last executing test programs: 19m1.804407421s ago: executing program 0 (id=284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x40, 0x24, 0x1, '\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x6}}}, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) 18m59.302667043s ago: executing program 0 (id=289): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 18m58.487962285s ago: executing program 0 (id=293): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x9}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getitimer(0x1, &(0x7f0000000440)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) io_setup(0x1fd, &(0x7f0000000480)) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 18m54.662429222s ago: executing program 0 (id=307): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18m53.944210327s ago: executing program 0 (id=309): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380)=0xd) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x9, {"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", 0x1000}}, 0x1006) 18m53.62019927s ago: executing program 0 (id=311): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 18m52.060555806s ago: executing program 32 (id=311): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 23.481176283s ago: executing program 3 (id=3184): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x4, 0x7, 0x9, 0x6}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00000ae000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], 0x0, 0x0, 0x0) syz_io_uring_setup(0x5c2, 0x0, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x20, @local, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="68756765bd616c776179732c00"]) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000001300)={'nr0\x00'}) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket(0x10, 0x3, 0x0) 19.31358712s ago: executing program 5 (id=3193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000074d564b"]) socket$kcm(0x10, 0x6, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000080)={0x0, 0xa7}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000180)={0x2, 0xfe}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x143000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x15243525538eff65) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 17.520328653s ago: executing program 5 (id=3198): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) keyctl$describe(0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x71, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0xd1dd, 0x228e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x7, &(0x7f0000000240)=[{0x7, 0xb, 0xd, 0x2a}, {0x3, 0xff, 0x0, 0x8001}, {0x2, 0x2, 0x2, 0x7}, {0x850b, 0x7f, 0xfa, 0xfffffff9}, {0xc, 0x8, 0x18, 0x8}, {0x9, 0x96, 0x3, 0x1}, {0xf001, 0x40, 0x5, 0x7}]}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000002840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x3, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc7}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@add_del={0x2, 0x0}) 17.447156593s ago: executing program 3 (id=3200): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r5, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000180)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) ioctl$TCXONC(r3, 0x4b3a, 0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x2000c080) sendmsg$inet(r11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r10, &(0x7f00000029c0), 0x400006d, 0x20000004) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) 16.384177561s ago: executing program 4 (id=3203): open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x432803, 0x56) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e0000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r7}, 0x38) sendmsg$tipc(r6, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 11.602040556s ago: executing program 4 (id=3204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000080)={0x4, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$PTP_PIN_GETFUNC2(r6, 0xc0603d0f, &(0x7f0000000740)={'\x00', 0xd, 0x0, 0x5}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(r7, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0xe5e}}}, 0x32) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x88a0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0xfe, 0x3, 0x1, 0x40, @loopback, @mcast2, 0x78f1, 0x20, 0x6, 0x3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x92}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@jmp={0x5, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000400)=""/165, 0x41000, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xf, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x3, 0x5, 0xa, 0xb}], 0x10, 0x7f5, @void, @value}, 0x94) ioctl$TCSETS(r8, 0x89f1, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x2, 0x13, '\x00\x00\x00l\x00'}) 11.594125533s ago: executing program 3 (id=3205): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000000), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40802, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009974, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bond0\x00', 0x1000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000010000c00018006000600", @ANYRESDEC, @ANYRES16=r9, @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r10 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x5f6a1000) 11.563249662s ago: executing program 5 (id=3206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') preadv(r4, &(0x7f00000005c0)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000000)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r6, &(0x7f0000001740)={0x2020}, 0x2020) openat$cgroup_ro(r6, &(0x7f0000000440)='blkio.bfq.empty_time\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xa, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) pivot_root(0x0, 0x0) r8 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x4b, "5eaf502888717a1393cfcd75c0e28058250ba854a8b9c8e48a8c3d7e524662d80f1381f36c89117b524b2351c6e3fbd9750993ea83ef3abd6c4ee763c2af9ab543fd500df0a747f9b208ea"}, &(0x7f00000003c0)=0x6f) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.324747707s ago: executing program 3 (id=3208): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f000001a240)=0x9, 0x4) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x76ea}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffffffffffffb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f000001a3c0)=[{&(0x7f0000000040)="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", 0xfef}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0x0) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe00", 0x23) 10.277368828s ago: executing program 4 (id=3209): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r6, 0x4, 0x0, 0x0, @void, @value}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0700000000000000000000000000000000004817095d"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r7, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r7, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r4}, 0x20) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r10, 0x0, 0x0, 0x34000811) 9.607481036s ago: executing program 1 (id=3210): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xf) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e98263b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x3, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x108, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x400, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000020}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$sock(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, 0x0, 0x0) 8.269891437s ago: executing program 4 (id=3213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fa", 0xcb}], 0x1}, 0x8040) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r1}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffffffffffff5050505050080000008f0000432fc556dd"], 0x50}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) setsockopt$MRT_PIM(r3, 0x0, 0xcf, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) 7.979141663s ago: executing program 5 (id=3214): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x14, &(0x7f0000000300), 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000), 0xfffffffa, 0x202101) dup3(0xffffffffffffffff, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) close(0xffffffffffffffff) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)={0x1c, r7, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) 7.978572411s ago: executing program 1 (id=3215): r0 = socket$inet(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000000040)={0x0, 0x23, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, 0x0) iopl(0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xbb}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) r7 = request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='\x00', 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r7, 0x0, r8, 0x0) 7.34016737s ago: executing program 1 (id=3216): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) keyctl$describe(0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x71, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0xd1dd, 0x228e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x7, &(0x7f0000000240)=[{0x7, 0xb, 0xd, 0x2a}, {0x3, 0xff, 0x0, 0x8001}, {0x2, 0x2, 0x2, 0x7}, {0x850b, 0x7f, 0xfa, 0xfffffff9}, {0xc, 0x8, 0x18, 0x8}, {0x9, 0x96, 0x3, 0x1}, {0xf001, 0x40, 0x5, 0x7}]}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000002840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x3, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc7}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@add_del={0x2, 0x0}) 5.799112375s ago: executing program 5 (id=3217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000001840)=""/4111, 0x100f) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x8, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x40000) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) getdents64(r3, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6d57) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x40000) 5.77752512s ago: executing program 2 (id=3218): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x4, 0x6, 0x1, 0xfff}, {0x80, 0x5, 0x3, 0x5}, {0x0, 0x2, 0x9, 0x4}, {0x6, 0x7b, 0xc}, {0x3, 0x3, 0x0, 0x10001}, {0x83, 0x4, 0x0, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000000c0)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) 5.694804504s ago: executing program 4 (id=3219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000001005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 4.852023777s ago: executing program 3 (id=3220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000340)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r6 = io_uring_setup(0x178e, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, 0x0, 0x10002) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f00000000c0)=0xfffd, &(0x7f0000000100)=0x2) madvise(&(0x7f0000203000/0x4000)=nil, 0x4000, 0x8) munlock(&(0x7f0000549000/0x3000)=nil, 0x3000) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x5, 0x3, 0x9, 0x880}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) 3.644683959s ago: executing program 2 (id=3221): socket$kcm(0x11, 0x0, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xa508}, &(0x7f0000000340)=0x8) 3.635808002s ago: executing program 1 (id=3222): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5417}, [@map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0xb, 0x5, 0x9, 0x1, 0xfffffffffffffffc}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7f, 0xb2, &(0x7f0000000300)=""/178, 0x41000, 0x8, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r5, r5, r0, r0, r5, r0], &(0x7f0000000400)=[{0x2, 0x2, 0xa, 0x4}], 0x10, 0x9, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r4, r7], 0x3) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r10, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 3.555011891s ago: executing program 3 (id=3223): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000001) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x7, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000002ec0)={{0x12, 0x1, 0x300, 0xf, 0x9b, 0xe0, 0x20, 0x13b1, 0x41, 0xb069, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x8f, 0x4d, 0x1, 0xff, 0x42, 0x96, 0x0, [@hid_hid={0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x35b}}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0xc, 0x3}}]}}]}}]}}, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mlock2(&(0x7f0000076000/0x2000)=nil, 0x2000, 0x1) 3.511875747s ago: executing program 2 (id=3224): socket$kcm(0x29, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x9725}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4008090) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x158, 0x500b, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x21, 0x0, 0x41}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@pkttype={{0x28}, {0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r4 = gettid() r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.pending_reads\x00', 0x80000, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000440)={0x5, 0x6, 0x1, {0x9, @win={{0x4, 0x0, 0x9, 0x2}, 0x0, 0x7f, 0x0, 0x400, 0x0, 0x3}}, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16=r4, @ANYRESDEC=r6, @ANYBLOB="db2f6b6cdb5679fcd77d7a9be77c5b3c64c64f9ef1857d518b376332a8be"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x92, &(0x7f0000000400)=""/146, 0x0, 0x40, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9504, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r5) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x9) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.819733215s ago: executing program 2 (id=3225): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0x1) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) kexec_load(0x10000, 0xa, &(0x7f0000000840)=[{0x0, 0x0, 0xb322, 0x3}, {&(0x7f0000000380)="512ecfd0e6814fe8a82041d007e6a7bab8b43b16cfa9c45249f8b8b6092441082e52e747e8a34aa0b3f2a579e93594dd5eed793a3476aa50fd07006eafc9", 0x3e, 0x2f1, 0x2}, {&(0x7f0000000c40)="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", 0x1000, 0x0, 0xa8}, {&(0x7f0000000400)="6a908cef29fc3bbce511ba8db45439ff7e1f2f8961102ab155e5fbb24c080a8f7c82f4e5f96987a29d327567aef3074dd86033677a7af4ff62c82e0cd4922bebd1a85bce72a2f940552ae429262c183d3a65e36f0b19e416e8afa7d974", 0x5d, 0x80000000, 0x8000000000000001}, {&(0x7f0000002c40)="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", 0x1000, 0x1, 0x7fffffffffffffff}, {&(0x7f0000000480)="0a2b20df0e394fcba890d164ca9a8b65abf4845a4d94c8bf5ee554f113254d0d575a7856a85fdd76103fffe56a550f6db538bb03c0ce932c76716ce8c0ff624b19ba2c42943c5d83fa5999fb43f8dbfacd687cbc6ef06d14e82830d62d66a75cad39420ed443a812948b1ba2350bea00c5a96eb1fc1a802ce6e0d57e5da5a5fd695a9df39aeccd4edea43679155c948df1b10b9d184d6d9f2b66d9502ffe2dacaaac8e1f59ec5a9a3a878306dcf66087fa069226e9693e95e3599e890206136a855afa2327356d2ac9adb6d7e13f98b316059d32c5", 0xd5, 0x5, 0x7}, {&(0x7f0000000580)="8a1b3999e5d6fb9d5ac9b8013233d32edd9da8c32d89a26683d15bda1bccc8bfb9c3d5ef065daa1b873fe43cd02133961d0af40cfba26f31aa7f306f", 0x3c, 0x2, 0xf70}, {&(0x7f0000000600)="77db799ad889ab2092b0dbee88425f53c800dc75b4f0801771b71c01d8079abf9f69dcb22fb2acd3c1c2467bc23d649eeeacc2d6ce53fe7119d062ea7c0e9dbfe972cb49183a7a7f7aed271721d9ed0a76fb60e1db8f6e3797ee6d05e52089a0ea9c18afa1fa3c34b3b971f87681ce2ea082c93f1c74b5f84b672143913fce3e19f43f5662f17be7da195a882e803f4017490ad802dbf88547d38bba9ed3fc377e29987b89a31ca508080731bf714aea03b3dc15bfb1992bf40ef599d9aad9029778", 0xc2, 