last executing test programs: 15.671314571s ago: executing program 2 (id=248): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r3 = inotify_init1(0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x1412, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) keyctl$get_persistent(0x16, r7, 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x24000408) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f00000002c0)={0x1, 0x7}, 0x1) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdd934000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 12.171416964s ago: executing program 3 (id=258): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x40, 0xf, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000005c0)={0x20, 0xe, 0x28, "f4aacec3362af1dd528df8fecdc4a32736c4c123e97d09406b8983621cf5091465fa0160441ce727"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.144077856s ago: executing program 2 (id=259): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x40, 0xf, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000005c0)={0x20, 0xe, 0x28, "f4aacec3362af1dd528df8fecdc4a32736c4c123e97d09406b8983621cf5091465fa0160441ce727"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000002c0)={0x20, 0x1, 0xc8, {0xc8, 0x6, "be2bf8af497d28d19d6252dafb432e9429bfd9f8733e4cff71d618fd2012ddbbabd8fb32efb3a2e8993929d225fa1344c260feb9ebba4c46ba00d13488e3b34b465314db4223782278832b1a679b13faf66ee09c9ee82011da94038e90821a96b082122d7cc549d6c95a540daf0ef5024ba37f181f5b4193c9bbd2079e48755bb563dc5fecad72b2264160739eda1bfd21188c270879f946c17269022601730130365c43a1e6796adab5ee7fba2e79889ca9635eb8c893ed3a5713a83dea44de0c6e13163b5a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb43d}}, &(0x7f00000000c0)={0x0, 0xf, 0x1e, {0x5, 0xf, 0x1e, 0x1, [@generic={0x19, 0x10, 0x3, "9d84d4718c178f7b878535da13a4c98d8bfae195a9e9"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0xe, 0x5, "f24c1eb0", "98aba29b"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x81, 0xe3, 0x5, 0x458, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x40, 0xf, 0x7d, "897b2a70f384ad9e84ab4598d097baee335b83b5ad27bf1a54c8a54dfcc7afa3753a63e783d31ea6f7ebec1a2e9379b428448af725a20768d004f2715fb54001da10ce6df66e8761121b40aba282822b56a25cadd62d537a77e1e3315b91642951b3cbcd99137d2d846a036f54e2704d30508d22c4a94ba7b9ad19b8d0"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x65}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x100, 0x1, [0xba27d589bd1cc6de]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000600)={0x40, 0xb, 0x2, '*}'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="496ff65b2db9"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "6fcd"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8d}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x19}}) 10.015981663s ago: executing program 3 (id=262): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x163200, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000040)) close(r0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x100) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r8}, &(0x7f0000000180), &(0x7f00000001c0)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r9, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r10, 0x2) lsm_list_modules(0x0, 0xfffffffffffffffe, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x29, 0xfd, 0xdd}}]}}]}}, 0x0) 9.904559272s ago: executing program 2 (id=263): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) 8.043792779s ago: executing program 1 (id=268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x11e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r5, 0x0, 0x20, 0xce2) 7.072787515s ago: executing program 1 (id=272): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRESOCT=r0, @ANYBLOB="018044bd7000fedbdf25036f8f30865fe400"], 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000003a80)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580), 0x0, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r4, r4, r0, r4, r3]}}], 0x90, 0x44010}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002a80)="1b4fb992e3f762003ff1844df63d80d5511ab6c03bb9ab2b593f7e98084f2067a8b76fd6ab26375e90951fbd5e21a911ba44e2535c2cf6fe6bdda7549f88c534d04508f7c6795f196b0ab15fcafb15aa4456dfdf88801f58aebea037678df3a63df30db731854af326e86ebf4bc7063441ca5157abf237957de575ba1b80622479d1528f60955e9b82fe2d6c0bf68e72a91ba3f1fb97b0abbdbd3b38f0d3e5a40215843ac6ba17130c94e2ae214e6ff4e52bd5b3db58e88331b6a72cdcb0bb0a28e7e86e025d88bdf728c3fbebc3c81df495bf9950ade1b4611b380fc9b02916f1485e03", 0xe4}, {&(0x7f0000002b80)="574c7aa93ab73ac04ba7585860a143ffc90ffd37e4d44546c5f8", 0x1a}, {&(0x7f0000002bc0)="2179d45d7daf7ca4499087a562bc2d78be0dbdd836209d2bb14700ede3362f95e1c59a601a9de8c12d92e84c3e0ece4a9c5ac07baea7a6e76a86da201287cf643f1352dfd3cf717d33836abc368bfe2b8795be0e70e5fcab2cfe292e7ad9f1cb90985d9ed2c83b0b9e6ebd8811f43f107dee0798248321682b122e758d884360bc4568bb4daba03c3b4ce4dc29ccac322da95a21cee52329d1897df9cd2f8c388ee3b91f15fa313cc303db9bc48eae978445c92361aeae668a8190ea805661424cddd188f7fe0e1835d8d9c9255a449b29423adb279c9a98d85c6ce87d550313aa5c664c37791680fb86b9a2e26fe10b2d6a349344e203", 0xf7}, {&(0x7f0000002cc0)="2688ada4d6f7de2b3b", 0x9}], 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000e18e05748b249b73b6f556faa1c4d679bed06c1191469f", @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4], 0xc8, 0x4000001}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e40)="cf16032046feaa5a08230a72b10654e12bbbb766a9a7c6447e4127279125d844fe0bb38258b14fc6ae6cd54c4c54768331f3a9d8d7892a39e8dd8caf736a57c6ade860bd160a24a50c9dce9dc8977d74decd7c7f66ee0951772dbe3ae98860546090026380d36c", 0x67}, {&(0x7f0000002ec0)="600a34312253e980696300bbdcee32f5eef698843139accb423a68ddefdfc2cc1d9e21e33ae99bb8b178c67bf11f9cde54c6128ed6420b14740eca6746f730fc40d42cac0664f6356f", 0x49}, {&(0x7f0000002f40)="b3e09217a3097133c42fbcb740205d4b08699b33ac282b72ec4d14", 0x1b}, {&(0x7f0000000680)="789fad164c0e3019c0d1078740bb0dcee1c4ce25675c5281d955832a26121648677c5d732e389a0b5c06425af8333c40c113f8539d02f3767c75261e48ab164e8c", 0x41}, {&(0x7f0000003000)="7a1d1e3caf750a2f7cef4a65fe2eec8f68dfefd58d1ba6682f7e6215c4a48f204fa66ae464822d4f4d574dee7301cc6414107a26484bc7c3ae2a3d64d1c1668af24416e41dc41e3616c03d5d8b93593de5bb10c2c3bd9286dc0d35d85a5fffa77d136ad8", 0x64}, {&(0x7f0000003080)="ed15d9e9f031b1e6c3511e6d6d8a97142504ab48fdb12c362a922785eb6b6bab161dbb1ae95efd9bd3642c8c26eba6a4bfed1734a637290d7f5a034c9db239d08ef9e83f0aedeef02b1f0b0bdfaa243a2cb5c8a75f027f35", 0x58}], 0x6, &(0x7f0000003180)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x48d9}}, {{&(0x7f00000031c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003240)="1ecc58d350d5792db3480bc190451cfd257f74ae5ecfbcac5c3ae4511022fa27026fbc13230efc1a2aa1e8cf3792a58aab21ed6683ccd7b296d9b24b83637b1b6faefcb7c8eb72a549f2ce27e70451d8d77f0ce2a1e79c02909190908d8aaa25ae13535fb62d45808ae1bfb1c1795beacfa1decee0d7e15dc20e64695f07d6d143c8", 0x82}, {&(0x7f0000003300)="83e9df8ae4993b81d8674e1200226776ae4bfb054fef7ab57aa3877cc9bb0d80cfd58cba0e624c3fc6cadc22210d01a464dc5de7f7f803103cf15ff86a85394ac255fdba7979d5a6b0601c764e22", 0x4e}, {&(0x7f0000003380)="345e9cf1618e06400010aa17fe6acd60b5266564b44a87524ca2afad15e1262c", 0x20}, {&(0x7f00000033c0)="af72b8b52dc3c03d45fffe5859d7f1d5136bf2c1f35328ce2cfc719422dd006d6f56daa35413416582f2a2e7f8da18b39f94dd857a759765c269cabd1784798f50c0307b4de1313458c3e9e55dfce413331f42a45845df958dcc39673ef5a122393c332616f1e140b66ee270bd8e04310ff3a655311acb75547e38c4395a94cde12fad25c346c0fee01b04172c9fa50cec4cc93a206e60c388de46e212a120f54a22f7c61531a534ce11e42b3341d1d713", 0xb1}, {&(0x7f0000003480)="147a4a058f3394dd7d28c2a293f8527df0ad8e2e418f7b8c3b780161933ff6b43d731cf21ff071a4b66e6c1b76936334a34b3380a3db48db18c5f44bb32608c6304d806bad639b1d063143204ea3bf38754278c1bab9f48b4a673e547a57d1bb35636128d96fdd1a6b7898b833f3a060becec4f5f88b8ecfb0b2baededab2e94bcce2e00fa24a750a967095d7451cb7647970b093d7762182b0b7bab27a8a2ebd2f0f3840a85aad3891e60b3c47d74e8b5db64abee601d0fe06ba9e92dfacc7842131760b465cdb12c69ea3f166103c94f581c3a31", 0xd5}, {&(0x7f0000003580)="c0548436b6b16640ca4df1e1ec479ed1eede357fbe37d02cb63bde0fc03fa73154b8eb12c37209fc18ed092441b1b2ccc736d26367a311527f3a285e59efeac122fdb2a46145", 0x46}], 0x6, 0x0, 0x0, 0x2400c800}}, {{&(0x7f0000003680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003700)="9bf25e33a30a51f72713ca433a2edb8369b7c94926bae46bf293eb52829ae3850352649acfbc5d5867a84f364c7d670eac945bccad12ba9f706933", 0x3b}, {&(0x7f0000003740)="9951c0db441317e8fd", 0x9}, {&(0x7f0000003780)="4eac4f7cb26e95cc7846fe65f108", 0xe}, {&(0x7f00000037c0)="6d12bed91dc3e946b91e1e9e8f2acabc2a1ee05dd0af932e388309dd04ab7af4741fb63e683bddaa91a860f53fede0d9183f079e218c84789952574dc58c451d89d3f4e67e3ee7bedfa3fb25b8ca3ae4d5f6e62cb422fc814aa4d52cfccdd3f1699f01db287296d16bdbfaa7e527f5da244ef7981fedf92dc0932322705bcc68e2570ef8436c4baf7ddc91b3231cb7cb94d30f6b7d129ad95d4a11279bf213a4275c8f37bf6debd13ec29ac55196ae8b4373ac782a6d40262d4588358538f9eadec70203f0fdb4bc597dbb9862", 0xcd}, {&(0x7f00000038c0)="7f4ad518d4329180a6294a4998d1690ae2764231a482c8877abd1fb7700edd84aaa4943d3c9df35ce8ee5fc31574f85902d25743e2", 0x35}, {&(0x7f0000003900)}, {&(0x7f0000003940)="82f83949f01b11d1f74f5f3baa017213aae9f7691e3681f09b933411bb07a76124497d43332767c017fd3700d3a21d362fa5f1a7cec6c46e9c5af0bb8473bdfaa8f62d95a391db9f6a2d154af0fb56061351c446e60b7e99d2fea415818ccf4fa9b61a2e86b6e714ea9103d642bfccf9098751d0df081f1a70db330459e22560d54fd9450b7e435bd7489b8985e0e57ed77478a1ed81453a5036", 0x9a}], 0x7, 0x0, 0x0, 0x8005}}], 0x5, 0x0) r5 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x8a, &(0x7f0000000040), 0x4) landlock_create_ruleset(&(0x7f00000003c0)={0x6614, 0x2}, 0xfffffffffffffed9, 0x3) (async) r6 = landlock_create_ruleset(&(0x7f00000003c0)={0x6614, 0x2}, 0xfffffffffffffed9, 0x3) landlock_restrict_self(r6, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @multicast2}, 0x10) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[]) (async) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[]) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) (async) unshare(0x40020000) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x8008af26, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000400)=""/83, 0x53}, {&(0x7f0000000480)=""/250, 0xfa}], 0x4, 0x0) (async) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000400)=""/83, 0x53}, {&(0x7f0000000480)=""/250, 0xfa}], 0x4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x80040, 0x2) 6.655632826s ago: executing program 3 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000000c0)=0x80000a, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001200)}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)="efa9a902a7eebf0de3e5419cef920171c7c5eb3790758f9246f2c8bd72", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)="4b73d7fcf22608fe9be2fb51728a8139f4c10e889dfe1d16c47cd948a208fb48aba92e9e420f9f7739fe73215ea8df4fa9b1111f1faeda3897c27817b7fe4732dbec3974c57071d664dc1068e23b9cfc91856fc6208fdbe71be9f361f0d22c16560f464665b89c31c0e04d6ab5ca5a827a259bcaf349cad90e77773e30948afbc047bc33e90605539d48e486dbf7cd6794a3231d1b0967a93d3ca14896a579adbf6a21b5655b2ebb64326813bba9a428dc4e975585b9658f1bb169535597e6a5aefceee157a19dc9659d3005e71fbdfbc9c494cd43a8eaed75d369b6f88d", 0xde}, {&(0x7f0000000400)="7a89f6a059f05abb6e0ce198a8e4f1790496a1a7e7e19d7bf07c6527d069c724cd24cac859037331ea06e7c14e556f434b6821474d31b265020c44f5d75c20f8071479a9c8378b55c60ff7d8d38dfcb8f75a6de185975f71bce9e8f9991d3d46b2a0d5a14ccdb780a9d2b8ae96436fcc1d88a8eaa4c9f83f2c268f53cfb30a93dcfe685e7ca281caa51a5482673cd65c149d6f1e6587c48f77d1f8d6f3c927877fb02d1a315380904c5edfe90cff5eae00609491e2401f0969ff20", 0xbb}, {&(0x7f0000000500)="a587ca1609d0d29a2fa65167277873a415823b8de70a7e6e4c7bc9140895cc1556068c7d08c093e2a9af35ba4b28d00f56e6c2084084d7ba7102051a20a913cba78ff25fd54ddae929386943db929e8be7a019932a8c9b5fb15a0da4ca9898c4df92092d9fef77cc40951bc98ea4e0aeb2d5be4fc68ee541fc95e60d8952a51639748fe3a41a7acef3a364db3a7d981ad509a8cba1659c677b9367fda4eebc5c7dafe8808ab2e07fbddcc1c302992fa1b64373d8999ecfdbf46aeb42086316de303eda4be874", 0xc6}, {&(0x7f0000000240)="b8a5fc", 0x3}, {&(0x7f0000000680)="5b1191c3a2702fd3aaff10d45dfb2ec6ec342a404dcd3606ac2bb57da534c2ed092d2aa990d2e129a80d3683be6c48911d4d21d9c1c97ef8a00546d35c1af72421930d1c6d3a26ecdb01d9e38d09700e191dc241a5af9d6fd99d08e0fb7c1b5176b97fe3da145d454d4838cae6249f7e68f5fb95bff622dc79583b68a34b25913389a258b6f3a39082d317ad3cac918a2c0e8499941d212cf54f0b167bb0ac3041a9d00b0dc440965eaede100c45f3cbb0187afa8b7491573e4470c6d1137114f46ca8b7db4bc562c700a60866e77f737076f602b0df1b0e659e06e92e0d9bc690", 0xe1}, {&(0x7f0000000780)="dfdaf89465161d4e7eadea93c8bef38a25796e3f1ba9abeb9515c111ac21a00bf8d3905fcacdfcf8d122a925b10f1b24a0a1d88e4f4d81db7a7850b02d290a8655eb3d546c33f044f5772c98e1d254b12840fffb5bfb8dc6cf1d4c319d1cacd0d9225d10dbe0244f", 0x68}], 0x6, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xec, 0x0, 0x3, [0x4, 0x646b]}, @ssrr={0x89, 0x1b, 0x56, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @empty, @empty]}, @timestamp={0x44, 0xc, 0xea, 0x0, 0xc, [0x18000000, 0x7]}]}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@generic={0x94, 0x3, "cd"}, @timestamp={0x44, 0x14, 0x3, 0x0, 0xa, [0x4, 0x9, 0x4, 0xfffffffe]}, @rr={0x7, 0x7, 0x3b, [@local]}, @end, @ssrr={0x89, 0x23, 0x5d, [@multicast1, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xec, 0x0, 0x7, [0x7, 0xffff7fff, 0x7, 0x0, 0x2, 0x9, 0x944]}, @cipso={0x86, 0x14, 0x3, [{0x7, 0x5, "c610db"}, {0x0, 0x9, "2b62dcf7f8b84e"}]}, @timestamp_prespec={0x44, 0x44, 0x61, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x339}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x200}, {@empty, 0x59c5}, {@local, 0x800}, {@empty, 0xfffffeff}, {@empty, 0x2}, {@empty, 0x3}, {@private=0xa010101, 0x10001}]}, @ra={0x94, 0x4, 0x3}, @generic={0x88, 0xe, "f91c2d9a795decc5a404a9ed"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x170}}], 0x3, 0x60048841) 6.278758006s ago: executing program 3 (id=276): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0), 0xfffffe9f}], 0x1, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x101}], 0x18}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x1, {0x400e7ff, 0x10300, 0xfffffffe, 0x1002}}) 6.168790778s ago: executing program 2 (id=278): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fspick(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) 5.789399901s ago: executing program 3 (id=279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x13bc, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x13a8, 0x1, [@m_bpf={0xf6c, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0xf44, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x401}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x158, 0x17, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x81, 0x2, 0x2, 