last executing test programs: 13.188242193s ago: executing program 2 (id=260): syz_io_uring_setup(0x16440, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x27, 0x1, 0x9) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 13.138810942s ago: executing program 0 (id=251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000000c0)='sys_exit\x00', r2}, 0x18) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xd, 0xfffffe0000000001, 0xfa15, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 12.930004765s ago: executing program 4 (id=253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 11.915760284s ago: executing program 3 (id=255): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}, {&(0x7f0000000200)="4d0ff6044df96744927dc21a1af29aecbac549f3", 0x14}], 0x4) 11.076328257s ago: executing program 4 (id=256): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) 10.310442788s ago: executing program 3 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x20, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f0000000500)) 10.092725775s ago: executing program 4 (id=258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 9.091831013s ago: executing program 4 (id=259): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 8.942259156s ago: executing program 2 (id=262): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000840)={0x0, {{0xa, 0x4e23, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x401, @loopback, 0x4a6b}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x2}}]}, 0x190) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 8.510319807s ago: executing program 0 (id=263): read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020}, 0x2020) socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r4 = eventfd(0x401) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r1, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = mq_open(&(0x7f0000001040)='+\x00', 0x40, 0x0, 0x0) lseek(r5, 0x9, 0x0) setitimer(0x1000000, 0x0, 0x0) 7.579101435s ago: executing program 2 (id=264): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x38}, 0x2}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) close(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 7.333043506s ago: executing program 3 (id=265): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) 7.313777573s ago: executing program 1 (id=266): openat(0xffffffffffffff9c, 0x0, 0x101242, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5884, 0x800, 0x1, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r3, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 6.605115993s ago: executing program 0 (id=267): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd01c8c1c2c57f657a625a688871958b0a40088fca4f15e71a6dac908872ebd91f0dc", @ANYRESHEX, @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.886911616s ago: executing program 3 (id=268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 5.664161867s ago: executing program 1 (id=269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4.989142202s ago: executing program 0 (id=270): socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x800000, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.706745502s ago: executing program 1 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) timer_create(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000001c0)={0x9, 0x7, 0x6, 0x8, 0x19, "8cff18beea7dfd4b55fac8996de31f8ad1bb0b"}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) 3.935515913s ago: executing program 0 (id=272): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xd0, 0x6, 0x8, 0x1, 0x4, 0x7, 0x8, 0x0, 0x0, 0x1, 0x8, 0x8, 0x7}, 0xe) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x12, 0xd8}, [@ldst={0x6, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r4, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.705456485s ago: executing program 1 (id=273): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 3.666570662s ago: executing program 2 (id=274): socket(0x2, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e26, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x7f000000}}], 0x400000000000172, 0x4001c00) 3.342958784s ago: executing program 3 (id=275): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) close(r1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000}) 2.8129226s ago: executing program 3 (id=276): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x0, 0x286, 0x0, 0x0) 2.738664537s ago: executing program 4 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x202, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 2.571865132s ago: executing program 1 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) 1.617517439s ago: executing program 1 (id=279): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b0000003000038014000200697036677265746170"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c00"], 0xc0}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000a140)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x20, 0x0, 0x350, 0x1, {{0x30, 0x4, 0x1, 0x4, 0xc0, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x8, [{@private=0xa010101}, {@remote, 0xfa6}, {@multicast2, 0x7fffffff}, {@private=0xa010100, 0x1}, {@broadcast, 0x80}]}, @noop, @lsrr={0x83, 0x1f, 0xd0, [@loopback, @loopback, @broadcast, @loopback, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x4}]}, @ssrr={0x89, 0x7, 0xc1, [@multicast1]}, @ssrr={0x89, 0x1f, 0x16, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @lsrr={0x83, 0x1b, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2]}, @rr={0x7, 0x17, 0x44, [@rand_addr=0x64010100, @remote, @multicast2, @empty, @broadcast]}, @generic={0x86, 0x5, "8c638b"}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@local, 0x1e, r3}) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x42a00, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) munlockall() syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.565193922s ago: executing program 2 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x400caed0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = mq_open(&(0x7f00000000c0)='\x00', 0x40, 0xf4, 0x0) mq_notify(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) 654.189241ms ago: executing program 2 (id=281): r0 = request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)='syz', 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000000c0)={0x2, 0x0, @d}, 0x7, r0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 15.606398ms ago: executing program 4 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsmount(0xffffffffffffffff, 0x1, 0x81) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x5127, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)="98", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 0s ago: executing program 0 (id=283): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x1407, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40844) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0x2}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 63.784888][ T30] audit: type=1400 audit(1759624080.062:62): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.808381][ T30] audit: type=1400 audit(1759624080.082:63): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.810894][ T5807] cgroup: Unknown subsys name 'net' [ 63.837234][ T30] audit: type=1400 audit(1759624080.122:64): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.934195][ T5807] cgroup: Unknown subsys name 'cpuset' [ 63.941593][ T5807] cgroup: Unknown subsys name 'rlimit' [ 64.067617][ T30] audit: type=1400 audit(1759624080.342:65): avc: denied { setattr } for pid=5807 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.091339][ T30] audit: type=1400 audit(1759624080.342:66): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.120807][ T30] audit: type=1400 audit(1759624080.342:67): avc: denied { write } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.141413][ T30] audit: type=1400 audit(1759624080.342:68): avc: denied { read } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.161738][ T30] audit: type=1400 audit(1759624080.372:69): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.186891][ T30] audit: type=1400 audit(1759624080.372:70): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.189806][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.210150][ T30] audit: type=1400 audit(1759624080.382:71): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.185134][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.156986][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.165008][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.167417][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.172665][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.187372][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.195363][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.202616][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.202726][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.213217][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.217741][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.224653][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.231085][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.238636][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.245415][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.252039][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.258750][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.266323][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.272991][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.279879][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.293119][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.300683][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.309027][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.316393][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.326937][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.334556][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.726353][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 67.797189][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 67.844294][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 67.869675][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 