0x8001, 0x8001}, {&(0x7f0000000700)="1bc77e10c7f0baee5a0ebb459e5051d12eed8f41141051ab621e77e3fa54249c74db165ad7ce9bef406cef13388149286ae57e258990034c17d1a36970e29682d6c1ce8bebaef82de90b534430a13dc9d93fdc5a1f45908427f0d80498d52dec16da489af0b10e1fdb7c72be5779c222e8055cd1114bda6be639dfa6ebfe0bd3d19afc1f46a022db27276a26f51d961d0b877c84119b58375c98dbb6e13a09ccd07cee2efe9fe2321c14", 0xaa, 0xd, 0x1}, {&(0x7f00000007c0)="853c192ce1aa8c3bde455a18a792efa99384c6e9a8886d99db51d08ddfdfd1590d42d91de0873d3acc628237048caa300f8e620155e6a7b815cd6192eca1f131de0b1393cc9f91ca1810", 0x4a, 0x7, 0xffffffff}], 0x150000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = msgget$private(0x0, 0x214) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) msgsnd(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000040)={{0x2, r6, 0xee00, 0xee01, r7, 0x173, 0x2}, 0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x8, 0x0, 0x5, 0x3ff, 0x1b, 0x1002, 0x0, r1}) msgrcv(r4, 0x0, 0x0, 0x0, 0x1800) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.728444529s ago: executing program 5 (id=3226): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) io_uring_setup(0x1581, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/55}, 0x3f, 0x0, 0x86b1b18158a7cb82) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3302) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r4, &(0x7f00000000c0)={0x0, 0xc, 0x1}) readv(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, 0x0, 0x0}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') fsopen(&(0x7f0000000040)='afs\x00', 0x0) 2.587838455s ago: executing program 4 (id=3227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000008000000080000009000000038d42e00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000200"/28], 0x48) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000006d7409cd00"/24], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESOCT=r0, @ANYRES64=r0], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000035b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70810000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000101851000000700", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[r4, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", 0x0, 0x0, 0x0, 0x607}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), 0xffffffffffffffff) 1.532962407s ago: executing program 1 (id=3228): syz_init_net_socket$ax25(0x3, 0x3, 0x6) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x15) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x400080, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x3ff, 0x4}]}, 0xc, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000800000015000300", @ANYRES32=r8], 0x34}}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$FIONREAD(r9, 0x541b, &(0x7f0000000000)) 1.183658501s ago: executing program 2 (id=3229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fa", 0xcb}], 0x1}, 0x8040) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r1}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffffffffffff5050505050080000008f0000432fc556dd"], 0x50}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02000000", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) setsockopt$MRT_PIM(r3, 0x0, 0xcf, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) 823.64792ms ago: executing program 2 (id=3230): mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r3, 0x0}]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x1}}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r7, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x31b, 0x2, 0xff, 0x0, 0x10, 0xc}, &(0x7f0000000280)=0x20) 0s ago: executing program 1 (id=3231): socket$kcm(0x11, 0x0, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xa508}, &(0x7f0000000340)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61105c00"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): r_file permissive=1 [ 835.438569][T14287] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 835.966225][ T30] audit: type=1400 audit(1745230206.214:915): avc: denied { open } for pid=14272 comm="syz.3.2203" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 835.989907][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.996290][ T30] audit: type=1400 audit(1745230206.785:916): avc: denied { read write } for pid=14288 comm="syz.3.2206" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 836.548720][ T30] audit: type=1400 audit(1745230206.785:917): avc: denied { open } for pid=14288 comm="syz.3.2206" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 836.608538][T14293] ceph: No mds server is up or the cluster is laggy [ 836.704419][ T81] libceph: connect (1)[c::]:6789 error -101 [ 836.842764][ T81] libceph: mon0 (1)[c::]:6789 connect error [ 837.719369][ T30] audit: type=1400 audit(1745230208.834:918): avc: denied { create } for pid=14304 comm="syz.4.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 838.876873][ T13] Bluetooth: Error in BCSP hdr checksum [ 838.885746][T14321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14321 comm=syz.3.2207 [ 838.975146][T14309] "syz.4.2209" (14309) uses obsolete ecb(arc4) skcipher [ 839.429945][ T9179] Bluetooth: Error in BCSP hdr checksum [ 839.453117][T14324] ceph: No mds server is up or the cluster is laggy [ 839.557996][ T81] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 839.970778][ T13] Bluetooth: Error in BCSP hdr checksum [ 840.103411][ T81] usb 4-1: Using ep0 maxpacket: 32 [ 840.110623][ T81] usb 4-1: unable to get BOS descriptor or descriptor too short [ 840.120007][ T81] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 840.130666][ T30] audit: type=1326 audit(1745230210.845:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14332 comm="syz.2.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cd8e169 code=0x7ffc0000 [ 840.155114][ T81] usb 4-1: config 0 has no interface number 0 [ 840.161586][ T81] usb 4-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 840.180547][ T81] usb 4-1: config 0 interface 143 has no altsetting 0 [ 840.197521][ T1323] Bluetooth: Error in BCSP hdr checksum [ 840.218180][ T81] usb 4-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 840.228125][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.241151][ T81] usb 4-1: Product: syz [ 840.249148][ T81] usb 4-1: Manufacturer: syz [ 840.257376][ T81] usb 4-1: SerialNumber: syz [ 840.283597][ T81] r8152-cfgselector 4-1: Unknown version 0x0000 [ 840.292749][ T81] r8152-cfgselector 4-1: config 0 descriptor?? [ 840.311406][ T30] audit: type=1326 audit(1745230210.845:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14332 comm="syz.2.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cd8e169 code=0x7ffc0000 [ 840.312246][ T81] r8152 4-1:0.143: Expected endpoints are not found [ 840.385191][ T1323] Bluetooth: Error in BCSP hdr checksum [ 840.436309][ T30] audit: type=1326 audit(1745230210.854:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14332 comm="syz.2.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd73cd85127 code=0x7ffc0000 [ 840.520584][ T30] audit: type=1326 audit(1745230210.854:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14332 comm="syz.2.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd73cd2a359 code=0x7ffc0000 [ 840.563321][ T10] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 840.645577][ T30] audit: type=1326 audit(1745230210.854:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14332 comm="syz.2.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cd8e169 code=0x7ffc0000 [ 840.766466][ T30] audit: type=1326 audit(1745230210.854:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14332 comm="syz.2.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd73cd85127 code=0x7ffc0000 [ 841.012241][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 841.020262][T11458] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 842.908309][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 842.908336][ T30] audit: type=1400 audit(1745230213.688:987): avc: denied { connect } for pid=14356 comm="syz.1.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 843.432824][ T30] audit: type=1400 audit(1745230214.175:988): avc: denied { watch_reads } for pid=14366 comm="syz.4.2222" path="/450" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 844.513920][ T30] audit: type=1400 audit(1745230214.689:989): avc: denied { create } for pid=14373 comm="syz.2.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 844.728835][T14383] hsr0 speed is unknown, defaulting to 1000 [ 844.736561][T14383] lo speed is unknown, defaulting to 1000 [ 844.796512][T14379] Can't find ip_set type hash:ne [ 845.708065][ T30] audit: type=1400 audit(1745230215.363:990): avc: denied { read } for pid=14369 comm="syz.3.2223" path="socket:[33770]" dev="sockfs" ino=33770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 845.731444][ T30] audit: type=1400 audit(1745230215.372:991): avc: denied { ioctl } for pid=14369 comm="syz.3.2223" path="/dev/video8" dev="devtmpfs" ino=953 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 846.990955][T14380] Set syz1 is full, maxelem 65536 reached [ 847.315295][T14399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14399 comm=syz.4.2229 [ 848.831768][T14415] overlayfs: missing 'lowerdir' [ 850.676530][T14427] overlayfs: failed to clone upperpath [ 851.596453][ T30] audit: type=1400 audit(1745230221.415:992): avc: denied { ioctl } for pid=14430 comm="syz.2.2237" path="socket:[34345]" dev="sockfs" ino=34345 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 852.669837][ T30] audit: type=1400 audit(1745230222.294:993): avc: denied { write } for pid=14438 comm="syz.1.2239" path="socket:[34940]" dev="sockfs" ino=34940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 852.729788][T14444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2239'. [ 852.739072][T14444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2239'. [ 856.962608][T14473] siw: device registration error -23 [ 857.767062][ T30] audit: type=1400 audit(1745230226.690:994): avc: denied { write } for pid=14464 comm="syz.3.2245" name="mcfilter" dev="proc" ino=4026532832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 858.422354][ T30] audit: type=1400 audit(1745230226.821:995): avc: denied { setopt } for pid=14452 comm="syz.4.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 858.499141][ T30] audit: type=1400 audit(1745230226.831:996): avc: denied { create } for pid=14452 comm="syz.4.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 858.599987][ T30] audit: type=1400 audit(1745230226.831:997): avc: denied { write } for pid=14452 comm="syz.4.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 858.625006][ T30] audit: type=1400 audit(1745230226.868:998): avc: denied { create } for pid=14474 comm="syz.5.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 858.908300][ T30] audit: type=1400 audit(1745230228.243:999): avc: denied { setopt } for pid=14474 comm="syz.5.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 858.928954][ T30] audit: type=1400 audit(1745230228.542:1000): avc: denied { name_bind } for pid=14491 comm="syz.2.2252" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 860.078659][ T30] audit: type=1400 audit(1745230229.730:1001): avc: denied { nlmsg_write } for pid=14494 comm="syz.1.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 861.253341][T14518] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 861.407424][ T30] audit: type=1400 audit(1745230230.956:1002): avc: denied { ioctl } for pid=14516 comm="syz.3.2257" path="socket:[34458]" dev="sockfs" ino=34458 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 862.458008][ T30] audit: type=1400 audit(1745230231.526:1003): avc: denied { getopt } for pid=14511 comm="syz.5.2256" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 863.451593][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 863.451614][ T30] audit: type=1400 audit(1745230232.901:1007): avc: denied { open } for pid=14530 comm="syz.1.2262" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 864.301104][ T30] audit: type=1400 audit(1745230233.678:1008): avc: denied { connect } for pid=14534 comm="syz.2.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 864.378578][T14539] hsr0 speed is unknown, defaulting to 1000 [ 864.470034][T14539] lo speed is unknown, defaulting to 1000 [ 864.661429][ T30] audit: type=1400 audit(1745230234.043:1009): avc: denied { write } for pid=14540 comm="syz.4.2264" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 864.749487][T14545] validate_nla: 40 callbacks suppressed [ 864.749503][T14545] netlink: 'syz.1.2266': attribute type 10 has an invalid length. [ 864.763181][T14545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2266'. [ 864.945884][T14548] CUSE: unknown device info "" [ 864.951141][T14548] CUSE: zero length info key specified [ 865.021362][T14545] team0: Port device geneve0 added [ 865.111650][ T30] audit: type=1400 audit(1745230234.174:1010): avc: denied { connect } for pid=14542 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 865.981293][ T30] audit: type=1400 audit(1745230235.249:1011): avc: denied { mounton } for pid=14555 comm="syz.1.2268" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 866.052274][ T30] audit: type=1400 audit(1745230235.268:1012): avc: denied { mounton } for pid=14555 comm="syz.1.2268" path="/proc/1567/task" dev="proc" ino=34532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 866.127610][ T30] audit: type=1400 audit(1745230235.324:1013): avc: denied { mount } for pid=14544 comm="syz.5.2265" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 866.412666][ T30] audit: type=1400 audit(1745230235.530:1014): avc: denied { getopt } for pid=14552 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 867.163648][ T30] audit: type=1400 audit(1745230235.988:1015): avc: denied { ioctl } for pid=14562 comm="syz.3.2263" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 867.328142][ T30] audit: type=1400 audit(1745230236.531:1016): avc: denied { write } for pid=14567 comm="syz.5.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 867.380301][T14568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.576144][T14572] mkiss: ax0: crc mode is auto. [ 868.676973][T14566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.031929][T14582] overlayfs: failed to clone upperpath [ 869.788799][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 869.788820][ T30] audit: type=1400 audit(1745230238.832:1018): avc: denied { write } for pid=14577 comm="syz.2.2272" path="socket:[35124]" dev="sockfs" ino=35124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 869.864082][ T30] audit: type=1400 audit(1745230238.897:1019): avc: denied { nlmsg_write } for pid=14577 comm="syz.2.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 869.896073][ T30] audit: type=1400 audit(1745230238.935:1020): avc: denied { connect } for pid=14595 comm="syz.4.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 870.218744][T14598] veth0_to_team: entered promiscuous mode [ 870.225153][T14598] veth0_to_team: entered allmulticast mode [ 870.407471][ T30] audit: type=1400 audit(1745230239.412:1021): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 870.911755][ T30] audit: type=1400 audit(1745230239.879:1022): avc: denied { create } for pid=14601 comm="syz.3.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 871.264712][ T30] audit: type=1400 audit(1745230240.207:1023): avc: denied { read } for pid=14600 comm="syz.5.2280" path="socket:[35132]" dev="sockfs" ino=35132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 872.469185][ T30] audit: type=1400 audit(1745230241.170:1024): avc: denied { create } for pid=14619 comm="syz.1.