last executing test programs: 27.58857742s ago: executing program 2 (id=2209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61783d30303030573e2b67ee30303030303030303030303030303030"]) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3, 0x8) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) timer_gettime(r3, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioprio_set$pid(0x1, r2, 0x2004) 25.72888057s ago: executing program 2 (id=2216): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffffa1, 0x3, 0x8, 0x8, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r4, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 23.325810328s ago: executing program 2 (id=2224): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x100) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 13.722978053s ago: executing program 2 (id=2248): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 13.42870162s ago: executing program 0 (id=2250): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480)="85574b793d3510f7f8e2495f3bfc6696ab2cdccea538e29f5df58f6651650c3da2912d79ec240d152706f302a326095894f43d2b63d1841dd5b574cc47ee60c2adab2dfd77cbf0f1ff018b4844ac1392eda3124c837698e5620ac33e8addfb6d794aa6e27afbd334e8a90c9cc5e2e9a0514f064e5b51a756d096f45ce4fcf909b56ce2785de60d3a9597d58bea584a358ebd092d7186b4acee0059528868231f1f671e39e17a6ed3a6bcb0995e60afaaeb5ac41335df8b663ebda827dd1452bb3f3460bbbf935ed747e08cf4f2e1c34782f57e8eb9507cb4feb21ab3600acbe5", 0xe0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@ieee802154={0x24, @short={0x2, 0x2, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000d40)="27031c00160014000200", 0xa}, {&(0x7f0000000380)}], 0x2}, 0x2400080c) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) creat(&(0x7f0000010280)='./file0\x00', 0x182) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000028c0)=ANY=[@ANYBLOB="240000003b000900041801000000000004"], 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x7a) 13.221980975s ago: executing program 0 (id=2253): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) memfd_secret(0x80000) socket$inet(0xa, 0xf, 0x4084) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x4080) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, 0x0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=@newqdisc={0x104, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xf9e1}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x44, 0x2, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xed}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x14}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x19}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x20}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x18, 0xfa, 0x4da9, 0x9, 0x1, 0x4, 0x1, 0x3}}, {0xa, 0x2, [0x5, 0x7, 0x1]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0x6, 0x1, 0x7, 0x8, 0x5}}, {0xe, 0x2, [0x6, 0x6, 0x7fff, 0x1, 0x7]}}, {{0x1c, 0x1, {0x4, 0x5, 0x3, 0x5e, 0x2, 0x63ce, 0x80}}, {0x4}}]}]}, 0x104}}, 0x0) 12.271837257s ago: executing program 3 (id=2257): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0x9}}}, 0x24}}, 0x800) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 12.181498715s ago: executing program 0 (id=2258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000), 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e}) 12.168381038s ago: executing program 1 (id=2259): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0), &(0x7f00000001c0)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xb9}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 11.492917648s ago: executing program 2 (id=2260): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f00001d5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/68, 0x44, 0x1, &(0x7f0000000100)=""/19, 0x13}, &(0x7f0000000340)=0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 11.408024206s ago: executing program 3 (id=2261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r4, r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) close(r7) 11.242253918s ago: executing program 0 (id=2262): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f00000000c0)=[{r4, 0xe7d4c009da6c19a5}, {r4, 0x201}], 0x2, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) 8.87492182s ago: executing program 3 (id=2267): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) dup(r2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f00000003c0)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) 8.097858891s ago: executing program 1 (id=2268): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={[{@dyn}]}) 6.950348308s ago: executing program 1 (id=2271): lseek(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x2, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008f0}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.200484709s ago: executing program 3 (id=2272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, 0x0) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r8, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 5.763571232s ago: executing program 4 (id=2273): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000459000/0x7000)=nil) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = pidfd_getfd(r1, r1, 0x0) setns(r5, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x2313544730985e6b, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x80000001) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.356117857s ago: executing program 0 (id=2274): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f00000007c0)=0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.304328341s ago: executing program 1 (id=2275): r0 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x80000001}, 0x14}, 0x1, 0x0, 0x0, 0x4040016}, 0x800) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x22020600) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) r5 = dup(r3) inotify_rm_watch(r5, r4) 5.134288069s ago: executing program 3 (id=2276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_io_uring_setup(0xac9, &(0x7f0000000500)={0x0, 0x8a16, 0x100, 0x0, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000001c0)={{@any, 0x6}, 0x2, 0x7, 0x7, 0x5, 0x4, 0xb, 0x8, 0x8000000000000001}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000380)={'binder0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r7, &(0x7f0000000380), 0x0, 0x2ffffc, 0x6) r8 = syz_open_dev$dri(0x0, 0x7fff, 0x200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040), 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x3, 0x1}) 4.600180462s ago: executing program 4 (id=2277): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.781021765s ago: executing program 1 (id=2278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) tee(r2, r3, 0x2, 0xa) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x75c0, &(0x7f0000000ac0)={0x0, 0x9de6, 0x40, 0x2, 0x4800020}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x5}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) 3.652397357s ago: executing program 4 (id=2279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 2.578781504s ago: executing program 4 (id=2280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}}, 0x0) 2.504666155s ago: executing program 1 (id=2281): socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x37, 0x2005}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.348160209s ago: executing program 2 (id=2282): ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000380)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x66000080) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\t'], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="9b000000", @ANYRES32, @ANYRES16], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.099274241s ago: executing program 4 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xc1086201, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffff0700000000000000000000114242030001"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) getrlimit(0x3, &(0x7f0000000180)) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.089410239s ago: executing program 0 (id=2284): r0 = dup(0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x20003, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000140)={r1}, 0x1) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x98) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r6, 0xffffffff, 0x30}, 0xc) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r5, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x8084) 497.479µs ago: executing program 3 (id=2285): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x4404c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 0s ago: executing program 4 (id=2286): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0x70bd2b, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0xcfab, 0xfffffffffffffff8}, {0xb, 0x0, 0x3d, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3502, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075c, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): syz.4.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 464.353169][ T30] audit: type=1400 audit(1759624333.667:505): avc: denied { read open } for pid=10797 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.423508][ T30] audit: type=1400 audit(1759624333.667:506): avc: denied { getattr } for pid=10797 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.560879][ T30] audit: type=1400 audit(1759624333.787:507): avc: denied { create } for pid=10794 comm="syz.4.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 465.744246][T10822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.966570][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 468.154722][T10846] tipc: Enabled bearer , priority 0 [ 468.258826][T10856] tipc: Resetting bearer [ 468.326876][T10846] syzkaller0: entered promiscuous mode [ 468.464517][T10844] tipc: Resetting bearer [ 468.866074][T10844] tipc: Disabling bearer [ 470.183827][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 470.183844][ T30] audit: type=1400 audit(1759624340.137:516): avc: denied { bind } for pid=10880 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 470.933183][ T5931] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 471.143213][ T5931] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 471.244727][ T5931] usb 3-1: config 0 interface 0 has no altsetting 0 [ 471.481451][ T5931] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 471.491250][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 471.509889][ T5931] usb 3-1: Product: syz [ 471.531327][ T5931] usb 3-1: Manufacturer: syz [ 471.546201][ T5931] usb 3-1: SerialNumber: syz [ 471.566835][ T5931] usb 3-1: config 0 descriptor?? [ 471.586461][ T5931] usb 3-1: selecting invalid altsetting 0 [ 471.938809][T10914] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1359'. [ 472.156996][ T909] usb 3-1: USB disconnect, device number 9 [ 473.393380][ T976] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 473.974507][ T30] audit: type=1400 audit(1759624343.927:517): avc: denied { bind } for pid=10932 comm="syz.0.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 474.037362][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.050092][ T976] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 474.060957][ T976] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 474.073168][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.091133][ T976] usb 2-1: config 0 descriptor?? [ 475.207803][ T30] audit: type=1400 audit(1759624344.917:518): avc: denied { setattr } for pid=10943 comm="syz.2.1368" name="" dev="pipefs" ino=25165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 477.396163][ T30] audit: type=1400 audit(1759624347.227:519): avc: denied { read append } for pid=10976 comm="syz.2.1379" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 477.419396][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.883255][ T30] audit: type=1400 audit(1759624347.347:520): avc: denied { open } for pid=10976 comm="syz.2.1379" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 478.314436][ T5931] usb 2-1: USB disconnect, device number 7 [ 479.546518][ T5876] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 479.739848][ T30] audit: type=1400 audit(1759624349.667:521): avc: denied { write } for pid=11003 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 480.022085][ T5876] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 480.053349][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.061334][ T5876] usb 3-1: Product: syz [ 480.102874][ T5876] usb 3-1: Manufacturer: syz [ 480.302643][ T5876] usb 3-1: SerialNumber: syz [ 480.316542][ T5876] usb 3-1: config 0 descriptor?? [ 480.438739][T11009] netlink: 'syz.1.1387': attribute type 3 has an invalid length. [ 480.480194][T11010] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 480.487290][T11010] overlayfs: failed to set xattr on upper [ 480.493008][T11010] overlayfs: ...falling back to redirect_dir=nofollow. [ 480.499898][T11010] overlayfs: ...falling back to metacopy=off. [ 480.508314][T11010] overlayfs: ...falling back to index=off. [ 480.514185][T11010] overlayfs: ...falling back to uuid=null. [ 480.542817][T11009] netlink: 'syz.1.1387': attribute type 1 has an invalid length. [ 480.620565][T11009] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1387'. [ 480.621008][ T5876] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 480.717090][T11012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1388'. [ 483.140254][ T5876] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 483.530264][ T5876] usb 3-1: USB disconnect, device number 10 [ 486.486869][ T30] audit: type=1400 audit(1759624356.437:522): avc: denied { read } for pid=11078 comm="syz.1.1405" dev="sockfs" ino=25352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 487.553631][T11079] ======================================================= [ 487.553631][T11079] WARNING: The mand mount option has been deprecated and [ 487.553631][T11079] and is ignored by this kernel. Remove the mand [ 487.553631][T11079] option from the mount to silence this warning. [ 487.553631][T11079] ======================================================= [ 487.588610][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.923719][T11079] 9pnet_fd: Insufficient options for proto=fd [ 487.931059][ T30] audit: type=1400 audit(1759624357.817:523): avc: denied { accept } for pid=11099 comm="syz.3.