last executing test programs: 3.83649686s ago: executing program 1 (id=50): r0 = socket$can_bcm(0x1d, 0x2, 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x204c08, &(0x7f0000002140)=ANY=[@ANYBLOB='fd']) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 3.233429055s ago: executing program 1 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xffe0}, {0xfff3, 0xffff}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) 2.981162604s ago: executing program 1 (id=52): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40200, 0x0) syz_clone(0x2910a000, 0x0, 0x37, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000001c0)) 2.458360034s ago: executing program 0 (id=54): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf25070000000a0004007770616e3300000008000500020000000c00060001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) 2.218858302s ago: executing program 0 (id=55): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x8a, 0x0, 0x1, 0x80000000}, 0x28) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34", @ANYBLOB], 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd", 0xd, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x880, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8040, 0x0) syz_open_pts(r1, 0x84e01) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2) 1.599480649s ago: executing program 1 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 1.119626326s ago: executing program 0 (id=57): execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x200000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.020271673s ago: executing program 1 (id=58): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @val=@tracing}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4, r0}, 0x9) 789.781821ms ago: executing program 0 (id=59): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x0, 0x0, 0x103, 0x9}, 0x20) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 719.766346ms ago: executing program 1 (id=60): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40200, 0x0) syz_clone(0x2910a000, 0x0, 0x37, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000001c0)) 230.276913ms ago: executing program 0 (id=61): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 0s ago: executing program 0 (id=62): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x6a, 0xa, 0xff00}, [@call={0x2e}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x161, &(0x7f0000000180)=""/149, 0x0, 0x284, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd84, 0x10, 0x0, 0x1e}, 0x2d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 47.086795][ T29] audit: type=1400 audit(47.000:56): avc: denied { read write } for pid=3084 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.087294][ T29] audit: type=1400 audit(47.000:57): avc: denied { open } for pid=3084 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:36600' (ED25519) to the list of known hosts. [ 59.282933][ T29] audit: type=1400 audit(59.180:58): avc: denied { name_bind } for pid=3087 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.469906][ T29] audit: type=1400 audit(60.380:59): avc: denied { execute } for pid=3088 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.474178][ T29] audit: type=1400 audit(60.380:60): avc: denied { execute_no_trans } for pid=3088 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.816534][ T29] audit: type=1400 audit(62.730:61): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 62.821763][ T29] audit: type=1400 audit(62.730:62): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.837508][ T3088] cgroup: Unknown subsys name 'net' [ 62.843263][ T29] audit: type=1400 audit(62.750:63): avc: denied { unmount } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.063283][ T3088] cgroup: Unknown subsys name 'cpuset' [ 63.071532][ T3088] cgroup: Unknown subsys name 'hugetlb' [ 63.072516][ T3088] cgroup: Unknown subsys name 'rlimit' [ 63.356319][ T29] audit: type=1400 audit(63.270:64): avc: denied { setattr } for pid=3088 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.361011][ T29] audit: type=1400 audit(63.270:65): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.365249][ T29] audit: type=1400 audit(63.270:66): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.578841][ T3090] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.581898][ T29] audit: type=1400 audit(63.490:67): avc: denied { relabelto } for pid=3090 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 70.879571][ T3088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.891424][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 72.891983][ T29] audit: type=1400 audit(72.800:71): avc: denied { execmem } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.970343][ T29] audit: type=1400 audit(72.880:72): avc: denied { read } for pid=3093 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.979956][ T29] audit: type=1400 audit(72.880:73): avc: denied { open } for pid=3094 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.982577][ T29] audit: type=1400 audit(72.890:74): avc: denied { mounton } for pid=3094 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.008540][ T29] audit: type=1400 audit(72.920:76): avc: denied { module_request } for pid=3094 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.010316][ T29] audit: type=1400 audit(72.920:75): avc: denied { module_request } for pid=3093 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.099292][ T29] audit: type=1400 audit(73.010:77): avc: denied { sys_module } for pid=3094 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.823133][ T29] audit: type=1400 audit(73.730:78): avc: denied { ioctl } for pid=3094 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=676 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.020574][ T3094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.036808][ T3094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.171493][ T3093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.180582][ T3093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.720841][ T3094] hsr_slave_0: entered promiscuous mode [ 75.723168][ T3094] hsr_slave_1: entered promiscuous mode [ 76.056940][ T3093] hsr_slave_0: entered promiscuous mode [ 76.059659][ T3093] hsr_slave_1: entered promiscuous mode [ 76.061943][ T3093] debugfs: 'hsr0' already exists in 'hsr' [ 76.063370][ T3093] Cannot create hsr debugfs directory [ 76.130601][ T29] audit: type=1400 audit(76.040:79): avc: denied { create } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.132395][ T29] audit: type=1400 audit(76.040:80): avc: denied { write } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.144313][ T3094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.159833][ T3094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.170111][ T3094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.181600][ T3094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.453049][ T3093] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.463403][ T3093] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.473402][ T3093] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.485905][ T3093] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.954255][ T3094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.109038][ T3093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.527614][ T3093] veth0_vlan: entered promiscuous mode [ 79.566114][ T3093] veth1_vlan: entered promiscuous mode [ 79.589463][ T3094] veth0_vlan: entered promiscuous mode [ 79.618329][ T3094] veth1_vlan: entered promiscuous mode [ 79.653462][ T3093] veth0_macvtap: entered promiscuous mode [ 79.668435][ T3093] veth1_macvtap: entered promiscuous mode [ 79.695421][ T3094] veth0_macvtap: entered promiscuous mode [ 79.710447][ T3094] veth1_macvtap: entered promiscuous mode [ 79.772937][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.783497][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784111][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784316][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.813692][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.818616][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.818844][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.819027][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.918832][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 79.919840][ T29] audit: type=1400 audit(79.830:82): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.928598][ T29] audit: type=1400 audit(79.840:83): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/syzkaller.UM0mXd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.955076][ T29] audit: type=1400 audit(79.860:84): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.963155][ T29] audit: type=1400 audit(79.870:85): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/syzkaller.UM0mXd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 79.969434][ T29] audit: type=1400 audit(79.880:86): avc: denied { mounton } for pid=3094 comm="syz-executor" path="/syzkaller.cGQ96O/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 79.987251][ T29] audit: type=1400 audit(79.900:87): avc: denied { unmount } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.993974][ T29] audit: type=1400 audit(79.900:88): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.003596][ T29] audit: type=1400 audit(79.910:89): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="gadgetfs" ino=2530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 80.010240][ T29] audit: type=1400 audit(79.920:90): avc: denied { mount } for pid=3094 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.011775][ T29] audit: type=1400 audit(79.920:91): avc: denied { mounton } for pid=3094 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 80.074014][ T3094] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.198560][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 90.199628][ T29] audit: type=1400 audit(90.110:100): avc: denied { create } for pid=3794 comm="syz.1.