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 874.372879][T14643] delete_channel: no stack [ 874.405191][T14646] input: syz1 as /devices/virtual/input/input17 [ 874.431284][ T30] audit: type=1400 audit(1745230243.153:1025): avc: denied { read write } for pid=14628 comm="syz.3.2282" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 874.475542][ T30] audit: type=1400 audit(1745230243.153:1026): avc: denied { open } for pid=14628 comm="syz.3.2282" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 875.099223][ T81] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 875.139393][ T30] audit: type=1400 audit(1745230243.153:1027): avc: denied { ioctl } for pid=14628 comm="syz.3.2282" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 875.165070][ T30] audit: type=1400 audit(1745230243.181:1028): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=2971 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 875.187779][ T30] audit: type=1400 audit(1745230243.181:1029): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2971 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 875.282319][ T30] audit: type=1400 audit(1745230243.181:1030): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2971 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 875.341072][ T81] usb 4-1: Using ep0 maxpacket: 8 [ 875.950878][ T30] audit: type=1400 audit(1745230244.257:1031): avc: denied { execute_no_trans } for pid=14659 comm="syz.2.2293" path="/503/file0" dev="tmpfs" ino=2659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 875.990834][ T81] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 876.135291][ T81] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 876.147291][ T81] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 876.318535][T14668] netlink: 'syz.4.2294': attribute type 4 has an invalid length. [ 876.675762][ T30] audit: type=1400 audit(1745230244.875:1032): avc: denied { create } for pid=14663 comm="syz.4.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 876.726758][ T81] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.776123][ T81] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 876.844605][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.302641][ T81] usb 4-1: can't set config #16, error -71 [ 877.322623][ T81] usb 4-1: USB disconnect, device number 34 [ 879.944124][T14678] Cannot find del_set index 0 as target [ 881.366132][T14689] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 881.401153][ T30] audit: type=1400 audit(1745230249.692:1033): avc: denied { create } for pid=14695 comm="syz.4.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 881.431392][ T81] Process accounting resumed [ 881.508753][ T30] audit: type=1400 audit(1745230249.720:1034): avc: denied { setopt } for pid=14695 comm="syz.4.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 881.926794][ T30] audit: type=1400 audit(1745230250.019:1035): avc: denied { ioctl } for pid=14697 comm="syz.3.2304" path="socket:[35248]" dev="sockfs" ino=35248 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 883.353465][T14717] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 883.355587][ T30] audit: type=1400 audit(1745230251.516:1036): avc: denied { bind } for pid=14713 comm="syz.4.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 883.987641][T14727] xt_nat: multiple ranges no longer supported [ 884.474966][ T30] audit: type=1400 audit(1745230251.937:1037): avc: denied { ioctl } for pid=14723 comm="syz.3.2309" path="socket:[34792]" dev="sockfs" ino=34792 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 884.504228][ T30] audit: type=1400 audit(1745230251.937:1038): avc: denied { write } for pid=14723 comm="syz.3.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 884.524596][ T30] audit: type=1400 audit(1745230252.133:1039): avc: denied { ioctl } for pid=14723 comm="syz.3.2309" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 884.583602][ T30] audit: type=1400 audit(1745230252.657:1040): avc: denied { read write } for pid=14729 comm="syz.1.2311" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 884.696827][ T30] audit: type=1400 audit(1745230252.657:1041): avc: denied { open } for pid=14729 comm="syz.1.2311" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 884.752581][ T30] audit: type=1400 audit(1745230252.835:1042): avc: denied { write } for pid=14730 comm="syz.3.2312" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 886.107446][T14749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14749 comm=syz.4.2313 [ 886.273196][T14755] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 886.369572][T14755] ptrace attach of ""[14756] was attempted by "./syz-executor exec"[14755] [ 886.974420][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 886.974442][ T30] audit: type=1800 audit(1745230254.406:1045): pid=14758 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2316" name="nullb0" dev="tmpfs" ino=1793 res=0 errno=0 [ 888.316377][ T30] audit: type=1400 audit(1745230256.146:1046): avc: denied { create } for pid=14764 comm="syz.5.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 888.626347][ T30] audit: type=1400 audit(1745230256.146:1047): avc: denied { connect } for pid=14764 comm="syz.5.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 888.686085][ T30] audit: type=1400 audit(1745230256.146:1048): avc: denied { write } for pid=14764 comm="syz.5.2319" path="socket:[35377]" dev="sockfs" ino=35377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 889.416076][ T30] audit: type=1400 audit(1745230257.194:1049): avc: denied { read } for pid=14770 comm="syz.3.2320" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 889.528103][ T30] audit: type=1400 audit(1745230257.297:1050): avc: denied { read } for pid=14777 comm="syz.1.2323" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 889.645420][ T30] audit: type=1400 audit(1745230257.325:1051): avc: denied { open } for pid=14777 comm="syz.1.2323" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 889.745766][T14776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2320'. [ 889.762125][T14784] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 889.793047][ T30] audit: type=1400 audit(1745230257.353:1052): avc: denied { ioctl } for pid=14777 comm="syz.1.2323" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 890.030761][T14796] overlayfs: failed to clone upperpath [ 891.001127][ T30] audit: type=1400 audit(1745230258.653:1053): avc: denied { setopt } for pid=14792 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 891.400699][T14808] veth0_to_team: entered promiscuous mode [ 892.798905][T14818] afs: Unknown parameter 'dy' [ 896.879530][T14845] xt_hashlimit: size too large, truncated to 1048576 [ 897.180496][ T30] audit: type=1400 audit(1745230264.172:1054): avc: denied { getopt } for pid=14841 comm="syz.5.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 898.267036][T14852] No control pipe specified [ 899.704695][T14862] delete_channel: no stack [ 900.046523][ T30] audit: type=1400 audit(1745230267.137:1055): avc: denied { create } for pid=14868 comm="syz.5.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 901.070037][T14875] sd 0:0:1:0: device reset [ 901.099165][ T30] audit: type=1400 audit(1745230268.082:1056): avc: denied { read } for pid=14867 comm="syz.1.2343" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 901.556416][ T30] audit: type=1400 audit(1745230268.082:1057): avc: denied { open } for pid=14867 comm="syz.1.2343" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 901.582206][ T30] audit: type=1400 audit(1745230268.091:1058): avc: denied { ioctl } for pid=14867 comm="syz.1.2343" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 901.811435][ T30] audit: type=1326 audit(1745230268.662:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.2.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cd8e169 code=0x7fc00000 [ 902.397706][ T30] audit: type=1400 audit(1745230268.709:1060): avc: denied { read write } for pid=14872 comm="syz.3.2344" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 902.777073][T14889] overlayfs: failed to clone upperpath [ 902.837457][T14890] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[14890] [ 903.103017][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 903.176313][ T30] audit: type=1400 audit(1745230268.718:1061): avc: denied { open } for pid=14872 comm="syz.3.2344" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 903.346572][ T10] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 904.104624][ T30] audit: type=1400 audit(1745230268.737:1062): avc: denied { mount } for pid=14872 comm="syz.3.2344" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 904.127128][ T30] audit: type=1400 audit(1745230268.783:1063): avc: denied { write } for pid=14872 comm="syz.3.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 904.233663][ T10] usb 4-1: config 150 has no interface number 0 [ 904.258251][ T5871] Process accounting resumed [ 904.268442][ T10] usb 4-1: config 150 interface 204 has no altsetting 0 [ 904.297661][ T10] usb 4-1: config 150 interface 1 has no altsetting 0 [ 904.326853][ T10] usb 4-1: string descriptor 0 read error: -71 [ 904.358430][ T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 904.360958][ T30] audit: type=1400 audit(1745230271.169:1064): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 904.373994][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.414225][ T10] usb 4-1: can't set config #150, error -71 [ 904.424721][ T10] usb 4-1: USB disconnect, device number 35 [ 905.468633][ T30] audit: type=1400 audit(1745230272.141:1065): avc: denied { write } for pid=14897 comm="syz.5.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 905.792673][ T30] audit: type=1400 audit(1745230272.497:1066): avc: denied { unlink } for pid=14905 comm="syz.3.2351" name="#1b" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 905.839032][ T30] audit: type=1400 audit(1745230272.553:1067): avc: denied { setopt } for pid=14896 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 905.893248][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 905.911602][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 906.004941][T14902] ceph: No mds server is up or the cluster is laggy [ 906.294310][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 906.645534][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 906.688702][ T30] audit: type=1400 audit(1745230273.348:1068): avc: denied { create } for pid=14915 comm="syz.1.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 906.715595][T14920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2353'. [ 907.071328][ T30] audit: type=1400 audit(1745230273.376:1069): avc: denied { write } for pid=14915 comm="syz.1.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 907.233526][T14923] C: renamed from lo [ 907.238092][ T30] audit: type=1400 audit(1745230273.863:1070): avc: denied { ioctl } for pid=14921 comm="syz.4.2355" path="socket:[36071]" dev="sockfs" ino=36071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 908.400459][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2355'. [ 908.424534][T14923] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 909.946771][ T30] audit: type=1400 audit(1745230276.379:1071): avc: denied { create } for pid=14940 comm="syz.1.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 910.770668][T14955] delete_channel: no stack [ 911.349279][T14958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2362'. [ 911.714732][ T30] audit: type=1400 audit(1745230278.044:1072): avc: denied { setopt } for pid=14954 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 912.039538][ T30] audit: type=1400 audit(1745230278.343:1073): avc: denied { bind } for pid=14954 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 912.321977][ T30] audit: type=1400 audit(1745230278.343:1074): avc: denied { listen } for pid=14954 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 912.359915][ T30] audit: type=1400 audit(1745230278.352:1075): avc: denied { connect } for pid=14954 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 912.385690][ T30] audit: type=1400 audit(1745230278.381:1076): avc: denied { write } for pid=14954 comm="syz.3.2359" path="socket:[36180]" dev="sockfs" ino=36180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 913.359696][ T30] audit: type=1400 audit(1745230278.764:1077): avc: denied { setopt } for pid=14964 comm="syz.1.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 913.506424][T14972] xt_hashlimit: overflow, try lower: 3/0 [ 913.537995][ T30] audit: type=1400 audit(1745230279.746:1078): avc: denied { create } for pid=14970 comm="syz.1.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 913.928517][ T30] audit: type=1400 audit(1745230279.784:1079): avc: denied { write } for pid=14970 comm="syz.1.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 915.345507][T14982] veth1_macvtap: left promiscuous mode [ 915.351051][T14982] macsec0: entered promiscuous mode [ 915.356363][T14982] macsec0: entered allmulticast mode [ 916.979306][ T30] audit: type=1400 audit(1745230282.973:1080): avc: denied { create } for pid=15013 comm="syz.5.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 917.055633][T15014] netlink: 'syz.5.2376': attribute type 4 has an invalid length. [ 917.098872][ T81] lo speed is unknown, defaulting to 1000 [ 917.132217][ T81] syz0: Port: 1 Link DOWN [ 917.226961][T15016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.542731][ T30] audit: type=1400 audit(1745230283.497:1081): avc: denied { ioctl } for pid=15013 comm="syz.5.2376" path="socket:[36265]" dev="sockfs" ino=36265 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 921.995247][ T30] audit: type=1400 audit(1745230287.669:1082): avc: denied { ioctl } for pid=15037 comm="syz.2.2383" path="socket:[35670]" dev="sockfs" ino=35670 ioctlcmd=0x8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 923.505352][ T30] audit: type=1400 audit(1745230289.082:1083): avc: denied { sqpoll } for pid=15056 comm="syz.1.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 923.605971][ T30] audit: type=1400 audit(1745230289.110:1084): avc: denied { getopt } for pid=15056 comm="syz.1.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 924.392795][ T30] audit: type=1400 audit(1745230289.110:1085): avc: denied { write } for pid=15056 comm="syz.1.2386" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 924.897541][ T30] audit: type=1400 audit(1745230289.110:1086): avc: denied { open } for pid=15056 comm="syz.1.2386" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 924.931154][ T30] audit: type=1400 audit(1745230289.138:1087): avc: denied { ioctl } for pid=15056 comm="syz.1.2386" path="socket:[36334]" dev="sockfs" ino=36334 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 925.054690][T15065] overlayfs: failed to clone lowerpath [ 925.116163][ T5872] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 925.151438][T15069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2390'. [ 925.285876][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 925.303326][ T5872] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 925.324771][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.654253][T15042] Set syz1 is full, maxelem 65536 reached [ 925.728997][ T5872] usb 4-1: Product: syz [ 925.745802][ T5872] usb 4-1: Manufacturer: syz [ 925.753915][ T5872] usb 4-1: SerialNumber: syz [ 926.239904][ T5872] usb 4-1: config 0 descriptor?? [ 926.340795][ T5872] as10x_usb: device has been detected [ 926.380646][ T5872] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 926.575930][ T30] audit: type=1400 audit(1745230291.944:1088): avc: denied { write } for pid=15070 comm="syz.1.2391" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 927.070246][ T5872] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 927.208303][ T5872] as10x_usb: error during firmware upload part1 [ 927.221263][ T30] audit: type=1400 audit(1745230292.524:1089): avc: denied { firmware_load } for pid=5872 comm="kworker/0:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=271 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 927.775489][ T5872] Registered device Sky IT Digital Key (green led) [ 927.778246][ T5872] usb 4-1: USB disconnect, device number 36 [ 927.870308][ T5872] Unregistered device Sky IT Digital Key (green led) [ 927.889444][ T5872] as10x_usb: device has been disconnected [ 928.807266][T15101] hsr0 speed is unknown, defaulting to 1000 [ 928.822005][T15101] lo speed is unknown, defaulting to 1000 [ 931.231891][ T30] audit: type=1400 audit(1745230296.219:1090): avc: denied { name_bind } for pid=15116 comm="syz.1.2404" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 932.119282][ T30] audit: type=1400 audit(1745230297.070:1091): avc: denied { map } for pid=15135 comm="syz.1.2410" path="socket:[35772]" dev="sockfs" ino=35772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 932.287457][T15144] fuse: Bad value for 'user_id' [ 932.292816][T15144] fuse: Bad value for 'user_id' [ 932.300700][ T81] Process accounting resumed [ 932.355349][ T30] audit: type=1400 audit(1745230297.322:1092): avc: denied { nlmsg_read } for pid=15135 comm="syz.1.