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 487.971598][ T30] audit: type=1400 audit(1759624357.887:524): avc: denied { unmount } for pid=11102 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 490.013177][T11117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1418'. [ 495.318986][T11174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11174 comm=syz.3.1433 [ 495.348254][T11174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11174 comm=syz.3.1433 [ 495.851922][T11191] tipc: Enabled bearer , priority 0 [ 496.207164][T11191] syzkaller0: entered promiscuous mode [ 496.240153][T11191] syzkaller0: entered allmulticast mode [ 496.316886][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 496.438100][T11191] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 496.662624][ T30] audit: type=1400 audit(1759624366.477:525): avc: denied { setopt } for pid=11202 comm="syz.0.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 496.853050][T11208] tipc: Resetting bearer [ 497.367585][T11190] tipc: Resetting bearer [ 497.677116][T11216] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1440'. [ 498.623711][T11190] tipc: Disabling bearer [ 500.771679][T11243] netlink: 'syz.2.1447': attribute type 39 has an invalid length. [ 501.036542][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.053173][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.735192][T11254] fuse: Bad value for 'fd' [ 502.037479][ T30] audit: type=1400 audit(1759624371.987:526): avc: denied { map } for pid=11251 comm="syz.2.1448" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 502.499354][ T30] audit: type=1400 audit(1759624372.017:527): avc: denied { execute } for pid=11251 comm="syz.2.1448" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 503.077352][T11266] tipc: Enabling of bearer rejected, failed to enable media [ 506.317816][T11291] tipc: Enabled bearer , priority 0 [ 506.367513][T11291] syzkaller0: entered promiscuous mode [ 506.383177][T11291] syzkaller0: entered allmulticast mode [ 506.506242][T11291] tipc: Resetting bearer [ 506.566463][T11290] tipc: Resetting bearer [ 506.614142][T11290] tipc: Disabling bearer [ 507.154953][ T30] audit: type=1400 audit(1759624377.107:528): avc: denied { mount } for pid=11317 comm="syz.4.1466" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 509.212934][T11328] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 509.918907][T11328] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 510.088527][T11338] tipc: Started in network mode [ 510.102935][T11338] tipc: Node identity aecc50b6368d, cluster identity 4711 [ 510.123311][T11338] tipc: Enabled bearer , priority 0 [ 510.190080][T11338] syzkaller0: entered promiscuous mode [ 510.196068][T11338] syzkaller0: entered allmulticast mode [ 510.242099][ T30] audit: type=1400 audit(1759624380.167:529): avc: denied { write } for pid=11340 comm="syz.2.1471" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 510.264834][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.278691][T11338] tipc: Resetting bearer [ 510.301996][T11337] tipc: Resetting bearer [ 510.345653][T11337] tipc: Disabling bearer [ 513.066571][T11386] IPVS: length: 90 != 112 [ 513.242239][T11393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.722728][T11380] orangefs_mount: mount request failed with -4 [ 514.039876][T11400] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1486'. [ 515.761281][T11415] tipc: Enabling of bearer rejected, failed to enable media [ 520.309352][T11467] overlayfs: failed to clone upperpath [ 523.398906][T11486] tipc: Enabled bearer , priority 0 [ 523.418405][T11486] syzkaller0: entered promiscuous mode [ 523.425954][T11486] syzkaller0: entered allmulticast mode [ 523.633389][T11401] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 523.660141][T11486] tipc: Resetting bearer [ 523.692572][T11485] tipc: Resetting bearer [ 523.803249][T11401] usb 2-1: Using ep0 maxpacket: 16 [ 523.843333][T11401] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 523.933142][T11485] tipc: Disabling bearer [ 523.984979][T11401] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 524.112837][T11401] usb 2-1: Product: syz [ 524.133196][T11401] usb 2-1: SerialNumber: syz [ 524.153668][T11401] usb 2-1: config 0 descriptor?? [ 524.187513][T11401] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 524.211338][T11401] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 524.233466][T11401] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 524.247810][T11401] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 525.232441][T11488] batadv_slave_0: entered promiscuous mode [ 525.978900][ T5876] usb 2-1: USB disconnect, device number 8 [ 526.581055][T11521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.833188][ T30] audit: type=1400 audit(1759624399.768:530): avc: denied { connect } for pid=11534 comm="syz.2.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 529.579731][ T30] audit: type=1400 audit(1759624400.398:531): avc: denied { listen } for pid=11534 comm="syz.2.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 531.054710][ T30] audit: type=1400 audit(1759624402.008:532): avc: denied { wake_alarm } for pid=11562 comm="syz.4.1529" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 532.160322][ T30] audit: type=1400 audit(1759624403.108:533): avc: denied { relabelfrom } for pid=11570 comm="syz.1.1531" name="NETLINK" dev="sockfs" ino=28955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 532.228614][T11571] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 532.355273][ T30] audit: type=1400 audit(1759624403.218:534): avc: denied { relabelto } for pid=11570 comm="syz.1.1531" name="NETLINK" dev="sockfs" ino=28955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 533.716284][ T30] audit: type=1400 audit(1759624404.588:535): avc: denied { setopt } for pid=11569 comm="syz.0.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 533.739865][T11578] orangefs_mount: mount request failed with -4 [ 535.012528][ T30] audit: type=1400 audit(1759624405.768:536): avc: denied { ioctl } for pid=11595 comm="syz.1.1539" path="/dev/ptyq7" dev="devtmpfs" ino=125 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 535.037609][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.045099][ T30] audit: type=1400 audit(1759624405.798:537): avc: denied { create } for pid=11598 comm="syz.2.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 535.073860][ T30] audit: type=1400 audit(1759624405.958:538): avc: denied { setopt } for pid=11598 comm="syz.2.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 535.103579][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.704423][ T30] audit: type=1400 audit(1759624408.648:539): avc: denied { relabelfrom } for pid=11628 comm="syz.0.1546" name="NETLINK" dev="sockfs" ino=29036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 537.735608][ T30] audit: type=1400 audit(1759624408.648:540): avc: denied { relabelto } for pid=11628 comm="syz.0.1546" name="NETLINK" dev="sockfs" ino=29036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 537.760304][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.030826][T11636] tipc: Enabled bearer , priority 0 [ 538.044012][T11636] syzkaller0: entered promiscuous mode [ 538.056103][T11636] syzkaller0: entered allmulticast mode [ 538.204935][T11636] tipc: Resetting bearer [ 538.658652][T11634] tipc: Resetting bearer [ 539.325396][T11401] tipc: Node number set to 2554417334 [ 539.327145][T11634] tipc: Disabling bearer [ 541.626067][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 542.518428][ T30] audit: type=1400 audit(1759624413.448:541): avc: denied { create } for pid=11687 comm="syz.3.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 543.012909][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1562'. [ 543.351256][ T30] audit: type=1400 audit(1759624414.298:542): avc: denied { map } for pid=11707 comm="syz.0.1566" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.433938][ T30] audit: type=1400 audit(1759624414.328:543): avc: denied { execute } for pid=11707 comm="syz.0.1566" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.448131][T11738] tipc: Enabling of bearer rejected, failed to enable media [ 546.530894][T11745] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1573'. [ 547.550591][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 547.582713][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 548.084290][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 548.093935][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 548.102971][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 548.675981][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 548.940861][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 548.950418][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 550.363667][ T30] audit: type=1326 audit(1759624421.308:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd9ef8eec9 code=0x0 [ 551.131364][ T30] audit: type=1400 audit(1759624422.078:545): avc: denied { write } for pid=11812 comm="syz.2.1589" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 552.478455][T11829] tipc: Enabled bearer , priority 0 [ 552.493873][T11833] syzkaller0: entered promiscuous mode [ 552.507193][T11833] syzkaller0: entered allmulticast mode [ 552.532175][T11831] syzkaller0: entered promiscuous mode [ 552.544370][T11831] syzkaller0: entered allmulticast mode [ 552.555823][T11827] tipc: Resetting bearer [ 552.674714][T11826] tipc: Resetting bearer [ 552.700687][T11826] tipc: Disabling bearer [ 553.414880][ T30] audit: type=1400 audit(1759624423.958:546): avc: denied { map } for pid=11851 comm="syz.4.1597" path="socket:[29277]" dev="sockfs" ino=29277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 554.049006][T11864] tipc: Enabled bearer , priority 0 [ 554.124192][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1599'. [ 554.543618][T11867] tipc: Enabling of bearer rejected, failed to enable media [ 554.553941][T11864] syzkaller0: entered promiscuous mode [ 554.559393][T11864] syzkaller0: entered allmulticast mode [ 555.150414][T11864] tipc: Resetting bearer [ 555.167265][T11863] tipc: Resetting bearer [ 555.332948][T11863] tipc: Disabling bearer [ 556.845914][T11883] delete_channel: no stack [ 559.259549][T11902] bridge0: entered promiscuous mode [ 559.267198][T11902] macsec1: entered promiscuous mode [ 559.279719][T11902] bridge0: port 1(macsec1) entered blocking state [ 559.288126][T11902] bridge0: port 1(macsec1) entered disabled state [ 559.296604][T11902] macsec1: entered allmulticast mode [ 559.302630][T11902] bridge0: entered allmulticast mode [ 559.469325][T11902] macsec1: left allmulticast mode [ 559.474430][T11902] bridge0: left allmulticast mode [ 559.511078][T11902] bridge0: left promiscuous mode [ 559.575847][T11904] tipc: Enabling of bearer rejected, failed to enable media [ 560.134424][ T30] audit: type=1400 audit(1759624431.078:547): avc: denied { create } for pid=11911 comm="syz.1.1613" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 560.437148][ T30] audit: type=1400 audit(1759624431.378:548): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 560.494797][T11926] block nbd0: shutting down sockets [ 562.479929][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.486757][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.048982][T11951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.185268][T11949] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 563.246941][ T80] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 563.461464][ T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 563.840358][T11949] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 564.556720][T11970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1627'. [ 566.204772][T11985] tipc: Enabling of bearer rejected, failed to enable media [ 566.287772][T11987] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1632'. [ 569.639522][ T30] audit: type=1400 audit(1759624440.588:549): avc: denied { read } for pid=12013 comm="syz.0.1639" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 569.692383][T12016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1640'. [ 569.932082][ T30] audit: type=1400 audit(1759624440.588:550): avc: denied { open } for pid=12013 comm="syz.0.1639" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 569.983591][ T30] audit: type=1400 audit(1759624440.588:551): avc: denied { ioctl } for pid=12013 comm="syz.0.1639" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 570.453916][ T30] audit: type=1400 audit(1759624440.788:552): avc: denied { setopt } for pid=12017 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 572.242091][ T30] audit: type=1400 audit(1759624443.188:553): avc: denied { create } for pid=12039 comm="syz.3.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 572.318531][ T30] audit: type=1400 audit(1759624443.188:554): avc: denied { setopt } for pid=12039 comm="syz.3.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 572.372753][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 572.418955][T12045] vlan2: entered allmulticast mode [ 572.435727][T12045] hsr_slave_1: entered allmulticast mode [ 572.626261][ T30] audit: type=1400 audit(1759624443.578:555): avc: denied { lock } for pid=12046 comm="syz.3.1649" path="socket:[29808]" dev="sockfs" ino=29808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 574.847408][ T30] audit: type=1400 audit(1759624445.728:556): avc: denied { shutdown } for pid=12071 comm="syz.4.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 576.742896][ T30] audit: type=1326 audit(1759624447.208:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 576.766383][ T30] audit: type=1326 audit(1759624447.208:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 576.819738][ T30] audit: type=1326 audit(1759624447.208:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 576.861308][ T30] audit: type=1326 audit(1759624447.208:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 576.906722][ T30] audit: type=1326 audit(1759624447.208:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 577.325414][ T30] audit: type=1326 audit(1759624447.208:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 577.349387][ T30] audit: type=1326 audit(1759624447.208:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 577.404583][ T30] audit: type=1326 audit(1759624447.208:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 577.701359][ T30] audit: type=1326 audit(1759624447.208:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12083 comm="syz.4.