0xeea}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8}]}, {0xe9, 0x6, "fe3fed297379adc1ff5ea97035098adb86c7143dacdc98b727738750dab1a9967bcab9612e19617ec2023bffa80ea1038e24aa12388d422e5f5fd39dcc0329a3b9958dd00f2b123cb3fd42b9567f75e7bfc9836afa1c72aea3848c8320ec37223978f7356fbd1376fade99e77e4cbcb683b28942357512e8456dfb0db472be075447d797850066a22ae45198bea0948eb40022895f33ed036ddcb2990f580406cc52681730a20e8d2f3aaf285b527cd5cc8340d7ddc27bae93bfc3448f52ebf082aed271f3da9a0bea6c139828ed55900464ad054fe2bab82b9c6eab0d542fc4f79a89195e"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xe0, 0x6, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x80, 0xffffffffffffffff, 0xffffff6d, 0xdcd6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffff8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x6, 0x7, 0x8000}}]}, {0x59, 0x6, "2a6b36b6eecd90e9aa4dd205ff6616ee7d0798007e950b43d5eab02582483697dbe900d2521d0bd00d5675bfba9f123b0e78eb8fe06290ed2d6112a280b1ec521dc07c8725d84edaa9efebc4e279bbcdd23ab8c185"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x14c, 0x7, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x7, 0x3, 0xf0, 0x7}, {0x2d3, 0x7, 0x4, 0xfffffffd}, {0x0, 0x7, 0x7, 0x80000000}, {0x7, 0x5, 0x9, 0x5}, {0xe, 0x1, 0xc, 0x3}, {0x6, 0x1, 0x8c, 0x8000}, {0x10, 0x0, 0xf5, 0x6}]}]}, {0xe0, 0x6, "5ff5f2990d1dbbd5b6a45d82e9cd02a569bfb9282735083864748e998301bccf78afcbc16e356087a579a95d23b719812f3009af92ea8fb3406514b34913dab0a12aae065a5adfe3685b4d01434545f99958685324e741c62526bf5cd5dda9c981dcd0b0637031f2d6e5a165179ef1b65ef26e8526594adeb023a337d603316fadcdb2150a6ad1effc54d9bcdaf4bc222a53133eb461a4659252fc61ccbb73f9b37603e73637903faf748b4e30f9f55695406b7efed696616fb5e7749822159723c35e6ef3186037ed35cc7bdbfba6eee9aba7f067130d3dbb1a52c0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x38, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x48, 0x9, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x280}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x13bc}, 0x1, 0x0, 0x0, 0x30000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x48b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x7, 0x8) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) 5.0318835s ago: executing program 0 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "09001d00"}, @main=@item_012={0x2, 0x0, 0xb, "d1f9"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', 0x0) 4.922628366s ago: executing program 1 (id=281): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000006e06cb45ca69c81ecd8c526236d03b83b5d2fe5d27c98903016c1e9e57275f1f6e9c290db8bad54ac4086b8b66743cc2de1214466b7fa465c6f8763ef5716ebff06ae81d73dba4d01134fcfd0f578e3efe0cc79151b5bad7e9b8df50eee4ee3661c3c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x36) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}]}}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000380)={0x8, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000006a00020026bd7000fcdbdf2500000000000000000400090008000a000100000004000b0004000b00080005000200000008001a0001000000080001000100000004000b0032d082bc63f627ad63bbc36c0c253ca745bc556d5f350fa9b2bf97bd3b3d5a626a"], 0x48}}, 0x0) 4.332790115s ago: executing program 2 (id=282): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x3}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) 4.158595385s ago: executing program 4 (id=284): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000040000000000000000000003000000000300000002000000000000000000000000000006"], 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1400c005}, 0x14) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) accept4(r2, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x40) syz_emit_ethernet(0x224, &(0x7f0000000680)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @local}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCOUTQ(r9, 0x5411, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipv4_newaddr={0x54, 0x14, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x38, 0x2, 0xfe, r10}, [@IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_LABEL={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x74b, 0x0, 0x3, 0x1, 0x0, 0x8002}, 0xc) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 4.122827094s ago: executing program 1 (id=285): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x3}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) 3.284106136s ago: executing program 2 (id=286): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc1a, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811b5874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}, 0x1, 0x0, 0x0, 0x4844}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000005c0)={0xc0, 0x0, 0x15000}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000000c0)={0x0, 0x15, 0x4, "fab158b1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000040)=0x200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-q'}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x40, 0x21, 0x60, {0x60, 0x24, "b5c1c2f5b94890acd11f3e74631935627dbd9793e0fe1315c1db3bb539a8d8d468efe4359ae5efafeb383b56473e2a237c252b8c5a7ef0d3c279ccd838c9f36a584cd506344fbf121833e46eed8e6b629718fdafc7fb69c8d462fb70b5c8"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0xc, 0xa, "b1d5325bbc7884183e38"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8c}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x0, 0xcb, {0xc9, "953f841ac65d5d5c43e17b042ba345727cb095b962e5bfd0f1591ada9e7704b4a7c9f2aefe27f01bba55bfff9cf5fd31ff79eefa7496a4502591f7e0facbee54f1d3f21eb2870f87e5a76ac1e210303ac188fb7462e1887f9c380b9f8b6acb2187b4b18affa28d2df8f79e5d1f44800102ec7a7f2bbb18b6e9fd2d55f2b0ddab926af2abd90e8888eb5c38616743eb2f69217d235f820495d76b0bf1b5cf170c5b844aca73f71d5ebfd48eae0ddb73ac36b53bc2f3163b95ba2e5e4b02ad743f9dc64b8e26246f5d02"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0xf7}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x35}}) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f00000004c0)=0xc4) 3.127032169s ago: executing program 4 (id=287): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioprio_get$pid(0x2, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES16=r5], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001000)={r8, &(0x7f0000000fc0)}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r6, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x80000020}], 0x2, 0xa0, 0x0) 3.125758449s ago: executing program 1 (id=288): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) 2.617827362s ago: executing program 4 (id=289): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x35f48f9e250dba0b, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x2000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000060000000100000f0300000004ff0f0000000000000000008f54b7000000000000000f01000000400000000000"], 0x0, 0x48, 0x0, 0x0, 0xfff, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x3, 0x0, 0x8, 0xffffffffffffffff, 0x7}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f00000000c0)=@isdn, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000280)=""/222, 0xde}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/247, 0xf7}], 0x5, &(0x7f0000000640)=""/188, 0xbc}, 0x6}], 0x1, 0x63, &(0x7f0000000740)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x406701, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40c1) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3000000}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @default, @bpq0, 0x0, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x33, 0x27, &(0x7f0000000140)={[0x5]}, 0x8) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @default, @netrom={'nr', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2.176811038s ago: executing program 0 (id=290): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@ldst={0x1, 0x3, 0x0, 0x3, 0x4, 0x3b, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x4e, &(0x7f0000000380)=""/78, 0x41100, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ifreq(r2, 0x8937, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = timerfd_create(0x9, 0x800) timerfd_settime(r5, 0x3, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) timerfd_gettime(r5, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) r6 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='dax\x00', &(0x7f00000004c0)="b071", 0x2) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f0000000300)={0x0, 0x0}) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x8481, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x40000) 1.728210476s ago: executing program 3 (id=291): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e036042a0008270200000083040000000b09007a150b5d8c3dda000e0000"], 0x0}, 0x0) 1.662659356s ago: executing program 4 (id=292): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fspick(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) 1.65354108s ago: executing program 0 (id=293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f98", 0x23, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r8 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r8) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$RTC_UIE_OFF(r7, 0x7004) 1.382279473s ago: executing program 4 (id=294): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="454bf47b"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000feff07000800000000000000", @ANYRES32, @ANYBLOB="0200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000200)=""/76}, 0x20) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.038731524s ago: executing program 0 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 396.738872ms ago: executing program 4 (id=296): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x49) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r1, 0x0, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 326.11857ms ago: executing program 0 (id=297): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 26.729003ms ago: executing program 0 (id=298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (fail_nth: 5) 0s ago: executing program 1 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000f80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x11e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r5, 0x0, 0x20, 0xce2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 66.240475][ T30] audit: type=1400 audit(1745519907.218:88): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.245072][ T5810] cgroup: Unknown subsys name 'net' [ 66.263868][ T30] audit: type=1400 audit(1745519907.218:89): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.292514][ T30] audit: type=1400 audit(1745519907.248:90): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.480469][ T5810] cgroup: Unknown subsys name 'cpuset' [ 66.489750][ T5810] cgroup: Unknown subsys name 'rlimit' [ 66.684523][ T30] audit: type=1400 audit(1745519907.658:91): avc: denied { setattr } for pid=5810 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.715520][ T30] audit: type=1400 audit(1745519907.658:92): avc: denied { create } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.743695][ T30] audit: type=1400 audit(1745519907.658:93): avc: denied { write } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.764567][ T30] audit: type=1400 audit(1745519907.658:94): avc: denied { read } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.787375][ T30] audit: type=1400 audit(1745519907.678:95): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.805166][ T5812] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.813506][ T30] audit: type=1400 audit(1745519907.678:96): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.844165][ T30] audit: type=1400 audit(1745519907.708:97): avc: denied { read } for pid=5492 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 67.788405][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.596892][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.605913][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.614203][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.623230][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.631835][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.714051][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.731703][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.740392][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.754716][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.781047][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.788766][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.808041][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.816801][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.818155][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.825537][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.835835][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.839597][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.846443][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.853365][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.867983][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.867980][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.884628][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.892954][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.913139][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.927644][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.184050][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 71.424996][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.433230][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.440859][ T5820] bridge_slave_0: entered allmulticast mode [ 71.448293][ T5820] bridge_slave_0: entered promiscuous mode [ 71.484509][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 71.495766][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.503733][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.511602][ T5820] bridge_slave_1: entered allmulticast mode [ 71.518641][ T5820] bridge_slave_1: entered promiscuous mode [ 71.557860][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 71.625048][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 71.638126][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.676367][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.736047][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.743737][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.752441][ T5824] bridge_slave_0: entered allmulticast mode [ 71.759493][ T5824] bridge_slave_0: entered promiscuous mode [ 71.782232][ T5820] team0: Port device team_slave_0 added [ 71.793673][ T5820] team0: Port device team_slave_1 added [ 71.817426][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.824532][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.831972][ T5824] bridge_slave_1: entered allmulticast mode [ 71.839944][ T5824] bridge_slave_1: entered promiscuous mode [ 71.854789][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.936827][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.953668][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.963814][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.972660][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.999283][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.011167][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.019764][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.026944][ T5826] bridge_slave_0: entered allmulticast mode [ 72.033862][ T5826] bridge_slave_0: entered promiscuous mode [ 72.069103][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.076090][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.102391][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.113690][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.121707][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.129268][ T5826] bridge_slave_1: entered allmulticast mode [ 72.136018][ T5826] bridge_slave_1: entered promiscuous mode [ 72.181036][ T5824] team0: Port device team_slave_0 added [ 72.189631][ T5824] team0: Port device team_slave_1 added [ 72.230635][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.238119][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.245364][ T5825] bridge_slave_0: entered allmulticast mode [ 72.254394][ T5825] bridge_slave_0: entered promiscuous mode [ 72.273945][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.300295][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.308938][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.316132][ T5825] bridge_slave_1: entered allmulticast mode [ 72.323444][ T5825] bridge_slave_1: entered promiscuous mode [ 72.359005][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.379712][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.386824][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.394355][ T5827] bridge_slave_0: entered allmulticast mode [ 72.401788][ T5827] bridge_slave_0: entered promiscuous mode [ 72.418667][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.430652][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.437913][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.463847][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.482498][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.491471][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.498906][ T5827] bridge_slave_1: entered allmulticast mode [ 72.505664][ T5827] bridge_slave_1: entered promiscuous mode [ 72.533796][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.543622][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.550757][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.577259][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.590952][ T5826] team0: Port device team_slave_0 added [ 72.610660][ T5820] hsr_slave_0: entered promiscuous mode [ 72.617195][ T5820] hsr_slave_1: entered promiscuous mode [ 72.643209][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.646118][ T5826] team0: Port device team_slave_1 added [ 72.650238][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.658111][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.685577][ T5825] team0: Port device team_slave_0 added [ 72.701176][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.718467][ T5831] Bluetooth: hci0: command tx timeout [ 72.745531][ T5825] team0: Port device team_slave_1 added [ 72.772474][ T5827] team0: Port device team_slave_0 added [ 72.781525][ T5827] team0: Port device team_slave_1 added [ 72.816120][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.823468][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.849697][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.875839][ T5824] hsr_slave_0: entered promiscuous mode [ 72.882838][ T5824] hsr_slave_1: entered promiscuous mode [ 72.887843][ T5831] Bluetooth: hci3: command tx timeout [ 72.889188][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.901874][ T5824] Cannot create hsr debugfs directory [ 72.909845][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.916800][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.943322][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.954945][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.962056][ T5831] Bluetooth: hci1: command tx timeout [ 72.967127][ T5831] Bluetooth: hci4: command tx timeout [ 72.967966][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.999211][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.037835][ T5831] Bluetooth: hci2: command tx timeout [ 73.045230][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.052354][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.078755][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.110819][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.118025][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.144007][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.202388][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.209481][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.236163][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.259426][ T5825] hsr_slave_0: entered promiscuous mode [ 73.265798][ T5825] hsr_slave_1: entered promiscuous mode [ 73.271870][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.279828][ T5825] Cannot create hsr debugfs directory [ 73.290498][ T5826] hsr_slave_0: entered promiscuous mode [ 73.296640][ T5826] hsr_slave_1: entered promiscuous mode [ 73.302878][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.310513][ T5826] Cannot create hsr debugfs directory [ 73.429504][ T5827] hsr_slave_0: entered promiscuous mode [ 73.435737][ T5827] hsr_slave_1: entered promiscuous mode [ 73.441962][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.449620][ T5827] Cannot create hsr debugfs directory [ 73.708552][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.721818][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.746379][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.762523][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.810983][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.827819][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.840543][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.851573][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.930548][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.949280][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.983320][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.992854][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.057631][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.075952][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.102729][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.114125][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.186725][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.211615][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.221762][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.239876][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.266738][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.283616][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.294534][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.342486][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.349789][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.369682][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.376780][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.391999][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.429725][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.436854][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.460864][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.468698][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.509090][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.552960][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.575163][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.593240][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.633468][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.640678][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.659053][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 74.659065][ T30] audit: type=1400 audit(1745519915.638:111): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.692042][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.699237][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.724215][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.755443][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.762636][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.799341][ T5831] Bluetooth: hci0: command tx timeout [ 74.830237][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.837420][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.880997][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.923194][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.957686][ T5831] Bluetooth: hci3: command tx timeout [ 74.983806][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.037566][ T5831] Bluetooth: hci4: command tx timeout [ 75.039095][ T54] Bluetooth: hci1: command tx timeout [ 75.061647][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.068878][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.103836][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.111435][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.133669][ T54] Bluetooth: hci2: command tx timeout [ 75.219228][ T5820] veth0_vlan: entered promiscuous mode [ 75.266480][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.291384][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.306883][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.318638][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.328543][ T5820] veth1_vlan: entered promiscuous mode [ 75.436176][ T5824] veth0_vlan: entered promiscuous mode [ 75.476260][ T5827] veth0_vlan: entered promiscuous mode [ 75.491536][ T5820] veth0_macvtap: entered promiscuous mode [ 75.524965][ T5827] veth1_vlan: entered promiscuous mode [ 75.538689][ T5824] veth1_vlan: entered promiscuous mode [ 75.580440][ T5820] veth1_macvtap: entered promiscuous mode [ 75.636815][ T5827] veth0_macvtap: entered promiscuous mode [ 75.672296][ T5827] veth1_macvtap: entered promiscuous mode [ 75.686685][ T5824] veth0_macvtap: entered promiscuous mode [ 75.698670][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.715478][ T5824] veth1_macvtap: entered promiscuous mode [ 75.730096][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.750545][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.770912][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.780278][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.789100][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.798009][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.810305][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.822557][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.834103][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.848755][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.859471][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.870749][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.885888][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.898014][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.908255][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.919656][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.931731][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.945965][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.955022][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.964070][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.972891][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.995728][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.006835][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.017347][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.028117][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.039377][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.073729][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.083610][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.092787][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.101832][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.160929][ T5825] veth0_vlan: entered promiscuous mode [ 76.191082][ T5826] veth0_vlan: entered promiscuous mode [ 76.234771][ T5825] veth1_vlan: entered promiscuous mode [ 76.246512][ T5826] veth1_vlan: entered promiscuous mode [ 76.294375][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.303404][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.339700][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.347646][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.424490][ T5826] veth0_macvtap: entered promiscuous mode [ 76.443934][ T5825] veth0_macvtap: entered promiscuous mode [ 76.459037][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.461205][ T5826] veth1_macvtap: entered promiscuous mode [ 76.466889][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.488028][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.498765][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.509511][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.520761][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.531141][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.541650][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.552512][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.562562][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.568610][ T5825] veth1_macvtap: entered promiscuous mode [ 76.580054][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.610378][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.621494][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.631468][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.643510][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.653830][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.664626][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.675892][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.693174][ T30] audit: type=1400 audit(1745519917.668:112): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.FxApII/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.734700][ T30] audit: type=1400 audit(1745519917.698:113): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.739005][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.760244][ T30] audit: type=1400 