67.944635][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.951855][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.959053][ T5828] bridge_slave_0: entered allmulticast mode [ 67.965906][ T5828] bridge_slave_0: entered promiscuous mode [ 68.008023][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.015312][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.022490][ T5828] bridge_slave_1: entered allmulticast mode [ 68.029133][ T5828] bridge_slave_1: entered promiscuous mode [ 68.036035][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.043362][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.050438][ T5818] bridge_slave_0: entered allmulticast mode [ 68.057185][ T5818] bridge_slave_0: entered promiscuous mode [ 68.075520][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.082869][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.090099][ T5819] bridge_slave_0: entered allmulticast mode [ 68.096964][ T5819] bridge_slave_0: entered promiscuous mode [ 68.104377][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.111434][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.118610][ T5819] bridge_slave_1: entered allmulticast mode [ 68.125641][ T5819] bridge_slave_1: entered promiscuous mode [ 68.139021][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.146164][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.153440][ T5818] bridge_slave_1: entered allmulticast mode [ 68.160027][ T5818] bridge_slave_1: entered promiscuous mode [ 68.219242][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.234971][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.259091][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.268597][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 68.279518][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.290254][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.325822][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.343319][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.350425][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.357755][ T5824] bridge_slave_0: entered allmulticast mode [ 68.364590][ T5824] bridge_slave_0: entered promiscuous mode [ 68.385144][ T5819] team0: Port device team_slave_0 added [ 68.405134][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.412866][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.419973][ T5824] bridge_slave_1: entered allmulticast mode [ 68.426721][ T5824] bridge_slave_1: entered promiscuous mode [ 68.434529][ T5819] team0: Port device team_slave_1 added [ 68.455130][ T5828] team0: Port device team_slave_0 added [ 68.475916][ T5818] team0: Port device team_slave_0 added [ 68.503275][ T5828] team0: Port device team_slave_1 added [ 68.510607][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.521005][ T5818] team0: Port device team_slave_1 added [ 68.555653][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.590004][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.597045][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.623251][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.649494][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.656682][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.682604][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.694483][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.701599][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.709209][ T5825] bridge_slave_0: entered allmulticast mode [ 68.716937][ T5825] bridge_slave_0: entered promiscuous mode [ 68.724894][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.731945][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.757988][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.769286][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.776846][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.803106][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.815049][ T5824] team0: Port device team_slave_0 added [ 68.821263][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.828288][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.854592][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.872633][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.879553][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.905640][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.916729][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.923936][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.931012][ T5825] bridge_slave_1: entered allmulticast mode [ 68.938163][ T5825] bridge_slave_1: entered promiscuous mode [ 68.949801][ T5824] team0: Port device team_slave_1 added [ 68.996695][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.008055][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.027399][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.034384][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.060424][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.089324][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.096494][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.123078][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.168172][ T5825] team0: Port device team_slave_0 added [ 69.185776][ T5819] hsr_slave_0: entered promiscuous mode [ 69.191917][ T5819] hsr_slave_1: entered promiscuous mode [ 69.212632][ T5825] team0: Port device team_slave_1 added [ 69.221843][ T5818] hsr_slave_0: entered promiscuous mode [ 69.228013][ T5818] hsr_slave_1: entered promiscuous mode [ 69.234221][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 69.239977][ T5818] Cannot create hsr debugfs directory [ 69.257274][ T5824] hsr_slave_0: entered promiscuous mode [ 69.263445][ T5824] hsr_slave_1: entered promiscuous mode [ 69.269387][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 69.275140][ T5824] Cannot create hsr debugfs directory [ 69.283520][ T5828] hsr_slave_0: entered promiscuous mode [ 69.289493][ T5828] hsr_slave_1: entered promiscuous mode [ 69.295473][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 69.301194][ T5828] Cannot create hsr debugfs directory [ 69.332477][ T5823] Bluetooth: hci2: command tx timeout [ 69.332479][ T5145] Bluetooth: hci1: command tx timeout [ 69.347144][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.354581][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.380952][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.393309][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.400235][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.426387][ T5145] Bluetooth: hci0: command tx timeout [ 69.426494][ T5145] Bluetooth: hci4: command tx timeout [ 69.431866][ T5823] Bluetooth: hci3: command tx timeout [ 69.432432][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.596525][ T5825] hsr_slave_0: entered promiscuous mode [ 69.602568][ T5825] hsr_slave_1: entered promiscuous mode [ 69.608397][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 69.614569][ T5825] Cannot create hsr debugfs directory [ 69.835012][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.846175][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.855187][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.870086][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.914294][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.928595][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.937513][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.946587][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.002724][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.034730][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.049017][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.066860][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.119447][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.131511][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.149358][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.166363][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.200220][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.259261][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.269027][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.280719][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.289836][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.306533][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.320952][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.340632][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.358794][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.365940][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.399450][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.406529][ T4787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.417939][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.425012][ T4787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.433974][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.441013][ T4787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.463535][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.531569][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.544238][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.560807][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.567925][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.585454][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.592563][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.647790][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 70.647804][ T30] audit: type=1400 audit(1759624086.922:86): avc: denied { sys_module } for pid=5825 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.655557][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.750250][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.757698][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.775686][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.826419][ T3757] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.833564][ T3757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.869445][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.916189][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.923360][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.938077][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.946179][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.969009][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.977762][ T3757] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.985135][ T3757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.999025][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.017074][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.100104][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.170628][ T5818] veth0_vlan: entered promiscuous mode [ 71.204023][ T5818] veth1_vlan: entered promiscuous mode [ 71.276706][ T5819] veth0_vlan: entered promiscuous mode [ 71.291422][ T5818] veth0_macvtap: entered promiscuous mode [ 71.316853][ T5819] veth1_vlan: entered promiscuous mode [ 71.336132][ T5818] veth1_macvtap: entered promiscuous mode [ 71.414095][ T5145] Bluetooth: hci2: command tx timeout [ 71.414100][ T5831] Bluetooth: hci1: command tx timeout [ 71.438731][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.453795][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.463717][ T5819] veth0_macvtap: entered promiscuous mode [ 71.476703][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.489750][ T5819] veth1_macvtap: entered promiscuous mode [ 71.491981][ T5831] Bluetooth: hci3: command tx timeout [ 71.495816][ T5145] Bluetooth: hci0: command tx timeout [ 71.501303][ T5823] Bluetooth: hci4: command tx timeout [ 71.516559][ T3011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.526437][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.543934][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.552110][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.562629][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.577892][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.607488][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.631704][ T3011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.641441][ T3011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.657892][ T3011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.667019][ T3011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.681278][ T5824] veth0_vlan: entered promiscuous mode [ 71.727243][ T5825] veth0_vlan: entered promiscuous mode [ 71.748182][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.756333][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.770054][ T5824] veth1_vlan: entered promiscuous mode [ 71.790070][ T5825] veth1_vlan: entered promiscuous mode [ 71.846746][ T5828] veth0_vlan: entered promiscuous mode [ 71.864605][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.876366][ T5825] veth0_macvtap: entered promiscuous mode [ 71.882033][ T4787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.889878][ T4787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.890681][ T5825] veth1_macvtap: entered promiscuous mode [ 71.904466][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.905981][ T5824] veth0_macvtap: entered promiscuous mode [ 71.931788][ T5824] veth1_macvtap: entered promiscuous mode [ 71.939957][ T5828] veth1_vlan: entered promiscuous mode [ 71.952333][ T30] audit: type=1400 audit(1759624088.222:87): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.8vMR2R/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.989203][ T30] audit: type=1400 audit(1759624088.222:88): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.007590][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.011563][ T30] audit: type=1400 audit(1759624088.232:89): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.8vMR2R/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.030259][ T5828] veth0_macvtap: entered promiscuous mode [ 72.053232][ T30] audit: type=1400 audit(1759624088.232:90): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.076092][ T30] audit: type=1400 audit(1759624088.232:91): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.8vMR2R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.087504][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.104438][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.119426][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.128329][ T30] audit: type=1400 audit(1759624088.232:92): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.8vMR2R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.134733][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.163388][ T30] audit: type=1400 audit(1759624088.232:93): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.165795][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.183796][ T30] audit: type=1400 audit(1759624088.262:94): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.229045][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.240208][ T4787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.249729][ T30] audit: type=1400 audit(1759624088.262:95): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=6825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.265931][ T5828] veth1_macvtap: entered promiscuous mode [ 72.283899][ T4787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.312437][ T4787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.334576][ T4787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.386767][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.405498][ T4787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.527641][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.541774][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.552433][ T3757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.580345][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.588172][ T3757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.591096][ T4787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.626361][ T4787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.635718][ T4787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.647557][ T4787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.739790][ T4787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.755383][ T3011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.085079][ T3011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.095321][ T3011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.120899][ T3011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.140480][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.166505][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.433337][ T5951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6'. [ 73.447836][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.548893][ T5823] Bluetooth: hci2: command tx timeout [ 73.554508][ T5823] Bluetooth: hci1: command tx timeout [ 73.572435][ T5823] Bluetooth: hci4: command tx timeout [ 73.577945][ T5823] Bluetooth: hci3: command tx timeout [ 73.583527][ T5823] Bluetooth: hci0: command tx timeout [ 73.857400][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.457882][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.470721][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.492142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.512068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.522464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 74.542816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.644940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.646119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.653582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.747610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.172370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.362075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 75.572074][ T5831] Bluetooth: hci1: command tx timeout [ 75.572952][ T5823] Bluetooth: hci2: command tx timeout [ 75.652198][ T5823] Bluetooth: hci0: command tx timeout [ 75.652257][ T5831] Bluetooth: hci3: command tx timeout [ 75.666039][ T5145] Bluetooth: hci4: command tx timeout [ 75.744031][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.751903][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.822835][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 75.822850][ T30] audit: type=1400 audit(1759624092.092:130): avc: denied { create } for pid=5979 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.914444][ T30] audit: type=1400 audit(1759624092.092:131): avc: denied { ioctl } for pid=5979 comm="syz.3.11" path="socket:[9301]" dev="sockfs" ino=9301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.970309][ T30] audit: type=1400 audit(1759624092.092:132): avc: denied { bind } for pid=5979 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.042104][ T30] audit: type=1400 audit(1759624092.132:133): avc: denied { connect } for pid=5979 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.267715][ T30] audit: type=1400 audit(1759624092.132:134): avc: denied { setopt } for pid=5979 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.310005][ T30] audit: type=1400 audit(1759624092.132:135): avc: denied { write } for pid=5979 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.470495][ T30] audit: type=1400 audit(1759624092.232:136): avc: denied { allowed } for pid=5981 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.554995][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.602086][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.646410][ T30] audit: type=1400 audit(1759624092.232:137): avc: denied { create } for pid=5981 comm="syz.4.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.916550][ T30] audit: type=1400 audit(1759624092.232:138): avc: denied { map } for pid=5981 comm="syz.4.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.984189][ T30] audit: type=1400 audit(1759624092.232:139): avc: denied { read write } for pid=5981 comm="syz.4.