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 579.704209][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.715587][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.726197][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.736745][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.747059][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.757539][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.768064][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.778599][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.790352][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 579.801233][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 580.526015][T12127] tipc: Enabled bearer , priority 0 [ 580.534421][T12127] syzkaller0: entered promiscuous mode [ 580.539891][T12127] syzkaller0: entered allmulticast mode [ 580.688065][T12130] tipc: Resetting bearer [ 581.131230][T12126] tipc: Resetting bearer [ 581.179099][T12126] tipc: Disabling bearer [ 581.254643][ T9] IPVS: starting estimator thread 0... [ 581.343822][T12136] IPVS: using max 37 ests per chain, 88800 per kthread [ 587.819560][T12202] SQUASHFS error: Failed to read block 0x0: -5 [ 587.827484][T12202] unable to read squashfs_super_block [ 589.130987][T12216] hugetlbfs: syz.0.1692 (12216): Using mlock ulimits for SHM_HUGETLB is obsolete [ 591.056811][ T5883] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 591.383685][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 591.458274][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.700955][ T5883] usb 3-1: config 0 has no interfaces? [ 592.424771][ T5883] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 592.435442][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.454908][ T5883] usb 3-1: config 0 descriptor?? [ 592.761801][ T909] usb 3-1: USB disconnect, device number 11 [ 593.307839][T12262] delete_channel: no stack [ 594.709803][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 594.709838][ T30] audit: type=1400 audit(1759624465.648:577): avc: denied { create } for pid=12269 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 595.145075][ T30] audit: type=1400 audit(1759624465.658:578): avc: denied { bind } for pid=12269 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 595.164755][ T30] audit: type=1400 audit(1759624465.658:579): avc: denied { setopt } for pid=12269 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 595.246448][ T30] audit: type=1400 audit(1759624465.658:580): avc: denied { accept } for pid=12269 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 595.443146][ T30] audit: type=1400 audit(1759624465.658:581): avc: denied { write } for pid=12269 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 595.477287][ T30] audit: type=1400 audit(1759624465.658:582): avc: denied { read } for pid=12269 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 595.524683][ T30] audit: type=1400 audit(1759624466.138:583): avc: denied { module_request } for pid=12263 comm="syz.0.1702" kmod="net-pf-10-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 595.547667][ T30] audit: type=1400 audit(1759624466.158:584): avc: denied { map_create } for pid=12255 comm="syz.2.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 595.574074][ T30] audit: type=1400 audit(1759624466.158:585): avc: denied { bpf } for pid=12255 comm="syz.2.1704" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 595.596742][ T30] audit: type=1400 audit(1759624466.188:586): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.085545][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 600.085558][ T30] audit: type=1400 audit(1759624470.728:621): avc: denied { write } for pid=12318 comm="syz.0.1718" name="ip_mr_cache" dev="proc" ino=4026532843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 600.125460][ T30] audit: type=1400 audit(1759624470.748:622): avc: denied { setopt } for pid=12318 comm="syz.0.1718" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 600.146499][ T30] audit: type=1400 audit(1759624471.068:623): avc: denied { mounton } for pid=12325 comm="syz.4.1720" path="/384/file0" dev="tmpfs" ino=2016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 600.170651][ T30] audit: type=1400 audit(1759624471.068:624): avc: denied { mount } for pid=12325 comm="syz.4.1720" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 600.816368][ T30] audit: type=1400 audit(1759624471.758:625): avc: denied { create } for pid=12330 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.566032][ T30] audit: type=1400 audit(1759624471.758:626): avc: denied { write } for pid=12330 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.643450][ T30] audit: type=1400 audit(1759624471.758:627): avc: denied { read } for pid=12330 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.834201][ T30] audit: type=1400 audit(1759624472.778:628): avc: denied { prog_run } for pid=12348 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.488801][ T30] audit: type=1400 audit(1759624473.158:629): avc: denied { map_read map_write } for pid=12348 comm="syz.3.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 603.931813][ T30] audit: type=1400 audit(1759624474.878:630): avc: denied { create } for pid=12362 comm="syz.4.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 604.023729][T12363] 9pnet_fd: p9_fd_create_tcp (12363): problem connecting socket to 127.0.0.1 [ 606.102250][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 606.102289][ T30] audit: type=1400 audit(1759624476.528:636): avc: denied { write } for pid=12381 comm="syz.1.1734" name="001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 606.582192][ T30] audit: type=1400 audit(1759624477.278:637): avc: denied { create } for pid=12396 comm="syz.1.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 607.014029][ T30] audit: type=1400 audit(1759624477.868:638): avc: denied { execute_no_trans } for pid=12402 comm="syz.4.1738" path="/389/file1" dev="tmpfs" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 607.561829][ T30] audit: type=1400 audit(1759624478.508:639): avc: denied { create } for pid=12408 comm="syz.4.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 607.632552][ T30] audit: type=1400 audit(1759624478.538:640): avc: denied { setopt } for pid=12407 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 607.690050][ T30] audit: type=1400 audit(1759624478.618:641): avc: denied { bind } for pid=12407 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 609.317098][ T30] audit: type=1400 audit(1759624480.268:642): avc: denied { read write } for pid=12424 comm="syz.1.1745" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 609.647140][ T30] audit: type=1400 audit(1759624480.268:643): avc: denied { open } for pid=12424 comm="syz.1.1745" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 611.206088][ T30] audit: type=1400 audit(1759624482.148:644): avc: denied { create } for pid=12436 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 611.534194][ T30] audit: type=1400 audit(1759624482.488:645): avc: denied { create } for pid=12442 comm="syz.4.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 612.102311][ T30] audit: type=1400 audit(1759624482.748:646): avc: denied { create } for pid=12442 comm="syz.4.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 612.224428][ T30] audit: type=1400 audit(1759624482.758:647): avc: denied { write } for pid=12442 comm="syz.4.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 612.549781][ T30] audit: type=1400 audit(1759624483.488:648): avc: denied { bind } for pid=12453 comm="syz.3.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 614.122798][ T30] audit: type=1400 audit(1759624485.068:649): avc: denied { mounton } for pid=12477 comm="syz.1.1758" path="/proc/1135/task" dev="proc" ino=31803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 614.300433][ T30] audit: type=1400 audit(1759624485.068:650): avc: denied { mount } for pid=12477 comm="syz.1.1758" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 614.401773][ T30] audit: type=1400 audit(1759624485.198:651): avc: denied { create } for pid=12484 comm="syz.0.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 614.440731][ T30] audit: type=1400 audit(1759624485.198:652): avc: denied { create } for pid=12484 comm="syz.0.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 614.461465][ T30] audit: type=1400 audit(1759624485.198:653): avc: denied { create } for pid=12484 comm="syz.0.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 614.554772][T12464] Bluetooth: hci4: command 0x0406 tx timeout [ 616.364746][T12501] tipc: Started in network mode [ 616.383961][T12501] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 616.471937][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 616.471981][ T30] audit: type=1400 audit(1759624487.398:655): avc: denied { create } for pid=12498 comm="syz.2.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 616.670047][T12501] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 616.678409][T12501] tipc: Enabled bearer , priority 10 [ 616.687694][ T30] audit: type=1400 audit(1759624487.398:656): avc: denied { bind } for pid=12498 comm="syz.2.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 616.707683][ T30] audit: type=1400 audit(1759624487.398:657): avc: denied { connect } for pid=12498 comm="syz.2.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 616.743723][ T30] audit: type=1400 audit(1759624487.688:658): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 616.852302][ T30] audit: type=1400 audit(1759624487.788:659): avc: denied { read } for pid=12506 comm="syz.1.1765" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 616.967350][ T30] audit: type=1400 audit(1759624487.788:660): avc: denied { open } for pid=12506 comm="syz.1.1765" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 617.017335][T12509] binder: 12506:12509 ioctl c0306201 200000000040 returned -22 [ 617.331859][ T30] audit: type=1400 audit(1759624487.968:661): avc: denied { ioctl } for pid=12506 comm="syz.1.1765" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.103679][ T5876] tipc: Node number set to 1 [ 619.724555][ T30] audit: type=1400 audit(1759624490.638:662): avc: denied { unlink } for pid=12525 comm="syz.1.1771" name="#22" dev="tmpfs" ino=1717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 619.993331][ T30] audit: type=1400 audit(1759624490.648:663): avc: denied { mount } for pid=12525 comm="syz.1.1771" name="/" dev="overlay" ino=1712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 620.017840][ T30] audit: type=1400 audit(1759624490.658:664): avc: denied { watch } for pid=12525 comm="syz.1.1771" path="/319/bus/file1" dev="overlay" ino=1719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 620.294223][T12538] tipc: Enabled bearer , priority 0 [ 620.403922][T12538] syzkaller0: entered promiscuous mode [ 620.437179][T12538] syzkaller0: entered allmulticast mode [ 620.449944][T12538] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 621.004781][ T909] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 621.685186][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 621.685219][ T30] audit: type=1400 audit(1759624492.628:673): avc: denied { mount } for pid=12552 comm="syz.0.1776" name="/" dev="rpc_pipefs" ino=31551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 622.079756][ T909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.091254][ T909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 622.091378][T12557] netlink: 'syz.3.1777': attribute type 1 has an invalid length. [ 622.103227][ T909] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 622.120043][ T909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.148142][ T909] usb 3-1: config 0 descriptor?? [ 622.155869][T12547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 622.468723][T12559] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 622.560041][T12559] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 623.032630][T12538] tipc: Resetting bearer [ 623.049835][ T909] usbhid 3-1:0.0: can't add hid device: -71 [ 623.058093][ T909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 623.067639][ T30] audit: type=1400 audit(1759624494.018:674): avc: denied { setopt } for pid=12564 comm="syz.0.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 623.072193][T12562] gretap2: entered promiscuous mode [ 623.087321][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.093515][ T909] usb 3-1: USB disconnect, device number 12 [ 623.130120][T12562] bond6: (slave gretap2): making interface the new active one [ 623.155433][T12562] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 623.234842][T12536] tipc: Resetting bearer [ 623.244588][ T30] audit: type=1400 audit(1759624494.198:675): avc: denied { getopt } for pid=12571 comm="syz.4.