audit(1745519917.698:114): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.FxApII/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.773341][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.800326][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.800841][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.816880][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.817592][ T30] audit: type=1400 audit(1745519917.708:115): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.826027][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.848298][ T30] audit: type=1400 audit(1745519917.708:116): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.FxApII/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.893242][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.906336][ T54] Bluetooth: hci0: command tx timeout [ 76.915211][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.925824][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.930845][ T30] audit: type=1400 audit(1745519917.708:117): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.FxApII/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.945202][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.967484][ T30] audit: type=1400 audit(1745519917.738:118): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.975636][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.999031][ T30] audit: type=1400 audit(1745519917.828:119): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.006313][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.038250][ T54] Bluetooth: hci3: command tx timeout [ 77.044226][ T30] audit: type=1400 audit(1745519917.828:120): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="gadgetfs" ino=7261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.044283][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.077549][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.091437][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.110807][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.127742][ T54] Bluetooth: hci1: command tx timeout [ 77.137255][ T54] Bluetooth: hci4: command tx timeout [ 77.146381][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.162301][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.174530][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.182538][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.192492][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.204613][ T5831] Bluetooth: hci2: command tx timeout [ 77.204804][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.221091][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.231580][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.241815][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.252263][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.264021][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.301912][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.313136][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.336655][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.354269][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.362165][ T5909] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 77.376660][ T5909] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 77.552628][ T5914] vxcan1: tx address claim with dlc 0 [ 77.618126][ T5916] FAULT_INJECTION: forcing a failure. [ 77.618126][ T5916] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.656116][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz.3.4 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 77.656145][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.656159][ T5916] Call Trace: [ 77.656174][ T5916] [ 77.656186][ T5916] dump_stack_lvl+0x16c/0x1f0 [ 77.656223][ T5916] should_fail_ex+0x512/0x640 [ 77.656249][ T5916] _copy_from_user+0x2e/0xd0 [ 77.656272][ T5916] __sys_bpf+0x21d/0x4d80 [ 77.656301][ T5916] ? __pfx___sys_bpf+0x10/0x10 [ 77.656321][ T5916] ? ksys_write+0x190/0x240 [ 77.656343][ T5916] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 77.656381][ T5916] ? fput+0x70/0xf0 [ 77.656400][ T5916] ? ksys_write+0x1b9/0x240 [ 77.656414][ T5916] ? __pfx_ksys_write+0x10/0x10 [ 77.656435][ T5916] __x64_sys_bpf+0x78/0xc0 [ 77.656455][ T5916] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.656477][ T5916] do_syscall_64+0xcd/0x260 [ 77.656502][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.656525][ T5916] RIP: 0033:0x7f2ead58e969 [ 77.656539][ T5916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.656554][ T5916] RSP: 002b:00007f2eae445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.656580][ T5916] RAX: ffffffffffffffda RBX: 00007f2ead7b5fa0 RCX: 00007f2ead58e969 [ 77.656591][ T5916] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 0000000000000000 [ 77.656601][ T5916] RBP: 00007f2eae445090 R08: 0000000000000000 R09: 0000000000000000 [ 77.656610][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.656618][ T5916] R13: 0000000000000001 R14: 00007f2ead7b5fa0 R15: 00007ffe3b3a2aa8 [ 77.656636][ T5916] [ 77.924054][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.962802][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.996448][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.005708][ T5925] netlink: 'syz.2.10': attribute type 5 has an invalid length. [ 78.032784][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.087449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.117111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c0!!! [ 78.202122][ T970] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.243261][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.272673][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.303509][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.315520][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.397377][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 78.415041][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 78.458641][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.517347][ T5935] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 78.528283][ T970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 78.560917][ T5935] netlink: 'syz.2.14': attribute type 2 has an invalid length. [ 78.573253][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 78.592452][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 78.765496][ T970] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 78.780865][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.789577][ T970] usb 4-1: Product: syz [ 78.793976][ T970] usb 4-1: Manufacturer: syz [ 78.801164][ T970] usb 4-1: SerialNumber: syz [ 78.820200][ T970] usb 4-1: config 0 descriptor?? [ 78.827779][ T5923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.123749][ T5945] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.197653][ T5831] Bluetooth: hci3: command tx timeout [ 79.204267][ T5831] Bluetooth: hci4: command tx timeout [ 79.250150][ T54] Bluetooth: hci1: command tx timeout [ 79.267529][ T970] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 79.278690][ T54] Bluetooth: hci2: command tx timeout [ 79.294011][ T5183] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 79.323322][ T5183] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 79.378612][ T5183] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 79.443320][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.490714][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.570819][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.577117][ T5183] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 79.595537][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.711470][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.873547][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.876555][ T5841] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 79.932593][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.974018][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 79.974037][ T30] audit: type=1400 audit(1745519920.948:167): avc: denied { read } for pid=5954 comm="syz.0.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.996829][ T5183] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 80.039549][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.231274][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.444787][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.459377][ T30] audit: type=1400 audit(1745519920.948:168): avc: denied { open } for pid=5954 comm="syz.0.18" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.518617][ T5183] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 80.557524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 80.567082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 80.576797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.629422][ T5183] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 80.647333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.704711][ T30] audit: type=1400 audit(1745519921.068:169): avc: denied { execute } for pid=5952 comm="syz.2.17" name="file1" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.743856][ T5962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.755959][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.771760][ T5962] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 80.796658][ T30] audit: type=1400 audit(1745519921.238:170): avc: denied { ioctl } for pid=5954 comm="syz.0.18" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.847686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.856378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.865735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.884714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.919397][ T30] audit: type=1400 audit(1745519921.498:171): avc: denied { create } for pid=5958 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.024902][ T5967] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 81.135205][ T30] audit: type=1400 audit(1745519921.508:172): avc: denied { allowed } for pid=5958 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.159485][ T30] audit: type=1400 audit(1745519921.528:173): avc: denied { create } for pid=5958 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.179488][ T30] audit: type=1400 audit(1745519921.748:174): avc: denied { setopt } for pid=5954 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.200328][ T30] audit: type=1400 audit(1745519921.998:175): avc: denied { read } for pid=5922 comm="syz.3.9" name="event4" dev="devtmpfs" ino=2732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.227066][ T30] audit: type=1400 audit(1745519921.998:176): avc: denied { open } for pid=5922 comm="syz.3.9" path="/dev/input/event4" dev="devtmpfs" ino=2732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.330260][ T5968] netlink: 184 bytes leftover after parsing attributes in process `syz.4.20'. [ 81.397647][ T5904] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 81.434325][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 81.639648][ T5904] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 81.648488][ T5904] usb 3-1: config 0 has no interface number 0 [ 81.654754][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.666499][ T5904] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 81.678369][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 81.690314][ T5904] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 81.939004][ T5979] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 82.138233][ T5904] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 82.149232][ T5904] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.175000][ T5904] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 82.193710][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.220590][ T5904] usb 3-1: config 0 descriptor?? [ 82.223635][ T5874] usb 4-1: USB disconnect, device number 2 [ 82.227670][ T5970] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 82.240208][ T5970] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 82.255784][ T5904] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 82.462695][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.475180][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.501179][ T5873] usb 3-1: USB disconnect, device number 2 [ 82.523077][ T5981] FAULT_INJECTION: forcing a failure. [ 82.523077][ T5981] name failslab, interval 1, probability 0, space 0, times 1 [ 82.551518][ T5873] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 82.558501][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.3.24 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 82.558529][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.558538][ T5981] Call Trace: [ 82.558543][ T5981] [ 82.558549][ T5981] dump_stack_lvl+0x16c/0x1f0 [ 82.558580][ T5981] should_fail_ex+0x512/0x640 [ 82.558604][ T5981] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 82.558627][ T5981] should_failslab+0xc2/0x120 [ 82.558644][ T5981] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 82.558657][ T5981] ? __alloc_skb+0x2b2/0x380 [ 82.558678][ T5981] __alloc_skb+0x2b2/0x380 [ 82.558693][ T5981] ? __pfx___alloc_skb+0x10/0x10 [ 82.558712][ T5981] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 82.558740][ T5981] netlink_alloc_large_skb+0x69/0x130 [ 82.558760][ T5981] netlink_sendmsg+0x6a1/0xdd0 [ 82.558780][ T5981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.558805][ T5981] ____sys_sendmsg+0xa95/0xc70 [ 82.558828][ T5981] ? copy_msghdr_from_user+0x10a/0x160 [ 82.558844][ T5981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.558870][ T5981] ___sys_sendmsg+0x134/0x1d0 [ 82.558886][ T5981] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.558926][ T5981] __sys_sendmsg+0x16d/0x220 [ 82.558944][ T5981] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.558970][ T5981] ? rcu_is_watching+0x12/0xc0 [ 82.558999][ T5981] do_syscall_64+0xcd/0x260 [ 82.559025][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.559043][ T5981] RIP: 0033:0x7f2ead58e969 [ 82.559058][ T5981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.559072][ T5981] RSP: 002b:00007f2eae445038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.559101][ T5981] RAX: ffffffffffffffda RBX: 00007f2ead7b5fa0 RCX: 00007f2ead58e969 [ 82.559112][ T5981] RDX: 0000000000048004 RSI: 00002000000007c0 RDI: 0000000000000004 [ 82.559120][ T5981] RBP: 00007f2eae445090 R08: 0000000000000000 R09: 0000000000000000 [ 82.559127][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.559135][ T5981] R13: 0000000000000000 R14: 00007f2ead7b5fa0 R15: 00007ffe3b3a2aa8 [ 82.559153][ T5981] [ 84.065835][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.413744][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.716608][ T6008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.729223][ T6008] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 85.384329][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 85.384348][ T30] audit: type=1400 