syz.0.9" path="/dev/radio2" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.871793][ T30] audit: type=1400 audit(1784156876.843:196): avc: denied { create } for pid=5829 comm="syz.0.9" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.164960][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.172999][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.182459][ T30] audit: type=1400 audit(1784156876.863:197): avc: denied { read } for pid=5829 comm="syz.0.9" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.222635][ T5836] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 77.229407][ T5836] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.365951][ T5837] vhci_hcd: connection closed [ 77.366888][ T5836] vhci_hcd vhci_hcd.0: Device attached [ 77.430518][ T1054] vhci_hcd vhci_hcd.0: stop threads [ 77.552423][ T1054] vhci_hcd vhci_hcd.0: release socket [ 77.659523][ T1054] vhci_hcd vhci_hcd.0: disconnect device [ 77.806097][ T5698] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 78.037014][ T30] audit: type=1400 audit(1784156876.873:198): avc: denied { open } for pid=5829 comm="syz.0.9" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.062500][ T30] audit: type=1400 audit(1784156876.873:199): avc: denied { ioctl } for pid=5829 comm="syz.0.9" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.091004][ T30] audit: type=1400 audit(1784156877.733:200): avc: denied { map_read map_write } for pid=5832 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.111627][ T30] audit: type=1400 audit(1784156877.753:201): avc: denied { create } for pid=5832 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.150161][ T30] audit: type=1400 audit(1784156877.773:202): avc: denied { create } for pid=5832 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.170797][ T30] audit: type=1400 audit(1784156879.493:203): avc: denied { ioctl } for pid=5841 comm="syz.4.5" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=929 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.980962][ T5857] NILFS (nullb0): couldn't find nilfs on the device [ 80.545746][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 80.545787][ T30] audit: type=1400 audit(1784156881.103:223): avc: denied { read } for pid=5862 comm="syz.1.14" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 81.057318][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 81.266671][ T805] cfg80211: failed to load regulatory.db [ 81.275866][ T30] audit: type=1400 audit(1784156881.103:224): avc: denied { open } for pid=5862 comm="syz.1.14" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 81.299922][ T30] audit: type=1400 audit(1784156882.313:225): avc: denied { read } for pid=5862 comm="syz.1.14" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.322997][ T30] audit: type=1400 audit(1784156882.333:226): avc: denied { open } for pid=5862 comm="syz.1.14" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.355886][ T30] audit: type=1400 audit(1784156882.753:227): avc: denied { write } for pid=5860 comm="syz.2.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.602141][ T30] audit: type=1400 audit(1784156882.993:228): avc: denied { write } for pid=5862 comm="syz.1.14" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.122364][ T30] audit: type=1400 audit(1784156882.993:229): avc: denied { open } for pid=5862 comm="syz.1.14" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.177072][ T30] audit: type=1400 audit(1784156883.573:230): avc: denied { create } for pid=5871 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.233072][ T30] audit: type=1400 audit(1784156883.573:231): avc: denied { connect } for pid=5871 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.460523][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 82.474247][ T5879] Zero length message leads to an empty skb [ 82.550156][ T30] audit: type=1400 audit(1784156883.843:232): avc: denied { setopt } for pid=5876 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.111163][ T5885] serio: Serial port ptm0 [ 83.405684][ T5614] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.083631][ T5897] process 'syz.2.19' launched './file2' with NULL argv: empty string added [ 84.897117][ T5893] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 85.014256][ T5614] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 85.024275][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.035422][ T5614] usb 2-1: Product: syz [ 85.041223][ T5614] usb 2-1: Manufacturer: syz [ 85.046159][ T5614] usb 2-1: SerialNumber: syz [ 85.069575][ T5614] usb 2-1: config 0 descriptor?? [ 85.173078][ T5614] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 85.215525][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.387415][ T5614] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 85.397886][ T5614] usb 2-1: media controller created [ 85.428918][ T5913] kAFS: unable to lookup cell 'ÿ' [ 85.541405][ T5915] lo speed is unknown, defaulting to 1000 [ 85.548342][ T5915] lo speed is unknown, defaulting to 1000 [ 85.574527][ T5915] lo speed is unknown, defaulting to 1000 [ 85.798454][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 86.053544][ T5915] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 86.068170][ T5915] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 86.085285][ T5915] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 86.113323][ T5915] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.160328][ T5915] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.249574][ T5918] dvb-usb: bulk message failed: -22 (7/0) [ 86.321486][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 86.321511][ T30] audit: type=1400 audit(1784156887.193:258): avc: denied { connect } for pid=5887 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.591513][ T5915] lo speed is unknown, defaulting to 1000 [ 86.610987][ T5915] lo speed is unknown, defaulting to 1000 [ 86.633132][ T5915] lo speed is unknown, defaulting to 1000 [ 86.654069][ T5915] lo speed is unknown, defaulting to 1000 [ 86.672904][ T5915] lo speed is unknown, defaulting to 1000 [ 87.186679][ T30] audit: type=1400 audit(1784156888.433:259): avc: denied { read } for pid=5920 comm="syz.0.24" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.363528][ T30] audit: type=1400 audit(1784156888.433:260): avc: denied { open } for pid=5920 comm="syz.0.24" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.437237][ T30] audit: type=1400 audit(1784156888.463:261): avc: denied { setopt } for pid=5920 comm="syz.0.24" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.654165][ T30] audit: type=1400 audit(1784156889.023:262): avc: denied { read write } for pid=5925 comm="syz.2.26" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.808350][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.841488][ T30] audit: type=1400 audit(1784156889.023:263): avc: denied { open } for pid=5925 comm="syz.2.26" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.089542][ T30] audit: type=1400 audit(1784156889.023:264): avc: denied { create } for pid=5925 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.129993][ T5929] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 88.140760][ T5929] SELinux: failed to load policy [ 88.511455][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 88.581664][ T30] audit: type=1400 audit(1784156889.143:265): avc: denied { ioctl } for pid=5907 comm="syz.4.23" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9281 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.901116][ T30] audit: type=1400 audit(1784156889.513:266): avc: denied { load_policy } for pid=5925 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.139969][ T30] audit: type=1400 audit(1784156889.583:267): avc: denied { ioctl } for pid=5925 comm="syz.2.26" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 89.631210][ T5614] DVB: Unable to find symbol mt352_attach() [ 90.355930][ T5614] DVB: Unable to find symbol nxt6000_attach() [ 90.362054][ T5614] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 90.399250][ T29] libceph: connect (1)[c::]:6789 error -101 [ 90.431040][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 90.459548][ T5614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 90.520713][ T29] libceph: connect (1)[c::]:6789 error -101 [ 90.545899][ T5943] ceph: No mds server is up or the cluster is laggy [ 90.564023][ T5614] dvb-usb: schedule remote query interval to 1000 msecs. [ 90.571440][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 90.588272][ T5614] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 90.606031][ T5614] dvb-usb: bulk message failed: -22 (7/0) [ 90.626222][ T5614] dvb-usb: bulk message failed: -22 (7/0) [ 90.640793][ T5614] usb 2-1: USB disconnect, device number 2 [ 91.098248][ T29] libceph: connect (1)[c::]:6789 error -101 [ 91.454531][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 91.534879][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 91.534899][ T30] audit: type=1400 audit(1784156892.913:280): avc: denied { append } for pid=5954 comm="syz.4.30" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 91.555579][ T5956] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 91.653587][ T5961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.081210][ T30] audit: type=1400 audit(1784156892.933:281): avc: denied { mount } for pid=5954 comm="syz.4.30" name="/" dev="hugetlbfs" ino=9007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 92.107717][ T5610] libceph: connect (1)[c::]:6789 error -101 [ 92.131138][ T5956] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 92.161275][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 92.241836][ T5956] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 92.254001][ T30] audit: type=1400 audit(1784156893.593:282): avc: denied { firmware_load } for pid=5954 comm="syz.4.30" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 92.285042][ T5614] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 92.391345][ T10] Process accounting resumed [ 92.467355][ T5967] netlink: 'syz.2.31': attribute type 2 has an invalid length. [ 92.475284][ T5967] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 93.331796][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.340705][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.837813][ T5981] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 93.862995][ T30] audit: type=1400 audit(1784156895.263:283): avc: denied { write } for pid=5974 comm="syz.4.34" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.955497][ T5981] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 94.004263][ T5981] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 94.779481][ T30] audit: type=1400 audit(1784156896.173:284): avc: denied { mount } for pid=5985 comm="syz.1.37" name="/" dev="ramfs" ino=9432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 95.086867][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 95.196021][ T5997] kernel profiling enabled (shift: 5) [ 95.506249][ T30] audit: type=1400 audit(1784156896.903:285): avc: denied { create } for pid=5995 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.537180][ T30] audit: type=1400 audit(1784156896.933:286): avc: denied { setopt } for pid=5995 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.432832][ T6010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.40'. [ 96.682566][ T30] audit: type=1400 audit(1784156898.073:287): avc: denied { listen } for pid=5994 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.155834][ T6027] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 99.892367][ T6026] serio: Serial port ptm0 [ 99.900579][ T6027] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 100.026561][ T6027] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 101.449964][ T30] audit: type=1400 audit(1784156902.373:288): avc: denied { ioctl } for pid=6032 comm="syz.1.48" path="socket:[9599]" dev="sockfs" ino=9599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.707996][ T6040] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 101.770267][ T6040] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 101.800048][ T6040] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 101.933539][ T6047] bond1: entered promiscuous mode [ 101.938858][ T6047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.948314][ T6047] dummy0: entered allmulticast mode [ 101.954037][ T30] audit: type=1400 audit(1784156903.343:289): avc: denied { write } for pid=6046 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.978954][ T6047] dummy0: left allmulticast mode [ 101.985220][ T5698] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.996526][ T6046] [U]  [ 102.000623][ T30] audit: type=1400 audit(1784156903.393:290): avc: denied { create } for pid=6046 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.067690][ T30] audit: type=1400 audit(1784156903.393:291): avc: denied { create } for pid=6046 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.097321][ T30] audit: type=1400 audit(1784156903.393:292): avc: denied { setopt } for pid=6046 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.206472][ T5698] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 102.222975][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.232744][ T5698] usb 5-1: Product: syz [ 102.242742][ T5698] usb 5-1: Manufacturer: syz [ 102.262369][ T5698] usb 5-1: SerialNumber: syz [ 102.276980][ T6052] kAFS: unable to lookup cell 'ÿ' [ 102.290297][ T5698] usb 5-1: config 0 descriptor?? [ 102.317570][ T5698] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 102.606160][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.625611][ T5698] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 102.692840][ T30] audit: type=1400 audit(1784156904.073:293): avc: denied { mounton } for pid=6039 comm="syz.4.50" path="/6/bus" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.741481][ T5698] usb 5-1: media controller created [ 102.796719][ T6059] siw: device registration error -23 [ 102.816796][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 103.222611][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.259515][ T6056] dvb-usb: bulk message failed: -22 (7/0) [ 104.252055][ T5698] DVB: Unable to find symbol mt352_attach() [ 104.529862][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 104.551688][ T30] audit: type=1400 audit(1784156905.923:294): avc: denied { bind } for pid=6066 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.919322][ T6074] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 104.927680][ T6074] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 104.936152][ T6074] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 104.955394][ T5698] DVB: Unable to find symbol nxt6000_attach() [ 104.969963][ T5698] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 105.019955][ T5698] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 105.061743][ T5698] dvb-usb: schedule remote query interval to 1000 msecs. [ 105.079307][ T5698] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 105.113041][ T5698] dvb-usb: bulk message failed: -22 (7/0) [ 105.125535][ T5698] dvb-usb: bulk message failed: -22 (7/0) [ 105.167655][ T5698] usb 5-1: USB disconnect, device number 2 [ 105.879166][ T6081] netlink: 136 bytes leftover after parsing attributes in process `syz.4.58'. [ 106.172934][ T5698] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 107.274790][ T6089] hsr0 speed is unknown, defaulting to 1000 [ 107.283912][ T6089] hsr0 speed is unknown, defaulting to 1000 [ 107.290510][ T6089] hsr0 speed is unknown, defaulting to 1000 [ 107.448210][ T6089] infiniband syz0: set active [ 107.453623][ T6089] infiniband syz0: added hsr0 [ 107.460714][ T6089] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 107.462589][ T6089] infiniband syz0: Couldn't open port 1 [ 107.476881][ T6089] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 107.491929][ T6089] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 107.509419][ T6089] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 107.525893][ T5614] hsr0 speed is unknown, defaulting to 1000 [ 107.543625][ T6089] RDS/IB: syz0: added [ 107.548013][ T6089] smc: adding ib device syz0 with port count 1 [ 107.555251][ T6089] smc: ib device syz0 port 1 has no pnetid [ 107.830347][ T6089] hsr0 speed is unknown, defaulting to 1000 [ 107.917703][ T6089] hsr0 speed is unknown, defaulting to 1000 [ 108.004952][ T6089] hsr0 speed is unknown, defaulting to 1000 [ 108.089295][ T6089] hsr0 speed is unknown, defaulting to 1000 [ 108.175128][ T6089] hsr0 speed is unknown, defaulting to 1000 [ 108.427018][ T5610] hsr0 speed is unknown, defaulting to 1000 [ 108.600232][ T30] audit: type=1400 audit(1784156909.993:295): avc: denied { create } for pid=6097 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.689905][ T30] audit: type=1400 audit(1784156911.083:296): avc: denied { setopt } for pid=6097 comm="syz.2.63" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.887963][ T30] audit: type=1400 audit(1784156911.273:297): avc: denied { setopt } for pid=6099 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.542175][ T6112] smc: net device vlan1 applied user defined pnetid SYZ2 [ 110.642615][ T30] audit: type=1400 audit(1784156912.033:298): avc: denied { read } for pid=6114 comm="syz.4.68" name="event3" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.964337][ T30] audit: type=1400 audit(1784156912.263:299): avc: denied { write } for pid=6114 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 111.325742][ T30] audit: type=1400 audit(1784156912.413:300): avc: denied { mounton } for pid=6114 comm="syz.4.68" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 111.352810][ T30] audit: type=1400 audit(1784156912.433:301): avc: denied { getopt } for pid=6114 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.372331][ T30] audit: type=1400 audit(1784156912.513:302): avc: denied { ioctl } for pid=6114 comm="syz.4.68" path="/dev/input/event3" dev="devtmpfs" ino=925 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.146816][ T30] audit: type=1400 audit(1784156913.543:303): avc: denied { bind } for pid=6115 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.148678][ T6118] Bluetooth: MGMT ver 1.23 [ 112.178896][ T6135] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 112.187123][ T6135] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 112.195626][ T6135] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 112.314593][ T30] audit: type=1400 audit(1784156913.543:304): avc: denied { write } for pid=6115 comm="syz.1.67" path="socket:[10471]" dev="sockfs" ino=10471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.468855][ T6118] mmap: syz.1.67 (6118) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.482486][ T6147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.090057][ T10] Process accounting resumed [ 114.109202][ T6152] netlink: 'syz.0.73': attribute type 2 has an