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 933.065851][ T30] audit: type=1326 audit(1745230297.697:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 933.097559][ T30] audit: type=1326 audit(1745230297.706:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 933.550854][ T30] audit: type=1326 audit(1745230297.734:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 933.575045][ T30] audit: type=1326 audit(1745230297.734:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 933.598887][ T30] audit: type=1326 audit(1745230297.734:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 934.494027][ T30] audit: type=1326 audit(1745230297.734:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 934.518619][ T30] audit: type=1326 audit(1745230297.743:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15147 comm="syz.3.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 935.151453][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2416'. [ 935.501280][T15175] hsr0 speed is unknown, defaulting to 1000 [ 935.508501][T15175] lo speed is unknown, defaulting to 1000 [ 936.999642][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 937.007666][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 937.037887][T15182] ceph: No mds server is up or the cluster is laggy [ 938.357821][T15207] autofs: Unknown parameter 'fd0x0000000000000000' [ 938.430563][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2428'. [ 938.693831][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 938.693916][ T30] audit: type=1400 audit(1745230303.253:1166): avc: denied { read } for pid=15208 comm="syz.3.2429" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 939.012361][T15217] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 941.886882][ T30] audit: type=1400 audit(1745230303.253:1167): avc: denied { open } for pid=15208 comm="syz.3.2429" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 941.911829][ T30] audit: type=1400 audit(1745230303.272:1168): avc: denied { ioctl } for pid=15208 comm="syz.3.2429" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 942.734967][T15224] overlayfs: failed to clone upperpath [ 942.825012][T15223] hsr0 speed is unknown, defaulting to 1000 [ 942.839347][T15223] lo speed is unknown, defaulting to 1000 [ 945.269805][ T30] audit: type=1400 audit(1745230309.137:1169): avc: denied { mount } for pid=15232 comm="syz.2.2433" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 945.444004][ T30] audit: type=1400 audit(1745230309.146:1170): avc: denied { search } for pid=15232 comm="syz.2.2433" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 945.971347][T15246] netlink: ct family unspecified [ 945.976493][T15246] openvswitch: netlink: Actions may not be safe on all matching packets [ 947.001928][ T30] audit: type=1400 audit(1745230311.054:1171): avc: denied { watch } for pid=15256 comm="syz.5.2441" path="/449" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 947.038181][ T30] audit: type=1400 audit(1745230311.054:1172): avc: denied { watch_sb } for pid=15256 comm="syz.5.2441" path="/449" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 948.042062][T15278] xt_nat: multiple ranges no longer supported [ 949.729047][T15296] netlink: 'syz.5.2452': attribute type 12 has an invalid length. [ 950.458072][ T30] audit: type=1400 audit(1745230314.291:1173): avc: denied { accept } for pid=15310 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 950.975475][ T81] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 951.569549][ T30] audit: type=1400 audit(1745230315.301:1174): avc: denied { create } for pid=15310 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 951.732213][ T81] usb 4-1: Using ep0 maxpacket: 32 [ 951.748174][ T81] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 951.766499][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.789010][ T81] usb 4-1: config 0 descriptor?? [ 951.819646][ T81] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 951.842091][ T81] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 951.851434][ T81] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 952.100515][T15330] xt_nat: multiple ranges no longer supported [ 953.824138][ T81] usb 4-1: USB disconnect, device number 37 [ 953.935884][T15341] overlayfs: failed to clone upperpath [ 955.081687][ T1323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 955.094679][T15354] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 955.766042][ T30] audit: type=1400 audit(1745230319.248:1175): avc: denied { relabelto } for pid=15352 comm="syz.5.2466" name="" dev="pipefs" ino=10987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:ssh_agent_exec_t:s0" [ 955.880997][T15363] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 956.704645][ T30] audit: type=1400 audit(1745230320.109:1176): avc: denied { getopt } for pid=15369 comm="syz.1.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 957.099846][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 957.702627][T15382] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2473'. [ 957.805928][ T30] audit: type=1400 audit(1745230321.072:1177): avc: denied { nlmsg_read } for pid=15379 comm="syz.5.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 958.711688][T15389] xt_nat: multiple ranges no longer supported [ 959.214333][ T30] audit: type=1400 audit(1745230322.485:1178): avc: denied { getopt } for pid=15377 comm="syz.2.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 959.456048][T15394] Invalid option length (1048180) for dns_resolver key [ 960.175797][T15404] veth0_vlan: entered allmulticast mode [ 960.748048][T15405] veth0_vlan: left promiscuous mode [ 960.755296][T15405] veth0_vlan: entered promiscuous mode [ 960.775613][T15406] hsr0 speed is unknown, defaulting to 1000 [ 960.782451][T15406] lo speed is unknown, defaulting to 1000 [ 961.007784][ T30] audit: type=1400 audit(1745230324.028:1179): avc: denied { setopt } for pid=15398 comm="syz.3.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 961.239138][ T6663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 961.291145][T15410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 961.298632][T15410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 961.315817][ T30] audit: type=1400 audit(1745230324.449:1180): avc: denied { setopt } for pid=15411 comm="syz.4.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 961.350253][T15410] vhci_hcd vhci_hcd.0: Device attached [ 961.375873][T15420] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 961.566444][ T5871] vhci_hcd: vhci_device speed not set [ 961.572357][T15415] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 961.578973][T15415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 961.654507][T15415] vhci_hcd vhci_hcd.0: Device attached [ 961.752661][ T5871] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 961.821590][T15415] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 961.828315][T15415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 961.835886][T15410] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 961.842538][T15410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 961.987177][ T30] audit: type=1400 audit(1745230324.926:1181): avc: denied { bind } for pid=15422 comm="syz.3.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 962.007529][ T30] audit: type=1400 audit(1745230324.926:1182): avc: denied { listen } for pid=15422 comm="syz.3.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 962.093733][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 962.334941][T15410] vhci_hcd vhci_hcd.0: Device attached [ 962.393467][T15415] vhci_hcd vhci_hcd.0: Device attached [ 962.395268][T15420] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(23) [ 962.405611][T15420] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 962.425956][T15420] vhci_hcd vhci_hcd.0: Device attached [ 962.484551][T15410] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 963.065694][T15415] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 963.157634][T15410] vhci_hcd vhci_hcd.0: port 0 already used [ 963.242441][T15436] vhci_hcd: connection closed [ 963.242533][T15430] vhci_hcd: connection closed [ 963.258947][T15428] vhci_hcd: connection closed [ 963.274751][T15412] vhci_hcd: connection reset by peer [ 963.275165][T15416] vhci_hcd: connection closed [ 963.287739][ T9185] vhci_hcd: stop threads [ 963.897126][ T9185] vhci_hcd: release socket [ 963.945781][ T9185] vhci_hcd: disconnect device [ 963.959414][ T9185] vhci_hcd: stop threads [ 963.979941][ T9185] vhci_hcd: release socket [ 963.996865][ T9185] vhci_hcd: disconnect device [ 964.025345][ T9185] vhci_hcd: stop threads [ 964.038237][ T9185] vhci_hcd: release socket [ 964.048514][ T9185] vhci_hcd: disconnect device [ 964.074512][ T9185] vhci_hcd: stop threads [ 964.113187][ T9185] vhci_hcd: release socket [ 964.371048][ T9185] vhci_hcd: disconnect device [ 964.379358][ T9185] vhci_hcd: stop threads [ 964.840372][ T9185] vhci_hcd: release socket [ 964.865209][ T9185] vhci_hcd: disconnect device [ 967.353631][ T5871] vhci_hcd: vhci_device speed not set [ 967.407819][ T9178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 969.161994][ T30] audit: type=1400 audit(1745230331.661:1183): avc: denied { read write } for pid=15491 comm="syz.1.2499" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 969.480976][ T30] audit: type=1400 audit(1745230331.661:1184): avc: denied { open } for pid=15491 comm="syz.1.2499" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 971.133780][ T30] audit: type=1400 audit(1745230333.635:1185): avc: denied { write } for pid=15505 comm="syz.1.2503" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 971.161552][ T30] audit: type=1400 audit(1745230333.663:1186): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.829914][ T30] audit: type=1400 audit(1745230333.663:1187): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.859366][ T30] audit: type=1400 audit(1745230333.663:1188): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 971.888600][ T30] audit: type=1400 audit(1745230333.663:1189): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.122468][T15525] netlink: 'syz.4.2502': attribute type 4 has an invalid length. [ 972.133663][T15525] netlink: 'syz.4.2502': attribute type 4 has an invalid length. [ 972.523874][ T30] audit: type=1400 audit(1745230333.663:1190): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 972.573541][ T30] audit: type=1400 audit(1745230333.663:1191): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 972.666918][ T30] audit: type=1400 audit(1745230334.551:1192): avc: denied { write } for pid=15504 comm="syz.4.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 973.492285][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 973.501417][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 973.602824][ T6663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 975.700147][T15516] Set syz1 is full, maxelem 65536 reached [ 976.280131][ T30] audit: type=1400 audit(1745230338.153:1193): avc: denied { create } for pid=15543 comm="syz.1.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 977.202003][ T30] audit: type=1804 audit(1745230338.386:1194): pid=15542 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2510" name="file0" dev="tmpfs" ino=2749 res=1 errno=0 [ 977.771939][T15542] uprobe: syz.4.2510:15542 failed to unregister, leaking uprobe [ 978.016410][T15560] macvtap1: entered allmulticast mode [ 978.022167][T15560] veth0_macvtap: entered allmulticast mode [ 978.259547][T15542] uprobe: syz.4.2510:15542 failed to unregister, leaking uprobe [ 978.629243][ T30] audit: type=1400 audit(1745230340.566:1195): avc: denied { bind } for pid=15565 comm="syz.1.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 978.701716][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 978.730658][ T30] audit: type=1400 audit(1745230340.669:1196): avc: denied { listen } for pid=15565 comm="syz.1.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 982.178486][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2526'. [ 982.694525][ T30] audit: type=1400 audit(1745230344.401:1197): avc: denied { append } for pid=15591 comm="syz.3.2523" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 982.967903][T15613] overlayfs: missing 'lowerdir' [ 983.818142][ T9178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 984.977143][T15632] /dev/nullb0: Can't lookup blockdev [ 985.325545][T15642] hsr0 speed is unknown, defaulting to 1000 [ 985.339630][T15642] lo speed is unknown, defaulting to 1000 [ 985.902024][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 985.980901][ T30] audit: type=1400 audit(1745230346.543:1198): avc: denied { append } for pid=15635 comm="syz.1.2533" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 987.476623][ T30] audit: type=1326 audit(1745230348.835:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15656 comm="syz.2.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cd8e169 code=0x7fc00000 [ 987.884244][ T30] audit: type=1400 audit(1745230348.835:1200): avc: denied { read } for pid=15656 comm="syz.2.2539" path="socket:[37598]" dev="sockfs" ino=37598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 988.092317][ T30] audit: type=1326 audit(1745230348.835:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15656 comm="syz.2.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd73cd8e169 code=0x7fc00000 [ 988.128688][ T30] audit: type=1326 audit(1745230349.013:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15656 comm="syz.2.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cd8e169 code=0x7fc00000 [ 988.158309][ T30] audit: type=1326 audit(1745230349.013:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15656 comm="syz.2.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cd8e169 code=0x7fc00000 [ 988.334466][ T30] audit: type=1326 audit(1745230349.013:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15656 comm="syz.2.