audit(1745519926.358:205): avc: denied { ioctl } for pid=6014 comm="syz.3.34" path="socket:[8470]" dev="sockfs" ino=8470 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.427488][ T6015] syzkaller1: entered promiscuous mode [ 85.440900][ T6015] syzkaller1: entered allmulticast mode [ 86.057173][ T30] audit: type=1400 audit(1745519927.018:206): avc: denied { ioctl } for pid=6022 comm="syz.1.37" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.097362][ T30] audit: type=1400 audit(1745519927.468:207): avc: denied { bind } for pid=6022 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.116575][ T30] audit: type=1400 audit(1745519927.468:208): avc: denied { name_bind } for pid=6022 comm="syz.1.37" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 87.138748][ T30] audit: type=1400 audit(1745519927.468:209): avc: denied { node_bind } for pid=6022 comm="syz.1.37" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 87.159417][ T30] audit: type=1400 audit(1745519927.478:210): avc: denied { connect } for pid=6022 comm="syz.1.37" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.179861][ T30] audit: type=1400 audit(1745519927.478:211): avc: denied { name_connect } for pid=6022 comm="syz.1.37" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 87.586225][ T30] audit: type=1400 audit(1745519928.398:212): avc: denied { execute } for pid=6033 comm="syz.2.39" name="file1" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.890297][ T6038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.919148][ T6038] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 88.077491][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 88.215245][ T9] cfg80211: failed to load regulatory.db [ 88.243944][ T5138] Bluetooth: hci5: command 0xfc11 tx timeout [ 88.264761][ T6028] sp0: Synchronizing with TNC [ 88.379649][ T30] audit: type=1400 audit(1745519929.358:213): avc: denied { search } for pid=5492 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.437320][ T30] audit: type=1400 audit(1745519929.358:214): avc: denied { read } for pid=5492 comm="dhcpcd" name="n100" dev="tmpfs" ino=1963 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.620438][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 89.643649][ T6057] netlink: 44 bytes leftover after parsing attributes in process `syz.2.45'. [ 91.085580][ T6083] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.370169][ T5873] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.447246][ T5138] Bluetooth: hci5: command 0xfc11 tx timeout [ 91.454315][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 91.471170][ T6052] sp0: Synchronizing with TNC [ 91.553333][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.569300][ T5873] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 91.578494][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.586525][ T5873] usb 2-1: Product: syz [ 91.592759][ T5873] usb 2-1: Manufacturer: syz [ 91.599525][ T5873] usb 2-1: SerialNumber: syz [ 91.605966][ T5873] usb 2-1: config 0 descriptor?? [ 91.619310][ T5873] ims_pcu 2-1:0.0: Zero length descriptor [ 91.625197][ T5873] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 91.843744][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 91.843764][ T30] audit: type=1400 audit(1745519932.818:218): avc: denied { getopt } for pid=6075 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.871791][ T30] audit: type=1400 audit(1745519932.848:219): avc: denied { read write } for pid=6075 comm="syz.1.52" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.920614][ T30] audit: type=1400 audit(1745519932.848:220): avc: denied { open } for pid=6075 comm="syz.1.52" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.002754][ T30] audit: type=1400 audit(1745519932.908:221): avc: denied { name_bind } for pid=6075 comm="syz.1.52" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 93.010397][ T30] audit: type=1400 audit(1745519933.588:222): avc: denied { setattr } for pid=6090 comm="syz.3.56" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.033116][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.050237][ T5875] usb 2-1: USB disconnect, device number 2 [ 93.654482][ T30] audit: type=1400 audit(1745519934.628:223): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.813964][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.902570][ T30] audit: type=1400 audit(1745519934.858:224): avc: denied { bind } for pid=6084 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 94.001069][ T5873] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 94.067538][ T30] audit: type=1400 audit(1745519934.988:225): avc: denied { bind } for pid=6084 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.088364][ T30] audit: type=1400 audit(1745519934.988:226): avc: denied { node_bind } for pid=6084 comm="syz.0.55" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 94.148688][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 94.284052][ T30] audit: type=1400 audit(1745519935.048:227): avc: denied { mount } for pid=6084 comm="syz.0.55" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.307601][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.326751][ T5875] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 94.345934][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.355957][ T5873] usb 2-1: no configurations [ 94.364842][ T5873] usb 2-1: can't read configurations, error -22 [ 94.374262][ T5875] usb 5-1: Product: syz [ 94.397178][ T5875] usb 5-1: Manufacturer: syz [ 94.403134][ T5875] usb 5-1: SerialNumber: syz [ 94.582418][ T5873] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 94.605564][ T5875] usb 5-1: config 0 descriptor?? [ 94.787883][ T5873] usb 2-1: no configurations [ 94.797223][ T5873] usb 2-1: can't read configurations, error -22 [ 94.814392][ T5873] usb usb2-port1: attempt power cycle [ 94.907086][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.059041][ T5875] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 95.252273][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 95.263086][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.278987][ T5874] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 95.297042][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.305138][ T5874] usb 3-1: Product: syz [ 95.309491][ T5874] usb 3-1: Manufacturer: syz [ 95.314161][ T5874] usb 3-1: SerialNumber: syz [ 95.321384][ T5873] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 95.331938][ T5874] usb 3-1: config 0 descriptor?? [ 95.375277][ T5873] usb 2-1: no configurations [ 95.381119][ T5873] usb 2-1: can't read configurations, error -22 [ 95.847441][ T5873] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 95.878467][ T5873] usb 2-1: no configurations [ 95.883194][ T5873] usb 2-1: can't read configurations, error -22 [ 95.891759][ T5873] usb usb2-port1: unable to enumerate USB device [ 95.898558][ T5874] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 96.060901][ T5875] usb 5-1: USB disconnect, device number 2 [ 96.377243][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.589678][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 96.781123][ T5873] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.797504][ T5873] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.809593][ T5873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.829557][ T5873] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 96.875266][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.897967][ T5873] usb 1-1: Product: syz [ 96.904989][ T5873] usb 1-1: Manufacturer: syz [ 96.910016][ T5873] usb 1-1: SerialNumber: syz [ 96.918418][ T5873] usb 1-1: config 0 descriptor?? [ 96.976205][ T5874] usb 3-1: USB disconnect, device number 3 [ 97.474288][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 97.474328][ T30] audit: type=1400 audit(1745519938.448:232): avc: denied { setopt } for pid=6130 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.082068][ T5873] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 98.091050][ T5873] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 98.109581][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.206368][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.431065][ T5873] usb 1-1: USB disconnect, device number 2 [ 98.465700][ T30] audit: type=1400 audit(1745519939.438:233): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 98.684110][ T30] audit: type=1400 audit(1745519939.658:234): avc: denied { create } for pid=6142 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.722614][ T30] audit: type=1400 audit(1745519939.688:235): avc: denied { setopt } for pid=6142 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.894137][ T30] audit: type=1400 audit(1745519939.868:236): avc: denied { setopt } for pid=6146 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.037356][ T5138] Bluetooth: hci4: command 0x0405 tx timeout [ 99.057859][ T30] audit: type=1400 audit(1745519939.868:237): avc: denied { accept } for pid=6146 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.504011][ T30] audit: type=1400 audit(1745519939.868:238): avc: denied { write } for pid=6146 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.525399][ T30] audit: type=1400 audit(1745519940.208:239): avc: denied { read } for pid=6146 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.757254][ T30] audit: type=1400 audit(1745519940.708:240): avc: denied { create } for pid=6155 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.830126][ T30] audit: type=1400 audit(1745519940.708:241): avc: denied { ioctl } for pid=6155 comm="syz.1.77" path="socket:[8190]" dev="sockfs" ino=8190 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.917124][ T5830] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.130174][ T6160] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 100.139356][ T6160] netlink: 'syz.1.78': attribute type 2 has an invalid length. [ 100.455685][ T6162] sp0: Synchronizing with TNC [ 100.650482][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 100.667909][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.693323][ T5830] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 100.716825][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.739065][ T5830] usb 1-1: Product: syz [ 100.743317][ T5830] usb 1-1: Manufacturer: syz [ 100.756748][ T5830] usb 1-1: SerialNumber: syz [ 100.773326][ T5830] usb 1-1: config 0 descriptor?? [ 101.198546][ T5830] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 102.606836][ T5830] usb 1-1: USB disconnect, device number 3 [ 102.977631][ T6187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.987377][ T6187] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 103.039560][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 103.039579][ T30] audit: type=1400 audit(1745519944.008:245): avc: denied { create } for pid=6186 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.096301][ T6189] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 104.179824][ T6207] tmpfs: Unknown parameter 'usrquotaZvbɥxZ.Lʆ\gr؏x΁쵍T'!MhBe_./file1' [ 104.839213][ T30] audit: type=1400 audit(1745519945.778:246): avc: denied { bind } for pid=6201 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.084868][ T6211] sp0: Synchronizing with TNC [ 105.170733][ T30] audit: type=1400 audit(1745519946.148:247): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.286084][ T30] audit: type=1400 audit(1745519946.178:248): avc: denied { ioctl } for pid=6201 comm="syz.0.91" path="socket:[8850]" dev="sockfs" ino=8850 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.317279][ T30] audit: type=1400 audit(1745519946.178:249): avc: denied { module_request } for pid=6201 comm="syz.0.91" kmod=6E65746465762D08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 105.353997][ T30] audit: type=1400 audit(1745519946.188:250): avc: denied { open } for pid=5827 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.635904][ T30] audit: type=1400 audit(1745519946.188:251): avc: denied { ioctl } for pid=5827 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.733170][ T6200] [U] [ 105.782170][ T30] audit: type=1400 audit(1745519946.228:252): avc: denied { read } for pid=6214 comm="syz.1.92" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.863594][ T30] audit: type=1400 audit(1745519946.228:253): avc: denied { open } for pid=6214 comm="syz.1.92" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.938325][ T30] audit: type=1400 audit(1745519946.238:254): avc: denied { bind } for pid=6201 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.041714][ T6230] tmpfs: Unknown parameter 'usrquotaZvbɥxZ.Lʆ\gr؏x΁쵍T'!MhBe_./file1' [ 106.141778][ T6235] sp0: Synchronizing with TNC [ 106.506242][ T6240] overlay: ./file0 is not a directory [ 106.786426][ T6227] [U] [ 108.179812][ T6257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.189164][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 108.189183][ T30] audit: type=1400 audit(1745519949.168:334): avc: denied { create } for pid=6256 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.215454][ T6257] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 108.377372][ T6263] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 108.460597][ T6263] netlink: 'syz.4.103': attribute type 2 has an invalid length. [ 108.483694][ T30] audit: type=1400 audit(1745519949.188:335): avc: denied { setopt } for pid=6256 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.503527][ T30] audit: type=1400 audit(1745519949.208:336): avc: denied { read } for pid=5180 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 108.527301][ T30] audit: type=1400 audit(1745519949.208:337): avc: denied { search } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.549959][ T30] audit: type=1400 audit(1745519949.208:338): avc: denied { open } for pid=5180 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.572851][ T30] audit: type=1400 audit(1745519949.208:339): avc: denied { getattr } for pid=5180 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.597097][ T30] audit: type=1400 audit(1745519949.428:340): avc: denied { mount } for pid=6259 comm="syz.1.102" name="/" dev="autofs" ino=9528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 109.156798][ T30] audit: type=1400 audit(1745519949.708:341): avc: denied { write } for pid=6259 comm="syz.1.102" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.252271][ T30] audit: type=1400 audit(1745519949.718:342): avc: denied { setopt } for pid=6259 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.391831][ T30] audit: type=1400 audit(1745519949.718:343): avc: denied { getopt } for pid=6259 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.499551][ T6272] Zero length message leads to an empty skb [ 110.565438][ T5834] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 