invalid length. [ 114.135201][ T6152] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 114.415255][ T6155] can0: slcan on ttyS3. [ 114.456143][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 114.456159][ T30] audit: type=1400 audit(1784156915.853:313): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.527820][ T30] audit: type=1400 audit(1784156915.853:314): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.619424][ T6154] can0 (unregistered): slcan off ttyS3. [ 115.250253][ T30] audit: type=1400 audit(1784156915.893:315): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.420628][ T30] audit: type=1400 audit(1784156915.893:316): avc: denied { read } for pid=5272 comm="dhcpcd" name="n30" dev="tmpfs" ino=2147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.577702][ T30] audit: type=1400 audit(1784156915.893:317): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.600955][ T30] audit: type=1400 audit(1784156915.893:318): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.198571][ T6182] bond1: entered promiscuous mode [ 117.206840][ T6182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.586160][ T6195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.629711][ T30] audit: type=1400 audit(1784156918.733:319): avc: denied { mount } for pid=6178 comm="syz.4.83" name="/" dev="ramfs" ino=10574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 117.655411][ T6194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.81'. [ 117.708905][ T6176] [U]  [ 117.837314][ T5698] Process accounting resumed [ 117.886099][ T6202] netlink: 'syz.3.84': attribute type 2 has an invalid length. [ 117.893780][ T6202] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 118.125846][ T30] audit: type=1400 audit(1784156919.083:320): avc: denied { read } for pid=6196 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.395077][ T30] audit: type=1400 audit(1784156919.103:321): avc: denied { read open } for pid=6196 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.555836][ T30] audit: type=1400 audit(1784156919.113:322): avc: denied { getattr } for pid=6196 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.675009][ T6212] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 118.683244][ T6212] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 118.691735][ T6212] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 118.740087][ T6211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.884387][ T5698] Process accounting resumed [ 118.913568][ T6211] netlink: 'syz.3.86': attribute type 2 has an invalid length. [ 118.921558][ T6211] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 120.176861][ T6226] rdma_rxe: rxe_newlink: failed to add hsr0 [ 120.692330][ T6229] can0: slcan on ttyS3. [ 120.763052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 122.029274][ T6240] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 122.085136][ T6240] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 122.149482][ T6240] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 122.435174][ T6228] can0 (unregistered): slcan off ttyS3. [ 122.572889][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 122.572905][ T30] audit: type=1400 audit(1784156923.973:331): avc: denied { write } for pid=6225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.788593][ T6258] bond1: entered promiscuous mode [ 122.793919][ T6258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.005207][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 123.254984][ T6261] dummy0: entered allmulticast mode [ 123.283650][ T6257] serio: Serial port ptm0 [ 123.294440][ T6258] dummy0: left allmulticast mode [ 123.307861][ T6256] [U]  [ 123.314568][ T6267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.336448][ T30] audit: type=1400 audit(1784156924.733:332): avc: denied { write } for pid=6262 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.515049][ T10] Process accounting resumed [ 123.568232][ T6273] netlink: 'syz.3.96': attribute type 2 has an invalid length. [ 123.575990][ T6273] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 125.081273][ T6277] netlink: 136 bytes leftover after parsing attributes in process `syz.1.97'. [ 126.916659][ T6290] bond1: entered promiscuous mode [ 126.924116][ T6290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.932993][ T6292] dummy0: entered allmulticast mode [ 126.942533][ T6292] dummy0: left allmulticast mode [ 127.011727][ T6284] [U]  [ 127.054881][ T6295] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 127.063222][ T6295] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 127.071664][ T6295] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 127.212273][ T6298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.713346][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.721223][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.818776][ T5614] Process accounting resumed [ 128.056387][ T6308] smc: net device vlan1 applied user defined pnetid SYZ2 [ 128.057725][ T6310] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 128.072948][ T6310] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 128.414007][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.106'. [ 128.428381][ T30] audit: type=1400 audit(1784156929.823:333): avc: denied { write } for pid=6312 comm="syz.4.106" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.454365][ T30] audit: type=1400 audit(1784156929.823:334): avc: denied { open } for pid=6312 comm="syz.4.106" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.132783][ T5722] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.255500][ T6322] can0: slcan on ttyS3. [ 129.488380][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 129.991928][ T30] audit: type=1400 audit(1784156931.383:335): avc: denied { bind } for pid=6323 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.002756][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 130.121427][ T5722] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.128699][ T30] audit: type=1400 audit(1784156931.383:336): avc: denied { node_bind } for pid=6323 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 130.240758][ T30] audit: type=1400 audit(1784156931.423:337): avc: denied { connect } for pid=6323 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.254046][ T5722] usb 5-1: config 179 has no interface number 0 [ 130.267492][ T5722] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 130.768412][ T5722] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 130.846254][ T5722] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.883783][ T6338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.940584][ T5722] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 131.097153][ T5794] Process accounting resumed [ 131.230069][ T5722] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.316526][ T5722] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 131.331634][ T6338] netlink: 'syz.1.111': attribute type 2 has an invalid length. [ 131.339497][ T6338] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 131.350626][ T6321] can0 (unregistered): slcan off ttyS3. [ 131.410369][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.636236][ T5722] usb 5-1: can't set config #179, error -71 [ 131.731881][ T5722] usb 5-1: USB disconnect, device number 3 [ 132.209861][ T30] audit: type=1400 audit(1784156933.603:338): avc: denied { write } for pid=6332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.289125][ T6359] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 132.318389][ T6359] syz_tun: entered promiscuous mode [ 133.094179][ T6361] [U]  [ 133.116874][ T6359] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 133.141331][ T6370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.384824][ T5614] Process accounting resumed [ 133.419411][ T6365] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 133.433193][ T6366] dummy0: entered allmulticast mode [ 133.464847][ T6366] dummy0: left allmulticast mode [ 133.519751][ T30] audit: type=1400 audit(1784156934.913:339): avc: denied { write } for pid=6371 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.550703][ T6374] netlink: 'syz.4.117': attribute type 2 has an invalid length. [ 133.558694][ T6374] netlink: 'syz.4.117': attribute type 1 has an invalid length. [ 134.721160][ T6389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.883076][ T5794] Process accounting resumed [ 134.970494][ T6394] netlink: 'syz.4.120': attribute type 2 has an invalid length. [ 134.978503][ T6394] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 135.654066][ T30] audit: type=1400 audit(1784156937.033:340): avc: denied { connect } for pid=6392 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.676205][ T30] audit: type=1400 audit(1784156937.033:341): avc: denied { name_connect } for pid=6392 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 135.697582][ T30] audit: type=1400 audit(1784156937.073:342): avc: denied { name_connect } for pid=6392 comm="syz.1.121" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 136.541664][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.549203][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.353268][ T30] audit: type=1400 audit(1784156938.753:343): avc: denied { read append } for pid=6409 comm="syz.0.124" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 137.811471][ T30] audit: type=1400 audit(1784156938.773:344): avc: denied { ioctl open } for pid=6409 