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 623.283668][T12536] tipc: Disabling bearer [ 623.300329][ T30] audit: type=1400 audit(1759624494.248:676): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 623.319932][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.390899][T12574] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 623.706497][ T30] audit: type=1400 audit(1759624494.658:677): avc: denied { append } for pid=12577 comm="syz.0.1783" name="comedi2" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.730487][ T909] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 623.924568][ T909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.951465][ T909] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 623.963561][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.970171][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.032083][ T909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.054573][ T909] usb 2-1: config 0 descriptor?? [ 624.066596][ T909] pwc: Askey VC010 type 2 USB webcam detected. [ 624.076078][T12582] __nla_validate_parse: 28 callbacks suppressed [ 624.076096][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1784'. [ 624.114802][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1784'. [ 624.125624][T12582] netlink: 'syz.4.1784': attribute type 11 has an invalid length. [ 624.134964][T12582] netlink: 'syz.4.1784': attribute type 13 has an invalid length. [ 624.198207][ T30] audit: type=1400 audit(1759624495.148:678): avc: denied { sys_module } for pid=12581 comm="syz.4.1784" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 624.674269][ T909] pwc: recv_control_msg error -32 req 02 val 2b00 [ 624.681642][ T909] pwc: recv_control_msg error -32 req 02 val 2700 [ 624.719069][ T909] pwc: recv_control_msg error -32 req 02 val 2c00 [ 624.731800][ T909] pwc: recv_control_msg error -32 req 04 val 1000 [ 624.747808][ T909] pwc: recv_control_msg error -32 req 04 val 1300 [ 625.295084][ T30] audit: type=1400 audit(1759624495.788:679): avc: denied { read } for pid=12597 comm="syz.0.1789" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 625.318300][ T30] audit: type=1400 audit(1759624495.788:680): avc: denied { open } for pid=12597 comm="syz.0.1789" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 625.341518][ T30] audit: type=1400 audit(1759624495.818:681): avc: denied { mount } for pid=12597 comm="syz.0.1789" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 625.341641][ T909] pwc: recv_control_msg error -32 req 04 val 1400 [ 625.372220][ T30] audit: type=1400 audit(1759624495.828:682): avc: denied { remount } for pid=12597 comm="syz.0.1789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 625.407344][ T909] pwc: recv_control_msg error -32 req 02 val 2000 [ 625.477978][ T5834] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 625.485735][ T909] pwc: recv_control_msg error -32 req 02 val 2100 [ 625.493667][ T909] pwc: recv_control_msg error -32 req 04 val 1500 [ 625.610516][ T909] pwc: recv_control_msg error -32 req 02 val 2500 [ 625.785414][ T909] pwc: recv_control_msg error -32 req 02 val 2400 [ 626.284428][ T909] pwc: recv_control_msg error -32 req 02 val 2600 [ 626.291519][ T909] pwc: recv_control_msg error -32 req 02 val 2900 [ 626.574374][ T909] pwc: recv_control_msg error -71 req 04 val 1100 [ 626.589369][ T909] pwc: recv_control_msg error -71 req 04 val 1200 [ 626.621671][ T909] pwc: Registered as video103. [ 626.740282][ T909] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 626.886840][ T909] usb 2-1: USB disconnect, device number 9 [ 626.902807][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 626.902821][ T30] audit: type=1400 audit(1759624497.838:685): avc: denied { read } for pid=5180 comm="acpid" name="event4" dev="devtmpfs" ino=3028 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.431074][ T30] audit: type=1400 audit(1759624497.838:686): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3028 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.456671][ T30] audit: type=1400 audit(1759624497.838:687): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3028 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.854110][T12632] ALSA: mixer_oss: invalid OSS volume 'u' [ 629.815821][ T30] audit: type=1400 audit(1759624500.768:688): avc: denied { bind } for pid=12644 comm="syz.3.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 629.882955][ T30] audit: type=1400 audit(1759624500.788:689): avc: denied { connect } for pid=12646 comm="syz.4.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 629.903556][ T30] audit: type=1400 audit(1759624500.788:690): avc: denied { name_connect } for pid=12646 comm="syz.4.1802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 629.926493][ T30] audit: type=1400 audit(1759624500.798:691): avc: denied { listen } for pid=12646 comm="syz.4.1802" lport=50649 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 629.977130][ T30] audit: type=1400 audit(1759624500.798:692): avc: denied { accept } for pid=12646 comm="syz.4.1802" lport=50649 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 630.065800][T12655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 630.258458][ T30] audit: type=1400 audit(1759624500.798:693): avc: denied { setopt } for pid=12646 comm="syz.4.1802" lport=50649 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 630.292623][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 630.357854][ T30] audit: type=1400 audit(1759624501.308:694): avc: denied { create } for pid=12659 comm="syz.0.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 631.881424][T12677] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 632.212702][T12682] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 633.586213][T12690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'. [ 633.773549][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 633.773563][ T30] audit: type=1400 audit(1759624504.658:699): avc: denied { write } for pid=12679 comm="syz.3.1812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 635.075028][ T30] audit: type=1400 audit(1759624506.028:700): avc: denied { read write } for pid=12692 comm="syz.1.1814" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 635.114471][ T30] audit: type=1400 audit(1759624506.028:701): avc: denied { open } for pid=12692 comm="syz.1.1814" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 635.141743][ T30] audit: type=1400 audit(1759624506.028:702): avc: denied { ioctl } for pid=12692 comm="syz.1.1814" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 635.183669][ T30] audit: type=1400 audit(1759624506.068:703): avc: denied { connect } for pid=12705 comm="syz.4.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 635.289189][ T30] audit: type=1400 audit(1759624506.238:704): avc: denied { read } for pid=12692 comm="syz.1.1814" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 635.746724][ T30] audit: type=1400 audit(1759624506.268:705): avc: denied { open } for pid=12692 comm="syz.1.1814" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 635.770684][T12714] netlink: 'syz.1.1814': attribute type 30 has an invalid length. [ 635.852609][ T30] audit: type=1400 audit(1759624506.268:706): avc: denied { ioctl } for pid=12692 comm="syz.1.1814" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64ae scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 635.943483][ T30] audit: type=1400 audit(1759624506.868:707): avc: denied { create } for pid=12699 comm="syz.2.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 637.851152][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1823'. [ 637.963348][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 638.249367][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 638.292605][ T30] audit: type=1400 audit(1759624509.218:708): avc: denied { create } for pid=12746 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 638.663666][ T909] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 639.179736][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 639.179746][ T30] audit: type=1400 audit(1759624510.118:710): avc: denied { firmware_load } for pid=12763 comm="syz.1.1827" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 639.211087][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.243473][ T909] usb 3-1: Using ep0 maxpacket: 8 [ 639.250553][ T909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 639.413113][ T909] usb 3-1: config 4 interface 0 has no altsetting 0 [ 639.424247][ T909] usb 3-1: string descriptor 0 read error: -22 [ 639.886014][ T909] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 639.898206][ T30] audit: type=1400 audit(1759624510.438:711): avc: denied { mounton } for pid=12767 comm="syz.4.1828" path="/411/file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 639.922000][ T909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.936647][T12777] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1831'. [ 639.981974][ T909] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 639.996108][ T30] audit: type=1400 audit(1759624510.938:712): avc: denied { map } for pid=12770 comm="syz.1.1830" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 640.057217][ T909] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 640.133696][ T909] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 640.174234][ T909] usb 3-1: media controller created [ 640.279246][ T909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.897647][ T909] zl10353_read_register: readreg error (reg=127, ret==0) [ 640.959416][ T909] usb 3-1: USB disconnect, device number 13 [ 641.242794][ T30] audit: type=1400 audit(1759624512.188:713): avc: denied { create } for pid=12794 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 641.378399][ T30] audit: type=1400 audit(1759624512.188:714): avc: denied { bind } for pid=12794 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 642.139825][ T30] audit: type=1400 audit(1759624513.018:715): avc: denied { accept } for pid=12794 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 642.341824][ T30] audit: type=1400 audit(1759624513.278:716): avc: denied { mounton } for pid=12802 comm="syz.2.1837" path="/330/file0" dev="tmpfs" ino=1757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 642.709142][ T30] audit: type=1400 audit(1759624513.658:717): avc: denied { connect } for pid=12805 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 642.955304][ T30] audit: type=1400 audit(1759624513.748:718): avc: denied { ioctl } for pid=12805 comm="syz.1.1838" path="socket:[32175]" dev="sockfs" ino=32175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 643.063346][T12816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=12816 comm=syz.3.1841 [ 644.329233][ T30] audit: type=1400 audit(1759624515.258:719): avc: denied { setopt } for pid=12805 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 644.362423][ T30] audit: type=1400 audit(1759624515.268:720): avc: denied { write } for pid=12805 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 644.988298][ T30] audit: type=1400 audit(1759624515.908:721): avc: denied { mount } for pid=12824 comm="syz.4.1843" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 646.307871][ T30] audit: type=1400 audit(1759624517.258:722): avc: denied { ioctl } for pid=12839 comm="syz.2.1848" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 646.793194][ T30] audit: type=1400 audit(1759624517.338:723): avc: denied { watch } for pid=12834 comm="syz.1.1846" path="/333/file0" dev="tmpfs" ino=1791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 646.817777][ T30] audit: type=1400 audit(1759624517.338:724): avc: denied { watch_sb } for pid=12834 comm="syz.1.1846" path="/333/file0" dev="tmpfs" ino=1791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 647.528469][ T30] audit: type=1400 audit(1759624518.418:725): avc: denied { write } for pid=12839 comm="syz.2.1848" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 649.660804][ T30] audit: type=1400 audit(1759624520.608:726): avc: denied { read write } for pid=12859 comm="syz.0.1852" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 649.897465][ T30] audit: type=1400 audit(1759624520.638:727): avc: denied { open } for pid=12859 comm="syz.0.1852" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 649.977503][ T30] audit: type=1400 audit(1759624520.828:728): avc: denied { mount } for pid=12859 comm="syz.0.1852" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 650.824073][ T30] audit: type=1400 audit(1759624521.008:729): avc: denied { ioctl } for pid=12868 comm="syz.2.1854" path="socket:[33049]" dev="sockfs" ino=33049 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 650.963715][ T30] audit: type=1400 audit(1759624521.808:730): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 652.153402][ T30] audit: type=1400 audit(1759624523.068:731): avc: denied { create } for pid=12886 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 652.425021][ T30] audit: type=1400 audit(1759624523.088:732): avc: denied { write } for pid=12886 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 653.830694][ T30] audit: type=1400 audit(1759624524.778:733): avc: denied { mounton } for pid=12908 comm="syz.1.1863" path="/336/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 653.976848][ T30] audit: type=1400 audit(1759624524.778:734): avc: denied { remount } for pid=12908 comm="syz.1.1863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 654.007107][ T30] audit: type=1400 audit(1759624524.958:735): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 655.210802][ T30] audit: type=1400 audit(1759624526.158:736): avc: denied { write } for pid=12938 comm="syz.4.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 655.261783][ T30] audit: type=1400 audit(1759624526.208:737): avc: denied { setopt } for pid=12938 comm="syz.4.1868" lport=41053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 655.432230][ T30] audit: type=1400 audit(1759624526.208:738): avc: denied { ioctl } for pid=12938 comm="syz.4.1868" path="socket:[32313]" dev="sockfs" ino=32313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 655.680536][ T30] audit: type=1400 audit(1759624526.208:739): avc: denied { shutdown } for pid=12938 comm="syz.4.1868" lport=41053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 656.221041][ T30] audit: type=1400 audit(1759624526.248:740): avc: denied { read } for pid=12938 comm="syz.4.1868" lport=41053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 656.906623][T12957] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 656.915704][T12957] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 656.926016][T12957] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 656.935249][T12957] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 656.965916][ T30] audit: type=1400 audit(1759624527.828:741): avc: denied { create } for pid=12955 comm="syz.0.1872" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 657.459704][ T30] audit: type=1400 audit(1759624528.408:742): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 657.486915][T12967] tipc: Enabled bearer , priority 0 [ 657.515321][T12967] syzkaller0: entered promiscuous mode [ 657.520974][T12967] syzkaller0: entered allmulticast mode [ 657.622163][T12967] tipc: Resetting bearer [ 657.816129][T12964] tipc: Resetting bearer [ 657.842454][T12964] tipc: Disabling bearer [ 658.714215][T12980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1877'. [ 658.913755][T12987] overlayfs: failed to clone upperpath [ 658.950151][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1877'. [ 659.173090][ T30] audit: type=1400 audit(1759624529.918:743): avc: denied { create } for pid=12986 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 659.224107][ T30] audit: type=1400 audit(1759624529.918:744): avc: denied { write } for pid=12986 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 659.949721][T12997] overlayfs: failed to clone upperpath [ 660.213281][ T30] audit: type=1400 audit(1759624531.148:745): avc: denied { kexec_image_load } for pid=13000 comm="syz.3.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 661.377804][T13016] : entered promiscuous mode [ 661.745483][ T30] audit: type=1400 audit(1759624532.298:746): avc: denied { write } for pid=13012 comm="syz.0.