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73cd8e169 code=0x7fc00000 [ 988.548251][ T30] audit: type=1326 audit(1745230349.864:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707778e169 code=0x7ffc0000 [ 988.713959][ T30] audit: type=1326 audit(1745230349.864:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f707778e169 code=0x7ffc0000 [ 988.738491][ T30] audit: type=1326 audit(1745230349.873:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707778e169 code=0x7ffc0000 [ 988.763319][ T30] audit: type=1326 audit(1745230349.873:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707778e169 code=0x7ffc0000 [ 988.787792][ T30] audit: type=1326 audit(1745230349.873:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707778e169 code=0x7ffc0000 [ 988.812212][ T30] audit: type=1326 audit(1745230349.883:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f707778e169 code=0x7ffc0000 [ 989.601403][T15686] tipc: Started in network mode [ 989.607523][T15686] tipc: Node identity 4, cluster identity 4711 [ 989.722816][T15686] tipc: Node number set to 4 [ 990.069495][ T9185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 994.891700][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 995.822747][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2559'. [ 997.399949][ T9175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 997.581819][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 997.581838][ T30] audit: type=1400 audit(1745230358.371:1404): avc: denied { ioctl } for pid=15732 comm="syz.3.2558" path="socket:[38291]" dev="sockfs" ino=38291 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 997.705294][T15741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.818432][T15748] fuse: Bad value for 'fd' [ 999.311041][T15753] xt_hashlimit: size too large, truncated to 1048576 [ 999.432498][T15755] xt_hashlimit: size too large, truncated to 1048576 [ 1000.417910][T15771] overlayfs: failed to clone upperpath [ 1000.466826][ T30] audit: type=1400 audit(1745230361.018:1405): avc: denied { write } for pid=15760 comm="syz.2.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1000.705765][T15776] overlayfs: failed to clone lowerpath [ 1001.166621][T15775] befs: (nullb0): No write support. Marking filesystem read-only [ 1001.177458][T15775] befs: (nullb0): invalid magic header [ 1002.124547][ T30] audit: type=1400 audit(1745230362.618:1406): avc: denied { write } for pid=15788 comm="syz.1.2571" path="socket:[37821]" dev="sockfs" ino=37821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1002.785249][ T30] audit: type=1400 audit(1745230363.226:1407): avc: denied { read } for pid=15794 comm="syz.4.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1003.661996][ T9175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1004.897460][ T30] audit: type=1400 audit(1745230365.209:1408): avc: denied { connect } for pid=15825 comm="syz.5.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1007.318242][T15855] futex_wake_op: syz.1.2581 tries to shift op by -33; fix this program [ 1009.389790][ T1330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1009.536096][ T30] audit: type=1400 audit(1745230369.530:1409): avc: denied { bind } for pid=15866 comm="syz.2.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1009.700850][ T30] audit: type=1400 audit(1745230369.530:1410): avc: denied { node_bind } for pid=15866 comm="syz.2.2588" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1010.156479][T15891] overlayfs: failed to clone upperpath [ 1010.854827][T15894] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1011.063803][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 1011.077676][ T30] audit: type=1400 audit(1745230370.990:1411): avc: denied { setopt } for pid=15892 comm="syz.4.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1011.500873][T15900] hsr0 speed is unknown, defaulting to 1000 [ 1011.515196][T15900] lo speed is unknown, defaulting to 1000 [ 1012.999730][ T30] audit: type=1400 audit(1745230372.767:1412): avc: denied { mount } for pid=15905 comm="syz.4.2595" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1015.536234][ T6661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1016.638875][T15957] veth0_vlan: left promiscuous mode [ 1016.649582][T15957] veth0_vlan: entered promiscuous mode [ 1016.767204][T15957] hsr0 speed is unknown, defaulting to 1000 [ 1016.788815][T15957] lo speed is unknown, defaulting to 1000 [ 1019.146499][ T30] audit: type=1326 audit(1745230378.538:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 1019.186710][ T30] audit: type=1326 audit(1745230378.566:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 1019.249603][ T30] audit: type=1326 audit(1745230378.566:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 1019.443147][ T30] audit: type=1326 audit(1745230378.566:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 1019.471269][ T30] audit: type=1326 audit(1745230378.566:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 1019.503574][ T30] audit: type=1326 audit(1745230378.566:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 1019.746386][ T30] audit: type=1400 audit(1745230378.613:1419): avc: denied { setopt } for pid=15973 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1019.898512][ T30] audit: type=1326 audit(1745230378.641:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f076ff85127 code=0x7ffc0000 [ 1019.922666][ T30] audit: type=1326 audit(1745230378.641:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f076ff2a359 code=0x7ffc0000 [ 1020.883043][T15992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1020.965783][ T30] audit: type=1326 audit(1745230378.641:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f076ff8e169 code=0x7ffc0000 [ 1022.563106][ T6661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1024.653454][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1024.653493][ T30] audit: type=1400 audit(1745230383.664:1502): avc: denied { setopt } for pid=16005 comm="syz.1.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1024.759344][T16012] serio: Serial port ptm0 [ 1026.415208][T16023] veth0_vlan: left promiscuous mode [ 1026.422643][T16023] veth0_vlan: entered promiscuous mode [ 1026.447405][T16025] hsr0 speed is unknown, defaulting to 1000 [ 1026.454826][T16025] lo speed is unknown, defaulting to 1000 [ 1026.754532][ T30] audit: type=1400 audit(1745230385.311:1503): avc: denied { accept } for pid=16008 comm="syz.4.2622" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1029.665165][ T6661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1032.683596][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1033.111843][T16039] Process accounting resumed [ 1033.211679][ T1323] Bluetooth: Error in BCSP hdr checksum [ 1033.340781][ T30] audit: type=1400 audit(1745230391.812:1504): avc: denied { read } for pid=16069 comm="syz.3.2633" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1033.432538][ T30] audit: type=1400 audit(1745230391.812:1505): avc: denied { open } for pid=16069 comm="syz.3.2633" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1033.500819][ T1330] Bluetooth: Error in BCSP hdr checksum [ 1033.655042][ T30] audit: type=1400 audit(1745230391.821:1506): avc: denied { map } for pid=16069 comm="syz.3.2633" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1033.683433][ T30] audit: type=1400 audit(1745230391.821:1507): avc: denied { execute } for pid=16069 comm="syz.3.2633" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1033.764934][ T5939] Bluetooth: Error in BCSP hdr checksum [ 1034.140382][ T1323] Bluetooth: Error in BCSP hdr checksum [ 1034.397244][T16090] overlayfs: failed to clone upperpath [ 1035.078059][ T30] audit: type=1400 audit(1745230392.784:1508): avc: denied { mount } for pid=16085 comm="syz.4.2638" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1035.192199][ T1330] Bluetooth: Error in BCSP hdr checksum [ 1035.428609][T11458] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1035.438487][ T1330] Bluetooth: Error in BCSP hdr checksum [ 1035.441922][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 1035.708336][ T6661] Bluetooth: Error in BCSP hdr checksum [ 1036.169828][ T6661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1036.181582][ T6661] Bluetooth: Error in BCSP hdr checksum [ 1036.259572][ T1330] Bluetooth: Error in BCSP hdr checksum [ 1037.805169][ T30] audit: type=1400 audit(1745230395.553:1509): avc: denied { read } for pid=16112 comm="syz.1.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1040.408066][ T30] audit: type=1400 audit(1745230398.285:1510): avc: denied { accept } for pid=16129 comm="syz.5.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1041.173142][ T1330] Bluetooth: Error in BCSP hdr checksum [ 1041.451484][ T1330] Bluetooth: Error in BCSP hdr checksum [ 1041.802310][ T6661] Bluetooth: Error in BCSP hdr checksum [ 1041.976452][ T1330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1042.125447][ T5939] Bluetooth: Error in BCSP hdr checksum [ 1042.428278][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 1042.434810][T11458] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1042.617541][T16151] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[16151] [ 1042.877004][ T6661] Bluetooth: Error in BCSP hdr checksum [ 1043.177418][T16155] overlayfs: failed to clone lowerpath [ 1043.236035][T16156] overlayfs: failed to clone upperpath [ 1044.039918][ T5939] Bluetooth: Error in BCSP hdr checksum [ 1044.048220][ T30] audit: type=1400 audit(1745230401.701:1511): avc: denied { write } for pid=16160 comm="syz.3.2655" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1045.151959][ T5939] Bluetooth: Error in BCSP hdr checksum [ 1045.428239][ T9185] Bluetooth: Error in BCSP hdr checksum [ 1045.739172][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2661'. [ 1046.593120][T15397] Bluetooth: hci5: command 0x1003 tx timeout [ 1046.600862][T16150] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1046.990538][ T6661] Bluetooth: Error in BCSP hdr checksum [ 1047.138483][T16174] overlayfs: failed to clone upperpath [ 1048.084431][T16202] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2664'. [ 1048.195854][ T1330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1048.541349][T16209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1048.574761][T16209] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1048.598812][T16209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.127005][T16202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2664'. [ 1049.136014][T16202] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1049.483306][T16218] netlink: 'syz.3.2668': attribute type 4 has an invalid length. [ 1049.566412][T16219] netlink: 'syz.3.2668': attribute type 4 has an invalid length. [ 1049.880270][ T30] audit: type=1400 audit(1745230407.295:1512): avc: denied { map } for pid=16215 comm="syz.2.2669" path="socket:[38860]" dev="sockfs" ino=38860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1050.024178][T16226] Malformed UNC in devname [ 1050.024178][T16226] [ 1050.031436][T16226] CIFS: VFS: Malformed UNC in devname [ 1050.056748][T16226] overlayfs: failed to resolve './file0': -2 [ 1051.438650][ T30] audit: type=1400 audit(1745230408.745:1513): avc: denied { bind } for pid=16237 comm="syz.3.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1051.470841][ T30] audit: type=1400 audit(1745230408.745:1514): avc: denied { read } for pid=16237 comm="syz.3.2673" path="socket:[38878]" dev="sockfs" ino=38878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1053.987697][T16273] hsr0 speed is unknown, defaulting to 1000 [ 1053.999925][T16273] lo speed is unknown, defaulting to 1000 [ 1054.450886][T16270] hsr0 speed is unknown, defaulting to 1000 [ 1054.460433][T16270] lo speed is unknown, defaulting to 1000 [ 1054.907424][ T9175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1055.776638][T16286] netlink: 'syz.5.2677': attribute type 2 has an invalid length. [ 1055.975143][ T30] audit: type=1400 audit(1745230412.814:1515): avc: denied { ioctl } for pid=16263 comm="syz.5.2677" path="socket:[39605]" dev="sockfs" ino=39605 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1057.449794][ T30] audit: type=1400 audit(1745230414.301:1516): avc: denied { setopt } for pid=16294 comm="syz.5.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1057.916260][ T30] audit: type=1400 audit(1745230414.563:1517): avc: denied { append } for pid=16298 comm="syz.3.2683" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1058.341631][ T30] audit: type=1400 audit(1745230415.162:1518): avc: denied { connect } for pid=16306 comm="syz.4.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1061.174393][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1061.797622][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1061.831108][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1062.021549][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1062.222876][T16342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1062.517912][ T30] audit: type=1400 audit(1745230418.941:1519): avc: denied { read } for pid=16335 comm="syz.5.2692" name="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1062.605537][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1062.662628][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1062.676628][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1062.701824][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1062.742402][ T10] usb 4-1: Product: syz [ 1062.757077][ T10] usb 4-1: Manufacturer: syz [ 1063.515728][ T30] audit: type=1400 audit(1745230418.941:1520): avc: denied { open } for pid=16335 comm="syz.5.2692" path="/" dev="configfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1063.559728][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1063.571646][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1063.597022][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1063.729257][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 1064.483069][ T30] audit: type=1400 audit(1745230420.942:1521): avc: denied { connect } for pid=16325 comm="syz.3.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1064.570464][T16365] veth0_vlan: left promiscuous mode [ 1064.576806][T16365] veth0_vlan: entered promiscuous mode [ 1064.594736][T16366] hsr0 speed is unknown, defaulting to 1000 [ 1064.606367][ T30] audit: type=1400 audit(1745230420.952:1522): avc: denied { setopt } for pid=16325 comm="syz.3.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1064.640691][T16366] lo speed is unknown, defaulting to 1000 [ 1066.992909][T16385] syz.4.2700 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1067.271216][ T30] audit: type=1400 audit(1745230423.561:1523): avc: denied { create } for pid=16387 comm="syz.5.2701" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1067.313391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.416604][ T30] audit: type=1400 audit(1745230423.692:1524): avc: denied { rename } for pid=16387 comm="syz.5.2701" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1067.460596][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.514945][ T30] audit: type=1400 audit(1745230423.767:1525): avc: denied { getopt } for pid=16390 comm="syz.2.