comm="syz.0.124" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 138.112700][ T6424] capability: warning: `syz.0.124' uses 32-bit capabilities (legacy support in use) [ 138.172747][ T30] audit: type=1400 audit(1784156939.533:345): avc: denied { write } for pid=6381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.338745][ T6432] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 139.242798][ T6432] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 139.253457][ T6432] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 139.689343][ T30] audit: type=1400 audit(1784156941.063:346): avc: denied { write } for pid=6436 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.888364][ T6437] bond2: entered promiscuous mode [ 139.896524][ T6437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.905193][ T6440] dummy0: entered allmulticast mode [ 140.009543][ T6433] [U]  [ 140.035511][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.042913][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.287781][ T6440] dummy0: left allmulticast mode [ 140.523283][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 141.125605][ T6456] smc: net device vlan1 applied user defined pnetid SYZ2 [ 141.489124][ T6458] can0: slcan on ttyS3. [ 141.881546][ T6463] bond3: entered promiscuous mode [ 141.888235][ T6463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.898683][ T6466] dummy0: entered allmulticast mode [ 141.904570][ T6466] dummy0: left allmulticast mode [ 142.467975][ T6459] [U]  [ 143.328332][ T6457] can0 (unregistered): slcan off ttyS3. [ 145.458631][ T30] audit: type=1400 audit(1784156946.163:347): avc: denied { write } for pid=6485 comm="syz.0.137" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.596213][ T30] audit: type=1400 audit(1784156946.303:348): avc: denied { read write } for pid=6485 comm="syz.0.137" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.688348][ T30] audit: type=1400 audit(1784156946.313:349): avc: denied { open } for pid=6485 comm="syz.0.137" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.726175][ T5614] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.822976][ T30] audit: type=1400 audit(1784156946.313:350): avc: denied { ioctl } for pid=6485 comm="syz.0.137" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.849136][ T30] audit: type=1400 audit(1784156946.313:351): avc: denied { lock } for pid=6485 comm="syz.0.137" path="/dev/video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 145.967799][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 146.389108][ T30] audit: type=1400 audit(1784156947.043:352): avc: denied { write } for pid=6469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.436982][ T5614] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.454716][ T5614] usb 1-1: config 7 has an invalid interface number: 156 but max is 0 [ 146.458757][ T6505] netlink: 'syz.4.139': attribute type 4 has an invalid length. [ 146.473443][ T30] audit: type=1400 audit(1784156947.773:353): avc: denied { read } for pid=6493 comm="syz.4.139" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.503488][ T5614] usb 1-1: config 7 has no interface number 0 [ 146.520112][ T5614] usb 1-1: config 7 interface 156 has no altsetting 0 [ 146.541895][ T5614] usb 1-1: New USB device found, idVendor=09c0, idProduct=0206, bcdDevice=90.f4 [ 146.639252][ T30] audit: type=1400 audit(1784156947.773:354): avc: denied { ioctl } for pid=6493 comm="syz.4.139" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.682165][ T5614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.762777][ T5614] usb 1-1: Product: syz [ 146.767010][ T5614] usb 1-1: Manufacturer: syz [ 146.771610][ T5614] usb 1-1: SerialNumber: syz [ 146.799046][ T30] audit: type=1400 audit(1784156947.853:355): avc: denied { create } for pid=6493 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 146.856749][ T5614] usb 1-1: can't set config #7, error -71 [ 146.877695][ T5614] usb 1-1: USB disconnect, device number 2 [ 146.886812][ T30] audit: type=1400 audit(1784156947.873:356): avc: denied { write } for pid=6502 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.355636][ T6514] bond2: entered promiscuous mode [ 147.363640][ T6514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.373654][ T6517] dummy0: entered allmulticast mode [ 147.911816][ T6511] dummy0: left allmulticast mode [ 147.943576][ T6511] [U]  [ 148.663027][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 150.980583][ T6558] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 150.990660][ T6558] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 151.000512][ T6558] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 151.045889][ T6540] [U]  [ 151.086704][ T6545] bond3: entered promiscuous mode [ 151.105555][ T6545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.125604][ T6547] dummy0: entered allmulticast mode [ 151.197513][ T6547] dummy0: left allmulticast mode [ 151.258240][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.265590][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.695610][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 152.843398][ T6567] [U]  [ 153.056752][ T6570] bond4: entered promiscuous mode [ 153.068660][ T6570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.605815][ T6575] dummy0: entered allmulticast mode [ 153.629462][ T6575] dummy0: left allmulticast mode [ 153.637081][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.154'. [ 153.869723][ T6591] can0: slcan on ttyS3. [ 153.912773][ T5610] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.132990][ T5610] usb 3-1: Using ep0 maxpacket: 8 [ 154.167410][ T5610] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 154.202888][ T5610] usb 3-1: config 179 has no interface number 0 [ 154.217138][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 154.217155][ T30] audit: type=1400 audit(1784156955.613:361): avc: denied { create } for pid=6592 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.248483][ T5610] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 154.275316][ T5610] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 154.343278][ T30] audit: type=1400 audit(1784156955.663:362): avc: denied { connect } for pid=6592 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.372189][ T5610] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.417610][ T5610] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 154.444709][ T30] audit: type=1400 audit(1784156955.833:363): avc: denied { map } for pid=6604 comm="syz.4.157" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.476613][ T5610] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 154.518077][ T5610] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 154.548178][ T30] audit: type=1400 audit(1784156955.833:364): avc: denied { read write } for pid=6604 comm="syz.4.157" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.579480][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.618624][ T6589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.668403][ T30] audit: type=1400 audit(1784156955.873:365): avc: denied { ioctl } for pid=6604 comm="syz.4.157" path="socket:[11251]" dev="sockfs" ino=11251 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.743899][ T6590] can0 (unregistered): slcan off ttyS3. [ 154.833035][ T5794] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.859614][ T30] audit: type=1400 audit(1784156956.253:366): avc: denied { read write } for pid=6583 comm="syz.2.154" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.889667][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 154.932003][ T5610] usb 3-1: USB disconnect, device number 2 [ 154.937906][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 154.937949][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.983880][ T30] audit: type=1400 audit(1784156956.253:367): avc: denied { open } for pid=6583 comm="syz.2.154" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.063736][ T5794] usb 5-1: Using ep0 maxpacket: 32 [ 155.092282][ T5794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.114160][ T5794] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 1041, setting to 1024 [ 155.202063][ T5794] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 155.222695][ T30] audit: type=1400 audit(1784156956.613:368): avc: denied { write } for pid=6596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.245843][ T5794] usb 5-1: config 1 interface 2 has no altsetting 0 [ 155.273397][ T5794] usb 5-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 155.286687][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.307419][ T5794] usb 5-1: Product: syz [ 155.343116][ T5794] usb 5-1: Manufacturer: syz [ 155.357999][ T5794] usb 5-1: SerialNumber: syz [ 155.393861][ T30] audit: type=1400 audit(1784156956.793:369): avc: denied { write } for pid=6623 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.603655][ T6605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.157'. [ 155.833796][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 156.029679][ T5794] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 156.076354][ T5794] usb 5-1: selecting invalid altsetting 0 [ 156.196388][ T6639] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 156.301596][ T6639] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 156.358405][ T6639] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 157.924241][ T5794] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 158.019606][ T6643] bond1: entered promiscuous mode [ 158.122304][ T30] audit: type=1400 audit(1784156959.513:370): avc: denied { read append } for pid=6651 comm="syz.4.164" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.155786][ T5794] usb 5-1: USB disconnect, device number 4 [ 158.671686][ T6643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.498670][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 159.498692][ T30] audit: type=1400 audit(1784156960.883:373): avc: denied { write } for pid=6651 comm="syz.4.164" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 159.509683][ T6662] bond2: entered promiscuous mode [ 159.538931][ T6662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.571514][ T6660] [U]  [ 159.606130][ T6645] dummy0: entered allmulticast mode [ 159.865662][ T30] audit: type=1400 audit(1784156960.883:374): avc: denied { open } for pid=6651 comm="syz.4.164" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 159.916117][ T6645] dummy0: left allmulticast mode [ 159.941932][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.196812][ T30] audit: type=1400 audit(1784156960.953:375): avc: denied { ioctl } for pid=6651 comm="syz.4.164" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 160.348932][ T30] audit: type=1400 audit(1784156960.973:376): avc: denied { append } for pid=6651 comm="syz.4.164" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.414514][ T30] audit: type=1400 audit(1784156961.023:377): avc: denied { read } for pid=6651 comm="syz.4.164" path="socket:[11911]" dev="sockfs" ino=11911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.455024][ T30] audit: type=1400 audit(1784156961.633:378): avc: denied { write } for pid=6667 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.485169][ T30] audit: type=1400 audit(1784156961.643:379): avc: denied { create } for pid=6668 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.508549][ T30] audit: type=1400 audit(1784156961.643:380): avc: denied { connect } for pid=6668 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.704331][ T30] audit: type=1400 audit(1784156962.103:381): avc: denied { ioctl } for pid=6674 comm="syz.1.169" path="socket:[11939]" dev="sockfs" ino=11939 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.865881][ T30] audit: type=1400 audit(1784156962.253:382): avc: denied { mount } for pid=6674 comm="syz.1.169" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 162.610169][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 163.461820][ T6704] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 163.483386][ T5611] Bluetooth: hci2: connection err: -111 [ 163.682496][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.174'. [ 164.495578][ T6706] veth0_macvtap: left promiscuous mode [ 164.512541][ T6704] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 164.557972][ T6704] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 164.786731][ T6710] comedi comedi0: 8255: I/O base address not correctly aligned [ 164.810229][ T10] IPVS: starting estimator thread 0... [ 164.824630][ T6706] veth0_macvtap: entered promiscuous mode [ 164.941751][ T6716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.949329][ T6711] IPVS: using max 77 ests per chain, 184800 per kthread [ 164.998574][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 164.998627][ T30] audit: type=1400 audit(1784156966.363:385): avc: denied { write } for pid=6708 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 165.046298][ T6718] kAFS: unable to lookup cell 'ÿ' [ 165.112995][ T9] Process accounting resumed [ 165.117906][ T6710] bridge3: entered promiscuous mode [ 165.123477][ T6710] bridge3: entered allmulticast mode [ 165.148585][ T6710] team0: Port device bridge3 added [ 165.164777][ T6722] netlink: 'syz.2.178': attribute type 2 has an invalid length. [ 165.384637][ T6722] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 167.715811][ T6721] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 167.724975][ T6721] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 167.733514][ T6721] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 170.165948][ T6733] bond4: entered promiscuous mode [ 170.175988][ T6733] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.786863][ T6728] [U]  [ 170.846804][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 171.092810][ T30] audit: type=1400 audit(1784156972.413:386): avc: denied { read } for pid=6745 comm="syz.2.184" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 171.444115][ T6753] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 171.538252][ T30] audit: type=1400 audit(1784156972.433:387): avc: denied { ioctl } for pid=6745 comm="syz.2.184" path="/dev/usbmon6" dev="devtmpfs" ino=735 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 171.913589][ T30] audit: type=1400 audit(1784156972.543:388): avc: denied { watch } for pid=6745 comm="syz.2.184" path="/40/file5" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.979791][ T6768] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 172.056619][ T6768] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 173.136134][ T30] audit: type=1400 audit(1784156972.543:389): avc: denied { watch_sb watch_reads } for pid=6745 comm="syz.2.184" path="/40/file5" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.786060][ T6768] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 173.842794][ T30] audit: type=1400 audit(1784156972.553:390): avc: denied { watch_mount } for pid=6745 comm="syz.2.184" path="/40/file5" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.874982][ T30] audit: type=1400 audit(1784156975.273:391): avc: denied { write } for pid=6732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.000146][ T30] audit: type=1400 audit(1784156975.393:392): avc: denied { write } for pid=6778 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.267305][ T6783] CIFS: VFS: UNC: path must begin with // or \\ [ 174.273687][ T6783] Malformed UNC in devname [ 174.273687][ T6783] [ 174.280489][ T6783] CIFS: VFS: Malformed UNC in devname [ 174.685178][ T30] audit: type=1400 audit(1784156975.653:393): avc: denied { getopt } for pid=6776 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 174.850596][ T30] audit: type=1400 audit(1784156976.123:394): avc: denied { create } for pid=6782 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 175.046536][ T6790] vlan2: entered allmulticast mode [ 175.053226][ T6790] veth1_macvtap: entered allmulticast mode [ 175.807434][ T6791] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 175.929455][ T30] audit: type=1400 audit(1784156976.233:395): avc: denied { ioctl } for pid=6781 comm="syz.4.191" path="socket:[12657]" dev="sockfs" ino=12657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.402613][ T30] audit: type=1400 audit(1784156976.343:396): avc: denied { setopt } for pid=6781 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.584054][ T6802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.606857][ T30] audit: type=1400 audit(1784156976.343:397): avc: denied { write } for pid=6781 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.950402][ T5698] Process accounting resumed [ 177.956540][ T6805] netlink: 'syz.0.193': attribute type 2 has an invalid length. [ 177.964208][ T6805] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 178.156900][ T30] audit: type=1400 audit(1784156979.553:398): avc: denied { mount } for pid=6816 comm="syz.1.196" name="/" dev="autofs" ino=12267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 178.941291][ T30] audit: type=1400 audit(1784156980.333:399): avc: denied { mount } for pid=6817 comm="syz.4.197" name="/" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 179.044397][ T30] audit: type=1400 audit(1784156980.373:400): avc: denied { read } for pid=6817 comm="syz.4.197" name="/" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.111419][ T30] audit: type=1400 audit(1784156980.373:401): avc: denied { open } for pid=6817 comm="syz.4.197" path="/35/file0" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.333340][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 180.005898][ T30] audit: type=1400 audit(1784156980.403:402): avc: denied { write } for pid=6817 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 180.037473][ T6835] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 180.107743][ T6835] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 180.172360][ T30] audit: type=1400 audit(1784156980.703:403): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 180.197602][ T6835] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 180.365351][ T6841] can0: slcan on ttyS3. [ 180.695977][ T6849] Bluetooth: MGMT ver 1.23 [ 180.853863][ T6839] can0 (unregistered): slcan off ttyS3. [ 181.557159][ T30] audit: type=1400 audit(1784156982.953:404): avc: denied { node_bind } for pid=6850 comm="syz.3.204" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 182.290334][ T30] audit: type=1400 audit(1784156983.343:405): avc: denied { create } for pid=6850 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.527141][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 182.555946][ T6866] team0: entered allmulticast mode [ 182.561178][ T6866] team_slave_0: entered allmulticast mode [ 182.567005][ T6866] team_slave_1: entered allmulticast mode [ 182.816184][ T30] audit: type=1400 audit(1784156983.953:406): avc: denied { ioctl } for pid=6862 comm="syz.1.207" path="socket:[13440]" dev="sockfs" ino=13440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.863681][ T30] audit: type=1400 audit(1784156983.983:407): avc: denied { read } for pid=6862 comm="syz.1.207" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.037466][ T6867] can0: slcan on ttyS3. [ 183.067521][ T6869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.199507][ T30] audit: type=1400 audit(1784156984.593:408): avc: denied { create } for pid=6871 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 183.945521][ T5614] Process accounting resumed [ 183.955743][ T6882] netlink: 'syz.0.209': attribute type 2 has an invalid length. [ 184.033570][ T6865] can0 (unregistered): slcan off ttyS3. [ 184.162938][ T6882] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 184.279445][ T30] audit: type=1800 audit(1784156985.403:409): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.211" name="file0" dev="overlay" ino=277 res=0 errno=0 [ 184.985200][ T6891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.123965][ T30] audit: type=1400 audit(1784156985.943:410): avc: denied { write } for pid=6852 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 185.225393][ T6895] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 185.955488][ T30] audit: type=1400 audit(1784156986.023:411): avc: denied { getopt } for pid=6852 comm="syz.4.206" lport=54378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.501720][ T6912] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 188.173534][ T6912] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 188.210578][ T6909] smc: net device vlan1 applied user defined pnetid SYZ2 [ 188.328297][ T6912] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 188.805554][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.826016][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.050574][ T30] audit: type=1400 audit(1784156990.443:412): avc: denied { bind } for pid=6953 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.177018][ T30] audit: type=1326 audit(1784156990.573:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562f9de59 code=0x7ffc0000 [ 189.295497][ T30] audit: type=1326 audit(1784156990.603:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8562f9de59 code=0x7ffc0000 [ 189.379855][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 189.457131][ T30] audit: type=1400 audit(1784156990.603:415): avc: denied { kexec_image_load } for pid=6964 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 189.564700][ T30] audit: type=1326 audit(1784156990.603:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562f9de59 code=0x7ffc0000 [ 189.670364][ T30] audit: type=1326 audit(1784156990.603:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f8562f9de59 code=0x7ffc0000 [ 189.814610][ T5610] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.825075][ T30] audit: type=1326 audit(1784156990.603:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562f9de59 code=0x7ffc0000 [ 189.872373][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 189.899097][ T30] audit: type=1326 audit(1784156990.603:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8562f9de59 code=0x7ffc0000 [ 189.913357][ T6980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.952221][ T30] audit: type=1326 audit(1784156990.603:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562f9de59 code=0x7ffc0000 [ 189.980472][ T30] audit: type=1326 audit(1784156990.603:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8562f9de59 code=0x7ffc0000 [ 190.007660][ T5610] usb 5-1: Using ep0 maxpacket: 32 [ 190.018905][ T5610] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 190.027689][ T5610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.044869][ T5610] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 190.054320][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.062367][ T5610] usb 5-1: Product: syz [ 190.067881][ T5610] usb 5-1: Manufacturer: syz [ 190.080305][ T5610] usb 5-1: SerialNumber: syz [ 190.115327][ T5610] usb 5-1: config 0 descriptor?? [ 190.238994][ T5614] Process accounting resumed [ 190.245634][ T6986] netlink: 'syz.2.222': attribute type 2 has an invalid length. [ 190.253404][ T6986] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 190.269879][ T5610] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 190.327924][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 190.877034][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 190.892269][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 190.895007][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 190.898961][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 190.910274][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 191.176030][ T6995] Illegal XDP return value 3627086634 on prog (id 23) dev syz_tun, expect packet loss! [ 192.198225][ T5610] gspca_sunplus: reg_r err -110 [ 192.290601][ T7012] bond2: entered promiscuous mode [ 192.332394][ T7012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.387040][ T7015] dummy0: entered allmulticast mode [ 192.393123][ T7015] dummy0: left allmulticast mode [ 192.536143][ T7007] [U]  [ 193.342155][ T7033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.229'. [ 193.788045][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 193.843049][ T5610] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 194.229211][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 194.305170][ T29] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.315810][ T5610] usb 5-1: USB disconnect, device number 5 [ 194.568720][ T29] usb 3-1: config 179 has no interface number 0 [ 194.599548][ T29] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 194.630298][ T7053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.234'. [ 194.642705][ T29] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 194.684159][ T29] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.747166][ T29] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 194.896999][ T29] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.913614][ T805] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 195.054806][ T29] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 195.173953][ T805] usb 1-1: Using ep0 maxpacket: 8 [ 195.409046][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.431255][ T805] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 195.449072][ T7033] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.456338][ T805] usb 1-1: config 179 has no interface number 0 [ 195.495141][ T805] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 195.893244][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 195.893260][ T30] audit: type=1400 audit(1784156997.283:514): avc: denied { create } for pid=7049 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.896885][ T805] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 195.931205][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 195.949106][ T29] usb 3-1: USB disconnect, device number 3 [ 195.949161][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 195.949199][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 195.979278][ T805] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.008012][ T30] audit: type=1400 audit(1784156997.283:515): avc: denied { setopt } for pid=7049 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.011052][ T805] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 196.138110][ T805] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 196.174023][ T805] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 196.196179][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.224547][ T7053] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.134369][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 197.203659][ T5698] usb 1-1: USB disconnect, device number 3 [ 197.203701][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 197.218099][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 197.336879][ T30] audit: type=1400 audit(1784156998.733:516): avc: denied { getopt } for pid=7103 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.494235][ T30] audit: type=1400 audit(1784156998.893:517): avc: denied { create } for pid=7106 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.534125][ T5625] Bluetooth: hci1: unexpected event for opcode 0x040d [ 199.444267][ T30] audit: type=1400 audit(1784157000.841:518): avc: denied { create } for pid=7124 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.825473][ T30] audit: type=1400 audit(1784157000.841:519): avc: denied { connect } for pid=7124 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.875352][ T30] audit: type=1400 audit(1784157000.841:520): avc: denied { setopt } for pid=7124 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.044572][ T30] audit: type=1400 audit(1784157000.851:521): avc: denied { bind } for pid=7124 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.109816][ T30] audit: type=1400 audit(1784157000.871:522): avc: denied { write } for pid=7124 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.435839][ T7149] kAFS: unable to lookup cell 'ÿ' [ 200.645960][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 200.655469][ T7155] bridge_slave_1: left allmulticast mode [ 200.662919][ T7155] bridge_slave_1: left promiscuous mode [ 200.669367][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.734633][ T7155] bridge_slave_0: left allmulticast mode [ 200.741709][ T7155] bridge_slave_0: left promiscuous mode [ 