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 662.063498][ T30] audit: type=1400 audit(1759624532.298:747): avc: denied { nlmsg_write } for pid=13012 comm="syz.0.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 662.295870][ T30] audit: type=1400 audit(1759624532.728:748): avc: denied { read write } for pid=13009 comm="syz.2.1884" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 662.353570][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 662.362712][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 662.703761][ T30] audit: type=1400 audit(1759624532.728:749): avc: denied { open } for pid=13009 comm="syz.2.1884" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 663.092848][ T30] audit: type=1400 audit(1759624534.038:750): avc: denied { create } for pid=13022 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 663.364492][ T30] audit: type=1400 audit(1759624534.318:751): avc: denied { getopt } for pid=13026 comm="syz.0.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 663.764170][ T30] audit: type=1400 audit(1759624534.708:752): avc: denied { connect } for pid=13022 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 664.537723][T13039] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 665.564527][ T30] audit: type=1400 audit(1759624536.518:753): avc: denied { ioctl } for pid=13050 comm="syz.3.1893" path="socket:[33207]" dev="sockfs" ino=33207 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 665.674801][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.578929][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 668.588784][T13082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1900'. [ 669.245284][ T30] audit: type=1400 audit(1759624540.198:754): avc: denied { open } for pid=13087 comm="syz.2.1904" path="/dev/ptyq8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 669.459169][ T30] audit: type=1400 audit(1759624540.398:755): avc: denied { read } for pid=13087 comm="syz.2.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 669.949393][T13107] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1904'. [ 670.882719][ T30] audit: type=1400 audit(1759624541.498:756): avc: denied { read } for pid=13115 comm="syz.1.1909" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 670.968731][ T30] audit: type=1400 audit(1759624541.498:757): avc: denied { open } for pid=13115 comm="syz.1.1909" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 671.380640][ T30] audit: type=1400 audit(1759624541.518:758): avc: denied { ioctl } for pid=13115 comm="syz.1.1909" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 671.901099][ T30] audit: type=1400 audit(1759624542.478:759): avc: denied { mount } for pid=13123 comm="syz.3.1910" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 673.030579][T13133] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 674.718297][ T30] audit: type=1400 audit(1759624545.278:760): avc: denied { override_creds } for pid=13145 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 677.224414][T13172] openvswitch: netlink: Message has 16 unknown bytes. [ 677.293182][ T30] audit: type=1400 audit(1759624548.168:761): avc: denied { create } for pid=13165 comm="syz.3.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 679.176163][ T30] audit: type=1400 audit(1759624551.103:762): avc: denied { mounton } for pid=13187 comm="syz.1.1925" path="/349/file0" dev="tmpfs" ino=1877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 679.370617][T13191] syzkaller0: entered promiscuous mode [ 679.376323][T13191] syzkaller0: entered allmulticast mode [ 679.569377][T13202] batadv_slave_0: left promiscuous mode [ 679.665362][T13202] bond1: left promiscuous mode [ 679.681867][T13202] bond2: left promiscuous mode [ 679.732471][T13202] bond5: left promiscuous mode [ 679.760116][T13202] gretap2: left promiscuous mode [ 680.704518][ T30] audit: type=1400 audit(1759624552.643:763): avc: denied { sqpoll } for pid=13218 comm="syz.4.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 681.349221][T13224] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 681.450354][T13225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.600222][ T30] audit: type=1400 audit(1759624553.543:764): avc: denied { create } for pid=13229 comm="syz.2.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 681.915914][ T30] audit: type=1400 audit(1759624553.543:765): avc: denied { write } for pid=13229 comm="syz.2.1936" path="socket:[32684]" dev="sockfs" ino=32684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 681.964799][ T30] audit: type=1400 audit(1759624553.643:766): avc: denied { accept } for pid=13229 comm="syz.2.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 682.023901][T13224] bond2 (unregistering): Released all slaves [ 684.213130][ T5949] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 684.313288][ T30] audit: type=1400 audit(1759624555.703:767): avc: denied { setopt } for pid=13256 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 684.435671][T13264] netlink: 'syz.3.1942': attribute type 10 has an invalid length. [ 684.465054][ T30] audit: type=1400 audit(1759624555.703:768): avc: denied { write } for pid=13256 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 684.573332][ T5949] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 684.581441][ T5949] usb 3-1: config 0 has no interface number 0 [ 684.679098][ T30] audit: type=1400 audit(1759624555.703:769): avc: denied { read } for pid=13256 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 684.704246][ T30] audit: type=1400 audit(1759624556.223:770): avc: denied { getopt } for pid=13259 comm="syz.3.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 684.731146][ T30] audit: type=1400 audit(1759624556.223:771): avc: denied { ioctl } for pid=13259 comm="syz.3.1942" path="socket:[33439]" dev="sockfs" ino=33439 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 684.757959][ T5949] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 684.774295][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.803261][ T5949] usb 3-1: Product: syz [ 684.909543][ T5949] usb 3-1: Manufacturer: syz [ 684.914775][ T5949] usb 3-1: SerialNumber: syz [ 684.921437][ T5949] usb 3-1: config 0 descriptor?? [ 684.926867][ T30] audit: type=1400 audit(1759624556.673:772): avc: denied { getopt } for pid=13270 comm="syz.0.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 684.950556][ T5949] ttusb_dec_send_command: command bulk message failed: error -22 [ 685.362603][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.369133][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.519280][ T5949] ttusb-dec 3-1:0.50: probe with driver ttusb-dec failed with error -22 [ 686.226905][ T30] audit: type=1400 audit(1759624558.163:773): avc: denied { ioctl } for pid=13286 comm="syz.3.1947" path="socket:[33809]" dev="sockfs" ino=33809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 686.617039][ T30] audit: type=1400 audit(1759624558.163:774): avc: denied { connect } for pid=13286 comm="syz.3.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 686.858247][ T30] audit: type=1400 audit(1759624558.513:775): avc: denied { read } for pid=13279 comm="syz.0.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 686.877533][ T5949] usb 3-1: USB disconnect, device number 14 [ 686.884468][T13293] netlink: 'syz.4.1948': attribute type 10 has an invalid length. [ 686.894149][ T30] audit: type=1400 audit(1759624558.623:776): avc: denied { write } for pid=13294 comm="syz.1.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 687.774219][ T5949] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 688.243149][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 688.280189][ T5949] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 688.494210][ T5949] usb 3-1: config 0 has no interface number 0 [ 688.511423][ T5949] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 688.551547][ T5949] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 688.580918][ T5949] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 688.595834][ T5949] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 688.614400][ T5949] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 688.628461][ T5949] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 688.654304][ T5949] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 688.667702][ T5949] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.678150][ T5949] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 688.688799][ T5949] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.715716][ T5949] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 688.729582][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.739117][ T5949] usb 3-1: Product: syz [ 688.752834][ T5949] usb 3-1: Manufacturer: syz [ 688.761157][ T5949] usb 3-1: SerialNumber: syz [ 688.818427][ T5949] usb 3-1: config 0 descriptor?? [ 688.875343][T13297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 688.888689][ T5949] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 688.963153][ T5949] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 688.984165][ T5949] scsi host1: microtekX6 [ 688.992398][ T50] microtek usb (rev 0.4.3): error -90 submitting URB [ 688.994721][T13321] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 689.473482][T10023] microtek usb (rev 0.4.3): error -90 submitting URB [ 689.603156][T10023] microtek usb (rev 0.4.3): error -90 submitting URB [ 689.703273][T10023] microtek usb (rev 0.4.3): error -90 submitting URB [ 689.868444][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 689.868457][ T30] audit: type=1400 audit(1759624561.813:779): avc: denied { create } for pid=13320 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 690.229229][T13337] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1950'. [ 691.253594][T13349] : entered promiscuous mode [ 691.463902][T13348] netlink: 'syz.0.1962': attribute type 1 has an invalid length. [ 692.702637][T13348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 694.033170][ T30] audit: type=1400 audit(1759624565.743:780): avc: denied { create } for pid=13354 comm="syz.4.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 694.264893][ T30] audit: type=1400 audit(1759624565.753:781): avc: denied { sys_admin } for pid=13354 comm="syz.4.1963" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 694.266914][T13352] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 694.326959][T13348] vlan2: entered allmulticast mode [ 694.342971][T13348] veth1: entered allmulticast mode [ 694.403656][T13348] veth1: entered promiscuous mode [ 694.420436][T13348] veth1: left promiscuous mode [ 694.506980][T13348] bond1: (slave vlan2): making interface the new active one [ 694.594025][T13348] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 694.843364][T13348] veth1: entered promiscuous mode [ 694.862154][T13348] vlan2: entered promiscuous mode [ 694.883583][T13348] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 695.048269][ T5876] usb 3-1: USB disconnect, device number 15 [ 695.073104][ T5949] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 695.727352][ T5949] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 695.833414][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.856152][ T5949] usb 2-1: Product: syz [ 695.863941][ T5949] usb 2-1: Manufacturer: syz [ 695.871315][ T5949] usb 2-1: SerialNumber: syz [ 696.242237][ T5949] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 697.088583][T11401] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 697.108756][ T30] audit: type=1400 audit(1759624569.053:782): avc: denied { read } for pid=13391 comm="syz.2.1971" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 697.346245][ T5876] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 697.412229][ T5949] usb 2-1: USB disconnect, device number 10 [ 697.422800][ T30] audit: type=1400 audit(1759624569.053:783): avc: denied { open } for pid=13391 comm="syz.2.1971" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 698.117309][ T30] audit: type=1400 audit(1759624569.543:784): avc: denied { create } for pid=13399 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 698.139001][ T30] audit: type=1400 audit(1759624570.083:785): avc: denied { bind } for pid=13399 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 698.158854][T11401] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 698.163094][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 698.297864][T11401] ath9k_htc: Failed to initialize the device [ 698.306207][ T5949] usb 2-1: ath9k_htc: USB layer deinitialized [ 698.336717][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 698.352271][ T30] audit: type=1400 audit(1759624570.233:786): avc: denied { write } for pid=13399 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 698.374992][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 698.407531][ T5876] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 698.424267][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.445150][T13400] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 698.453791][T13400] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 698.563894][ T5876] usb 3-1: config 0 descriptor?? [ 698.733885][ T30] audit: type=1400 audit(1759624570.673:787): avc: denied { relabelfrom } for pid=13403 comm="syz.0.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 698.760795][ T30] audit: type=1400 audit(1759624570.673:788): avc: denied { relabelto } for pid=13403 comm="syz.0.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 699.003623][ T30] audit: type=1326 audit(1759624570.943:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 699.054612][T13392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 699.079854][ T30] audit: type=1326 audit(1759624570.943:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 699.406675][T13420] PKCS7: Unknown OID: [5] (bad) [ 699.560039][T13420] PKCS7: Only support pkcs7_signedData type [ 699.561660][T13419] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 699.582009][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 699.589845][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 699.593688][ T30] audit: type=1326 audit(1759624570.943:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e18eec9 code=0x7ffc0000 [ 699.601289][ T5876] usb 3-1: USB disconnect, device number 16 [ 702.676112][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 702.676128][ T30] audit: type=1400 audit(1759624574.623:796): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 702.708814][T13447] veth7: entered promiscuous mode [ 703.392285][T13459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1984'. [ 704.178404][T13450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13450 comm=syz.0.1986 [ 704.192584][T13450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=13450 comm=syz.0.1986 [ 704.363571][T13450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13450 comm=syz.0.1986 [ 704.421508][T13450] IPv6: NLM_F_CREATE should be specified when creating new route [ 704.430897][T13450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 704.438147][T13450] IPv6: NLM_F_CREATE should be set when creating new route [ 704.445370][T13450] IPv6: NLM_F_CREATE should be set when creating new route [ 706.040730][ T30] audit: type=1400 audit(1759624577.453:797): avc: denied { accept } for pid=13480 comm="syz.0.