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1067.534599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.569758][ T10] usb 4-1: USB disconnect, device number 38 [ 1068.888250][ T30] audit: type=1326 audit(1745230425.058:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f861f58e169 code=0x0 [ 1069.506273][T16427] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2707'. [ 1070.326647][T16438] veth0_vlan: left promiscuous mode [ 1070.336847][T16438] veth0_vlan: entered promiscuous mode [ 1070.454407][T16438] hsr0 speed is unknown, defaulting to 1000 [ 1070.467943][T16438] lo speed is unknown, defaulting to 1000 [ 1070.929764][T16150] Bluetooth: Frame is too long (len 151, expected len 4) [ 1073.045940][ T30] audit: type=1400 audit(1745230428.959:1527): avc: denied { remount } for pid=16466 comm="syz.2.2717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1073.558701][T16467] netlink: 'syz.4.2719': attribute type 10 has an invalid length. [ 1073.567007][T16467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2719'. [ 1073.576233][T16467] batadv0: entered promiscuous mode [ 1073.584072][T16467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.591749][T16467] bridge0: port 1(batadv0) entered blocking state [ 1073.598544][T16467] bridge0: port 1(batadv0) entered disabled state [ 1073.606689][T16467] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1077.304581][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2731'. [ 1077.315810][T16519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.323593][T16519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.333178][T16519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.346197][T16519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.032167][ T30] audit: type=1400 audit(1745230434.403:1528): avc: denied { bind } for pid=16532 comm="syz.1.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1080.049718][T16548] C: renamed from lo [ 1080.073364][T16548] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1080.288658][T16551] overlayfs: failed to clone upperpath [ 1080.608107][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2738'. [ 1080.721091][T16549] netlink: 'syz.4.2737': attribute type 8 has an invalid length. [ 1080.732368][ T30] audit: type=1400 audit(1745230436.143:1529): avc: denied { create } for pid=16553 comm="syz.1.2740" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1080.773080][ T30] audit: type=1400 audit(1745230436.152:1530): avc: denied { write } for pid=16553 comm="syz.1.2740" name="file0" dev="tmpfs" ino=2644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1080.830004][ T30] audit: type=1400 audit(1745230436.152:1531): avc: denied { open } for pid=16553 comm="syz.1.2740" path="/496/file0" dev="tmpfs" ino=2644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1080.859369][T16554] relay: one or more items not logged [item size (56) > sub-buffer size (13)] [ 1080.902887][ T30] audit: type=1400 audit(1745230436.152:1532): avc: denied { ioctl } for pid=16553 comm="syz.1.2740" path="/496/file0" dev="tmpfs" ino=2644 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1081.762009][ T30] audit: type=1400 audit(1745230437.106:1533): avc: denied { listen } for pid=16553 comm="syz.1.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1082.170638][T16572] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1082.196921][T16572] CIFS mount error: No usable UNC path provided in device string! [ 1082.196921][T16572] [ 1082.207470][T16572] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1082.832869][ T30] audit: type=1400 audit(1745230438.107:1534): avc: denied { unlink } for pid=5831 comm="syz-executor" name="file0" dev="tmpfs" ino=2644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1083.417407][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 1083.429054][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.439962][T16585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.550651][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.102330][T16591] serio: Serial port ptm0 [ 1084.231054][T16585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.253261][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1084.277798][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1084.349985][T16599] misc userio: The device must be registered before sending interrupts [ 1084.361054][ T30] audit: type=1400 audit(1745230439.529:1535): avc: denied { shutdown } for pid=16582 comm="syz.1.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1084.926252][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1084.942921][T16594] ceph: No mds server is up or the cluster is laggy [ 1084.959038][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1087.125073][T15397] Bluetooth: hci3: command 0x0406 tx timeout [ 1087.548697][ T30] audit: type=1400 audit(1745230442.419:1536): avc: denied { name_bind } for pid=16610 comm="syz.2.2751" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1087.945080][ T30] audit: type=1400 audit(1745230442.877:1537): avc: denied { ioctl } for pid=16631 comm="syz.1.2757" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1090.218683][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 1090.699955][ T30] audit: type=1400 audit(1745230445.207:1538): avc: denied { bind } for pid=16648 comm="syz.3.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1091.832653][ T30] audit: type=1400 audit(1745230446.497:1539): avc: denied { setopt } for pid=16662 comm="syz.2.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1092.917497][T16674] veth0_vlan: left promiscuous mode [ 1092.924715][T16674] veth0_vlan: entered promiscuous mode [ 1092.959100][T16674] hsr0 speed is unknown, defaulting to 1000 [ 1092.966456][T16674] lo speed is unknown, defaulting to 1000 [ 1093.286955][T16681] overlayfs: failed to clone upperpath [ 1093.403173][T16680] CIFS mount error: No usable UNC path provided in device string! [ 1093.403173][T16680] [ 1093.413450][T16680] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1094.512849][T16686] veth0_vlan: left promiscuous mode [ 1094.520212][T16686] veth0_vlan: entered promiscuous mode [ 1094.555334][T16686] hsr0 speed is unknown, defaulting to 1000 [ 1094.563446][T16686] lo speed is unknown, defaulting to 1000 [ 1094.610905][ T30] audit: type=1400 audit(1745230449.051:1540): avc: denied { listen } for pid=16683 comm="syz.1.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1094.679706][ T30] audit: type=1400 audit(1745230449.051:1541): avc: denied { setopt } for pid=16683 comm="syz.1.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1094.862681][ T30] audit: type=1400 audit(1745230449.079:1542): avc: denied { accept } for pid=16683 comm="syz.1.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1097.099574][T16710] veth0_vlan: left promiscuous mode [ 1097.110976][T16710] veth0_vlan: entered promiscuous mode [ 1097.129020][T16711] hsr0 speed is unknown, defaulting to 1000 [ 1097.135689][T16711] lo speed is unknown, defaulting to 1000 [ 1101.574985][T16744] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2783'. [ 1101.584384][T16744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2783'. [ 1101.666005][T16752] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2783'. [ 1101.677614][T16744] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2783'. [ 1101.688662][T16744] netlink: 'syz.4.2783': attribute type 3 has an invalid length. [ 1101.708424][T16744] netlink: 'syz.4.2783': attribute type 2 has an invalid length. [ 1101.719974][T16744] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2783'. [ 1102.071471][T16766] CIFS mount error: No usable UNC path provided in device string! [ 1102.071471][T16766] [ 1102.081641][T16766] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1102.927937][T16779] bond0: entered promiscuous mode [ 1102.933141][T16779] bond_slave_0: entered promiscuous mode [ 1102.938890][T16779] bond_slave_1: entered promiscuous mode [ 1102.945413][T16779] bond0: left promiscuous mode [ 1102.950188][T16779] bond_slave_0: left promiscuous mode [ 1102.955814][T16779] bond_slave_1: left promiscuous mode [ 1103.083607][T16775] netlink: 'syz.4.2792': attribute type 21 has an invalid length. [ 1105.025184][T16801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2797'. [ 1105.151747][T16809] overlayfs: failed to clone lowerpath [ 1105.240950][T16810] overlayfs: failed to clone upperpath [ 1107.335795][T16832] overlayfs: failed to clone lowerpath [ 1107.477618][T16829] overlayfs: failed to clone upperpath [ 1107.611540][T16835] overlayfs: overlapping lowerdir path [ 1107.720332][T16837] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1108.349720][T16839] 9pnet_virtio: no channels available for device syz [ 1108.995910][ T30] audit: type=1400 audit(1745230462.589:1543): avc: denied { checkpoint_restore } for pid=16850 comm="syz.4.2809" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.147246][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2813'. [ 1110.156604][T16872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2813'. [ 1110.308720][T16871] syz.1.2811: attempt to access beyond end of device [ 1110.308720][T16871] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1110.322368][T16871] efs: cannot read volume header [ 1110.882026][ T30] audit: type=1400 audit(1745230463.702:1544): avc: denied { execute } for pid=16863 comm="syz.4.2813" path=2F6D656D66643A3984DFA37B2E58537C4607A94EB825202864656C6574656429 dev="hugetlbfs" ino=41422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1110.919153][ T30] audit: type=1400 audit(1745230463.805:1545): avc: denied { mounton } for pid=16861 comm="syz.1.2811" path="/505/file0" dev="tmpfs" ino=2691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1113.180093][ T30] audit: type=1400 audit(1745230465.900:1546): avc: denied { nlmsg_write } for pid=16884 comm="syz.2.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1113.234277][ T30] audit: type=1400 audit(1745230465.900:1547): avc: denied { audit_write } for pid=16884 comm="syz.2.2817" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1113.770270][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 1114.233306][ T30] audit: type=1107 audit(1745230465.900:1548): pid=16884 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1114.233743][ T30] audit: type=1400 audit(1745230466.424:1549): avc: denied { map } for pid=16886 comm="syz.3.2818" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1114.462430][ T30] audit: type=1400 audit(1745230466.424:1550): avc: denied { execute } for pid=16886 comm="syz.3.2818" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1114.497929][ T6860] IPVS: starting estimator thread 0... [ 1114.659444][T16905] IPVS: using max 58 ests per chain, 139200 per kthread [ 1115.217134][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2824'. [ 1115.565651][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'. [ 1115.574869][T16922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2826'. [ 1118.890275][T16943] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.170046][T16943] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.510762][T16962] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1120.522750][T16962] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1120.956711][T16943] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1121.485644][T16943] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1121.567343][ T30] audit: type=1400 audit(1745230474.329:1551): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1121.921710][T16943] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.049582][T16980] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1122.057495][T16980] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1122.591164][T16943] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.738557][T16943] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.011099][T16943] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.207084][T17012] wg1: entered promiscuous mode [ 1128.526818][T14884] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1128.775787][T14884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1129.235237][T14884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1129.248860][T14884] usb 4-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 1129.269860][T14884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.291286][T14884] usb 4-1: Product: syz [ 1129.296881][ T30] audit: type=1400 audit(1745230481.569:1552): avc: denied { create } for pid=17043 comm="syz.2.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1129.323002][T14884] usb 4-1: Manufacturer: syz [ 1129.480115][T14884] usb 4-1: SerialNumber: syz [ 1129.500566][T14884] usb 4-1: config 0 descriptor?? [ 1131.327546][T14884] usb 4-1: USB disconnect, device number 39 [ 1132.421617][T17069] xt_hashlimit: size too large, truncated to 1048576 [ 1132.601128][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1139.455550][ T30] audit: type=1400 audit(1745230491.082:1553): avc: denied { getopt } for pid=17130 comm="syz.4.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1139.488295][T17131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'. [ 1140.399818][T17141] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1140.562405][T17147] netlink: 496 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1144.964849][T17190] syz.2.2887: attempt to access beyond end of device [ 1144.964849][T17190] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1144.978339][T17190] efs: cannot read volume header [ 1145.015308][T17190] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2887'. [ 1145.024938][T17190] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1145.413348][ T9178] Bluetooth: hci5: Frame reassembly failed (-84) [ 1147.601355][T15397] Bluetooth: hci5: command 0x1003 tx timeout [ 1147.607792][T16150] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1147.743678][ T30] audit: type=1400 audit(1745230498.836:1554): avc: denied { accept } for pid=17205 comm="syz.1.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1149.999815][ T30] audit: type=1400 audit(1745230500.932:1555): avc: denied { mounton } for pid=17221 comm="syz.1.2895" path="/522/file0/file0" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1150.954050][ T30] audit: type=1400 audit(1745230501.465:1556): avc: denied { ioctl } for pid=17230 comm="syz.3.2899" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1151.154768][ T30] audit: type=1400 audit(1745230502.017:1557): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1151.309808][ T30] audit: type=1400 audit(1745230502.166:1558): avc: denied { bind } for pid=17230 comm="syz.3.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1153.463011][ T5871] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1153.730256][ T30] audit: type=1400 audit(1745230504.430:1559): avc: denied { bind } for pid=17259 comm="syz.2.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.967965][T17264] veth0_vlan: left promiscuous mode [ 1153.974283][T17264] veth0_vlan: entered promiscuous mode [ 1154.203987][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 1155.266336][T17257] hsr0 speed is unknown, defaulting to 1000 [ 1155.276187][T17257] lo speed is unknown, defaulting to 1000 [ 1156.481952][T17289] veth0_vlan: left promiscuous mode [ 1156.491320][T17289] veth0_vlan: entered promiscuous mode [ 1156.530689][T17295] hsr0 speed is unknown, defaulting to 1000 [ 1156.538530][T17295] lo speed is unknown, defaulting to 1000 [ 1156.666019][T17300] overlayfs: failed to clone upperpath [ 1157.492266][ T30] audit: type=1400 audit(1745230507.947:1560): avc: denied { setattr } for pid=17303 comm="syz.4.2912" name="" dev="pipefs" ino=42422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1158.966416][T17317] hsr0 speed is unknown, defaulting to 1000 [ 1159.206335][T17317] lo speed is unknown, defaulting to 1000 [ 1159.510598][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1159.529227][ T5871] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1159.536946][ T5871] usb 4-1: can't read configurations, error -71 [ 1163.430131][T17361] slcan: can't register candev [ 1163.435132][T17361] Falling back ldisc for ttyS3. [ 1164.360996][ T30] audit: type=1400 audit(1745230514.271:1561): avc: denied { read } for pid=17366 comm="syz.1.