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.039641][ T29] audit: type=1400 audit(91.950:101): avc: denied { prog_run } for pid=3796 comm="syz.0.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.385435][ T29] audit: type=1400 audit(103.290:102): avc: denied { create } for pid=3812 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.578510][ T29] audit: type=1400 audit(103.490:103): avc: denied { create } for pid=3812 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.582391][ T29] audit: type=1400 audit(103.490:104): avc: denied { setopt } for pid=3812 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.821633][ T3803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.926918][ T29] audit: type=1400 audit(103.840:105): avc: denied { create } for pid=3819 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.932708][ T29] audit: type=1400 audit(103.840:106): avc: denied { bind } for pid=3819 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.103022][ T29] audit: type=1400 audit(104.010:107): avc: denied { setopt } for pid=3819 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.109253][ T29] audit: type=1400 audit(104.020:108): avc: denied { accept } for pid=3819 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.200135][ T3824] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 105.710373][ T29] audit: type=1400 audit(105.620:109): avc: denied { map_read map_write } for pid=3831 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.783367][ T29] audit: type=1400 audit(105.690:110): avc: denied { name_bind } for pid=3833 comm="syz.0.12" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 105.787276][ T29] audit: type=1400 audit(105.690:111): avc: denied { node_bind } for pid=3833 comm="syz.0.12" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.434303][ T3844] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.465663][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.625332][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 106.636076][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 106.637473][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 106.638797][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.656244][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 106.657647][ T9] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 106.658825][ T9] usb 1-1: Product: syz [ 106.659634][ T9] usb 1-1: Manufacturer: syz [ 106.660450][ T9] usb 1-1: SerialNumber: syz [ 106.684323][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input3 [ 106.903443][ T23] usb 1-1: USB disconnect, device number 2 [ 106.948992][ T23] appletouch 1-1:1.0: input: appletouch disconnected [ 118.275223][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 118.277551][ T29] audit: type=1400 audit(118.180:114): avc: denied { allowed } for pid=3874 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.288055][ T29] audit: type=1400 audit(118.200:115): avc: denied { create } for pid=3874 comm="syz.1.20" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.292276][ T29] audit: type=1400 audit(118.200:116): avc: denied { map } for pid=3874 comm="syz.1.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.298027][ T29] audit: type=1400 audit(118.210:117): avc: denied { read write } for pid=3874 comm="syz.1.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.410896][ T29] audit: type=1400 audit(118.320:118): avc: denied { read } for pid=3878 comm="syz.1.21" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.413665][ T29] audit: type=1400 audit(118.320:119): avc: denied { open } for pid=3878 comm="syz.1.21" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.998703][ T29] audit: type=1400 audit(118.910:120): avc: denied { create } for pid=3878 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.572203][ T29] audit: type=1400 audit(121.480:121): avc: denied { unmount } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 121.795474][ T29] audit: type=1400 audit(121.700:122): avc: denied { setopt } for pid=3888 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.397058][ T29] audit: type=1400 audit(122.310:123): avc: denied { create } for pid=3892 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.083355][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 127.087858][ T29] audit: type=1400 audit(126.990:126): avc: denied { name_bind } for pid=3896 comm="syz.1.27" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 141.435270][ T29] audit: type=1400 audit(141.280:127): avc: denied { bind } for pid=3910 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.435642][ T29] audit: type=1400 audit(141.280:128): avc: denied { node_bind } for pid=3910 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 141.435950][ T29] audit: type=1400 audit(141.290:129): avc: denied { connect } for pid=3910 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.436154][ T29] audit: type=1400 audit(141.290:130): avc: denied { write } for pid=3910 comm="syz.0.31" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.849024][ T3925] netlink: 'syz.1.36': attribute type 11 has an invalid length. [ 151.849516][ T3925] netlink: 36 bytes leftover after parsing attributes in process `syz.1.36'. [ 152.367406][ T29] audit: type=1400 audit(152.280:131): avc: denied { execute } for pid=3934 comm="syz.1.39" path="/22/memory.events" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.600344][ T29] audit: type=1400 audit(152.510:132): avc: denied { block_suspend } for pid=3936 comm="syz.1.40" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.483459][ T29] audit: type=1400 audit(153.370:133): avc: denied { create } for pid=3949 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.964947][ T29] audit: type=1326 audit(153.870:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.0.46" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 153.981664][ T29] audit: type=1326 audit(153.880:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.0.46" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 153.982121][ T29] audit: type=1326 audit(153.890:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.0.46" exe="/syz-executor" sig=0 arch=40000028 syscall=323 compat=0 ip=0x132510 code=0x7ffc0000 [ 153.982432][ T29] audit: type=1326 audit(153.890:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.0.46" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132510 code=0x7ffc0000 [ 154.275030][ T29] audit: type=1400 audit(154.180:138): avc: denied { write } for pid=3956 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 154.556664][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 155.282502][ T29] audit: type=1400 audit(155.190:139): avc: denied { connect } for pid=3994 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.294897][ T29] audit: type=1400 audit(155.200:140): avc: denied { write } for pid=3994 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.325823][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 155.378650][ T3997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.397850][ T3997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.407657][ T3997] bond0 (unregistering): Released all slaves [ 156.956425][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 157.216343][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 157.246871][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.257753][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.282678][ T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 157.286656][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.287881][ T9] usb 1-1: Product: syz [ 157.288658][ T9] usb 1-1: Manufacturer: syz [ 157.289669][ T9] usb 1-1: SerialNumber: syz [ 157.297784][ T9] usb 1-1: config 0 descriptor?? [ 157.310576][ T9] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 157.588923][ T4046] Zero length message leads to an empty skb [ 157.720689][ T1461] usb 1-1: USB disconnect, device number 3 [ 157.738720][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 157.745541][ T29] audit: type=1400 audit(157.650:144): avc: denied { create } for pid=4053 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.959753][ T29] audit: type=1400 audit(157.870:145): avc: denied { ioctl } for pid=4063 comm="syz.1.58" path="socket:[2759]" dev="sockfs" ino=2759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.011576][ T4066] mmap: syz.0.57 (4066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.670683][ T29] audit: type=1400 audit(158.580:146): avc: denied { write } for pid=4072 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.910088][ T4077] ------------[ cut here ]------------ [ 158.910707][ T4077] WARNING: CPU: 0 PID: 4077 at kernel/bpf/verifier.c:2715 reg_bounds_sanity_check+0x390/0x45c [ 158.913065][ T4077] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x1] s64=[0x0, 0x1] u32=[0x1, 0x0] s32=[0x0, 0x1] var_off=(0x0, 0x1) [ 158.913619][ T4077] Modules linked in: [ 158.914522][ T4077] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.915528][ T4077] CPU: 0 UID: 0 PID: 4077 Comm: syz.0.62 Not tainted syzkaller #0 PREEMPT [ 158.917570][ T4077] Hardware name: ARM-Versatile Express [ 158.918562][ T4077] Call trace: [ 158.919008][ T4077] [<80201a24>] (dump_backtrace) from [<80201b20>] (show_stack+0x18/0x1c) [ 158.919532][ T4077] r7:822406c0 r6:838b4800 r5:00000000 r4:822523c8 [ 158.919837][ T4077] [<80201b08>] (show_stack) from [<8021f920>] (dump_stack_lvl+0x54/0x7c) [ 158.920132][ T4077] [<8021f8cc>] (dump_stack_lvl) from [<8021f960>] (dump_stack+0x18/0x1c) [ 158.920428][ T4077] r5:00000000 r4:82a78d18 [ 158.920612][ T4077] [<8021f948>] (dump_stack) from [<802025f8>] (vpanic+0xe0/0x2e8) [ 158.920891][ T4077] [<80202518>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0xd8) [ 158.921194][ T4077] r7:803d7b34 [ 158.921331][ T4077] [<80202800>] (panic) from [<80252948>] (get_taint+0x0/0x1c) [ 158.921645][ T4077] r3:8280c684 r2:00000001 r1:82238c24 r0:822406c0 [ 158.921865][ T4077] [<802528d0>] (check_panic_on_warn) from [<80252aac>] (__warn+0x80/0x188) [ 158.922203][ T4077] [<80252a2c>] (__warn) from [<80252d9c>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 158.922537][ T4077] r8:00000009 r7:82258d24 r6:e012191c r5:838b4800 r4:00000000 [ 158.922790][ T4077] [<80252bb8>] (warn_slowpath_fmt) from [<803d7b34>] (reg_bounds_sanity_check+0x390/0x45c) [ 158.923174][ T4077] r10:85500000 r9:00000000 r8:00000000 r7:00000001 r6:00000001 r5:82259548 [ 158.923481][ T4077] r4:8589d000 [ 158.923655][ T4077] [<803d77a4>] (reg_bounds_sanity_check) from [<803e2734>] (reg_set_min_max+0x1b0/0x26c) [ 158.924009][ T4077] r10:00000001 r9:8589c800 r8:00000020 r7:85500000 r6:8589d000 r5:8589d000 [ 158.924457][ T4077] r4:8589c800 [ 158.924646][ T4077] [<803e2584>] (reg_set_min_max) from [<803f3f74>] (check_cond_jmp_op+0x85c/0x1860) [ 158.925114][ T4077] r10:8589c800 r9:8589d000 r8:00000000 r7:8581ca00 r6:8581cb80 r5:85500000 [ 158.925454][ T4077] r4:e0229058 r3:8589c800 [ 158.925672][ T4077] [<803f3718>] (check_cond_jmp_op) from [<803fb2b4>] (do_check_common+0x2010/0x30f4) [ 158.926108][ T4077] r10:0000000b r9:00000001 r8:85505000 r7:00005fa0 r6:85500000 r5:e0229010 [ 158.926458][ T4077] r4:e0229000 [ 158.926559][ T4077] [<803f92a4>] (do_check_common) from [<803ffae0>] (bpf_check+0x29f8/0x2f50) [ 158.926787][ T4077] r10:00000000 r9:85500000 r8:85505000 r7:00000a7b r6:855007bc r5:00000001 [ 158.927062][ T4077] r4:00000004 [ 158.927158][ T4077] [<803fd0e8>] (bpf_check) from [<803d12b0>] (bpf_prog_load+0x650/0xd74) [ 158.927382][ T4077] r10:e0121d90 r9:838b4800 r8:849dd730 r7:e0121d50 r6:00000000 r5:00000000 [ 158.927605][ T4077] r4:e0121eb0 [ 158.927710][ T4077] [<803d0c60>] (bpf_prog_load) from [<803d3108>] (__sys_bpf+0xab8/0x2240) [ 158.927948][ T4077] r10:202a0fb8 r9:838b4800 r8:e0121ea8 r7:00000000 r6:00000005 r5:e0121e80 [ 158.928134][ T4077] r4:0000002d [ 158.928219][ T4077] [<803d2650>] (__sys_bpf) from [<803d4e30>] (sys_bpf+0x2c/0x48) [ 158.928485][ T4077] r10:00000182 r9:838b4800 r8:8020029c r7:00000182 r6:00316308 r5:00000000 [ 158.928709][ T4077] r4:00000000 [ 158.928797][ T4077] [<803d4e04>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 158.929073][ T4077] Exception stack(0xe0121fa8 to 0xe0121ff0) [ 158.929331][ T4077] 1fa0: 00000000 00000000 00000005 202a0fb8 0000002d 00000000 [ 158.929566][ T4077] 1fc0: 00000000 00000000 00316308 00000182 00300000 00000000 00006364 76f430bc [ 158.929845][ T4077] 1fe0: 76f42ec0 76f42eb0 000195a4 00132510 [ 158.932087][ T4077] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:15:03 Registers: info registers vcpu 0 CPU#0 R00=84084840 R01=00000020 R02=eaff3000 R03=eaff3018 R04=82abc11e R05=84084840 R06=80a8ece4 R07=82abc15b R08=82827128 R09=00000000 R10=000003c9 R11=e01215fc R12=00000002 R13=e01215f0 R14=82959484 R15=80a8ecf4 PSR=80000093 N--- A S svc32 s00=85000000 s01=08000000 d00=0800000085000000 s02=6a0a00ff s03=00000000 d01=000000006a0a00ff s04=2e000000 s05=00000000 d02=000000002e000000 s06=95000000 s07=00000000 d03=0000000095000000 s08=80000000 s09=00000000 d04=0000000080000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000100 d07=0000010000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=72be5d74 s33=80deb1fe d16=80deb1fe72be5d74 s34=9bdc06a7 s35=c19bf274 d17=c19bf2749bdc06a7 s36=51140631 s37=ea1bf4a9 d18=ea1bf4a951140631 s38=2bbae9f6 s39=c11c1e9c d19=c11c1e9c2bbae9f6 s40=3c18b364 s41=83192bc4 d20=83192bc43c18b364 s42=93ac4d16 s43=6cdcd500 d21=6cdcd50093ac4d16 s44=6c878316 s45=78906325 d22=789063256c878316 s46=a2d27589 s47=a00d9b9a d23=a00d9b9aa2d27589 s48=8b4ac47d s49=f1413898 d24=f14138988b4ac47d s50=a6692e9d s51=3474eb19 d25=3474eb19a6692e9d s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=8240287c R02=000021a0 R03=00000000 R04=85633de0 R05=00001f50 R06=00000000 R07=dece763c R08=dece763c R09=00000001 R10=00000000 R11=e01f192c R12=e01f1888 R13=e01f1848 R14=8022be70 R15=8022ce48 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000