110.755828][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.030591][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 111.099847][ T5834] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 111.123817][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.147998][ T5834] usb 4-1: config 0 descriptor?? [ 111.180481][ T5834] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 111.201635][ T5834] dvb-usb: bulk message failed: -22 (3/0) [ 111.224224][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 111.229537][ T5834] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 111.245010][ T5834] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 111.261573][ T5834] usb 4-1: media controller created [ 111.281301][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.342979][ T5834] dvb-usb: bulk message failed: -22 (6/0) [ 111.498161][ T5834] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 111.523741][ T5834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 111.665481][ T6307] dvb-usb: bulk message failed: -22 (2/0) [ 111.765517][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 112.008813][ T5834] dvb-usb: schedule remote query interval to 150 msecs. [ 112.020051][ T5834] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 112.123142][ T6309] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 112.140618][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 112.180861][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 112.236100][ T5834] dvb-usb: error while querying for an remote control event. [ 112.657876][ T5138] Bluetooth: hci1: command tx timeout [ 112.721930][ T6317] process 'syz.0.117' launched './file0' with NULL argv: empty string added [ 112.735623][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 112.752911][ T5834] dvb-usb: error while querying for an remote control event. [ 112.756080][ T6309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.780599][ T6313] ip6erspan0: entered promiscuous mode [ 112.797090][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 112.892553][ T6313] bond1: (slave ip6erspan0): making interface the new active one [ 112.903745][ T6313] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 112.916579][ T6294] sp0: Synchronizing with TNC [ 112.987990][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 112.997086][ T5834] dvb-usb: error while querying for an remote control event. [ 113.027863][ T5830] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 113.196161][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 113.197263][ T10] usb 4-1: USB disconnect, device number 3 [ 113.421248][ T5834] dvb-usb: error while querying for an remote control event. [ 113.442516][ T5830] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 113.463010][ T5830] usb 1-1: config 0 has no interface number 0 [ 113.510257][ T5830] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 113.698807][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.707970][ T5830] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 134, setting to 64 [ 113.741337][ T5830] usb 1-1: config 0 interface 113 has no altsetting 0 [ 113.752856][ T5830] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 113.763148][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.772102][ T5830] usb 1-1: Product: syz [ 113.776569][ T5830] usb 1-1: Manufacturer: syz [ 113.783241][ T5830] usb 1-1: SerialNumber: syz [ 113.790774][ T5830] usb 1-1: config 0 descriptor?? [ 113.799450][ T6317] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 113.832462][ C0] usb 1-1: NFC: Urb failure (status -71) [ 113.839375][ C0] usb 1-1: NFC: Urb failure (status -71) [ 113.855827][ T5830] usb 1-1: NFC: Unable to get FW version [ 113.867509][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 113.867527][ T30] audit: type=1400 audit(1745519954.848:376): avc: denied { ioctl } for pid=6330 comm="syz.1.121" path="socket:[9619]" dev="sockfs" ino=9619 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.900780][ T5830] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -71 [ 114.824292][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.901066][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.920678][ T10] usb 1-1: USB disconnect, device number 4 [ 114.986616][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.124'. [ 115.014876][ T30] audit: type=1400 audit(1745519955.958:377): avc: denied { create } for pid=6340 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.039567][ T30] audit: type=1400 audit(1745519955.958:378): avc: denied { read } for pid=6340 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.067372][ T30] audit: type=1400 audit(1745519956.018:379): avc: denied { create } for pid=6340 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 115.160149][ T30] audit: type=1400 audit(1745519956.088:380): avc: denied { write } for pid=6340 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.205006][ T6338] syz.1.122 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.472153][ T30] audit: type=1400 audit(1745519956.448:381): avc: denied { create } for pid=6346 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.600658][ T30] audit: type=1400 audit(1745519956.578:382): avc: denied { read } for pid=6346 comm="syz.2.125" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.640896][ T30] audit: type=1400 audit(1745519956.578:383): avc: denied { open } for pid=6346 comm="syz.2.125" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.641205][ T54] Bluetooth: hci1: Malformed Event: 0x2f [ 115.767401][ T30] audit: type=1400 audit(1745519956.748:384): avc: denied { read } for pid=6352 comm="syz.3.128" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 115.849132][ T30] audit: type=1400 audit(1745519956.748:385): avc: denied { open } for pid=6352 comm="syz.3.128" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 117.143981][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.135'. [ 117.386177][ T6378] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.382165][ T6385] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.912657][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 118.912676][ T30] audit: type=1400 audit(1745519959.888:407): avc: denied { name_connect } for pid=6389 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 118.918476][ T6395] netlink: 'syz.2.140': attribute type 1 has an invalid length. [ 118.959743][ T30] audit: type=1400 audit(1745519959.928:408): avc: denied { listen } for pid=6389 comm="syz.1.139" lport=44891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.975181][ T6395] netlink: 'syz.2.140': attribute type 2 has an invalid length. [ 118.982551][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.176023][ T30] audit: type=1400 audit(1745519959.978:409): avc: denied { accept } for pid=6389 comm="syz.1.139" lport=44891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.198935][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.342858][ T30] audit: type=1400 audit(1745519959.998:410): avc: denied { create } for pid=6386 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.362308][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.368547][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.370975][ T30] audit: type=1400 audit(1745519959.998:411): avc: denied { setopt } for pid=6386 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.395602][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.677302][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 119.698336][ T30] audit: type=1400 audit(1745519960.678:412): avc: denied { write } for pid=6389 comm="syz.1.139" lport=44891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 119.743103][ T6393] netlink: 'syz.1.139': attribute type 13 has an invalid length. [ 119.835658][ T30] audit: type=1400 audit(1745519960.708:413): avc: denied { setopt } for pid=6389 comm="syz.1.139" lport=44891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 119.891867][ T30] audit: type=1400 audit(1745519960.868:414): avc: denied { write } for pid=6413 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.031709][ T6393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.220195][ T30] audit: type=1400 audit(1745519961.158:415): avc: denied { read } for pid=6413 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.482421][ T5830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.509248][ T5830] usb 2-1: too many configurations: 55, using maximum allowed: 8 [ 120.525880][ T5830] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 120.533884][ T5830] usb 2-1: can't read configurations, error -71 [ 120.583084][ T30] audit: type=1400 audit(1745519961.498:416): avc: denied { write } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.006459][ T6421] batman_adv: batadv0: Adding interface: dummy0 [ 121.024638][ T6421] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.202928][ T6421] batman_adv: batadv0: Interface activated: dummy0 [ 121.400134][ T6421] IPv6: addrconf: prefix option has invalid lifetime [ 121.782681][ T6434] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 122.738017][ T5873] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.957273][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 122.998363][ T5873] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 123.069741][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.086863][ T6451] warning: `syz.4.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.106202][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.134027][ T5873] usb 1-1: Product: syz [ 123.158628][ T5873] usb 1-1: Manufacturer: syz [ 123.213266][ T5873] usb 1-1: SerialNumber: syz [ 124.225115][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 124.225131][ T30] audit: type=1400 audit(1745519964.878:436): avc: denied { read } for pid=6461 comm="syz.4.157" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.304893][ T30] audit: type=1400 audit(1745519964.888:437): avc: denied { open } for pid=6461 comm="syz.4.157" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.328531][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.397273][ T30] audit: type=1400 audit(1745519965.238:438): avc: denied { write } for pid=6470 comm="syz.1.158" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.426354][ T30] audit: type=1400 audit(1745519965.268:439): avc: denied { watch watch_reads } for pid=6470 comm="syz.1.158" path="/40" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.449965][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.499438][ T30] audit: type=1400 audit(1745519965.478:440): avc: denied { watch } for pid=6437 comm="syz.0.150" path="/23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.543755][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.672626][ T30] audit: type=1400 audit(1745519965.478:441): avc: denied { watch_sb watch_reads } for pid=6437 comm="syz.0.150" path="/23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.717788][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.037213][ T30] audit: type=1400 audit(1745519965.928:442): avc: denied { getopt } for pid=6474 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.061333][ T30] audit: type=1400 audit(1745519966.008:443): avc: denied { create } for pid=6474 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.080610][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.272554][ T6486] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.078254][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'. [ 126.151825][ T5873] cdc_ncm 1-1:1.0: bind() failure [ 126.737124][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 126.790722][ T6473] sp0: Synchronizing with TNC [ 126.808999][ T5873] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 126.815964][ T5873] cdc_ncm 1-1:1.1: bind() failure [ 126.871981][ T5873] usb 1-1: USB disconnect, device number 5 [ 126.933300][ T6499] netlink: 19 bytes leftover after parsing attributes in process `syz.0.167'. [ 127.186674][ T30] audit: type=1400 audit(1745519968.158:444): avc: denied { create } for pid=6498 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.264593][ T30] audit: type=1400 audit(1745519968.208:445): avc: denied { bind } for pid=6498 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.453304][ T6499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.465738][ T5830] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.476756][ T6521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.767115][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 128.788408][ T5830] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 128.822796][ T5830] usb 2-1: config 0 has no interface number 0 [ 128.948219][ T5830] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 129.125765][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.246018][ T5830] usb 2-1: Product: syz [ 129.250777][ T5830] usb 2-1: Manufacturer: syz [ 129.255429][ T5830] usb 2-1: SerialNumber: syz [ 129.272656][ T5830] usb 2-1: config 0 descriptor?? [ 129.279976][ T6535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.281007][ T5830] smsc95xx v2.0.0 [ 129.293047][ T6535] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 129.383755][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 129.383793][ T30] audit: type=1400 audit(1745519970.348:448): avc: denied { getopt } for pid=6528 comm="syz.4.177" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.682065][ T30] audit: type=1400 audit(1745519970.348:449): avc: denied { bind } for pid=6528 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.909572][ T30] audit: type=1400 audit(1745519970.888:450): avc: denied { create } for pid=6540 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.933491][ T30] audit: type=1400 audit(1745519970.908:451): avc: denied { bind } for pid=6540 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.040252][ T5830] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 130.051129][ T5830] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 130.061538][ T30] audit: type=1400 audit(1745519970.908:452): avc: denied { listen } for pid=6540 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 130.084739][ T30] audit: type=1400 audit(1745519970.928:453): avc: denied { name_bind } for pid=6540 comm="syz.2.179" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 130.109454][ T30] audit: type=1400 audit(1745519970.928:454): avc: denied { node_bind } for pid=6540 comm="syz.2.179" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 130.131796][ T30] audit: type=1400 audit(1745519970.938:455): avc: denied { connect } for pid=6510 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.209074][ T970] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.287063][ T6548] No control pipe specified [ 130.332486][ T30] audit: type=1400 audit(1745519970.948:456): avc: denied { write } for pid=6510 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.477140][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 