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 707.510130][ T30] audit: type=1400 audit(1759624579.163:798): avc: denied { bind } for pid=13487 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 707.606343][ T30] audit: type=1400 audit(1759624579.163:799): avc: denied { name_bind } for pid=13487 comm="syz.0.1996" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 707.629573][ T30] audit: type=1400 audit(1759624579.163:800): avc: denied { node_bind } for pid=13487 comm="syz.0.1996" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 707.652174][ T30] audit: type=1400 audit(1759624579.173:801): avc: denied { name_connect } for pid=13487 comm="syz.0.1996" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 707.674303][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.841421][T13517] openvswitch: netlink: Message has 16 unknown bytes. [ 712.205482][ T30] audit: type=1400 audit(1759624584.043:802): avc: denied { bind } for pid=13534 comm="syz.4.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 712.370010][ T30] audit: type=1400 audit(1759624584.043:803): avc: denied { write } for pid=13534 comm="syz.4.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 712.390306][ T30] audit: type=1400 audit(1759624584.043:804): avc: denied { read } for pid=13534 comm="syz.4.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 712.567753][T13552] batadv_slave_1: entered promiscuous mode [ 712.582801][T13552] batman_adv: batadv0: Adding interface: macsec1 [ 712.589844][T13552] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.616935][T13552] batman_adv: batadv0: Interface activated: macsec1 [ 713.255146][ T13] vlan2: left promiscuous mode [ 714.307948][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 714.314402][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 714.490944][T13574] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 714.663859][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 714.669967][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 715.314007][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 715.323555][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 715.993834][T13569] ceph: No mds server is up or the cluster is laggy [ 717.261419][ T30] audit: type=1400 audit(1759624588.793:805): avc: denied { watch } for pid=13588 comm="syz.4.2018" path="/450" dev="tmpfs" ino=2360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 719.360760][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 719.469271][ T30] audit: type=1400 audit(1759624591.403:806): avc: denied { unmount } for pid=13608 comm="syz.0.2033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 719.810307][T13621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2021'. [ 721.345436][T13642] tmpfs: Unknown parameter 'usrquota [ 721.345436][T13642] lo' [ 721.471136][ T30] audit: type=1400 audit(1759624593.233:807): avc: denied { ioctl } for pid=13633 comm="syz.4.2027" path="socket:[34258]" dev="sockfs" ino=34258 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 726.096973][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 726.425845][ T30] audit: type=1400 audit(1759624598.373:808): avc: denied { create } for pid=13694 comm="syz.3.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 726.777323][ T30] audit: type=1400 audit(1759624598.723:809): avc: denied { ioctl } for pid=13702 comm="syz.0.2042" path="socket:[35218]" dev="sockfs" ino=35218 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 727.418257][ T30] audit: type=1400 audit(1759624599.353:810): avc: denied { setattr } for pid=13708 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 728.263937][ T30] audit: type=1400 audit(1759624600.193:811): avc: denied { write } for pid=13716 comm="syz.0.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 728.636219][ T30] audit: type=1400 audit(1759624600.193:812): avc: denied { create } for pid=13716 comm="syz.0.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 728.681765][ T30] audit: type=1400 audit(1759624600.203:813): avc: denied { read } for pid=13716 comm="syz.0.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 730.322211][T13799] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 735.514398][ T30] audit: type=1400 audit(1759624606.383:814): avc: denied { wake_alarm } for pid=13836 comm="syz.0.2062" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 737.689179][T13866] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 737.715429][T13866] CIFS mount error: No usable UNC path provided in device string! [ 737.715429][T13866] [ 737.725732][T13866] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 740.628090][ T30] audit: type=1400 audit(1759624612.573:815): avc: denied { mount } for pid=13884 comm="syz.3.2074" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 740.744646][T13888] input: syz0 as /devices/virtual/input/input13 [ 740.851688][ T30] audit: type=1400 audit(1759624612.793:816): avc: denied { search } for pid=13889 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.396425][ T30] audit: type=1400 audit(1759624613.313:817): avc: denied { search } for pid=13889 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.521032][ T30] audit: type=1400 audit(1759624613.313:818): avc: denied { search } for pid=13889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.233270][ T30] audit: type=1400 audit(1759624613.313:819): avc: denied { search } for pid=13889 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.373607][ T30] audit: type=1400 audit(1759624613.323:820): avc: denied { read open } for pid=13893 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.450875][ T30] audit: type=1400 audit(1759624613.323:821): avc: denied { getattr } for pid=13893 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.075944][T13913] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 743.124990][ T30] audit: type=1400 audit(1759624613.333:822): avc: denied { getattr } for pid=13893 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 743.152781][ T30] audit: type=1400 audit(1759624613.593:823): avc: denied { read } for pid=13898 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 743.189398][ T30] audit: type=1400 audit(1759624613.593:824): avc: denied { open } for pid=13898 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 743.277811][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880286cc400: rx timeout, send abort [ 743.703149][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 743.787222][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880286cc400: abort rx timeout. Force session deactivation [ 743.997924][T11401] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 744.050438][T11401] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 744.436758][T13946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2085'. [ 744.817694][T13951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2086'. [ 746.159954][T12464] Bluetooth: hci1: command 0x0406 tx timeout [ 746.790457][T11401] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 746.803223][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.809620][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.004315][T11401] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 747.017618][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2091'. [ 749.428188][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 749.428205][ T30] audit: type=1400 audit(1759624621.373:839): avc: denied { remount } for pid=14018 comm="syz.1.2098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 749.634802][T12464] Bluetooth: hci2: command 0x0406 tx timeout [ 749.673892][T11401] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 749.761829][T11401] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 749.918046][T14044] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 749.927360][T14044] bridge1: entered allmulticast mode [ 750.751070][T14067] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 750.758161][T14067] overlayfs: failed to set xattr on upper [ 750.763948][T14067] overlayfs: ...falling back to redirect_dir=nofollow. [ 750.770810][T14067] overlayfs: ...falling back to index=off. [ 750.776696][T14067] overlayfs: ...falling back to uuid=null. [ 750.841993][T14067] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 750.873178][ T30] audit: type=1400 audit(1759624622.683:840): avc: denied { mounton } for pid=14059 comm="syz.2.2102" path="/file0" dev="ramfs" ino=35745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 751.815857][ T30] audit: type=1326 audit(1759624623.723:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a0b8eec9 code=0x7ffc0000 [ 751.842389][T11401] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 751.918177][T12464] Bluetooth: hci3: command 0x0406 tx timeout [ 751.934672][T11401] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 751.975747][ T30] audit: type=1326 audit(1759624623.723:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a0b8eec9 code=0x7ffc0000 [ 752.043181][ T30] audit: type=1326 audit(1759624623.733:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f66a0b8eec9 code=0x7ffc0000 [ 752.171369][ T30] audit: type=1326 audit(1759624623.733:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a0b8eec9 code=0x7ffc0000 [ 752.195300][T14066] nvme_fabrics: missing parameter 'transport=%s' [ 752.204127][T14066] nvme_fabrics: missing parameter 'nqn=%s' [ 752.246498][ T30] audit: type=1326 audit(1759624623.733:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a0b8eec9 code=0x7ffc0000 [ 752.331135][ T30] audit: type=1326 audit(1759624623.733:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f66a0b8eec9 code=0x7ffc0000 [ 752.376804][ T30] audit: type=1326 audit(1759624623.733:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a0b8eec9 code=0x7ffc0000 [ 752.410246][ T30] audit: type=1326 audit(1759624623.733:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14062 comm="syz.0.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a0b8eec9 code=0x7ffc0000 [ 753.653115][ T5931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 753.823477][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 754.115939][ T5931] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 754.134260][ T5931] usb 2-1: config 0 has no interface number 0 [ 754.347383][T11401] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 754.354794][T12464] Bluetooth: hci4: command 0x0406 tx timeout [ 754.360907][T11401] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 754.369038][ T5931] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 755.329188][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.340082][ T5931] usb 2-1: Product: syz [ 755.344364][ T5931] usb 2-1: Manufacturer: syz [ 755.348957][ T5931] usb 2-1: SerialNumber: syz [ 755.356100][ T5931] usb 2-1: config 0 descriptor?? [ 755.370372][ T5931] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 755.846117][ T5931] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 755.860517][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 755.860532][ T30] audit: type=1400 audit(1759624627.806:909): avc: denied { name_bind } for pid=14106 comm="syz.2.2113" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 756.352215][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 756.380031][ T5931] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 756.400256][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 756.547056][T14120] ceph: No mds server is up or the cluster is laggy [ 756.630158][T14097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.642658][T14097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.693421][ T909] libceph: connect (1)[c::]:6789 error -101 [ 756.699507][ T909] libceph: mon0 (1)[c::]:6789 connect error [ 756.723436][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 756.733739][ T5876] usb 2-1: USB disconnect, device number 11 [ 756.809678][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 756.864629][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 756.877320][ T5876] quatech2 2-1:0.51: device disconnected [ 757.377544][ T909] libceph: connect (1)[c::]:6789 error -101 [ 757.383737][ T909] libceph: mon0 (1)[c::]:6789 connect error [ 760.592562][T14170] tty tty4: ldisc open failed (-12), clearing slot 3 [ 761.209114][T14176] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.2123'. [ 763.918086][ T30] audit: type=1400 audit(1759624635.856:910): avc: denied { create } for pid=14206 comm="syz.3.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 764.595353][ T30] audit: type=1400 audit(1759624636.506:911): avc: denied { bind } for pid=14218 comm="syz.4.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 765.423105][ T30] audit: type=1800 audit(1759624636.646:912): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2134" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 766.818261][T14236] tipc: Enabling of bearer rejected, failed to enable media [ 767.576320][ T30] audit: type=1400 audit(1759624639.526:913): avc: denied { getopt } for pid=14244 comm="syz.4.