200.747961][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.772715][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 200.910582][ T7158] efs: cannot read volume header [ 200.938318][ T7158] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 201.007999][ T7163] netlink: 44 bytes leftover after parsing attributes in process `syz.3.247'. [ 201.049082][ T30] audit: type=1400 audit(1784157002.351:523): avc: denied { relabelto } for pid=7152 comm="syz.1.248" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 201.512039][ T30] audit: type=1400 audit(1784157002.361:524): avc: denied { associate } for pid=7152 comm="syz.1.248" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 202.087066][ T30] audit: type=1400 audit(1784157003.341:525): avc: denied { write } for pid=7110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.111397][ T30] audit: type=1400 audit(1784157004.511:526): avc: denied { write } for pid=7192 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.324496][ T30] audit: type=1400 audit(1784157005.611:527): avc: denied { read } for pid=7206 comm="syz.1.253" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 204.358182][ T7211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.900953][ T30] audit: type=1400 audit(1784157005.611:528): avc: denied { open } for pid=7206 comm="syz.1.253" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 205.118406][ T7218] netlink: 'syz.0.254': attribute type 2 has an invalid length. [ 205.128684][ T7218] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 205.437678][ T30] audit: type=1400 audit(1784157005.821:529): avc: denied { write } for pid=7205 comm="syz.4.252" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 205.629476][ T30] audit: type=1400 audit(1784157005.821:530): avc: denied { ioctl } for pid=7205 comm="syz.4.252" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 205.645180][ T10] Process accounting resumed [ 205.886208][ T30] audit: type=1400 audit(1784157005.891:531): avc: denied { read } for pid=7205 comm="syz.4.252" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 206.230346][ T30] audit: type=1400 audit(1784157005.891:532): avc: denied { open } for pid=7205 comm="syz.4.252" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 206.626432][ T30] audit: type=1400 audit(1784157006.301:533): avc: denied { read write } for pid=7206 comm="syz.1.253" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 206.885215][ T30] audit: type=1400 audit(1784157006.301:534): avc: denied { open } for pid=7206 comm="syz.1.253" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 207.004555][ T30] audit: type=1400 audit(1784157006.621:535): avc: denied { map } for pid=7206 comm="syz.1.253" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 207.602813][ T30] audit: type=1400 audit(1784157006.621:536): avc: denied { execute } for pid=7206 comm="syz.1.253" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 207.626140][ T30] audit: type=1400 audit(1784157008.531:537): avc: denied { setattr } for pid=7227 comm="syz.3.255" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 207.697440][ T30] audit: type=1400 audit(1784157008.531:538): avc: denied { getopt } for pid=7227 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.365210][ T30] audit: type=1400 audit(1784157010.761:539): avc: denied { write } for pid=7199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.477637][ T30] audit: type=1400 audit(1784157011.401:540): avc: denied { append } for pid=7250 comm="syz.3.259" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 210.550552][ T7246] bond5: entered promiscuous mode [ 210.589946][ T7246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.637907][ T7248] dummy0: entered allmulticast mode [ 210.795452][ T30] audit: type=1326 audit(1784157012.181:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559cb9de59 code=0x7ffc0000 [ 210.834943][ T7252] [U]  [ 210.841911][ T7248] dummy0: left allmulticast mode [ 210.867943][ T7255] lo speed is unknown, defaulting to 1000 [ 210.876614][ T7255] hsr0 speed is unknown, defaulting to 1000 [ 210.993404][ T7264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.083182][ T7259] bond5: entered promiscuous mode [ 211.099144][ T29] Process accounting resumed [ 211.106614][ T7259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.125584][ T7266] netlink: 'syz.2.262': attribute type 2 has an invalid length. [ 211.174952][ T7266] netlink: 'syz.2.262': attribute type 1 has an invalid length. [ 211.737731][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 211.737756][ T30] audit: type=1326 audit(1784157013.111:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559cb9de59 code=0x7ffc0000 [ 211.854974][ T7283] netlink: 'syz.1.264': attribute type 4 has an invalid length. [ 212.848062][ T30] audit: type=1326 audit(1784157013.121:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559cb9de59 code=0x7ffc0000 [ 213.034620][ T9] lo speed is unknown, defaulting to 1000 [ 213.080424][ T30] audit: type=1400 audit(1784157013.481:561): avc: denied { watch watch_reads } for pid=7285 comm="syz.3.266" path="/54" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 213.808093][ T9] syz2: Port: 1 Link DOWN [ 214.316906][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.268'. [ 214.335702][ T30] audit: type=1400 audit(1784157015.701:562): avc: denied { write } for pid=7291 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 214.557025][ T30] audit: type=1400 audit(1784157015.701:563): avc: denied { listen } for pid=7291 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 214.751785][ T7298] smc: net device vlan1 applied user defined pnetid SYZ2 [ 215.126570][ T7303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.434115][ T29] Process accounting resumed [ 216.519163][ T7310] netlink: 'syz.4.271': attribute type 2 has an invalid length. [ 216.526941][ T7310] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 216.745214][ T30] audit: type=1400 audit(1784157018.121:564): avc: denied { bind } for pid=7306 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.017605][ T7317] bond6: entered promiscuous mode [ 217.026558][ T7317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.609707][ T7315] [U]  [ 217.630934][ T30] audit: type=1400 audit(1784157018.141:565): avc: denied { listen } for pid=7306 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.652948][ T30] audit: type=1400 audit(1784157018.141:566): avc: denied { write } for pid=7306 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.755041][ T30] audit: type=1400 audit(1784157019.161:567): avc: denied { shutdown } for pid=7324 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.120077][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 218.839812][ T7332] xt_hashlimit: size too large, truncated to 1048576 [ 219.083646][ T30] audit: type=1400 audit(1784157020.301:568): avc: denied { bind } for pid=7328 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.207985][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 219.624385][ T30] audit: type=1400 audit(1784157020.311:569): avc: denied { connect } for pid=7328 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.651264][ T30] audit: type=1400 audit(1784157020.481:570): avc: denied { read } for pid=7328 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 221.022730][ C0] ================================================================== [ 221.031271][ C0] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 221.040650][ C0] Read of size 1 at addr ffff88807e559010 by task swapper/0/0 [ 221.048098][ C0] [ 221.050417][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 221.050438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 221.050450][ C0] Call Trace: [ 221.050457][ C0] [ 221.050465][ C0] dump_stack_lvl+0x100/0x190 [ 221.050491][ C0] print_report+0x13d/0x4b0 [ 221.050517][ C0] ? __virt_addr_valid+0x239/0x430 [ 221.050541][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 221.050566][ C0] kasan_report+0xdf/0x1c0 [ 221.050588][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 221.050615][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 221.050639][ C0] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 221.050664][ C0] llc_conn_state_process+0x3ec/0x1480 [ 221.050694][ C0] llc_conn_tmr_common_cb+0x2d4/0x880 [ 221.050715][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 221.050741][ C0] call_timer_fn+0x19a/0x610 [ 221.050760][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 221.050779][ C0] ? __run_timers+0x747/0xb00 [ 221.050799][ C0] ? rcu_is_watching+0x12/0xc0 [ 221.050826][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 221.050850][ C0] __run_timers+0x757/0xb00 [ 221.050872][ C0] ? __pfx___run_timers+0x10/0x10 [ 221.050895][ C0] ? ktime_get+0x9f/0x320 [ 221.050914][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 221.050940][ C0] run_timer_base+0x114/0x190 [ 221.050959][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 221.050980][ C0] run_timer_softirq+0x1a/0x50 [ 221.051000][ C0] handle_softirqs+0x1ea/0x9b0 [ 221.051024][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 221.051046][ C0] ? _raw_spin_unlock+0x28/0x50 [ 221.051068][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 221.051096][ C0] __irq_exit_rcu+0x162/0x210 [ 221.051117][ C0] irq_exit_rcu+0x9/0x30 [ 221.051137][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 221.051168][ C0] [ 221.051175][ C0] [ 221.051181][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.051202][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 