130.485342][ T970] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.611650][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.624641][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.870677][ T970] usb 3-1: config 0 has no interface number 0 [ 130.880549][ T970] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.895539][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.903868][ T970] usb 3-1: Product: syz [ 130.908188][ T970] usb 3-1: Manufacturer: syz [ 130.912916][ T970] usb 3-1: SerialNumber: syz [ 130.921305][ T970] usb 3-1: config 0 descriptor?? [ 130.944560][ T970] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.113437][ T6556] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 131.121716][ T6556] netlink: 'syz.0.184': attribute type 2 has an invalid length. [ 131.175288][ T5830] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 131.191325][ T5830] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 131.226093][ T5830] usb 2-1: USB disconnect, device number 9 [ 131.256530][ T6558] netlink: 19 bytes leftover after parsing attributes in process `syz.0.185'. [ 131.708652][ T6567] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 132.072807][ T6563] sp0: Synchronizing with TNC [ 132.078493][ T970] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 132.101995][ T970] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 132.143992][ T6558] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.245355][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 132.245702][ T5873] usb 3-1: USB disconnect, device number 4 [ 132.330184][ T5873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 132.533337][ T5873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.598545][ T5873] quatech2 3-1:0.51: device disconnected [ 134.567095][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.579800][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.628466][ T6597] No control pipe specified [ 135.052206][ T6604] netlink: 19 bytes leftover after parsing attributes in process `syz.0.197'. [ 135.140054][ T30] audit: type=1400 audit(1745519976.108:457): avc: denied { create } for pid=6605 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.180239][ T6612] FAULT_INJECTION: forcing a failure. [ 135.180239][ T6612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.180492][ T6609] netlink: 19 bytes leftover after parsing attributes in process `syz.2.199'. [ 135.193729][ T6612] CPU: 1 UID: 0 PID: 6612 Comm: syz.3.200 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 135.193754][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.193781][ T6612] Call Trace: [ 135.193788][ T6612] [ 135.193794][ T6612] dump_stack_lvl+0x16c/0x1f0 [ 135.193826][ T6612] should_fail_ex+0x512/0x640 [ 135.193853][ T6612] _copy_from_user+0x2e/0xd0 [ 135.193874][ T6612] copy_msghdr_from_user+0x98/0x160 [ 135.193895][ T6612] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 135.193922][ T6612] ___sys_sendmsg+0xfe/0x1d0 [ 135.193941][ T6612] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.193984][ T6612] __sys_sendmsg+0x16d/0x220 [ 135.194002][ T6612] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.194026][ T6612] ? rcu_is_watching+0x12/0xc0 [ 135.194053][ T6612] do_syscall_64+0xcd/0x260 [ 135.194075][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.194091][ T6612] RIP: 0033:0x7f2ead58e969 [ 135.194105][ T6612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.194119][ T6612] RSP: 002b:00007f2eae445038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.194135][ T6612] RAX: ffffffffffffffda RBX: 00007f2ead7b5fa0 RCX: 00007f2ead58e969 [ 135.194144][ T6612] RDX: 00000000000440d6 RSI: 0000200000000140 RDI: 0000000000000003 [ 135.194153][ T6612] RBP: 00007f2eae445090 R08: 0000000000000000 R09: 0000000000000000 [ 135.194161][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.194169][ T6612] R13: 0000000000000000 R14: 00007f2ead7b5fa0 R15: 00007ffe3b3a2aa8 [ 135.194189][ T6612] [ 135.199108][ T30] audit: type=1400 audit(1745519976.148:458): avc: denied { setopt } for pid=6605 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.458797][ T6604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.304096][ T6650] No control pipe specified [ 139.455002][ T6659] netlink: 19 bytes leftover after parsing attributes in process `syz.1.212'. [ 140.269752][ T61] Bluetooth: hci6: Frame reassembly failed (-84) [ 140.298264][ T6673] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.217'. [ 140.310928][ T6673] tmpfs: Unknown parameter 'qutv?a' [ 140.335895][ T30] audit: type=1400 audit(1745519981.308:459): avc: denied { ioctl } for pid=6670 comm="syz.1.217" path="socket:[12320]" dev="sockfs" ino=12320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.770218][ T6677] netlink: 68 bytes leftover after parsing attributes in process `syz.3.215'. [ 140.771573][ T6673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 140.795405][ T6673] batman_adv: batadv0: Adding interface: ip6gretap1 [ 140.802701][ T6673] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.835742][ T6669] No control pipe specified [ 140.837741][ T6673] batman_adv: batadv0: Interface activated: ip6gretap1 [ 140.857143][ T30] audit: type=1400 audit(1745519981.818:460): avc: denied { audit_write } for pid=6670 comm="syz.1.217" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 141.371112][ T5138] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 141.422843][ T6657] sp0: Synchronizing with TNC [ 142.336915][ T5138] Bluetooth: hci6: command 0xfc11 tx timeout [ 142.343514][ T54] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 142.369870][ T6667] sp0: Synchronizing with TNC [ 142.867252][ T30] audit: type=1400 audit(1745519983.838:461): avc: denied { bind } for pid=6698 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.962036][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 144.163309][ T6714] autofs: Bad value for 'fd' [ 145.112863][ T30] audit: type=1400 audit(1745519986.078:462): avc: denied { bind } for pid=6710 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.176687][ T6721] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 145.216770][ T30] audit: type=1400 audit(1745519986.078:463): avc: denied { read } for pid=6710 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.339882][ T30] audit: type=1400 audit(1745519986.088:464): avc: denied { setopt } for pid=6710 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.444808][ T30] audit: type=1400 audit(1745519986.138:465): avc: denied { read } for pid=6717 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.567963][ T30] audit: type=1400 audit(1745519986.138:466): avc: denied { open } for pid=6717 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.671553][ T82] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.683714][ T30] audit: type=1400 audit(1745519986.138:467): avc: denied { getattr } for pid=6717 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.872481][ T30] audit: type=1400 audit(1745519986.228:468): avc: denied { listen } for pid=6720 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.695131][ T30] audit: type=1400 audit(1745519987.658:469): avc: denied { write } for pid=6712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.734774][ T82] usb 3-1: Using ep0 maxpacket: 32 [ 146.824144][ T82] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.952472][ T82] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 146.998875][ T30] audit: type=1400 audit(1745519987.658:470): avc: denied { add_name } for pid=6712 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.021589][ T82] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.026022][ T6749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.063058][ T82] usb 3-1: Product: syz [ 147.082004][ T82] usb 3-1: Manufacturer: syz [ 147.086810][ T82] usb 3-1: SerialNumber: syz [ 147.240348][ T30] audit: type=1400 audit(1745519987.658:471): avc: denied { create } for pid=6712 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.393593][ T82] usb 3-1: config 0 descriptor?? [ 147.409382][ T30] audit: type=1400 audit(1745519987.658:472): avc: denied { write } for pid=6712 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=2767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.503060][ T30] audit: type=1400 audit(1745519987.658:473): avc: denied { append } for pid=6712 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=2767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.834227][ T82] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 148.337852][ T6775] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.369513][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 148.593142][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.666340][ T82] usb 3-1: USB disconnect, device number 5 [ 148.777602][ T6778] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 148.887407][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 148.896448][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 148.930957][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.967979][ T10] usb 5-1: config 0 descriptor?? [ 149.023601][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 149.047061][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 149.064080][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 149.089983][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 149.214544][ T6787] autofs: Bad value for 'fd' [ 149.868523][ T10] usb 5-1: media controller created [ 149.875733][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.888917][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 149.894825][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 149.909287][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 149.926630][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 149.935209][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 150.087183][ T5830] dvb-usb: bulk message failed: -22 (1/0) [ 150.150594][ T5830] dvb-usb: error while querying for an remote control event. [ 150.768805][ T5830] dvb-usb: bulk message failed: -22 (1/0) [ 151.039416][ T5830] dvb-usb: error while querying for an remote control event. [ 151.318056][ T970] dvb-usb: bulk message failed: -22 (1/0) [ 151.370334][ T970] dvb-usb: error while querying for an remote control event. [ 151.637174][ T970] dvb-usb: bulk message failed: -22 (1/0) [ 151.645512][ T970] dvb-usb: error while querying for an remote control event. [ 151.692283][ T82] usb 5-1: USB disconnect, device number 3 [ 151.789480][ T82] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 152.225967][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 152.225990][ T30] audit: type=1400 audit(1745519993.198:477): avc: denied { mounton } for pid=6817 comm="syz.2.248" path="/53/bus" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 152.487239][ T30] audit: type=1400 audit(1745519993.308:478): avc: denied { create } for pid=6820 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.506606][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.639055][ T30] audit: type=1400 audit(1745519993.348:479): avc: denied { mount } for pid=6817 comm="syz.2.248" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 152.702296][ T30] audit: type=1400 audit(1745519993.368:480): avc: denied { bind } for pid=6817 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.760952][ T6818] XFS (nullb0): Invalid superblock magic number [ 153.065698][ T6835] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 154.165100][ T30] audit: type=1400 audit(1745519995.138:481): avc: denied { create } for pid=6840 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.290807][ T30] audit: type=1400 audit(1745519995.138:482): avc: denied { connect } for pid=6840 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.338682][ T30] audit: type=1400 audit(1745519995.318:483): avc: denied { append } for pid=6844 comm="syz.0.256" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.910864][ T6851] autofs: Bad value for 'fd' [ 155.315552][ T30] audit: type=1400 audit(1745519996.288:484): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 155.352711][ T6855] fuse: Bad value for 'fd' [ 155.608169][ T5830] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.667193][ T970] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 155.674852][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.758623][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 155.765489][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.773853][ T5830] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 155.783286][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.791683][ T5830] usb 3-1: Product: syz [ 155.796306][ T5830] usb 3-1: Manufacturer: syz [ 155.801124][ T5830] usb 3-1: SerialNumber: syz [ 155.808663][ T5830] usb 3-1: config 0 descriptor?? [ 155.837742][ T5831] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 155.849948][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 155.854303][ T6839] sp0: Synchronizing with TNC [ 155.860307][ T970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.891103][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.902988][ T970] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.912674][ T970] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 155.926068][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 155.935574][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.946180][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.955663][ T10] usb 4-1: Product: syz [ 155.961960][ T970] usb 1-1: config 0 descriptor?? [ 155.968131][ T10] usb 4-1: Manufacturer: syz [ 155.972926][ T10] usb 4-1: SerialNumber: syz [ 155.981985][ T970] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 155.990211][ T970] dvb-usb: bulk message failed: -22 (3/0) [ 155.996909][ T10] usb 4-1: config 0 descriptor?? [ 156.009337][ T970] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 156.024346][ T970] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 156.031753][ T970] usb 1-1: media controller created [ 156.039751][ T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.054777][ T970] dvb-usb: bulk message failed: -22 (6/0) [ 156.060847][ T970] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 156.071395][ T970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 156.086680][ T970] dvb-usb: schedule remote query interval to 150 msecs. [ 156.093879][ T970] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 156.225148][ T5830] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 156.249309][ T970] dvb-usb: bulk message failed: -22 (1/0) [ 156.262289][ T970] dvb-usb: error while querying for an remote control event. [ 156.409542][ T10] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 156.427227][ T970] dvb-usb: bulk message failed: -22 (1/0) [ 