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 768.817188][ T30] audit: type=1400 audit(1759624640.766:914): avc: denied { bind } for pid=14267 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.889806][ T30] audit: type=1400 audit(1759624640.806:915): avc: denied { setopt } for pid=14267 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 769.943038][ T30] audit: type=1400 audit(1759624641.886:916): avc: denied { create } for pid=14282 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 770.671038][ T30] audit: type=1400 audit(1759624642.166:917): avc: denied { ioctl } for pid=14281 comm="syz.0.2147" path="socket:[34754]" dev="sockfs" ino=34754 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 771.161779][ T30] audit: type=1400 audit(1759624643.106:918): avc: denied { mount } for pid=14292 comm="syz.0.2152" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 773.767942][ T30] audit: type=1400 audit(1759624645.716:919): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.842228][ T30] audit: type=1400 audit(1759624645.716:920): avc: denied { open } for pid=5826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.877191][T14322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2158'. [ 773.917097][ T30] audit: type=1400 audit(1759624645.716:921): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 774.048134][T14325] hub 9-0:1.0: USB hub found [ 774.056233][T14325] hub 9-0:1.0: 1 port detected [ 774.221753][ T30] audit: type=1400 audit(1759624645.786:922): avc: denied { create } for pid=14320 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 774.330823][ T30] audit: type=1400 audit(1759624645.816:923): avc: denied { prog_load } for pid=14320 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 774.352523][T14326] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2157'. [ 774.393950][ T30] audit: type=1400 audit(1759624645.816:924): avc: denied { bpf } for pid=14320 comm="syz.1.2158" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.513637][T14326] debugfs: '`] Iq!>s*!)\' already exists in 'ieee80211' [ 774.542053][ T30] audit: type=1400 audit(1759624645.826:925): avc: denied { write } for pid=14320 comm="syz.1.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 775.068444][ T30] audit: type=1400 audit(1759624645.856:926): avc: denied { read } for pid=14320 comm="syz.1.2158" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 775.107120][ T30] audit: type=1400 audit(1759624645.856:927): avc: denied { open } for pid=14320 comm="syz.1.2158" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 775.135497][ T30] audit: type=1400 audit(1759624645.916:928): avc: denied { write } for pid=14320 comm="syz.1.2158" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 775.220377][ T30] audit: type=1400 audit(1759624646.166:929): avc: denied { mounton } for pid=14323 comm="syz.4.2159" path="/488/file0" dev="tmpfs" ino=2568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 775.244395][T14332] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 775.276282][ T30] audit: type=1400 audit(1759624646.326:930): avc: denied { perfmon } for pid=14327 comm="syz.4.2160" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 775.543342][ T30] audit: type=1400 audit(1759624646.326:931): avc: denied { prog_run } for pid=14327 comm="syz.4.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 776.533131][ T30] audit: type=1400 audit(1759624647.206:932): avc: denied { create } for pid=14329 comm="syz.1.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 777.299046][T14345] 9pnet_fd: Insufficient options for proto=fd [ 777.791661][ T30] audit: type=1400 audit(1759624647.206:933): avc: denied { ioctl } for pid=14329 comm="syz.1.2161" path="socket:[36224]" dev="sockfs" ino=36224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 777.913352][ T30] audit: type=1400 audit(1759624647.206:934): avc: denied { read write } for pid=14329 comm="syz.1.2161" name="video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 777.987637][ T30] audit: type=1400 audit(1759624647.206:935): avc: denied { open } for pid=14329 comm="syz.1.2161" path="/dev/video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 778.285825][T14354] efs: cannot read volume header [ 778.763489][T14353] [U] 1WT`8H$09\ [ 778.821713][T14362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2167'. [ 779.262730][T14353] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 779.301962][T14353] [U] 4XZ^Y)MC. OȞPOW [ 779.308617][T14353] [U] ä%Z [ 779.539590][T14370] netlink: 'syz.0.2170': attribute type 1 has an invalid length. [ 779.570016][T14350] [U] 8`}[TJ#Z~3µݥI~D [ 780.192674][T14345] vlan2: left promiscuous mode [ 780.197486][T14345] bond1: left promiscuous mode [ 780.202240][T14345] gretap1: left promiscuous mode [ 780.322731][T14365] lo: entered allmulticast mode [ 780.443551][T14370] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 780.486594][T13792] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.529873][T13792] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.355518][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 781.355581][ T30] audit: type=1400 audit(1759624653.306:971): avc: denied { allowed } for pid=14382 comm="syz.1.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 781.591207][T13792] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.681556][T13792] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.023298][ T30] audit: type=1326 audit(1759624654.926:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9ef8eec9 code=0x7ffc0000 [ 783.051839][ T30] audit: type=1326 audit(1759624654.926:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9ef8eec9 code=0x7ffc0000 [ 783.127144][ T30] audit: type=1326 audit(1759624654.926:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd9ef8eec9 code=0x7ffc0000 [ 783.199250][T14417] audit: audit_backlog=65 > audit_backlog_limit=64 [ 783.209897][ T30] audit: type=1326 audit(1759624654.926:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9ef8eec9 code=0x7ffc0000 [ 783.270681][T14417] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 783.279651][ T30] audit: type=1326 audit(1759624654.926:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9ef8eec9 code=0x7ffc0000 [ 783.298476][T14399] netlink: 'syz.2.2176': attribute type 12 has an invalid length. [ 783.325474][T14417] audit: backlog limit exceeded [ 783.332500][ T30] audit: type=1326 audit(1759624654.926:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14407 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd9ef8eec9 code=0x7ffc0000 [ 783.409334][T14415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2182'. [ 786.689647][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 786.689663][ T30] audit: type=1400 audit(1759624658.636:1054): avc: denied { read write } for pid=14450 comm="syz.2.2193" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 786.741006][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 786.823924][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.838278][ T30] audit: type=1400 audit(1759624658.636:1055): avc: denied { open } for pid=14450 comm="syz.2.2193" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 786.893518][ T30] audit: type=1400 audit(1759624658.716:1056): avc: denied { getopt } for pid=14452 comm="syz.4.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 786.925050][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 786.953378][ T30] audit: type=1400 audit(1759624658.766:1057): avc: denied { bind } for pid=14455 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 787.313929][ T30] audit: type=1400 audit(1759624658.766:1058): avc: denied { name_bind } for pid=14455 comm="syz.0.2191" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 787.336485][ T30] audit: type=1400 audit(1759624658.776:1059): avc: denied { node_bind } for pid=14455 comm="syz.0.2191" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 787.358507][ T30] audit: type=1400 audit(1759624658.776:1060): avc: denied { create } for pid=14455 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 787.380435][ T30] audit: type=1400 audit(1759624658.776:1061): avc: denied { setopt } for pid=14455 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 787.400818][ T30] audit: type=1400 audit(1759624658.876:1062): avc: denied { bind } for pid=14455 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 787.422030][ T30] audit: type=1400 audit(1759624659.246:1063): avc: denied { connect } for pid=14455 comm="syz.0.2191" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 787.585948][T14463] netlink: 'syz.3.2194': attribute type 13 has an invalid length. [ 790.089736][T14500] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2203'. [ 792.843843][T14519] netlink: 'syz.4.2207': attribute type 10 has an invalid length. [ 793.304682][T14522] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.2208'. [ 793.661449][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 793.661494][ T30] audit: type=1400 audit(1759624665.606:1078): avc: denied { remount } for pid=14525 comm="syz.2.2209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 793.689723][T14531] binder: Bad value for 'max' [ 795.126308][ T30] audit: type=1400 audit(1759624666.626:1079): avc: denied { bind } for pid=14537 comm="syz.4.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 795.182906][ T30] audit: type=1400 audit(1759624666.636:1080): avc: denied { node_bind } for pid=14537 comm="syz.4.2212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 796.005774][ T30] audit: type=1400 audit(1759624667.546:1081): avc: denied { ioctl } for pid=14550 comm="syz.4.2217" path="socket:[36540]" dev="sockfs" ino=36540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 796.117995][ T30] audit: type=1400 audit(1759624668.056:1082): avc: denied { relabelfrom } for pid=14543 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 796.171696][ T30] audit: type=1400 audit(1759624668.066:1083): avc: denied { relabelto } for pid=14543 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 796.192890][ T30] audit: type=1400 audit(1759624668.066:1084): avc: denied { write } for pid=14558 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 796.447163][ T30] audit: type=1400 audit(1759624668.396:1085): avc: denied { create } for pid=14563 comm="syz.4.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 797.218159][T14580] random: crng reseeded on system resumption [ 797.225800][ T30] audit: type=1400 audit(1759624669.166:1086): avc: denied { read write } for pid=14575 comm="syz.1.2222" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 797.343144][ T30] audit: type=1400 audit(1759624669.166:1087): avc: denied { ioctl open } for pid=14575 comm="syz.1.2222" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 799.083050][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 799.083067][ T30] audit: type=1400 audit(1759624670.546:1093): avc: denied { create } for pid=14598 comm="syz.4.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 799.540329][ T30] audit: type=1400 audit(1759624670.596:1094): avc: denied { sys_admin } for pid=14598 comm="syz.4.2226" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 799.584260][ T30] audit: type=1400 audit(1759624670.616:1095): avc: denied { associate } for pid=14604 comm="syz.4.2226" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 799.614045][T14607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 800.843299][T14607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14607 comm=syz.4.2228 [ 800.886175][ T30] audit: type=1400 audit(1759624672.826:1096): avc: denied { write } for pid=14613 comm="syz.1.2230" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 800.916706][ T30] audit: type=1400 audit(1759624672.836:1097): avc: denied { create } for pid=14606 comm="syz.4.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 800.974318][ T30] audit: type=1400 audit(1759624672.866:1098): avc: denied { read write } for pid=14588 comm="syz.2.2224" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 801.017684][ T30] audit: type=1400 audit(1759624672.866:1099): avc: denied { open } for pid=14588 comm="syz.2.2224" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 801.174602][ T30] audit: type=1400 audit(1759624672.866:1100): avc: denied { ioctl } for pid=14588 comm="syz.2.2224" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 801.211825][ T30] audit: type=1400 audit(1759624672.896:1101): avc: denied { name_connect } for pid=14613 comm="syz.1.2230" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 801.673145][ T30] audit: type=1400 audit(1759624672.916:1102): avc: denied { read } for pid=14613 comm="syz.1.2230" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.715985][T14627] netlink: 'syz.2.2224': attribute type 30 has an invalid length. [ 803.154017][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 803.355353][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.368771][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 803.878672][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 803.936094][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.969643][ T9] usb 2-1: config 0 descriptor?? [ 804.260747][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 804.260762][ T30] audit: type=1400 audit(1759624676.206:1105): avc: denied { create } for pid=14663 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 804.417745][ T30] audit: type=1400 audit(1759624676.366:1106): avc: denied { ioctl } for pid=14663 comm="syz.3.2239" path="socket:[36687]" dev="sockfs" ino=36687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 805.160335][T14673] overlayfs: failed to resolve './file1': -2 [ 805.221972][ T30] audit: type=1400 audit(1759624677.116:1107): avc: denied { create } for pid=14665 comm="syz.4.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 805.252724][T14671] bridge0: port 1(netdevsim2) entered blocking state [ 805.273731][ T30] audit: type=1400 audit(1759624677.216:1108): avc: denied { name_bind } for pid=14650 comm="syz.1.2236" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 805.366614][T14671] bridge0: port 1(netdevsim2) entered disabled state [ 805.374150][T14671] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 805.385404][T14671] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 805.393902][ T30] audit: type=1400 audit(1759624677.286:1109): avc: denied { getopt } for pid=14674 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 805.427756][ T30] audit: type=1400 audit(1759624677.286:1110): avc: denied { write } for pid=14674 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 805.534844][ T30] audit: type=1400 audit(1759624677.486:1111): avc: denied { create } for pid=14681 comm="syz.3.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 805.555378][ T30] audit: type=1400 audit(1759624677.486:1112): avc: denied { write } for pid=14681 comm="syz.3.