221.051228][ C0] Code: 76 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 39 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 221.051245][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 221.051262][ C0] RAX: 0000000000cca187 RBX: ffffffff8e891480 RCX: ffffffff8bb962d5 [ 221.051275][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a4091 RDI: ffffffff8c401180 [ 221.051287][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 221.051298][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 221.051310][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 221.051325][ C0] ? ct_kernel_exit+0x125/0x180 [ 221.051354][ C0] default_idle+0x9/0x10 [ 221.051370][ C0] default_idle_call+0x6c/0xb0 [ 221.051387][ C0] do_idle+0x3a7/0x5b0 [ 221.051411][ C0] ? __pfx_do_idle+0x10/0x10 [ 221.051436][ C0] cpu_startup_entry+0x4f/0x60 [ 221.051460][ C0] rest_init+0x251/0x260 [ 221.051478][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 221.051500][ C0] start_kernel+0x48e/0x490 [ 221.051530][ C0] x86_64_start_reservations+0x24/0x30 [ 221.051550][ C0] x86_64_start_kernel+0x12b/0x130 [ 221.051568][ C0] common_startup_64+0x13e/0x158 [ 221.051600][ C0] [ 221.051607][ C0] [ 221.375548][ C0] Allocated by task 7333: [ 221.379855][ C0] kasan_save_stack+0x30/0x50 [ 221.384529][ C0] kasan_save_track+0x14/0x30 [ 221.389208][ C0] __kasan_kmalloc+0xaa/0xb0 [ 221.393807][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 221.399178][ C0] llc_sap_open+0x120/0x3b0 [ 221.403669][ C0] llc_ui_bind+0xb67/0xe40 [ 221.408068][ C0] __sys_bind+0x1a9/0x260 [ 221.412383][ C0] __x64_sys_bind+0x72/0xb0 [ 221.416901][ C0] do_syscall_64+0x115/0x870 [ 221.421496][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.427400][ C0] [ 221.429710][ C0] Freed by task 7347: [ 221.433677][ C0] kasan_save_stack+0x30/0x50 [ 221.438361][ C0] kasan_save_track+0x14/0x30 [ 221.443035][ C0] kasan_save_free_info+0x3b/0x70 [ 221.448049][ C0] __kasan_slab_free+0x5f/0x80 [ 221.452798][ C0] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 221.458244][ C0] rcu_free_sheaf+0x1a/0xe0 [ 221.462727][ C0] rcu_core+0x5a2/0x10d0 [ 221.466953][ C0] handle_softirqs+0x1ea/0x9b0 [ 221.471698][ C0] __irq_exit_rcu+0x162/0x210 [ 221.476356][ C0] irq_exit_rcu+0x9/0x30 [ 221.480580][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 221.486198][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.492158][ C0] [ 221.494463][ C0] The buggy address belongs to the object at ffff88807e559000 [ 221.494463][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 221.508495][ C0] The buggy address is located 16 bytes inside of [ 221.508495][ C0] freed 2048-byte region [ffff88807e559000, ffff88807e559800) [ 221.522271][ C0] [ 221.524578][ C0] The buggy address belongs to the physical page: [ 221.530968][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e558 [ 221.539707][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 221.548183][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 221.555706][ C0] page_type: f5(slab) [ 221.559669][ C0] raw: 00fff00000000040 ffff88813fe22000 dead000000000100 dead000000000122 [ 221.568234][ C0] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 221.576799][ C0] head: 00fff00000000040 ffff88813fe22000 dead000000000100 dead000000000122 [ 221.585449][ C0] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 221.594103][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 221.602771][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 221.611414][ C0] page dumped because: kasan: bad access detected [ 221.617804][ C0] page_owner tracks the page as allocated [ 221.623494][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5609, tgid 5609 (syz-executor), ts 70020747358, free_ts 70015253455 [ 221.644227][ C0] post_alloc_hook+0xfd/0x120 [ 221.648904][ C0] get_page_from_freelist+0xf48/0x3530 [ 221.654351][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 221.660249][ C0] new_slab+0xa2/0x650 [ 221.664305][ C0] refill_objects+0xe3/0x410 [ 221.668894][ C0] __pcs_replace_empty_main+0x376/0x680 [ 221.674425][ C0] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 221.680821][ C0] kmalloc_reserve+0xe8/0x350 [ 221.685481][ C0] __alloc_skb+0x185/0x710 [ 221.689895][ C0] inet6_ifinfo_notify+0x77/0x140 [ 221.694901][ C0] addrconf_notify+0xb54/0x1ba0 [ 221.699757][ C0] notifier_call_chain+0x99/0x3f0 [ 221.704769][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 221.710661][ C0] __dev_notify_flags+0x12c/0x2e0 [ 221.715674][ C0] netif_change_flags+0x108/0x160 [ 221.720688][ C0] do_setlink.isra.0+0x1ac4/0x3e60 [ 221.725781][ C0] page last free pid 5608 tgid 5608 stack trace: [ 221.732089][ C0] __free_frozen_pages+0x79f/0x1090 [ 221.737297][ C0] qlist_free_all+0x47/0xf0 [ 221.741801][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 221.747241][ C0] __kasan_slab_alloc+0x69/0x90 [ 221.752075][ C0] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 221.757952][ C0] __alloc_skb+0x140/0x710 [ 221.762359][ C0] netlink_alloc_large_skb+0x69/0x150 [ 221.767717][ C0] netlink_sendmsg+0x680/0xda0 [ 221.772465][ C0] __sys_sendto+0x48b/0x4e0 [ 221.776955][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 221.781706][ C0] do_syscall_64+0x115/0x870 [ 221.786294][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.792256][ C0] [ 221.794559][ C0] Memory state around the buggy address: [ 221.800164][ C0] ffff88807e558f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.808203][ C0] ffff88807e558f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.816242][ C0] >ffff88807e559000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.824278][ C0] ^ [ 221.828842][ C0] ffff88807e559080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.836882][ C0] ffff88807e559100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.844921][ C0] ================================================================== [ 221.853016][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.860204][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 221.869138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 221.879193][ C0] Call Trace: [ 221.882467][ C0] [ 221.885299][ C0] dump_stack_lvl+0x100/0x190 [ 221.889968][ C0] vpanic+0x552/0x970 [ 221.893932][ C0] ? __pfx_vpanic+0x10/0x10 [ 221.898417][ C0] ? ct_nmi_exit+0xd5/0x1b0 [ 221.902911][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 221.909484][ C0] panic+0xd1/0xe0 [ 221.913186][ C0] ? __pfx_panic+0x10/0x10 [ 221.917584][ C0] ? check_panic_on_warn+0x1f/0x90 [ 221.922700][ C0] check_panic_on_warn.cold+0x19/0x34 [ 221.928055][ C0] end_report.part.0+0x3a/0x90 [ 221.932811][ C0] kasan_report.cold+0xe/0x18 [ 221.937477][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 221.944055][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 221.950458][ C0] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 221.957378][ C0] llc_conn_state_process+0x3ec/0x1480 [ 221.962828][ C0] llc_conn_tmr_common_cb+0x2d4/0x880 [ 221.968184][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 221.973804][ C0] call_timer_fn+0x19a/0x610 [ 221.978378][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 221.983473][ C0] ? __run_timers+0x747/0xb00 [ 221.988132][ C0] ? rcu_is_watching+0x12/0xc0 [ 221.992885][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 221.998506][ C0] __run_timers+0x757/0xb00 [ 222.002993][ C0] ? __pfx___run_timers+0x10/0x10 [ 222.008005][ C0] ? ktime_get+0x9f/0x320 [ 222.012316][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 222.017325][ C0] run_timer_base+0x114/0x190 [ 222.021985][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 222.027261][ C0] run_timer_softirq+0x1a/0x50 [ 222.032007][ C0] handle_softirqs+0x1ea/0x9b0 [ 222.036933][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 222.042204][ C0] ? _raw_spin_unlock+0x28/0x50 [ 222.047040][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 222.052691][ C0] __irq_exit_rcu+0x162/0x210 [ 222.057353][ C0] irq_exit_rcu+0x9/0x30 [ 222.061578][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 222.067198][ C0] [ 222.070113][ C0] [ 222.073026][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.078989][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 222.084611][ C0] Code: 76 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 39 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 222.104290][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 222.110426][ C0] RAX: 0000000000cca187 RBX: ffffffff8e891480 RCX: ffffffff8bb962d5 [ 222.118379][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a4091 RDI: ffffffff8c401180 [ 222.126334][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 222.134285][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 222.142237][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 222.150194][ C0] ? ct_kernel_exit+0x125/0x180 [ 222.155039][ C0] default_idle+0x9/0x10 [ 222.159261][ C0] default_idle_call+0x6c/0xb0 [ 222.164005][ C0] do_idle+0x3a7/0x5b0 [ 222.168073][ C0] ? __pfx_do_idle+0x10/0x10 [ 222.172657][ C0] cpu_startup_entry+0x4f/0x60 [ 222.177407][ C0] rest_init+0x251/0x260 [ 222.181632][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 222.187163][ C0] start_kernel+0x48e/0x490 [ 222.191670][ C0] x86_64_start_reservations+0x24/0x30 [ 222.197112][ C0] x86_64_start_kernel+0x12b/0x130 [ 222.202205][ C0] common_startup_64+0x13e/0x158 [ 222.207157][ C0] [ 222.210364][ C0] Kernel Offset: disabled [ 222.214681][ C0] Rebooting in 86400 seconds..