156.436536][ T970] dvb-usb: error while querying for an remote control event. [ 156.608076][ T970] dvb-usb: bulk message failed: -22 (1/0) [ 156.679252][ T970] dvb-usb: error while querying for an remote control event. [ 156.846428][ T10] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 156.958313][ T970] dvb-usb: bulk message failed: -22 (1/0) [ 156.967873][ T5830] usb 3-1: USB disconnect, device number 6 [ 156.976415][ T970] dvb-usb: error while querying for an remote control event. [ 157.020464][ T10] usb 4-1: USB disconnect, device number 4 [ 157.409746][ T970] dvb-usb: bulk message failed: -22 (1/0) [ 157.423674][ T970] dvb-usb: error while querying for an remote control event. [ 157.587123][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 157.715490][ T10] dvb-usb: error while querying for an remote control event. [ 157.981769][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 158.010138][ T10] dvb-usb: error while querying for an remote control event. [ 158.333189][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 158.576760][ T10] dvb-usb: error while querying for an remote control event. [ 158.604131][ T5938] usb 1-1: USB disconnect, device number 6 [ 158.784304][ T5938] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 158.934069][ T6883] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 158.958350][ T5875] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 159.237232][ T5875] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 159.277098][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.310328][ T5875] usb 4-1: Product: syz [ 159.320974][ T5875] usb 4-1: Manufacturer: syz [ 159.327307][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.335728][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.345114][ T5875] usb 4-1: SerialNumber: syz [ 159.361711][ T5875] usb 4-1: config 0 descriptor?? [ 159.378940][ T5875] imon_raw 4-1:0.0: IR endpoint missing [ 159.387402][ T6887] bridge0: entered allmulticast mode [ 159.433101][ T6888] bridge_slave_1: left allmulticast mode [ 159.474985][ T6888] bridge_slave_1: left promiscuous mode [ 159.507318][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.629903][ T6887] netlink: 76 bytes leftover after parsing attributes in process `syz.4.267'. [ 159.675877][ T6888] bridge_slave_0: left allmulticast mode [ 159.846374][ T6888] bridge_slave_0: left promiscuous mode [ 159.952032][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.385892][ T6899] fuse: Bad value for 'fd' [ 160.744034][ T10] usb 4-1: USB disconnect, device number 5 [ 160.967986][ T30] audit: type=1400 audit(1745520001.938:485): avc: denied { write } for pid=6904 comm="syz.0.273" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.120428][ T30] audit: type=1400 audit(1745520002.088:486): avc: denied { listen } for pid=6911 comm="syz.3.275" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 161.179096][ T30] audit: type=1400 audit(1745520002.088:487): avc: denied { setopt } for pid=6911 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 161.257195][ T30] audit: type=1400 audit(1745520002.088:488): avc: denied { connect } for pid=6911 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 161.559776][ T30] audit: type=1400 audit(1745520002.088:489): avc: denied { name_connect } for pid=6911 comm="syz.3.275" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 161.662927][ T30] audit: type=1400 audit(1745520002.088:490): avc: denied { write } for pid=6911 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 162.555496][ T6909] netlink: 76 bytes leftover after parsing attributes in process `syz.4.274'. [ 163.168950][ T5938] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.197279][ T6937] dlm: no local IP address has been set [ 163.206409][ T6937] dlm: cannot start dlm midcomms -107 [ 163.290236][ T30] audit: type=1400 audit(1745520004.268:491): avc: denied { bind } for pid=6941 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.337052][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 163.344657][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.397180][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.427187][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.978512][ T5938] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.987886][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.991420][ T30] audit: type=1400 audit(1745520004.948:492): avc: denied { write } for pid=6941 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.998922][ T5938] usb 1-1: config 0 descriptor?? [ 164.015178][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.056639][ T30] audit: type=1400 audit(1745520005.028:493): avc: denied { accept } for pid=6941 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.082680][ T6946] Illegal XDP return value 2052793408 on prog (id 39) dev syz_tun, expect packet loss! [ 164.397298][ T5831] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 164.406388][ T54] Bluetooth: hci5: command 0xfc11 tx timeout [ 164.447178][ T6924] sp0: Synchronizing with TNC [ 164.591889][ T5938] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 164.620369][ T970] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.755487][ T5938] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input9 [ 164.903034][ T5938] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 164.915219][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 164.937543][ T5938] usb 1-1: USB disconnect, device number 7 [ 164.944483][ T970] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 164.959980][ T970] usb 3-1: config 0 has no interface number 0 [ 164.993777][ T970] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 165.003145][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.018746][ T970] usb 3-1: Product: syz [ 165.032861][ T970] usb 3-1: Manufacturer: syz [ 165.040990][ T970] usb 3-1: SerialNumber: syz [ 165.065470][ T970] usb 3-1: config 0 descriptor?? [ 165.081125][ T970] smsc95xx v2.0.0 [ 165.524497][ T970] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 165.591883][ T970] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 166.026720][ T30] audit: type=1400 audit(1745520006.998:494): avc: denied { read } for pid=6973 comm="syz.0.293" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.097101][ T30] audit: type=1400 audit(1745520007.058:495): avc: denied { create } for pid=6973 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 166.116439][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.127123][ T5938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.145108][ T30] audit: type=1400 audit(1745520007.058:496): avc: denied { write } for pid=6973 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 166.157564][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.173515][ T30] audit: type=1400 audit(1745520007.058:497): avc: denied { nlmsg_write } for pid=6973 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 166.307271][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 166.331204][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.362885][ T5938] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.864184][ T5938] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.874976][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.885703][ T970] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 166.901016][ T970] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 166.910229][ T5938] usb 4-1: config 0 descriptor?? [ 166.934699][ T970] usb 3-1: USB disconnect, device number 7 [ 167.419886][ T6994] FAULT_INJECTION: forcing a failure. [ 167.419886][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 167.507499][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.0.298 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 167.507532][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.507544][ T6994] Call Trace: [ 167.507550][ T6994] [ 167.507558][ T6994] dump_stack_lvl+0x16c/0x1f0 [ 167.507592][ T6994] should_fail_ex+0x512/0x640 [ 167.507613][ T6994] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 167.507644][ T6994] should_failslab+0xc2/0x120 [ 167.507665][ T6994] __kmalloc_cache_noprof+0x6a/0x3e0 [ 167.507688][ T6994] ? get_mm_exe_file+0x8a/0x1a0 [ 167.507715][ T6994] ? landlock_init_hierarchy_log+0xa7/0x870 [ 167.507745][ T6994] landlock_init_hierarchy_log+0xa7/0x870 [ 167.507769][ T6994] landlock_merge_ruleset+0x6e1/0x870 [ 167.507797][ T6994] ? prepare_creds+0x583/0x7d0 [ 167.507819][ T6994] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 167.507848][ T6994] do_syscall_64+0xcd/0x260 [ 167.507875][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.507893][ T6994] RIP: 0033:0x7f419d78e969 [ 167.507907][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.507923][ T6994] RSP: 002b:00007f419e663038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 167.507942][ T6994] RAX: ffffffffffffffda RBX: 00007f419d9b5fa0 RCX: 00007f419d78e969 [ 167.507952][ T6994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 167.507962][ T6994] RBP: 00007f419e663090 R08: 0000000000000000 R09: 0000000000000000 [ 167.508001][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.508011][ T6994] R13: 0000000000000000 R14: 00007f419d9b5fa0 R15: 00007ffedd85cea8 [ 167.508034][ T6994] [ 167.508720][ T6994] ------------[ cut here ]------------ [ 167.690449][ T6994] WARNING: CPU: 1 PID: 6994 at security/landlock/domain.h:133 free_ruleset+0x226/0x270 [ 167.700580][ T6994] Modules linked in: [ 167.704518][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.0.298 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 167.717837][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.731715][ T6994] RIP: 0010:free_ruleset+0x226/0x270 [ 167.738015][ T6994] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 92 6e 2a fd be 03 00 00 00 4c 89 f7 e8 75 f6 3e 00 e9 42 ff ff ff e8 7b 6e 2a fd 90 <0f> 0b 90 eb af e8 10 ea 8f fd e9 4a fe ff ff 48 89 df e8 03 ea 8f [ 167.759797][ T6994] RSP: 0018:ffffc90003277e38 EFLAGS: 00010293 [ 167.765928][ T6994] RAX: 0000000000000000 RBX: ffff88802c9dff00 RCX: ffffffff8491d88f [ 167.774639][ T6994] RDX: ffff88802bb22440 RSI: ffffffff8490e175 RDI: 0000000000000005 [ 167.783296][ T6994] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 167.791884][ T6994] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803241cd00 [ 167.800625][ T6994] R13: dffffc0000000000 R14: ffff88802c9dff20 R15: fffffffffffffff4 Connection to 10.128.0.88 closed by remote host. [ 167.809261][ T6994] FS: 00007f419e6636c0(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 167.818897][ T6994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.825521][ T6994] CR2: 00007fff728a6f80 CR3: 0000000035138000 CR4: 00000000003526f0 [ 167.837655][ T6994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.845709][ T6994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.854931][ T6994] Call Trace: [ 167.858309][ T6994] [ 167.861249][ T6994] landlock_put_ruleset+0xa5/0xb0 [ 167.866309][ T6994] landlock_merge_ruleset+0x218/0x870 [ 167.871819][ T6994] ? prepare_creds+0x583/0x7d0 [ 167.876612][ T6994] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 167.882934][ T6994] do_syscall_64+0xcd/0x260 [ 167.887509][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.893440][ T6994] RIP: 0033:0x7f419d78e969 [ 167.897952][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.917779][ T6994] RSP: 002b:00007f419e663038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 167.927213][ T6994] RAX: ffffffffffffffda RBX: 00007f419d9b5fa0 RCX: 00007f419d78e969 [ 167.936303][ T6994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 167.944384][ T6994] RBP: 00007f419e663090 R08: 0000000000000000 R09: 0000000000000000 [ 167.952567][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.960619][ T6994] R13: 0000000000000000 R14: 00007f419d9b5fa0 R15: 00007ffedd85cea8 [ 167.968765][ T6994] [ 167.971809][ T6994] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.979118][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.0.298 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 167.991055][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.001106][ T6994] Call Trace: [ 168.004369][ T6994] [ 168.007283][ T6994] dump_stack_lvl+0x3d/0x1f0 [ 168.011873][ T6994] panic+0x71c/0x800 [ 168.016372][ T6994] ? __pfx_panic+0x10/0x10 [ 168.020768][ T6994] ? show_trace_log_lvl+0x29b/0x3e0 [ 168.025959][ T6994] ? check_panic_on_warn+0x1f/0xb0 [ 168.031072][ T6994] ? free_ruleset+0x226/0x270 [ 168.035759][ T6994] check_panic_on_warn+0xab/0xb0 [ 168.040683][ T6994] __warn+0xf6/0x3c0 [ 168.044559][ T6994] ? free_ruleset+0x226/0x270 [ 168.049225][ T6994] report_bug+0x3c3/0x580 [ 168.053544][ T6994] ? free_ruleset+0x226/0x270 [ 168.058208][ T6994] handle_bug+0x184/0x210 [ 168.062529][ T6994] exc_invalid_op+0x17/0x50 [ 168.067042][ T6994] asm_exc_invalid_op+0x1a/0x20 [ 168.071876][ T6994] RIP: 0010:free_ruleset+0x226/0x270 [ 168.077168][ T6994] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 92 6e 2a fd be 03 00 00 00 4c 89 f7 e8 75 f6 3e 00 e9 42 ff ff ff e8 7b 6e 2a fd 90 <0f> 0b 90 eb af e8 10 ea 8f fd e9 4a fe ff ff 48 89 df e8 03 ea 8f [ 168.096808][ T6994] RSP: 0018:ffffc90003277e38 EFLAGS: 00010293 [ 168.102873][ T6994] RAX: 0000000000000000 RBX: ffff88802c9dff00 RCX: ffffffff8491d88f [ 168.110841][ T6994] RDX: ffff88802bb22440 RSI: ffffffff8490e175 RDI: 0000000000000005 [ 168.118795][ T6994] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 168.126779][ T6994] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803241cd00 [ 168.134772][ T6994] R13: dffffc0000000000 R14: ffff88802c9dff20 R15: fffffffffffffff4 [ 168.142749][ T6994] ? landlock_log_drop_domain+0x5f/0x1e0 [ 168.148380][ T6994] ? free_ruleset+0x225/0x270 [ 168.153049][ T6994] ? free_ruleset+0x225/0x270 [ 168.157714][ T6994] landlock_put_ruleset+0xa5/0xb0 [ 168.162729][ T6994] landlock_merge_ruleset+0x218/0x870 [ 168.168091][ T6994] ? prepare_creds+0x583/0x7d0 [ 168.172841][ T6994] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 168.178993][ T6994] do_syscall_64+0xcd/0x260 [ 168.183531][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.189409][ T6994] RIP: 0033:0x7f419d78e969 [ 168.193808][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.213398][ T6994] RSP: 002b:00007f419e663038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 168.221795][ T6994] RAX: ffffffffffffffda RBX: 00007f419d9b5fa0 RCX: 00007f419d78e969 [ 168.229748][ T6994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 168.237702][ T6994] RBP: 00007f419e663090 R08: 0000000000000000 R09: 0000000000000000 [ 168.245654][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.253608][ T6994] R13: 0000000000000000 R14: 00007f419d9b5fa0 R15: 00007ffedd85cea8 [ 168.261572][ T6994] [ 168.264807][ T6994] Kernel Offset: disabled [ 168.269114][ T6994] Rebooting in 86400 seconds..