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 806.263564][ T30] audit: type=1400 audit(1759624678.206:1113): avc: denied { name_connect } for pid=14680 comm="syz.4.2243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 806.619316][ T30] audit: type=1400 audit(1759624678.566:1114): avc: denied { firmware_load } for pid=14690 comm="syz.3.2245" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 806.644181][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.508868][ T5949] usb 2-1: USB disconnect, device number 12 [ 807.525056][T14704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2249'. [ 807.712275][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 807.901205][T14720] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 808.235523][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.241853][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.367868][T14728] pim6reg: entered allmulticast mode [ 809.465942][T14742] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 809.630395][T14742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 809.727844][T14742] ip6tnl1: entered allmulticast mode [ 809.812106][T14742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 809.833709][T14742] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 809.858115][T14742] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 811.878043][T14759] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2262'. [ 812.059647][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 812.059668][ T30] audit: type=1400 audit(1759624683.846:1126): avc: denied { create } for pid=14750 comm="syz.2.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 812.848824][ T30] audit: type=1400 audit(1759624684.266:1127): avc: denied { execute } for pid=14775 comm="syz.4.2266" path="/515/cpu.stat" dev="tmpfs" ino=2711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 813.036440][T14783] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 814.281616][ T30] audit: type=1400 audit(1759624686.206:1128): avc: denied { create } for pid=14791 comm="syz.4.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 814.313425][T14800] tipc: Enabled bearer , priority 0 [ 814.947979][T14797] tipc: Disabling bearer [ 815.808376][ T30] audit: type=1400 audit(1759624687.706:1129): avc: denied { mounton } for pid=14807 comm="syz.4.2273" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 815.997066][ T30] audit: type=1400 audit(1759624687.706:1130): avc: denied { unmount } for pid=14807 comm="syz.4.2273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 816.328752][T14820] netlink: 'syz.0.2274': attribute type 16 has an invalid length. [ 816.455240][T14820] netlink: 'syz.0.2274': attribute type 17 has an invalid length. [ 816.464524][T14823] overlayfs: failed to clone upperpath [ 817.049080][ T30] audit: type=1400 audit(1759624688.996:1131): avc: denied { watch } for pid=14813 comm="syz.1.2275" path="/411" dev="tmpfs" ino=2200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 817.197798][T14820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 820.032127][ T30] audit: type=1400 audit(1759624691.976:1132): avc: denied { map } for pid=14838 comm="syz.1.2281" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 820.589150][ T30] audit: type=1400 audit(1759624691.976:1133): avc: denied { execute } for pid=14838 comm="syz.1.2281" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 820.781867][ T30] audit: type=1400 audit(1759624692.536:1134): avc: denied { read } for pid=14844 comm="syz.2.2282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 820.806842][ T30] audit: type=1400 audit(1759624692.536:1135): avc: denied { open } for pid=14844 comm="syz.2.2282" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 821.047564][T14847] ================================================================== [ 821.055647][T14847] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 821.062826][T14847] Read of size 8 at addr ffff88807be4ea88 by task syz.1.2281/14847 [ 821.070703][T14847] [ 821.073013][T14847] CPU: 1 UID: 0 PID: 14847 Comm: syz.1.2281 Not tainted syzkaller #0 PREEMPT(full) [ 821.073035][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 821.073045][T14847] Call Trace: [ 821.073052][T14847] [ 821.073060][T14847] dump_stack_lvl+0x116/0x1f0 [ 821.073087][T14847] print_report+0xcd/0x630 [ 821.073109][T14847] ? __virt_addr_valid+0x81/0x610 [ 821.073139][T14847] ? __phys_addr+0xe8/0x180 [ 821.073167][T14847] ? __cpa_addr+0x1d3/0x220 [ 821.073185][T14847] kasan_report+0xe0/0x110 [ 821.073208][T14847] ? __cpa_addr+0x1d3/0x220 [ 821.073231][T14847] __cpa_addr+0x1d3/0x220 [ 821.073251][T14847] cpa_flush+0x28b/0x8a0 [ 821.073273][T14847] ? __pfx_cpa_flush+0x10/0x10 [ 821.073293][T14847] ? pgprot2cachemode+0x9a/0x130 [ 821.073320][T14847] ? __pfx_pgprot2cachemode+0x10/0x10 [ 821.073352][T14847] ? drm_gem_get_pages+0x6a0/0xa10 [ 821.073376][T14847] change_page_attr_set_clr+0x34e/0x4a0 [ 821.073400][T14847] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 821.073433][T14847] _set_pages_array+0x1ab/0x2c0 [ 821.073457][T14847] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 821.073478][T14847] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 821.073497][T14847] ? __pfx___might_resched+0x10/0x10 [ 821.073526][T14847] drm_gem_shmem_mmap+0xc9/0x550 [ 821.073541][T14847] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 821.073560][T14847] drm_gem_mmap_obj+0x1b5/0x560 [ 821.073580][T14847] drm_gem_mmap+0x40b/0x620 [ 821.073600][T14847] ? __pfx_drm_gem_mmap+0x10/0x10 [ 821.073620][T14847] ? vm_area_alloc+0x1f/0x160 [ 821.073640][T14847] ? lockdep_init_map_type+0x5c/0x280 [ 821.073654][T14847] __mmap_region+0x1306/0x27a0 [ 821.073665][T14847] ? __pfx___mmap_region+0x10/0x10 [ 821.073675][T14847] ? lock_acquire+0x179/0x350 [ 821.073686][T14847] ? find_held_lock+0x2b/0x80 [ 821.073703][T14847] ? rcu_is_watching+0x12/0xc0 [ 821.073733][T14847] mmap_region+0x1ab/0x3f0 [ 821.073743][T14847] ? __get_unmapped_area+0x267/0x440 [ 821.073757][T14847] do_mmap+0xa3e/0x1210 [ 821.073771][T14847] ? __pfx_do_mmap+0x10/0x10 [ 821.073783][T14847] ? __pfx_down_write_killable+0x10/0x10 [ 821.073801][T14847] vm_mmap_pgoff+0x29e/0x470 [ 821.073814][T14847] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 821.073828][T14847] ? __fget_files+0x20e/0x3c0 [ 821.073841][T14847] ksys_mmap_pgoff+0x32c/0x5c0 [ 821.073855][T14847] __x64_sys_mmap+0x125/0x190 [ 821.073868][T14847] do_syscall_64+0xcd/0x4e0 [ 821.073882][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.073894][T14847] RIP: 0033:0x7efd9ef8eec9 [ 821.073903][T14847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.073915][T14847] RSP: 002b:00007efd9cdf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 821.073926][T14847] RAX: ffffffffffffffda RBX: 00007efd9f1e6270 RCX: 00007efd9ef8eec9 [ 821.073933][T14847] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 821.073940][T14847] RBP: 00007efd9f011f91 R08: 0000000000000007 R09: 0000000100000000 [ 821.073946][T14847] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 821.073952][T14847] R13: 00007efd9f1e6308 R14: 00007efd9f1e6270 R15: 00007fffca8e94f8 [ 821.073963][T14847] [ 821.073967][T14847] [ 821.388173][T14847] Allocated by task 14847: [ 821.392567][T14847] kasan_save_stack+0x33/0x60 [ 821.397225][T14847] kasan_save_track+0x14/0x30 [ 821.401876][T14847] __kasan_kmalloc+0xaa/0xb0 [ 821.406438][T14847] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 821.411783][T14847] drm_gem_get_pages+0x144/0xa10 [ 821.416696][T14847] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 821.422738][T14847] drm_gem_shmem_mmap+0xc9/0x550 [ 821.427657][T14847] drm_gem_mmap_obj+0x1b5/0x560 [ 821.432481][T14847] drm_gem_mmap+0x40b/0x620 [ 821.436972][T14847] __mmap_region+0x1306/0x27a0 [ 821.441709][T14847] mmap_region+0x1ab/0x3f0 [ 821.446103][T14847] do_mmap+0xa3e/0x1210 [ 821.450233][T14847] vm_mmap_pgoff+0x29e/0x470 [ 821.454796][T14847] ksys_mmap_pgoff+0x32c/0x5c0 [ 821.459541][T14847] __x64_sys_mmap+0x125/0x190 [ 821.464205][T14847] do_syscall_64+0xcd/0x4e0 [ 821.468682][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.474545][T14847] [ 821.476842][T14847] The buggy address belongs to the object at ffff88807be4ea00 [ 821.476842][T14847] which belongs to the cache kmalloc-192 of size 192 [ 821.490865][T14847] The buggy address is located 0 bytes to the right of [ 821.490865][T14847] allocated 136-byte region [ffff88807be4ea00, ffff88807be4ea88) [ 821.505346][T14847] [ 821.507646][T14847] The buggy address belongs to the physical page: [ 821.514024][T14847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7be4e [ 821.522754][T14847] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 821.529831][T14847] page_type: f5(slab) [ 821.533789][T14847] raw: 00fff00000000000 ffff88801b0263c0 dead000000000100 dead000000000122 [ 821.542352][T14847] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 821.550905][T14847] page dumped because: kasan: bad access detected [ 821.557312][T14847] page_owner tracks the page as allocated [ 821.563029][T14847] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 9960, tgid 9956 (syz.1.1116), ts 392500354171, free_ts 392415272795 [ 821.582596][T14847] post_alloc_hook+0x1c0/0x230 [ 821.587356][T14847] get_page_from_freelist+0x10a3/0x3a30 [ 821.592887][T14847] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 821.598768][T14847] new_slab+0xa5/0x360 [ 821.602818][T14847] ___slab_alloc+0xdc4/0x1ae0 [ 821.607480][T14847] __slab_alloc.constprop.0+0x63/0x110 [ 821.612918][T14847] __kmalloc_node_noprof+0x4dd/0x8a0 [ 821.618178][T14847] alloc_slab_obj_exts+0x3a/0xd0 [ 821.623112][T14847] __memcg_slab_post_alloc_hook+0x251/0x940 [ 821.629009][T14847] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 821.634797][T14847] xas_alloc+0x34f/0x460 [ 821.639029][T14847] xas_create+0x72b/0x1460 [ 821.643423][T14847] xas_store+0x90/0x1910 [ 821.647666][T14847] shmem_add_to_page_cache+0x7b3/0xa70 [ 821.653106][T14847] shmem_alloc_and_add_folio+0x668/0xc20 [ 821.658731][T14847] shmem_get_folio_gfp+0x67f/0x1610 [ 821.663909][T14847] page last free pid 15 tgid 15 stack trace: [ 821.669857][T14847] __free_frozen_pages+0x7df/0x1160 [ 821.675032][T14847] tlb_remove_table_rcu+0x121/0x320 [ 821.680207][T14847] rcu_core+0x799/0x1530 [ 821.684427][T14847] handle_softirqs+0x219/0x8e0 [ 821.689168][T14847] run_ksoftirqd+0x3a/0x60 [ 821.693574][T14847] smpboot_thread_fn+0x3f7/0xae0 [ 821.698483][T14847] kthread+0x3c5/0x780 [ 821.702523][T14847] ret_from_fork+0x56d/0x730 [ 821.707087][T14847] ret_from_fork_asm+0x1a/0x30 [ 821.711829][T14847] [ 821.714127][T14847] Memory state around the buggy address: [ 821.719727][T14847] ffff88807be4e980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 821.727759][T14847] ffff88807be4ea00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.735797][T14847] >ffff88807be4ea80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 821.743830][T14847] ^ [ 821.748140][T14847] ffff88807be4eb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 821.756184][T14847] ffff88807be4eb80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 821.764227][T14847] ================================================================== [ 821.774307][T14847] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 821.781506][T14847] CPU: 1 UID: 0 PID: 14847 Comm: syz.1.2281 Not tainted syzkaller #0 PREEMPT(full) [ 821.790876][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 821.800937][T14847] Call Trace: [ 821.804214][T14847] [ 821.807140][T14847] dump_stack_lvl+0x3d/0x1f0 [ 821.811730][T14847] vpanic+0x640/0x6f0 [ 821.815703][T14847] panic+0xca/0xd0 [ 821.819416][T14847] ? __pfx_panic+0x10/0x10 [ 821.823820][T14847] ? __cpa_addr+0x1d3/0x220 [ 821.828306][T14847] ? preempt_schedule_common+0x44/0xc0 [ 821.833751][T14847] ? preempt_schedule_thunk+0x16/0x30 [ 821.839114][T14847] check_panic_on_warn+0xab/0xb0 [ 821.844034][T14847] end_report+0x107/0x170 [ 821.848356][T14847] kasan_report+0xee/0x110 [ 821.852766][T14847] ? __cpa_addr+0x1d3/0x220 [ 821.857273][T14847] __cpa_addr+0x1d3/0x220 [ 821.861603][T14847] cpa_flush+0x28b/0x8a0 [ 821.865835][T14847] ? __pfx_cpa_flush+0x10/0x10 [ 821.870583][T14847] ? pgprot2cachemode+0x9a/0x130 [ 821.875508][T14847] ? __pfx_pgprot2cachemode+0x10/0x10 [ 821.880865][T14847] ? drm_gem_get_pages+0x6a0/0xa10 [ 821.885959][T14847] change_page_attr_set_clr+0x34e/0x4a0 [ 821.891489][T14847] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 821.897551][T14847] _set_pages_array+0x1ab/0x2c0 [ 821.902385][T14847] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 821.908433][T14847] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 821.915008][T14847] ? __pfx___might_resched+0x10/0x10 [ 821.920281][T14847] drm_gem_shmem_mmap+0xc9/0x550 [ 821.925202][T14847] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 821.931338][T14847] drm_gem_mmap_obj+0x1b5/0x560 [ 821.936170][T14847] drm_gem_mmap+0x40b/0x620 [ 821.940654][T14847] ? __pfx_drm_gem_mmap+0x10/0x10 [ 821.945658][T14847] ? vm_area_alloc+0x1f/0x160 [ 821.950324][T14847] ? lockdep_init_map_type+0x5c/0x280 [ 821.955681][T14847] __mmap_region+0x1306/0x27a0 [ 821.960424][T14847] ? __pfx___mmap_region+0x10/0x10 [ 821.965517][T14847] ? lock_acquire+0x179/0x350 [ 821.970182][T14847] ? find_held_lock+0x2b/0x80 [ 821.974850][T14847] ? rcu_is_watching+0x12/0xc0 [ 821.979622][T14847] mmap_region+0x1ab/0x3f0 [ 821.984025][T14847] ? __get_unmapped_area+0x267/0x440 [ 821.989295][T14847] do_mmap+0xa3e/0x1210 [ 821.993444][T14847] ? __pfx_do_mmap+0x10/0x10 [ 821.998022][T14847] ? __pfx_down_write_killable+0x10/0x10 [ 822.003648][T14847] vm_mmap_pgoff+0x29e/0x470 [ 822.008223][T14847] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 822.013322][T14847] ? __fget_files+0x20e/0x3c0 [ 822.017993][T14847] ksys_mmap_pgoff+0x32c/0x5c0 [ 822.022742][T14847] __x64_sys_mmap+0x125/0x190 [ 822.027401][T14847] do_syscall_64+0xcd/0x4e0 [ 822.031891][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.037767][T14847] RIP: 0033:0x7efd9ef8eec9 [ 822.042164][T14847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.061752][T14847] RSP: 002b:00007efd9cdf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 822.070147][T14847] RAX: ffffffffffffffda RBX: 00007efd9f1e6270 RCX: 00007efd9ef8eec9 [ 822.078101][T14847] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 822.086056][T14847] RBP: 00007efd9f011f91 R08: 0000000000000007 R09: 0000000100000000 [ 822.094005][T14847] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 822.101958][T14847] R13: 00007efd9f1e6308 R14: 00007efd9f1e6270 R15: 00007fffca8e94f8 [ 822.109932][T14847] [ 822.113190][T14847] Kernel Offset: disabled [ 822.117495][T14847] Rebooting in 86400 seconds..