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1169.011702][T17407] veth1_vlan: entered allmulticast mode [ 1169.095473][T17407] hsr0 speed is unknown, defaulting to 1000 [ 1169.106040][T17407] lo speed is unknown, defaulting to 1000 [ 1170.882458][T17409] /dev/nullb0: Can't lookup blockdev [ 1174.354149][T17446] hsr0 speed is unknown, defaulting to 1000 [ 1174.363034][T17446] lo speed is unknown, defaulting to 1000 [ 1175.358574][ T30] audit: type=1326 audit(1745230524.560:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17432 comm="syz.1.2940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f255db8e169 code=0x0 [ 1175.781009][T17453] macsec0: left promiscuous mode [ 1175.863795][T17453] veth0_vlan: left promiscuous mode [ 1175.873479][T17453] veth0_vlan: entered promiscuous mode [ 1175.965108][T17453] hsr0 speed is unknown, defaulting to 1000 [ 1175.978366][T17453] lo speed is unknown, defaulting to 1000 [ 1176.774448][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1178.266737][ T30] audit: type=1400 audit(1745230527.385:1563): avc: denied { accept } for pid=17476 comm="syz.1.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1178.949060][T17483] trusted_key: encrypted_key: insufficient parameters specified [ 1179.056772][T17485] NILFS (nullb0): couldn't find nilfs on the device [ 1179.674423][T17492] hsr0 speed is unknown, defaulting to 1000 [ 1179.688341][T17492] lo speed is unknown, defaulting to 1000 [ 1181.246751][T17511] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1184.876494][T17543] xt_nat: multiple ranges no longer supported [ 1188.094950][T17566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2967'. [ 1188.104690][T17566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2967'. [ 1189.130493][T17579] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2969'. [ 1189.475170][T17570] fuse: Bad value for 'fd' [ 1191.199667][T17596] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2972'. [ 1192.498086][ T30] audit: type=1400 audit(1745230540.686:1564): avc: denied { bind } for pid=17606 comm="syz.1.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1192.517943][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.546747][ T30] audit: type=1400 audit(1745230540.686:1565): avc: denied { listen } for pid=17606 comm="syz.1.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1192.597304][T15397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1192.609879][T15397] CPU: 0 UID: 0 PID: 15397 Comm: kworker/u9:0 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 1192.609902][T15397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1192.609913][T15397] Workqueue: hci4 hci_rx_work [ 1192.609944][T15397] Call Trace: [ 1192.609959][T15397] [ 1192.609972][T15397] dump_stack_lvl+0x16c/0x1f0 [ 1192.610003][T15397] sysfs_warn_dup+0x7f/0xa0 [ 1192.610027][T15397] sysfs_create_dir_ns+0x24b/0x2b0 [ 1192.610044][T15397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1192.610061][T15397] ? find_held_lock+0x2b/0x80 [ 1192.610086][T15397] ? do_raw_spin_unlock+0x172/0x230 [ 1192.610100][T15397] kobject_add_internal+0x2c4/0x9b0 [ 1192.610128][T15397] kobject_add+0x16e/0x240 [ 1192.610146][T15397] ? __pfx_kobject_add+0x10/0x10 [ 1192.610164][T15397] ? do_raw_spin_unlock+0x172/0x230 [ 1192.610177][T15397] ? kobject_put+0xab/0x5a0 [ 1192.610197][T15397] device_add+0x288/0x1a70 [ 1192.610215][T15397] ? __pfx_dev_set_name+0x10/0x10 [ 1192.610227][T15397] ? __pfx_device_add+0x10/0x10 [ 1192.610237][T15397] ? mgmt_send_event_skb+0x2fb/0x460 [ 1192.610255][T15397] hci_conn_add_sysfs+0x17e/0x230 [ 1192.610269][T15397] le_conn_complete_evt+0x1075/0x1d70 [ 1192.610289][T15397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1192.610300][T15397] ? hci_event_packet+0x43c/0x1190 [ 1192.610314][T15397] hci_le_conn_complete_evt+0x23c/0x370 [ 1192.610328][T15397] hci_le_meta_evt+0x2f3/0x5e0 [ 1192.610341][T15397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1192.610354][T15397] hci_event_packet+0x669/0x1190 [ 1192.610365][T15397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1192.610378][T15397] ? __pfx_hci_event_packet+0x10/0x10 [ 1192.610391][T15397] ? kcov_remote_start+0x3c9/0x6d0 [ 1192.610407][T15397] ? lockdep_hardirqs_on+0x7c/0x110 [ 1192.610429][T15397] hci_rx_work+0x2c5/0x16b0 [ 1192.610445][T15397] ? rcu_is_watching+0x12/0xc0 [ 1192.610463][T15397] process_one_work+0x9cc/0x1b70 [ 1192.610484][T15397] ? __pfx_process_one_work+0x10/0x10 [ 1192.610501][T15397] ? assign_work+0x1a0/0x250 [ 1192.610514][T15397] worker_thread+0x6c8/0xf10 [ 1192.610532][T15397] ? __pfx_worker_thread+0x10/0x10 [ 1192.610545][T15397] kthread+0x3c2/0x780 [ 1192.610558][T15397] ? __pfx_kthread+0x10/0x10 [ 1192.610571][T15397] ? __pfx_kthread+0x10/0x10 [ 1192.610582][T15397] ? __pfx_kthread+0x10/0x10 [ 1192.610592][T15397] ? __pfx_kthread+0x10/0x10 [ 1192.610602][T15397] ? rcu_is_watching+0x12/0xc0 [ 1192.610616][T15397] ? __pfx_kthread+0x10/0x10 [ 1192.610627][T15397] ret_from_fork+0x45/0x80 [ 1192.610643][T15397] ? __pfx_kthread+0x10/0x10 [ 1192.610653][T15397] ret_from_fork_asm+0x1a/0x30 [ 1192.610681][T15397] [ 1192.610716][T15397] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1192.888764][T15397] Bluetooth: hci4: failed to register connection device [ 1194.574320][T17631] 9pnet: Unknown protocol version 9p200 [ 1194.612056][T17633] netlink: 'syz.2.2984': attribute type 10 has an invalid length. [ 1194.620227][T17633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2984'. [ 1194.634960][T17631] bond0: (slave bond_slave_0): Releasing backup interface [ 1194.653076][T17631] bond0: (slave bond_slave_1): Releasing backup interface [ 1194.708418][ T30] audit: type=1400 audit(1745230542.763:1566): avc: denied { append } for pid=17630 comm="syz.1.2983" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1194.767529][T17631] team0: Port device team_slave_0 removed [ 1194.839229][T17631] team0: Port device team_slave_1 removed [ 1194.997975][T17631] team0: Port device geneve0 removed [ 1195.509613][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2985'. [ 1195.525683][T17634] team0: Mode changed to "loadbalance" [ 1195.546232][T17643] team_slave_0: entered promiscuous mode [ 1195.552645][T17643] team_slave_1: entered promiscuous mode [ 1195.559618][T17643] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1195.593347][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 1196.574469][ T30] audit: type=1400 audit(1745230544.512:1567): avc: denied { mounton } for pid=17663 comm="syz.2.2989" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1196.596271][T17664] /dev/nullb0: Can't lookup blockdev [ 1199.379479][T17691] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1199.686929][T15397] Bluetooth: hci4: command 0x0406 tx timeout [ 1201.062294][T17705] macvtap1: entered allmulticast mode [ 1201.067750][T17705] veth0_macvtap: entered allmulticast mode [ 1201.339106][T15397] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 1203.806149][T17731] netlink: 'syz.2.3003': attribute type 10 has an invalid length. [ 1203.818126][T17731] netlink: 'syz.2.3003': attribute type 30 has an invalid length. [ 1203.827517][T17731] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1203.836763][T17731] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1204.197016][ T30] audit: type=1400 audit(1745230551.640:1568): avc: denied { read } for pid=17732 comm="syz.1.3004" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1204.198204][T17733] netlink: 'syz.1.3004': attribute type 39 has an invalid length. [ 1204.229035][ T30] audit: type=1400 audit(1745230551.640:1569): avc: denied { open } for pid=17732 comm="syz.1.3004" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1204.256634][ T30] audit: type=1400 audit(1745230551.640:1570): avc: denied { ioctl } for pid=17732 comm="syz.1.3004" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1204.281824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1206.965035][ T30] audit: type=1400 audit(1745230554.231:1571): avc: denied { read } for pid=17752 comm="syz.2.3009" path="socket:[43000]" dev="sockfs" ino=43000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1207.118457][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1207.131515][T17759] Cannot find del_set index 4 as target [ 1210.652389][T17767] overlayfs: failed to clone upperpath [ 1211.431150][T17779] hsr0 speed is unknown, defaulting to 1000 [ 1211.447125][T17779] lo speed is unknown, defaulting to 1000 [ 1214.470231][T17812] hsr0 speed is unknown, defaulting to 1000 [ 1214.477201][T17812] lo speed is unknown, defaulting to 1000 [ 1214.753822][T17821] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1215.755246][ T30] audit: type=1400 audit(1745230562.453:1572): avc: denied { bind } for pid=17820 comm="syz.4.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1215.955025][T17831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17831 comm=syz.2.3028 [ 1216.182294][ T30] audit: type=1400 audit(1745230562.808:1573): avc: denied { execute } for pid=17820 comm="syz.4.3025" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=45110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1216.714955][T17846] delete_channel: no stack [ 1216.745918][T17847] autofs: Unknown parameter 'fd0x0000000000000000' [ 1217.621494][T14884] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1217.975316][T17862] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3035'. [ 1218.450199][T14884] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.462200][T14884] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1218.482697][T14884] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1218.500322][T14884] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1218.510237][T14884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.530322][T14884] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1218.656708][T14884] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1219.625316][T17846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.013308][T17846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.644243][T17893] veth0_vlan: left promiscuous mode [ 1221.650071][T17893] veth0_vlan: entered promiscuous mode [ 1221.671376][T17893] hsr0 speed is unknown, defaulting to 1000 [ 1221.678468][T17893] lo speed is unknown, defaulting to 1000 [ 1222.125733][ T6860] usb 4-1: USB disconnect, device number 42 [ 1222.273245][T17903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17903 comm=syz.3.3044 [ 1223.072756][ T6860] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1223.233357][ T6860] usb 4-1: Using ep0 maxpacket: 32 [ 1223.242788][ T6860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1223.253466][ T6860] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1223.268286][ T6860] usb 4-1: config 0 has no interface number 0 [ 1223.301631][ T6860] usb 4-1: config 0 interface 143 altsetting 77 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1223.316161][ T6860] usb 4-1: config 0 interface 143 has no altsetting 0 [ 1223.325286][ T6860] usb 4-1: New USB device found, idVendor=13b1, idProduct=0041, bcdDevice=b0.69 [ 1223.334536][ T6860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.345573][ T6860] usb 4-1: Product: syz [ 1223.350344][ T6860] usb 4-1: Manufacturer: syz [ 1223.355701][ T6860] usb 4-1: SerialNumber: syz [ 1223.373460][ T6860] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1223.380089][ T6860] r8152-cfgselector 4-1: config 0 descriptor?? [ 1223.389088][ T6860] r8152 4-1:0.143: Expected endpoints are not found [ 1223.398290][T17908] could not allocate digest TFM handle sha384-neon [ 1223.836181][ T6860] r8152-cfgselector 4-1: USB disconnect, device number 43 [ 1224.915590][T17933] netlink: 'syz.1.3049': attribute type 11 has an invalid length. [ 1225.091559][ T30] audit: type=1400 audit(1745230571.049:1574): avc: denied { mount } for pid=17924 comm="syz.1.3049" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1225.667383][T17944] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3052'. [ 1225.793804][ T30] audit: type=1400 audit(1745230571.844:1575): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1227.246515][T17965] tipc: Enabling of bearer rejected, media not registered [ 1228.624378][T17981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17981 comm=syz.1.3060 [ 1231.467672][T18009] C: renamed from lo [ 1231.480811][T18009] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1232.051878][T18022] tmpfs: Unknown parameter 'hugealways' [ 1232.075192][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3068'. [ 1232.409806][T18032] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1235.744538][T18051] overlayfs: failed to clone upperpath [ 1236.610093][T18068] overlayfs: failed to clone lowerpath [ 1238.039760][ T30] audit: type=1400 audit(1745230582.863:1576): avc: denied { ioctl } for pid=18072 comm="syz.1.3083" path="socket:[45432]" dev="sockfs" ino=45432 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1238.278405][T18072] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 1239.177199][T18083] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1243.283334][T18114] 9pnet_fd: Insufficient options for proto=fd [ 1244.109244][T18124] 9pnet_fd: Insufficient options for proto=fd [ 1245.933416][T18140] overlayfs: failed to clone upperpath [ 1246.729229][T18154] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3100'. [ 1246.739152][T18154] bridge0: left allmulticast mode [ 1248.816387][ T30] audit: type=1400 audit(1745230593.368:1577): avc: denied { bind } for pid=18167 comm="syz.4.