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.836412][ T4787] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.880511][ T4787] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.900287][ T4787] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.947193][ T4787] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.921894][ T6014] tipc: Started in network mode [ 79.961887][ T6014] tipc: Node identity ee847c69f06e, cluster identity 4711 [ 79.994169][ T6014] tipc: Enabled bearer , priority 0 [ 80.128692][ T6019] syzkaller0: entered promiscuous mode [ 80.144381][ T6019] syzkaller0: entered allmulticast mode [ 80.625393][ T6014] tipc: Resetting bearer [ 80.755433][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 80.782480][ T6012] tipc: Resetting bearer [ 80.934703][ T24] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 80.943047][ T24] usb 5-1: config 0 has no interface number 0 [ 80.949123][ T24] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 80.967088][ T6012] tipc: Disabling bearer [ 81.061824][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 81.061839][ T30] audit: type=1804 audit(1759624097.312:157): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.23" name="file0" dev="ramfs" ino=8498 res=1 errno=0 [ 81.062404][ T55] tipc: Node number set to 518683753 [ 81.262656][ T868] cfg80211: failed to load regulatory.db [ 81.308719][ T24] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 81.651226][ T24] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 81.664806][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.707938][ T24] usb 5-1: Product: syz [ 81.832005][ T24] usb 5-1: Manufacturer: syz [ 81.931792][ T24] usb 5-1: SerialNumber: syz [ 81.953909][ T24] usb 5-1: config 0 descriptor?? [ 82.197233][ T30] audit: type=1400 audit(1759624098.352:158): avc: denied { map_read map_write } for pid=6033 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.521182][ T24] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 82.534658][ T24] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 82.588490][ T30] audit: type=1400 audit(1759624098.812:159): avc: denied { read } for pid=6037 comm="syz.0.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.616758][ T6021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.791935][ T30] audit: type=1400 audit(1759624098.812:160): avc: denied { open } for pid=6037 comm="syz.0.25" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.608985][ T6047] netlink: 165 bytes leftover after parsing attributes in process `syz.1.27'. [ 83.620233][ T30] audit: type=1400 audit(1759624099.872:161): avc: denied { create } for pid=6039 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.918259][ T24] usb 5-1: USB disconnect, device number 2 [ 83.930638][ T30] audit: type=1400 audit(1759624099.882:162): avc: denied { write } for pid=6039 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.969848][ T30] audit: type=1400 audit(1759624099.882:163): avc: denied { nlmsg_write } for pid=6039 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.627849][ T30] audit: type=1400 audit(1759624100.442:164): avc: denied { sqpoll } for pid=6046 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.672045][ T30] audit: type=1400 audit(1759624100.942:165): avc: denied { create } for pid=6058 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.715553][ T30] audit: type=1400 audit(1759624100.982:166): avc: denied { ioctl } for pid=6060 comm="syz.2.32" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.307540][ T6072] fuse: Bad value for 'fd' [ 86.132004][ T6074] netlink: 'syz.4.34': attribute type 4 has an invalid length. [ 86.139563][ T6074] netlink: 152 bytes leftover after parsing attributes in process `syz.4.34'. [ 86.151580][ T6074] : renamed from bond0 (while UP) [ 87.528697][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 87.998051][ T5892] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 88.540895][ T5892] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 88.572633][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.601814][ T5892] usb 1-1: Product: syz [ 88.618937][ T5892] usb 1-1: Manufacturer: syz [ 88.625630][ T5892] usb 1-1: SerialNumber: syz [ 88.637377][ T5892] usb 1-1: config 0 descriptor?? [ 88.947391][ T5892] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 89.591922][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 89.682243][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 89.682259][ T30] audit: type=1400 audit(1759624105.952:168): avc: denied { firmware_load } for pid=6097 comm="syz.1.41" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 89.834712][ T6104] syz.1.41 (6104) used greatest stack depth: 19720 bytes left [ 90.255633][ T6110] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.445355][ T30] audit: type=1400 audit(1759624107.712:169): avc: denied { create } for pid=6119 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 91.592614][ T30] audit: type=1400 audit(1759624107.772:170): avc: denied { ioctl } for pid=6119 comm="syz.1.45" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9658 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.631558][ T5892] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 91.649086][ T5892] usb 1-1: USB disconnect, device number 2 [ 91.773134][ T30] audit: type=1400 audit(1759624108.052:171): avc: denied { getopt } for pid=6122 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.828289][ T6123] netlink: 'syz.4.46': attribute type 39 has an invalid length. [ 93.513496][ T30] audit: type=1400 audit(1759624109.792:172): avc: denied { read write } for pid=6136 comm="syz.4.51" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 94.497776][ T30] audit: type=1400 audit(1759624109.792:173): avc: denied { open } for pid=6136 comm="syz.4.51" path="/7/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 94.870914][ T6137] orangefs_mount: mount request failed with -4 [ 94.908799][ T30] audit: type=1400 audit(1759624111.182:174): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.072736][ T6151] tipc: Started in network mode [ 95.081915][ T6151] tipc: Node identity 080211000001, cluster identity 4711 [ 95.092893][ T6151] tipc: Enabled bearer , priority 0 [ 95.130768][ T6151] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 95.138704][ T6151] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 95.188977][ T6151] tipc: Resetting bearer [ 95.221822][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.384502][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.396013][ T5822] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.422160][ T5822] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 95.433120][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.484341][ T5822] usb 3-1: config 0 descriptor?? [ 95.871517][ T30] audit: type=1400 audit(1759624112.142:175): avc: denied { read } for pid=6158 comm="syz.0.57" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.092895][ T30] audit: type=1400 audit(1759624112.142:176): avc: denied { open } for pid=6158 comm="syz.0.57" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.116690][ T30] audit: type=1400 audit(1759624112.142:177): avc: denied { bind } for pid=6158 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.262335][ T868] tipc: Node number set to 134418688 [ 96.760630][ T30] audit: type=1400 audit(1759624113.032:178): avc: denied { create } for pid=6169 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.964109][ T30] audit: type=1400 audit(1759624113.062:179): avc: denied { write } for pid=6169 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 97.122368][ T6178] trusted_key: encrypted_key: insufficient parameters specified [ 97.171577][ T30] audit: type=1400 audit(1759624113.372:180): avc: denied { create } for pid=6166 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.930413][ T6180] tmpfs: Bad value for 'mpol' [ 98.107253][ T30] audit: type=1400 audit(1759624114.202:181): avc: denied { mounton } for pid=6169 comm="syz.0.59" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 98.107741][ T55] usb 3-1: USB disconnect, device number 2 [ 98.920891][ T30] audit: type=1400 audit(1759624115.192:182): avc: denied { create } for pid=6185 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.082701][ T30] audit: type=1400 audit(1759624115.192:183): avc: denied { watch } for pid=6185 comm="syz.3.62" path="pipe:[9846]" dev="pipefs" ino=9846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 100.338772][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 100.338786][ T30] audit: type=1400 audit(1759624116.612:185): avc: denied { read write } for pid=6202 comm="syz.2.66" name="mouse0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 101.019302][ T30] audit: type=1400 audit(1759624116.612:186): avc: denied { open } for pid=6202 comm="syz.2.66" path="/dev/input/mouse0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 101.116349][ T30] audit: type=1400 audit(1759624116.612:187): avc: denied { create } for pid=6202 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.135697][ T30] audit: type=1400 audit(1759624116.782:188): avc: denied { create } for pid=6202 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.155817][ T30] audit: type=1400 audit(1759624116.792:189): avc: denied { ioctl } for pid=6181 comm="syz.1.60" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64ae scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.488963][ T6213] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.524468][ T6213] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.532825][ T30] audit: type=1400 audit(1759624117.722:190): avc: denied { read } for pid=6210 comm="syz.0.67" path="socket:[9882]" dev="sockfs" ino=9882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.811433][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.848161][ T6214] batadv_slave_0: entered promiscuous mode [ 101.928090][ T30] audit: type=1400 audit(1759624118.202:191): avc: denied { setopt } for pid=6211 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.090934][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 102.114986][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 102.157999][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 102.233480][ T30] audit: type=1400 audit(1759624118.512:192): avc: denied { listen } for pid=6226 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.257207][ T30] audit: type=1400 audit(1759624118.532:193): avc: denied { connect } for pid=6226 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.285740][ T6228] 9pnet_fd: Insufficient options for proto=fd [ 102.378890][ T30] audit: type=1400 audit(1759624118.552:194): avc: denied { create } for pid=6226 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.435873][ T6245] ntfs3(nullb0): Primary boot signature is not NTFS. [ 103.443897][ T6245] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 103.526494][ T6242] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6242 comm=syz.0.75 [ 103.538899][ T6242] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6242 comm=syz.0.75 [ 104.648213][ T6261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.109490][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 107.109508][ T30] audit: type=1400 audit(1759624123.382:204): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 107.381843][ T30] audit: type=1400 audit(1759624123.652:205): avc: denied { read write } for pid=6317 comm="syz.4.85" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.572220][ T30] audit: type=1400 audit(1759624123.652:206): avc: denied { open } for pid=6317 comm="syz.4.85" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.595379][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.673860][ T30] audit: type=1400 audit(1759624123.922:207): avc: denied { write } for pid=6322 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.104293][ T30] audit: type=1400 audit(1759624123.982:208): avc: denied { setopt } for pid=6320 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.123403][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.148281][ T30] audit: type=1400 audit(1759624123.982:209): avc: denied { write } for pid=6320 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.167688][ T30] audit: type=1400 audit(1759624123.982:210): avc: denied { read } for pid=6320 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.783748][ T30] audit: type=1400 audit(1759624126.052:211): avc: denied { create } for pid=6338 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.837748][ T6342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.858154][ T6337] tipc: Started in network mode [ 109.863201][ T6337] tipc: Node identity a2bb4140b694, cluster identity 4711 [ 109.875596][ T6337] tipc: Enabled bearer , priority 0 [ 110.359180][ T30] audit: type=1400 audit(1759624126.082:212): avc: denied { mount } for pid=6340 comm="syz.2.93" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.363328][ T6349] syzkaller0: entered promiscuous mode [ 110.420165][ T30] audit: type=1400 audit(1759624126.132:213): avc: denied { ioctl } for pid=6338 comm="syz.4.91" path="socket:[10302]" dev="sockfs" ino=10302 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.899017][ T55] tipc: Node number set to 338641216 [ 110.990962][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.130170][ T6349] syzkaller0: entered allmulticast mode [ 111.461017][ T6354] tipc: Enabling of bearer rejected, failed to enable media [ 112.257858][ T6357] tipc: Resetting bearer [ 112.442102][ T6336] tipc: Resetting bearer [ 112.502239][ T6336] tipc: Disabling bearer [ 112.512151][ T6368] netlink: 296 bytes leftover after parsing attributes in process `syz.3.98'. [ 112.522242][ T6368] Zero length message leads to an empty skb [ 112.602764][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.97'. [ 113.091370][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 113.091384][ T30] audit: type=1400 audit(1759624129.362:218): avc: denied { setopt } for pid=6371 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.376203][ T30] audit: type=1400 audit(1759624129.642:219): avc: denied { append } for pid=6373 comm="syz.1.101" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.931449][ T30] audit: type=1400 audit(1759624130.202:220): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.327664][ T6403] tipc: Started in network mode [ 115.385982][ T6403] tipc: Node identity 12745d7c95f, cluster identity 4711 [ 115.394421][ T6403] tipc: Enabled bearer , priority 0 [ 115.415885][ T6406] netlink: 165 bytes leftover after parsing attributes in process `syz.3.108'. [ 115.437807][ T6405] syzkaller0: entered promiscuous mode [ 115.785502][ T6405] syzkaller0: entered allmulticast mode [ 115.981023][ T6403] tipc: Resetting bearer [ 116.271204][ T6402] tipc: Resetting bearer [ 116.402057][ T6402] tipc: Disabling bearer [ 116.441496][ T30] audit: type=1400 audit(1759624133.701:221): avc: denied { relabelfrom } for pid=6411 comm="syz.3.109" name="NETLINK" dev="sockfs" ino=8938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 116.501473][ T30] audit: type=1400 audit(1759624133.701:222): avc: denied { relabelto } for pid=6411 comm="syz.3.109" name="NETLINK" dev="sockfs" ino=8938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 118.445870][ T30] audit: type=1400 audit(1759624135.711:223): avc: denied { read write } for pid=6441 comm="syz.4.116" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.456524][ T6444] UHID_CREATE from different security context by process 90 (syz.4.116), this is not allowed. [ 118.501396][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.531206][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.559704][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.786219][ T30] audit: type=1400 audit(1759624135.731:224): avc: denied { open } for pid=6441 comm="syz.4.116" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.801839][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.949946][ T30] audit: type=1400 audit(1759624136.221:225): avc: denied { name_connect } for pid=6450 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 118.991863][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.277717][ T30] audit: type=1400 audit(1759624136.441:226): avc: denied { shutdown } for pid=6450 comm="syz.1.118" lport=56939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.323633][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.342216][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.349584][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.381852][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.389261][ T5947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.461969][ T30] audit: type=1400 audit(1759624136.721:227): avc: denied { read } for pid=6450 comm="syz.1.118" lport=56939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.497321][ T5947] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.43 Device [syz1] on syz1 [ 119.646947][ T30] audit: type=1400 audit(1759624136.921:228): avc: denied { write } for pid=6455 comm="syz.1.119" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.243987][ T6454] fido_id[6454]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.309243][ T30] audit: type=1400 audit(1759624136.921:229): avc: denied { open } for pid=6455 comm="syz.1.119" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.379769][ T30] audit: type=1400 audit(1759624136.951:230): avc: denied { ioctl } for pid=6455 comm="syz.1.119" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.051875][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.454950][ T5906] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 123.508834][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.602978][ T5906] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.613466][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.621636][ T5906] usb 2-1: Product: syz [ 123.636869][ T5906] usb 2-1: Manufacturer: syz [ 123.645697][ T5906] usb 2-1: SerialNumber: syz [ 123.672767][ T5906] usb 2-1: config 0 descriptor?? [ 123.918340][ T30] audit: type=1400 audit(1759624141.151:231): avc: denied { name_bind } for pid=6483 comm="syz.3.127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 124.331130][ T30] audit: type=1400 audit(1759624141.601:232): avc: denied { append } for pid=6485 comm="syz.4.129" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.342319][ T5906] usb 2-1: selecting invalid altsetting 0 [ 124.697666][ T30] audit: type=1400 audit(1759624141.971:233): avc: denied { create } for pid=6503 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.176418][ T30] audit: type=1400 audit(1759624142.051:234): avc: denied { read write } for pid=6500 comm="syz.1.132" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.200761][ T30] audit: type=1400 audit(1759624142.051:235): avc: denied { open } for pid=6500 comm="syz.1.132" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.208919][ T5906] usb 2-1: USB disconnect, device number 2 [ 125.930705][ T6498] orangefs_mount: mount request failed with -4 [ 126.218218][ T6521] overlayfs: failed to clone upperpath [ 126.263401][ T30] audit: type=1400 audit(1759624143.531:236): avc: denied { watch } for pid=6515 comm="syz.3.136" path="/36/bus/file1" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.289889][ T30] audit: type=1400 audit(1759624143.531:237): avc: denied { watch_sb watch_reads } for pid=6515 comm="syz.3.136" path="/36/bus/file1" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.882653][ T6525] warning: `syz.2.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.362043][ T30] audit: type=1400 audit(1759624143.531:238): avc: denied { execute } for pid=6515 comm="syz.3.136" path="/36/bus/file1" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.391226][ T30] audit: type=1400 audit(1759624144.161:239): avc: denied { ioctl } for pid=6522 comm="syz.2.137" path="socket:[10566]" dev="sockfs" ino=10566 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.567027][ T30] audit: type=1400 audit(1759624144.771:240): avc: denied { create } for pid=6526 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.959091][ T6541] netlink: 52 bytes leftover after parsing attributes in process `syz.4.142'. [ 128.968560][ T6541] unsupported nlmsg_type 40 [ 129.889211][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 129.889221][ T30] audit: type=1400 audit(1759624147.161:245): avc: denied { read } for pid=6544 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.778474][ T6566] tipc: Enabling of bearer rejected, already enabled [ 131.304672][ T30] audit: type=1400 audit(1759624148.581:246): avc: denied { create } for pid=6568 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.590972][ T30] audit: type=1400 audit(1759624148.581:247): avc: denied { ioctl } for pid=6568 comm="syz.4.149" path="socket:[10762]" dev="sockfs" ino=10762 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.622576][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.629290][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904684][ T30] audit: type=1400 audit(1759624150.171:248): avc: denied { mount } for pid=6576 comm="syz.4.150" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 133.170576][ T30] audit: type=1400 audit(1759624150.441:249): avc: denied { mounton } for pid=6576 comm="syz.4.150" path="/30/bus" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.575173][ T30] audit: type=1400 audit(1759624150.851:250): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 134.371478][ T30] audit: type=1400 audit(1759624151.031:251): avc: denied { write } for pid=6610 comm="syz.0.152" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.468053][ T30] audit: type=1400 audit(1759624151.731:252): avc: denied { ioctl } for pid=6618 comm="syz.4.154" path="socket:[9154]" dev="sockfs" ino=9154 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.703108][ T6627] tipc: Enabling of bearer rejected, failed to enable media [ 135.518854][ T30] audit: type=1400 audit(1759624152.791:253): avc: denied { sys_module } for pid=6626 comm="syz.3.157" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.037716][ T6645] team0 (unregistering): Port device team_slave_0 removed [ 138.047069][ T6645] team0 (unregistering): Port device team_slave_1 removed [ 138.130974][ T6656] tipc: Enabled bearer , priority 0 [ 138.173231][ T6656] syzkaller0: entered promiscuous mode [ 138.241336][ T6656] syzkaller0: entered allmulticast mode [ 138.944291][ T6665] tipc: Resetting bearer [ 139.043243][ T30] audit: type=1400 audit(1759624156.311:254): avc: denied { setopt } for pid=6666 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.184004][ T6655] tipc: Resetting bearer [ 139.404779][ T6655] tipc: Disabling bearer [ 140.735672][ T6685] bridge0: entered promiscuous mode [ 140.741723][ T6685] macsec1: entered promiscuous mode [ 140.752090][ T6685] bridge0: port 3(macsec1) entered blocking state [ 140.758930][ T6685] bridge0: port 3(macsec1) entered disabled state [ 140.766521][ T6685] macsec1: entered allmulticast mode [ 140.771887][ T6685] bridge0: entered allmulticast mode [ 141.090565][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 141.104667][ T6685] macsec1: left allmulticast mode [ 141.107622][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 141.109704][ T6685] bridge0: left allmulticast mode [ 141.138404][ T6685] bridge0: left promiscuous mode [ 141.683814][ T6687] mmap: syz.3.169 (6687) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.155304][ T30] audit: type=1400 audit(1759624159.041:255): avc: denied { map } for pid=6693 comm="syz.2.173" path="socket:[10890]" dev="sockfs" ino=10890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.835134][ T30] audit: type=1400 audit(1759624159.041:256): avc: denied { read accept } for pid=6693 comm="syz.2.173" path="socket:[10890]" dev="sockfs" ino=10890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.861601][ T30] audit: type=1400 audit(1759624159.771:257): avc: denied { connect } for pid=6698 comm="syz.0.175" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.471801][ T30] audit: type=1400 audit(1759624159.781:258): avc: denied { write } for pid=6698 comm="syz.0.175" path="socket:[10893]" dev="sockfs" ino=10893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.525902][ T30] audit: type=1400 audit(1759624160.461:259): avc: denied { setopt } for pid=6704 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.988174][ T30] audit: type=1400 audit(1759624161.901:260): avc: denied { write } for pid=6722 comm="syz.4.179" name="ip6_flowlabel" dev="proc" ino=4026533407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 145.485368][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 145.579790][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 145.595125][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 145.615745][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 148.790167][ T30] audit: type=1400 audit(1759624165.811:261): avc: denied { ioctl } for pid=6757 comm="syz.4.189" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 149.130059][ T30] audit: type=1400 audit(1759624166.371:262): avc: denied { mount } for pid=6760 comm="syz.1.190" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 150.515736][ T6782] tipc: Enabling of bearer rejected, failed to enable media [ 151.848046][ T6794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.199'. [ 152.052929][ T30] audit: type=1400 audit(1759624169.101:263): avc: denied { create } for pid=6792 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 152.115318][ T30] audit: type=1400 audit(1759624169.381:264): avc: denied { write } for pid=6797 comm="syz.4.201" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 152.166080][ T5822] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 153.499342][ T5822] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 153.511000][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.528515][ T5822] usb 1-1: Product: syz [ 153.532796][ T5822] usb 1-1: Manufacturer: syz [ 153.537762][ T5822] usb 1-1: SerialNumber: syz [ 153.553615][ T5822] usb 1-1: config 0 descriptor?? [ 153.838646][ T30] audit: type=1400 audit(1759624171.111:265): avc: denied { ioctl } for pid=6815 comm="syz.4.206" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 153.851051][ T5822] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 155.283028][ T6833] capability: warning: `syz.2.209' uses 32-bit capabilities (legacy support in use) [ 155.813995][ T5822] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 155.991774][ T30] audit: type=1400 audit(1759624173.261:266): avc: denied { recv } for pid=5194 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.33 dest=59330 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 156.127594][ T5822] usb 1-1: USB disconnect, device number 3 [ 157.344061][ T30] audit: type=1400 audit(1759624174.251:267): avc: denied { read write } for pid=6840 comm="syz.0.212" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 157.438302][ T30] audit: type=1400 audit(1759624174.261:268): avc: denied { open } for pid=6840 comm="syz.0.212" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 157.478157][ T30] audit: type=1400 audit(1759624174.261:269): avc: denied { getopt } for pid=6840 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.777245][ T30] audit: type=1400 audit(1759624176.051:270): avc: denied { open } for pid=6864 comm="syz.0.217" path="/dev/ptyq5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.875297][ T30] audit: type=1400 audit(1759624176.051:271): avc: denied { ioctl } for pid=6864 comm="syz.0.217" path="/dev/ptyq5" dev="devtmpfs" ino=123 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 159.238133][ T30] audit: type=1400 audit(1759624176.511:272): avc: denied { getopt } for pid=6864 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.481708][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.494231][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.504422][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.514501][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.524577][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.534667][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.545131][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.555266][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.565529][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.575600][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 159.849614][ T6883] vlan2: entered allmulticast mode [ 159.858556][ T6883] hsr_slave_1: entered allmulticast mode [ 159.888169][ T6885] tipc: Enabled bearer , priority 0 [ 160.030418][ T6885] syzkaller0: entered promiscuous mode [ 160.047308][ T6885] syzkaller0: entered allmulticast mode [ 160.432545][ T6889] tipc: Resetting bearer [ 160.491235][ T6884] tipc: Resetting bearer [ 160.629027][ T6884] tipc: Disabling bearer [ 160.876977][ T30] audit: type=1400 audit(1759624178.141:273): avc: denied { write } for pid=6892 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.900066][ T6897] tipc: Enabled bearer , priority 0 [ 160.925502][ T6899] block nbd1: NBD_DISCONNECT [ 160.935454][ T6897] syzkaller0: entered promiscuous mode [ 160.943832][ T6897] syzkaller0: entered allmulticast mode [ 161.005420][ T6897] tipc: Resetting bearer [ 161.196114][ T30] audit: type=1326 audit(1759624178.471:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef24b8eec9 code=0x7ffc0000 [ 161.222852][ T30] audit: type=1326 audit(1759624178.471:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fef24b8eec9 code=0x7ffc0000 [ 161.259774][ T6896] tipc: Resetting bearer [ 161.262555][ T30] audit: type=1326 audit(1759624178.471:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef24b8eec9 code=0x7ffc0000 [ 161.314457][ T6896] tipc: Disabling bearer [ 161.320598][ T30] audit: type=1326 audit(1759624178.471:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef24b8eec9 code=0x7ffc0000 [ 161.343850][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.700429][ T30] audit: type=1326 audit(1759624178.471:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef24b8eec9 code=0x7ffc0000 [ 161.723600][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.792356][ T30] audit: type=1326 audit(1759624178.471:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef24b8eec9 code=0x7ffc0000 [ 162.396838][ T30] audit: type=1326 audit(1759624178.471:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef24b8eec9 code=0x7ffc0000 [ 163.958130][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 163.958144][ T30] audit: type=1400 audit(1759624181.231:292): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.009191][ T6925] tipc: Enabling of bearer rejected, failed to enable media [ 164.081852][ T30] audit: type=1400 audit(1759624181.271:293): avc: denied { search } for pid=5489 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.324036][ T30] audit: type=1400 audit(1759624181.271:294): avc: denied { search } for pid=5489 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.404028][ T30] audit: type=1400 audit(1759624181.271:295): avc: denied { read } for pid=5489 comm="dhcpcd" name="n100" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.425647][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.432750][ T30] audit: type=1400 audit(1759624181.271:296): avc: denied { open } for pid=5489 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.456051][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.468612][ T30] audit: type=1400 audit(1759624181.271:297): avc: denied { getattr } for pid=5489 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.491842][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.012492][ T30] audit: type=1400 audit(1759624182.271:298): avc: denied { read write } for pid=6941 comm="syz.0.234" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.121472][ T30] audit: type=1400 audit(1759624182.271:299): avc: denied { open } for pid=6941 comm="syz.0.234" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.251899][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 165.260268][ T30] audit: type=1400 audit(1759624182.271:300): avc: denied { ioctl } for pid=6941 comm="syz.0.234" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.321922][ T30] audit: type=1400 audit(1759624182.461:301): avc: denied { read } for pid=6943 comm="syz.2.235" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.346909][ T6949] overlayfs: failed to clone upperpath [ 165.522580][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 165.772219][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 165.802655][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 166.040926][ T5906] usb 1-1: Product: syz [ 166.045913][ T5906] usb 1-1: SerialNumber: syz [ 166.139922][ T5906] usb 1-1: config 0 descriptor?? [ 166.148598][ T5906] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 166.910086][ T5906] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 167.047700][ T5906] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 167.054675][ T5906] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 167.655750][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.672226][ T6942] batadv_slave_0: entered promiscuous mode [ 167.720637][ T6964] __nla_validate_parse: 28 callbacks suppressed [ 167.720648][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.234'. [ 167.834866][ T5822] usb 1-1: USB disconnect, device number 4 [ 169.275500][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 169.275515][ T30] audit: type=1400 audit(1759624186.551:305): avc: denied { create } for pid=6988 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.350816][ T30] audit: type=1400 audit(1759624186.601:306): avc: denied { module_request } for pid=6982 comm="syz.2.244" kmod="net-pf-10-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.676143][ T30] audit: type=1400 audit(1759624186.711:307): avc: denied { create } for pid=6988 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.871182][ T30] audit: type=1400 audit(1759624186.711:308): avc: denied { allowed } for pid=6988 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.890328][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.982677][ T7000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.038855][ T30] audit: type=1400 audit(1759624186.711:309): avc: denied { create } for pid=6988 comm="syz.3.245" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.101673][ T30] audit: type=1400 audit(1759624186.731:310): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.169540][ T30] audit: type=1400 audit(1759624186.731:311): avc: denied { open } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.244029][ T7000] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 170.333288][ T6309] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.373295][ T7004] bond_slave_0: entered promiscuous mode [ 170.379047][ T7004] bond_slave_1: entered promiscuous mode [ 170.387474][ T30] audit: type=1400 audit(1759624186.731:312): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.471547][ T7004] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.505434][ T7004] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 170.536957][ T30] audit: type=1400 audit(1759624186.741:313): avc: denied { recv } for pid=6977 comm="syz.4.242" saddr=10.128.0.169 src=30006 daddr=10.128.1.33 dest=59330 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 170.615809][ T6298] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 170.703388][ T30] audit: type=1400 audit(1759624186.751:314): avc: denied { map_create } for pid=6995 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.021981][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.180402][ T7030] delete_channel: no stack [ 173.218553][ T7041] syz.3.255 uses obsolete (PF_INET,SOCK_PACKET) [ 174.388171][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 174.796344][ T30] audit: type=1400 audit(1759624191.591:348): avc: denied { map } for pid=7051 comm="syz.4.258" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.543987][ T30] audit: type=1400 audit(1759624191.591:349): avc: denied { read write } for pid=7051 comm="syz.4.258" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.777795][ T30] audit: type=1400 audit(1759624192.811:350): avc: denied { create } for pid=7057 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.853645][ T7071] hugetlbfs: syz.2.262 (7071): Using mlock ulimits for SHM_HUGETLB is obsolete [ 176.212247][ T30] audit: type=1400 audit(1759624192.851:351): avc: denied { create } for pid=7060 comm="syz.1.261" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.233202][ T30] audit: type=1400 audit(1759624192.871:352): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.442989][ T7072] syz.0.263 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 176.917909][ T30] audit: type=1400 audit(1759624194.081:353): avc: denied { unlink } for pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.951495][ T7074] random: crng reseeded on system resumption [ 177.412178][ T7082] process 'syz.2.264' launched './file0' with NULL argv: empty string added [ 177.458330][ T30] audit: type=1400 audit(1759624194.221:354): avc: denied { append } for pid=7057 comm="syz.4.259" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 177.481493][ T30] audit: type=1400 audit(1759624194.221:355): avc: denied { open } for pid=7057 comm="syz.4.259" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 177.698791][ T30] audit: type=1400 audit(1759624194.281:356): avc: denied { create } for pid=7077 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 178.197978][ T30] audit: type=1400 audit(1759624194.691:357): avc: denied { execute } for pid=7075 comm="syz.2.264" name="file0" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 179.849411][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 179.849427][ T30] audit: type=1400 audit(1759624196.741:362): avc: denied { read write } for pid=7100 comm="syz.0.270" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.984454][ T30] audit: type=1400 audit(1759624196.741:363): avc: denied { open } for pid=7100 comm="syz.0.270" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 180.270824][ T30] audit: type=1400 audit(1759624197.311:364): avc: denied { setopt } for pid=7104 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.380043][ T30] audit: type=1400 audit(1759624197.461:365): avc: denied { map } for pid=7104 comm="syz.1.271" path="socket:[13342]" dev="sockfs" ino=13342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.490066][ T30] audit: type=1400 audit(1759624197.461:366): avc: denied { read } for pid=7104 comm="syz.1.271" path="socket:[13342]" dev="sockfs" ino=13342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.526686][ T868] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.790516][ T30] audit: type=1400 audit(1759624197.531:367): avc: denied { read write } for pid=7107 comm="syz.0.272" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.269187][ T30] audit: type=1400 audit(1759624197.541:368): avc: denied { open } for pid=7107 comm="syz.0.272" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.306295][ T30] audit: type=1400 audit(1759624197.541:369): avc: denied { ioctl } for pid=7107 comm="syz.0.272" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.394150][ T868] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 181.404832][ T868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.413138][ T30] audit: type=1400 audit(1759624198.061:370): avc: denied { ioctl } for pid=7114 comm="syz.3.275" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13360 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.413183][ T30] audit: type=1400 audit(1759624198.141:371): avc: denied { create } for pid=7109 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.252765][ T868] usb 1-1: config 0 descriptor?? [ 182.752947][ T7108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7108 comm=syz.0.272 [ 183.234203][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 183.235970][ T868] ath6kl: Failed to read usb control message: -71 [ 183.251473][ T868] ath6kl: Unable to read the bmi data from the device: -71 [ 183.280273][ T868] ath6kl: Unable to recv target info: -71 [ 183.312799][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 183.327401][ T7138] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 183.346129][ T868] ath6kl: Failed to init ath6kl core: -71 [ 183.379379][ T868] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 183.545393][ T868] usb 1-1: USB disconnect, device number 5 [ 183.591798][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 183.752632][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 183.807713][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 183.821356][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 183.892521][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.933058][ T24] usb 2-1: config 0 descriptor?? [ 183.968709][ T7138] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.178553][ T7148] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 184.186749][ T7148] macsec1: entered promiscuous mode [ 184.201763][ T7148] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 184.509036][ T7154] ================================================================== [ 184.517115][ T7154] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 184.524315][ T7154] Read of size 8 at addr ffff888075cc2788 by task syz.0.283/7154 [ 184.532020][ T7154] [ 184.534327][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(full) [ 184.534341][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.534348][ T7154] Call Trace: [ 184.534353][ T7154] [ 184.534358][ T7154] dump_stack_lvl+0x116/0x1f0 [ 184.534384][ T7154] print_report+0xcd/0x630 [ 184.534410][ T7154] ? __virt_addr_valid+0x81/0x610 [ 184.534437][ T7154] ? __phys_addr+0xe8/0x180 [ 184.534457][ T7154] ? __cpa_addr+0x1d3/0x220 [ 184.534468][ T7154] kasan_report+0xe0/0x110 [ 184.534481][ T7154] ? __cpa_addr+0x1d3/0x220 [ 184.534493][ T7154] __cpa_addr+0x1d3/0x220 [ 184.534506][ T7154] cpa_flush+0x28b/0x8a0 [ 184.534526][ T7154] ? __pfx_cpa_flush+0x10/0x10 [ 184.534546][ T7154] ? pgprot2cachemode+0x9a/0x130 [ 184.534570][ T7154] ? __pfx_pgprot2cachemode+0x10/0x10 [ 184.534593][ T7154] ? drm_gem_get_pages+0x6a0/0xa10 [ 184.534607][ T7154] change_page_attr_set_clr+0x34e/0x4a0 [ 184.534622][ T7154] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 184.534642][ T7154] _set_pages_array+0x1ab/0x2c0 [ 184.534664][ T7154] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 184.534683][ T7154] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 184.534700][ T7154] ? __pfx___might_resched+0x10/0x10 [ 184.534726][ T7154] drm_gem_shmem_mmap+0xc9/0x550 [ 184.534739][ T7154] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 184.534751][ T7154] drm_gem_mmap_obj+0x1b5/0x560 [ 184.534764][ T7154] drm_gem_mmap+0x40b/0x620 [ 184.534776][ T7154] ? __pfx_drm_gem_mmap+0x10/0x10 [ 184.534788][ T7154] ? vm_area_alloc+0x1f/0x160 [ 184.534812][ T7154] ? lockdep_init_map_type+0x5c/0x280 [ 184.534832][ T7154] __mmap_region+0x1306/0x27a0 [ 184.534850][ T7154] ? __pfx___mmap_region+0x10/0x10 [ 184.534865][ T7154] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 184.534884][ T7154] ? audit_log_end+0x1f/0x30 [ 184.534895][ T7154] ? audit_log_end+0x1f/0x30 [ 184.534906][ T7154] ? common_lsm_audit+0x260/0x300 [ 184.534932][ T7154] ? __lock_acquire+0xb97/0x1ce0 [ 184.534951][ T7154] mmap_region+0x32b/0x3f0 [ 184.534968][ T7154] do_mmap+0xa3e/0x1210 [ 184.534990][ T7154] ? __pfx_do_mmap+0x10/0x10 [ 184.535008][ T7154] ? __pfx_down_write_killable+0x10/0x10 [ 184.535029][ T7154] vm_mmap_pgoff+0x29e/0x470 [ 184.535043][ T7154] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 184.535057][ T7154] ? __fget_files+0x20e/0x3c0 [ 184.535070][ T7154] ksys_mmap_pgoff+0x32c/0x5c0 [ 184.535086][ T7154] __x64_sys_mmap+0x125/0x190 [ 184.535105][ T7154] do_syscall_64+0xcd/0x4e0 [ 184.535127][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.535145][ T7154] RIP: 0033:0x7f402b78eec9 [ 184.535160][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.535177][ T7154] RSP: 002b:00007f402c692038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.535194][ T7154] RAX: ffffffffffffffda RBX: 00007f402b9e6270 RCX: 00007f402b78eec9 [ 184.535204][ T7154] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 184.535211][ T7154] RBP: 00007f402b811f91 R08: 0000000000000007 R09: 0000000100000000 [ 184.535218][ T7154] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 184.535225][ T7154] R13: 00007f402b9e6308 R14: 00007f402b9e6270 R15: 00007ffc231304c8 [ 184.535239][ T7154] [ 184.535245][ T7154] [ 184.855603][ T7154] Allocated by task 7154: [ 184.859905][ T7154] kasan_save_stack+0x33/0x60 [ 184.864563][ T7154] kasan_save_track+0x14/0x30 [ 184.869223][ T7154] __kasan_kmalloc+0xaa/0xb0 [ 184.873794][ T7154] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 184.879406][ T7154] drm_gem_get_pages+0x144/0xa10 [ 184.884322][ T7154] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 184.890374][ T7154] drm_gem_shmem_mmap+0xc9/0x550 [ 184.895289][ T7154] drm_gem_mmap_obj+0x1b5/0x560 [ 184.900125][ T7154] drm_gem_mmap+0x40b/0x620 [ 184.904608][ T7154] __mmap_region+0x1306/0x27a0 [ 184.909347][ T7154] mmap_region+0x32b/0x3f0 [ 184.913738][ T7154] do_mmap+0xa3e/0x1210 [ 184.917873][ T7154] vm_mmap_pgoff+0x29e/0x470 [ 184.922449][ T7154] ksys_mmap_pgoff+0x32c/0x5c0 [ 184.927190][ T7154] __x64_sys_mmap+0x125/0x190 [ 184.931847][ T7154] do_syscall_64+0xcd/0x4e0 [ 184.936339][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.942211][ T7154] [ 184.944510][ T7154] The buggy address belongs to the object at ffff888075cc2700 [ 184.944510][ T7154] which belongs to the cache kmalloc-192 of size 192 [ 184.958536][ T7154] The buggy address is located 0 bytes to the right of [ 184.958536][ T7154] allocated 136-byte region [ffff888075cc2700, ffff888075cc2788) [ 184.973004][ T7154] [ 184.975305][ T7154] The buggy address belongs to the physical page: [ 184.981695][ T7154] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75cc2 [ 184.990430][ T7154] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 184.997515][ T7154] page_type: f5(slab) [ 185.001478][ T7154] raw: 00fff00000000000 ffff88801b0263c0 ffffea0000cccf80 dead000000000002 [ 185.010036][ T7154] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 185.018590][ T7154] page dumped because: kasan: bad access detected [ 185.024977][ T7154] page_owner tracks the page as allocated [ 185.030663][ T7154] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5828, tgid 5828 (syz-executor), ts 71041004795, free_ts 70972930587 [ 185.049920][ T7154] post_alloc_hook+0x1c0/0x230 [ 185.054673][ T7154] get_page_from_freelist+0x10a3/0x3a30 [ 185.060210][ T7154] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 185.066098][ T7154] alloc_pages_mpol+0x1fb/0x550 [ 185.070953][ T7154] new_slab+0x24a/0x360 [ 185.075101][ T7154] ___slab_alloc+0xdc4/0x1ae0 [ 185.079766][ T7154] __slab_alloc.constprop.0+0x63/0x110 [ 185.085208][ T7154] __kmalloc_cache_noprof+0x477/0x780 [ 185.090575][ T7154] netdevice_event+0x365/0x9d0 [ 185.095319][ T7154] notifier_call_chain+0xb9/0x410 [ 185.100324][ T7154] call_netdevice_notifiers_info+0xbe/0x140 [ 185.106208][ T7154] netif_set_mac_address+0x36f/0x4a0 [ 185.111494][ T7154] do_setlink.constprop.0+0x75f/0x4380 [ 185.117111][ T7154] rtnl_newlink+0x1446/0x2000 [ 185.121773][ T7154] rtnetlink_rcv_msg+0x95b/0xe90 [ 185.126692][ T7154] netlink_rcv_skb+0x155/0x420 [ 185.131456][ T7154] page last free pid 9 tgid 9 stack trace: [ 185.137237][ T7154] __free_frozen_pages+0x7df/0x1160 [ 185.142420][ T7154] tlb_remove_table_rcu+0x121/0x320 [ 185.147603][ T7154] rcu_core+0x799/0x1530 [ 185.151833][ T7154] handle_softirqs+0x219/0x8e0 [ 185.156583][ T7154] do_softirq+0xb2/0xf0 [ 185.160722][ T7154] __local_bh_enable_ip+0x100/0x120 [ 185.165907][ T7154] ipv6_get_lladdr+0x299/0x4f0 [ 185.170660][ T7154] mld_newpack.isra.0+0x41d/0xa20 [ 185.175671][ T7154] add_grhead+0x299/0x340 [ 185.179987][ T7154] add_grec+0x11b5/0x1720 [ 185.184302][ T7154] mld_ifc_work+0x41f/0xbf0 [ 185.188794][ T7154] process_one_work+0x9cc/0x1b70 [ 185.194086][ T7154] worker_thread+0x6c8/0xf10 [ 185.198662][ T7154] kthread+0x3c5/0x780 [ 185.202714][ T7154] ret_from_fork+0x56d/0x730 [ 185.207291][ T7154] ret_from_fork_asm+0x1a/0x30 [ 185.212041][ T7154] [ 185.214342][ T7154] Memory state around the buggy address: [ 185.219970][ T7154] ffff888075cc2680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 185.228026][ T7154] ffff888075cc2700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.236063][ T7154] >ffff888075cc2780: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 185.244099][ T7154] ^ [ 185.248402][ T7154] ffff888075cc2800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.256439][ T7154] ffff888075cc2880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 185.264474][ T7154] ================================================================== [ 185.282801][ T7154] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.290012][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(full) [ 185.299232][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.309286][ T7154] Call Trace: [ 185.312553][ T7154] [ 185.315464][ T7154] dump_stack_lvl+0x3d/0x1f0 [ 185.320042][ T7154] vpanic+0x640/0x6f0 [ 185.324006][ T7154] panic+0xca/0xd0 [ 185.327706][ T7154] ? __pfx_panic+0x10/0x10 [ 185.332100][ T7154] ? __cpa_addr+0x1d3/0x220 [ 185.336585][ T7154] ? preempt_schedule_common+0x44/0xc0 [ 185.342025][ T7154] ? preempt_schedule_thunk+0x16/0x30 [ 185.347386][ T7154] check_panic_on_warn+0xab/0xb0 [ 185.352302][ T7154] end_report+0x107/0x170 [ 185.356615][ T7154] kasan_report+0xee/0x110 [ 185.361012][ T7154] ? __cpa_addr+0x1d3/0x220 [ 185.365496][ T7154] __cpa_addr+0x1d3/0x220 [ 185.369807][ T7154] cpa_flush+0x28b/0x8a0 [ 185.374033][ T7154] ? __pfx_cpa_flush+0x10/0x10 [ 185.378778][ T7154] ? pgprot2cachemode+0x9a/0x130 [ 185.383701][ T7154] ? __pfx_pgprot2cachemode+0x10/0x10 [ 185.389057][ T7154] ? drm_gem_get_pages+0x6a0/0xa10 [ 185.394151][ T7154] change_page_attr_set_clr+0x34e/0x4a0 [ 185.399680][ T7154] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 185.405735][ T7154] _set_pages_array+0x1ab/0x2c0 [ 185.410571][ T7154] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 185.416615][ T7154] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 185.423355][ T7154] ? __pfx___might_resched+0x10/0x10 [ 185.428634][ T7154] drm_gem_shmem_mmap+0xc9/0x550 [ 185.433547][ T7154] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 185.439766][ T7154] drm_gem_mmap_obj+0x1b5/0x560 [ 185.444598][ T7154] drm_gem_mmap+0x40b/0x620 [ 185.449087][ T7154] ? __pfx_drm_gem_mmap+0x10/0x10 [ 185.454098][ T7154] ? vm_area_alloc+0x1f/0x160 [ 185.458761][ T7154] ? lockdep_init_map_type+0x5c/0x280 [ 185.464112][ T7154] __mmap_region+0x1306/0x27a0 [ 185.468856][ T7154] ? __pfx___mmap_region+0x10/0x10 [ 185.473948][ T7154] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 185.479914][ T7154] ? audit_log_end+0x1f/0x30 [ 185.484483][ T7154] ? audit_log_end+0x1f/0x30 [ 185.489057][ T7154] ? common_lsm_audit+0x260/0x300 [ 185.494091][ T7154] ? __lock_acquire+0xb97/0x1ce0 [ 185.499012][ T7154] mmap_region+0x32b/0x3f0 [ 185.503408][ T7154] do_mmap+0xa3e/0x1210 [ 185.507547][ T7154] ? __pfx_do_mmap+0x10/0x10 [ 185.512121][ T7154] ? __pfx_down_write_killable+0x10/0x10 [ 185.517742][ T7154] vm_mmap_pgoff+0x29e/0x470 [ 185.522315][ T7154] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 185.527410][ T7154] ? __fget_files+0x20e/0x3c0 [ 185.532066][ T7154] ksys_mmap_pgoff+0x32c/0x5c0 [ 185.536817][ T7154] __x64_sys_mmap+0x125/0x190 [ 185.541479][ T7154] do_syscall_64+0xcd/0x4e0 [ 185.545964][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.551840][ T7154] RIP: 0033:0x7f402b78eec9 [ 185.556231][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.575902][ T7154] RSP: 002b:00007f402c692038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 185.584292][ T7154] RAX: ffffffffffffffda RBX: 00007f402b9e6270 RCX: 00007f402b78eec9 [ 185.592326][ T7154] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 185.600275][ T7154] RBP: 00007f402b811f91 R08: 0000000000000007 R09: 0000000100000000 [ 185.608221][ T7154] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 185.616170][ T7154] R13: 00007f402b9e6308 R14: 00007f402b9e6270 R15: 00007ffc231304c8 [ 185.624121][ T7154] [ 185.627319][ T7154] Kernel Offset: disabled [ 185.631621][ T7154] Rebooting in 86400 seconds..