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1249.097485][T18175] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1249.629589][T18180] veth0_vlan: left promiscuous mode [ 1249.636770][T18180] veth0_vlan: entered promiscuous mode [ 1249.667307][T18180] hsr0 speed is unknown, defaulting to 1000 [ 1249.675359][T18180] C speed is unknown, defaulting to 1000 [ 1251.782523][T18201] netlink: 'syz.1.3115': attribute type 3 has an invalid length. [ 1251.790587][T18201] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1251.958285][T18198] netlink: 448 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1251.968119][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1251.996148][T18198] Cannot find del_set index 4 as target [ 1254.971002][T18226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'. [ 1255.706312][T14884] IPVS: starting estimator thread 0... [ 1255.871656][T18230] IPVS: using max 60 ests per chain, 144000 per kthread [ 1257.087194][T18239] veth0_vlan: left promiscuous mode [ 1257.094717][T18239] veth0_vlan: entered promiscuous mode [ 1257.119647][T18240] hsr0 speed is unknown, defaulting to 1000 [ 1257.127319][T18240] C speed is unknown, defaulting to 1000 [ 1259.184263][T18248] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1261.423132][ T30] audit: type=1400 audit(1745230605.163:1578): avc: denied { mount } for pid=18262 comm="syz.4.3130" name="/" dev="hugetlbfs" ino=44805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1262.201197][T18276] siw: device registration error -23 [ 1264.094059][T18299] delete_channel: no stack [ 1265.463975][T18308] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1265.629482][T18314] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3141'. [ 1265.639493][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3141'. [ 1267.091022][T18320] veth0_vlan: left promiscuous mode [ 1267.098460][T18320] veth0_vlan: entered promiscuous mode [ 1267.130098][T18320] hsr0 speed is unknown, defaulting to 1000 [ 1267.137555][T18320] C speed is unknown, defaulting to 1000 [ 1271.600411][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3147'. [ 1274.542099][T18388] libceph: resolve '0.' (ret=-3): failed [ 1274.565110][T18388] hsr0 speed is unknown, defaulting to 1000 [ 1274.572557][T18388] C speed is unknown, defaulting to 1000 [ 1276.989218][T18417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.876326][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3160'. [ 1279.411968][T18430] rdma_rxe: rxe_newlink: failed to add lo [ 1281.947056][T18447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=18447 comm=syz.1.3165 [ 1284.615508][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3172'. [ 1285.336675][T18500] wg1: entered promiscuous mode [ 1285.341686][T18500] wg1: entered allmulticast mode [ 1286.039900][T18509] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1286.040244][T18509] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1288.035332][ T30] audit: type=1400 audit(1745230630.064:1579): avc: denied { setattr } for pid=18518 comm="syz.2.3180" name="UDPLITEv6" dev="sockfs" ino=47150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1289.581382][T18537] rdma_rxe: rxe_newlink: failed to add lo [ 1289.839476][T18537] netlink: 'syz.3.3182': attribute type 1 has an invalid length. [ 1289.848079][T18537] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1289.928359][T18537] loop9: detected capacity change from 0 to 7 [ 1289.955970][T18537] Dev loop9: unable to read RDB block 7 [ 1289.962146][T18537] loop9: unable to read partition table [ 1289.969962][T18537] loop9: partition table beyond EOD, truncated [ 1289.976921][T18537] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 1292.342895][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 1292.469619][T18545] tmpfs: Unknown parameter 'hugealways' [ 1293.093392][ T30] audit: type=1400 audit(1745230634.778:1580): avc: denied { ioctl } for pid=18544 comm="syz.3.3184" path="socket:[47196]" dev="sockfs" ino=47196 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1293.918646][T18570] /dev/nullb0: Can't lookup blockdev [ 1293.936784][ T30] audit: type=1400 audit(1745230635.564:1581): avc: denied { mounton } for pid=18566 comm="syz.2.3189" path="/720/bus" dev="tmpfs" ino=3864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1293.986395][ T30] audit: type=1400 audit(1745230635.583:1582): avc: denied { mount } for pid=18566 comm="syz.2.3189" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1294.546978][T18577] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3190'. [ 1295.039259][T18579] hsr0 speed is unknown, defaulting to 1000 [ 1295.047355][T18579] C speed is unknown, defaulting to 1000 [ 1295.454767][T18584] tmpfs: Unknown parameter 'hugealways' [ 1296.460463][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'. [ 1298.985885][T18622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1299.650553][ T30] audit: type=1400 audit(1745230640.671:1583): avc: denied { setattr } for pid=18617 comm="syz.4.3203" name="file0" dev="tmpfs" ino=3528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1302.553652][T18635] netlink: ct family unspecified [ 1302.559145][T18635] openvswitch: netlink: Actions may not be safe on all matching packets [ 1302.667715][ T30] audit: type=1400 audit(1745230643.590:1584): avc: denied { ioctl } for pid=18625 comm="syz.3.3205" path="socket:[46368]" dev="sockfs" ino=46368 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1302.991221][ T30] audit: type=1400 audit(1745230644.048:1585): avc: denied { search } for pid=18636 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.433289][ T30] audit: type=1400 audit(1745230644.095:1586): avc: denied { read } for pid=18643 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.522719][ T30] audit: type=1400 audit(1745230644.095:1587): avc: denied { open } for pid=18643 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.661216][ T30] audit: type=1400 audit(1745230644.095:1588): avc: denied { getattr } for pid=18643 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.691141][ T30] audit: type=1400 audit(1745230644.095:1589): avc: denied { getattr } for pid=18643 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1303.730919][ T30] audit: type=1400 audit(1745230644.525:1590): avc: denied { read } for pid=18646 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1303.759668][ T30] audit: type=1400 audit(1745230644.525:1591): avc: denied { open } for pid=18646 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1303.784958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1305.485106][ T30] audit: type=1400 audit(1745230646.302:1592): avc: denied { write } for pid=18636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1305.645278][ T30] audit: type=1400 audit(1745230646.312:1593): avc: denied { add_name } for pid=18636 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1305.679711][ T30] audit: type=1400 audit(1745230646.312:1594): avc: denied { create } for pid=18636 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1305.713062][ T30] audit: type=1400 audit(1745230646.312:1595): avc: denied { write } for pid=18636 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=5066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1305.758027][ T30] audit: type=1400 audit(1745230646.312:1596): avc: denied { append } for pid=18636 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" dev="tmpfs" ino=5066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1305.839204][ T30] audit: type=1400 audit(1745230646.714:1597): avc: denied { write } for pid=18675 comm="syz.2.3212" lport=50794 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1305.873196][ T30] audit: type=1400 audit(1745230646.742:1598): avc: denied { setopt } for pid=18675 comm="syz.2.3212" lport=50794 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1306.378271][ T30] audit: type=1400 audit(1745230647.210:1599): avc: denied { remove_name } for pid=18682 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=5066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.412065][ T30] audit: type=1400 audit(1745230647.210:1600): avc: denied { unlink } for pid=18682 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=5066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1307.279402][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1308.530498][T18707] veth0_vlan: left promiscuous mode [ 1308.537612][T18707] veth0_vlan: entered promiscuous mode [ 1308.564087][T18707] hsr0 speed is unknown, defaulting to 1000 [ 1308.572013][T18707] C speed is unknown, defaulting to 1000 [ 1309.875210][ T30] audit: type=1400 audit(1745230650.493:1601): avc: denied { getopt } for pid=18725 comm="syz.3.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1310.392786][T18742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1310.568919][T18747] siw: device registration error -23 [ 1312.154260][ T1323] Bluetooth: Error in BCSP hdr checksum [ 1312.780771][ T6663] Bluetooth: Error in BCSP hdr checksum [ 1312.832920][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 1312.935809][T18776] /dev/nullb0: Can't lookup blockdev [ 1313.045492][ T5939] Bluetooth: Error in BCSP hdr checksum [ 1313.575958][T16150] Bluetooth: hci5: command 0x1003 tx timeout [ 1313.580284][T15397] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1313.590611][ T9175] Bluetooth: Error in BCSP hdr checksum [ 1313.847927][ T6663] Bluetooth: Error in BCSP hdr checksum [ 1313.870972][T18782] page: refcount:3 mapcount:0 mapping:ffff888148dc0878 index:0x2 pfn:0x2764a [ 1313.880489][T18782] memcg:ffff88807e3b2000 [ 1313.884765][T18782] aops:def_blk_aops ino:fa00000 [ 1313.890094][T18782] flags: 0xfff680000000bd(locked|waiters|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 1313.901632][T18782] raw: 00fff680000000bd ffffea00009d92c8 ffffea0001337008 ffff888148dc0878 [ 1313.910254][T18782] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88807e3b2000 [ 1313.919212][T18782] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 1313.927765][T18782] page_owner tracks the page as allocated [ 1313.933554][T18782] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 18781, tgid 18781 (syz.1.3231), ts 1313712285871, free_ts 1312800137270 [ 1313.955129][T18782] post_alloc_hook+0x181/0x1b0 [ 1313.959939][T18782] get_page_from_freelist+0x135c/0x3920 [ 1313.965960][T18782] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 1313.971918][T18782] alloc_pages_mpol+0x1fb/0x550 [ 1313.977173][T18782] folio_alloc_noprof+0x20/0x2d0 [ 1313.982136][T18782] filemap_alloc_folio_noprof+0x3a1/0x470 [ 1313.988366][T18782] page_cache_ra_order+0x4c0/0xd00 [ 1313.993495][T18782] filemap_fault+0x147c/0x2740 [ 1313.998653][T18782] __do_fault+0x10a/0x490 [ 1314.003016][T18782] do_pte_missing+0x1a6/0x3fb0 [ 1314.008172][T18782] __handle_mm_fault+0x103d/0x2a40 [ 1314.013318][T18782] handle_mm_fault+0x3fe/0xad0 [ 1314.018489][T18782] do_user_addr_fault+0x60c/0x1370 [ 1314.023620][T18782] exc_page_fault+0x5c/0xc0 [ 1314.028141][T18782] asm_exc_page_fault+0x26/0x30 [ 1314.033505][T18782] page last free pid 18771 tgid 18771 stack trace: [ 1314.040435][T18782] __free_frozen_pages+0x69d/0xff0 [ 1314.045565][T18782] qlist_free_all+0x4e/0x120 [ 1314.050536][T18782] kasan_quarantine_reduce+0x195/0x1e0 [ 1314.056079][T18782] __kasan_slab_alloc+0x69/0x90 [ 1314.061402][T18782] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1314.066874][T18782] vm_area_alloc+0x1f/0x160 [ 1314.071761][T18782] __mmap_region+0xfd0/0x27c0 [ 1314.076459][T18782] mmap_region+0x1ab/0x3f0 [ 1314.080880][T18782] do_mmap+0xd8e/0x11b0 [ 1314.085477][T18782] vm_mmap_pgoff+0x281/0x450 [ 1314.090065][T18782] ksys_mmap_pgoff+0x32c/0x5c0 [ 1314.095227][T18782] __x64_sys_mmap+0x125/0x190 [ 1314.100199][T18782] do_syscall_64+0xcd/0x260 [ 1314.105124][T18782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.111199][T18782] ------------[ cut here ]------------ [ 1314.117136][T18782] kernel BUG at mm/filemap.c:3433! [ 1314.122274][T18782] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1314.128699][T18782] CPU: 1 UID: 0 PID: 18782 Comm: syz.1.3231 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 1314.140742][T18782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1314.150776][T18782] RIP: 0010:filemap_fault+0x1862/0x2740 [ 1314.156349][T18782] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 1314.175942][T18782] RSP: 0018:ffffc9001a5ef510 EFLAGS: 00010246 [ 1314.181997][T18782] RAX: 0000000000080000 RBX: ffffea00009d9280 RCX: ffffc9000b749000 [ 1314.189945][T18782] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff888031aeccc4 [ 1314.197898][T18782] RBP: ffffc9001a5ef7e0 R08: 0000000000000001 R09: 0000000000000000 [ 1314.205867][T18782] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888148dc0878 [ 1314.213827][T18782] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1314.221774][T18782] FS: 00007f255ea476c0(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 1314.230677][T18782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1314.237248][T18782] CR2: 0000200000001b50 CR3: 000000007b304000 CR4: 00000000003526f0 [ 1314.245208][T18782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1314.253164][T18782] DR3: 0000000000008000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1314.261109][T18782] Call Trace: [ 1314.264449][T18782] [ 1314.267373][T18782] ? __pfx_filemap_fault+0x10/0x10 [ 1314.272573][T18782] __do_fault+0x10a/0x490 [ 1314.276880][T18782] do_pte_missing+0x1031/0x3fb0 [ 1314.281712][T18782] ? __handle_mm_fault+0x1010/0x2a40 [ 1314.286979][T18782] __handle_mm_fault+0x103d/0x2a40 [ 1314.292076][T18782] ? __pfx___handle_mm_fault+0x10/0x10 [ 1314.297517][T18782] ? find_vma+0xbf/0x140 [ 1314.301737][T18782] ? __pfx_find_vma+0x10/0x10 [ 1314.306390][T18782] handle_mm_fault+0x3fe/0xad0 [ 1314.311135][T18782] do_user_addr_fault+0x7a6/0x1370 [ 1314.316401][T18782] ? rcu_is_watching+0x12/0xc0 [ 1314.321167][T18782] exc_page_fault+0x5c/0xc0 [ 1314.325660][T18782] asm_exc_page_fault+0x26/0x30 [ 1314.330497][T18782] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1314.336214][T18782] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 1314.355800][T18782] RSP: 0018:ffffc9001a5efa78 EFLAGS: 00050202 [ 1314.361841][T18782] RAX: 0000000000000001 RBX: 0000200000001b50 RCX: 0000000000000001 [ 1314.369795][T18782] RDX: ffffed1005e35113 RSI: 0000200000001b50 RDI: ffff88802f1a8890 [ 1314.377753][T18782] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed1005e35112 [ 1314.385700][T18782] R10: ffff88802f1a8890 R11: 0000000000000000 R12: 0000000000000000 [ 1314.393647][T18782] R13: ffff88802f1a8890 R14: dffffc0000000000 R15: 0000200000001b50 [ 1314.401625][T18782] _copy_from_user+0x98/0xd0 [ 1314.406220][T18782] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1314.411845][T18782] snd_rawmidi_write+0x26e/0xc10 [ 1314.416771][T18782] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1314.422210][T18782] ? avc_policy_seqno+0x9/0x20 [ 1314.426948][T18782] ? selinux_file_permission+0x11f/0x580 [ 1314.432563][T18782] ? __pfx_default_wake_function+0x10/0x10 [ 1314.438380][T18782] ? bpf_lsm_file_permission+0x9/0x10 [ 1314.443763][T18782] ? security_file_permission+0x71/0x210 [ 1314.449420][T18782] ? rw_verify_area+0xcf/0x680 [ 1314.454185][T18782] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1314.459630][T18782] vfs_writev+0x6c4/0xdc0 [ 1314.463944][T18782] ? __pfx_vfs_writev+0x10/0x10 [ 1314.468789][T18782] ? kmem_cache_free+0x2d4/0x4d0 [ 1314.473702][T18782] ? __fget_files+0x20e/0x3c0 [ 1314.478356][T18782] ? do_writev+0x295/0x330 [ 1314.482750][T18782] do_writev+0x295/0x330 [ 1314.486974][T18782] ? __pfx_do_writev+0x10/0x10 [ 1314.491714][T18782] ? rcu_is_watching+0x12/0xc0 [ 1314.496481][T18782] do_syscall_64+0xcd/0x260 [ 1314.501045][T18782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.506926][T18782] RIP: 0033:0x7f255db8e169 [ 1314.511321][T18782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1314.530935][T18782] RSP: 002b:00007f255ea47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1314.539348][T18782] RAX: ffffffffffffffda RBX: 00007f255ddb5fa0 RCX: 00007f255db8e169 [ 1314.547301][T18782] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 1314.555258][T18782] RBP: 00007f255dc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 1314.563226][T18782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.571171][T18782] R13: 0000000000000000 R14: 00007f255ddb5fa0 R15: 00007ffcd0c0fc18 [ 1314.579140][T18782] [ 1314.582152][T18782] Modules linked in: [ 1314.587679][T18782] ---[ end trace 0000000000000000 ]--- [ 1314.593190][T18782] RIP: 0010:filemap_fault+0x1862/0x2740 [ 1314.599170][T18782] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 1314.619232][T18782] RSP: 0018:ffffc9001a5ef510 EFLAGS: 00010246 [ 1314.625299][T18782] RAX: 0000000000080000 RBX: ffffea00009d9280 RCX: ffffc9000b749000 [ 1314.633638][T18782] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff888031aeccc4 [ 1314.641962][T18782] RBP: ffffc9001a5ef7e0 R08: 0000000000000001 R09: 0000000000000000 [ 1314.650378][T18782] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888148dc0878 [ 1314.658363][T18782] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1314.666675][T18782] FS: 00007f255ea476c0(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 1314.676029][T18782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1314.682650][T18782] CR2: 0000200000001b50 CR3: 000000007b304000 CR4: 00000000003526f0 [ 1314.690705][T18782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1314.698704][T18782] DR3: 0000000000008000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1314.707007][T18782] Kernel panic - not syncing: Fatal exception [ 1314.713298][T18782] Kernel Offset: disabled [ 1314.717601][T18782] Rebooting in 86400 seconds..