last executing test programs: 18.698785551s ago: executing program 2 (id=362): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x10, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, 0x101}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40080a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) 14.853369038s ago: executing program 2 (id=371): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfefefffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020000000000000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x2}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) 14.102948124s ago: executing program 1 (id=372): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 11.679131861s ago: executing program 2 (id=378): syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) epoll_create1(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/138, 0x8a}], 0x1, 0x16, 0xc) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 10.962416557s ago: executing program 4 (id=381): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000100)={0x0, 0xfffd, 0x4, 0xfffd}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0xf, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r2 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) 10.112737931s ago: executing program 4 (id=383): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@loose}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 9.550121772s ago: executing program 1 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x800, 0xfffe, 0xff80, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x800}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}]}], {0x14}}, 0xb8}}, 0x0) 8.467041937s ago: executing program 0 (id=387): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) connect$unix(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) 8.464499676s ago: executing program 4 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x10) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24048015) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a00010000000000000000001c0000000000000000000000080001000f0001"], 0x24}}, 0x0) 8.396283346s ago: executing program 1 (id=389): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a8, 0x11c8, 0xc8, 0x8, 0x11c8, 0x5803, 0x12d8, 0x2e8, 0x2e8, 0x12d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0x16, 0xc, 0x2, 0x4b}, 0x0, 0x1198, 0x11c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5a, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xff, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0xe}, {0xffffffffffffffff, 0x0, 0x1}, 0xffffff68, 0x225}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x3d5, 0x1c, 0xffffff95, 'netbios-ns\x00', 'syz1\x00', {0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x52140) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000300)=""/4096) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) 7.142818071s ago: executing program 4 (id=391): ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x20, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) syz_open_dev$dri(0x0, 0x1, 0x0) syz_io_uring_setup(0x25d7, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[], 0x119) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0x0) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271d, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, &(0x7f0000000300)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200900c0) socket$rds(0x15, 0x5, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000001dc0)={0x18, 0x0, {0x1, @random="cdf367386465", 'dvmrp0\x00'}}) 7.001399162s ago: executing program 1 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x20002, 0x9, {0x0}, {0xee00}, 0x700000000000, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f00000003c0)=@generic={0x1f, "6fa0cdb098606708a3b923f5e5aeca63cbe3147b6416b883a48ea59b8b05980f5b5ed619a3aa87ff18121684d11845be301af25a24af53f22ecd5b5c1a56f35ceca2a1107c63fed526e1306027fbf01a2478f4eed3c0469d67cc945bd6d0bf931e3142994124460690ce4492a3fd936792d9c0dca4413428d7e72cfcc49b"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="0c3d058bf0e809f628330ab68df591e50993fc566863ffcbea29f2e81a9f442c756bc329d892006b5f566fd3e2c856afb0b0d325259e623d5aad4c55b12af4a45e741abbc6ccf334cfff040eb55eed65985a13e77dc5bdc33c8c577b87759e929425a26f2fd838cffaa72f5b6ea909234d8fac28a1e95e61f27717367eb8459833a26299304852efbb66b224b5da2bbfe600", 0x92}], 0x1}, 0x4000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 6.915357258s ago: executing program 3 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 6.245856388s ago: executing program 4 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) r3 = timerfd_create(0x0, 0x80000) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x0, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e20, 0x10000, @loopback, 0x9}}, 0x3ff, 0x2, 0x9, 0x9, 0x44, 0x4, 0x5}, 0x9c) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) 5.949257049s ago: executing program 3 (id=395): r0 = socket(0x2b, 0x1, 0x1) close(0x4) r1 = syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) unshare(0x40080) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x6, 0x0, r1}) syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x800, 0x0, 0x359, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005000100"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r2, r2, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) 5.939601604s ago: executing program 2 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002480)={0x1c, r3, 0x109, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c12106803200e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f27c3", 0xac}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x1) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) 5.624849626s ago: executing program 3 (id=397): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x101800}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil) move_pages(r1, 0x2, &(0x7f0000000040)=[&(0x7f000047e000/0x1000)=nil, &(0x7f0000b1a000/0x2000)=nil], 0x0, 0x0, 0x2) r4 = syz_open_procfs(0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x4e20, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x5b, 0x100) 5.071710554s ago: executing program 1 (id=398): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x185842, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x5f8, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0) 4.951348286s ago: executing program 0 (id=399): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x91, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) close(r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 4.714999403s ago: executing program 3 (id=400): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040804, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "4761cc8d1efc5856", "6f0bb479955b1afd938c268e691b0706", "e586344d", "54902b0876c20c13"}, 0x28) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x17}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 3.983177778s ago: executing program 0 (id=401): clock_getres(0x7, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000c80)={{&(0x7f0000000c00)={'Accelerator1\x00', {&(0x7f00000003c0)=@adf_hex={@format={'Cy', '5', 'RingAsymRx\x00'}, {0x8}, {&(0x7f0000000300)=@adf_hex={@normal='NumberCyInstances\x00', {0x6}, {&(0x7f0000000240)=@adf_dec={@normal='NumberDcInstances\x00', {0x8}}}}}}}, {&(0x7f0000000b80)={'Accelerator\x00', {&(0x7f0000000480)=@adf_hex={@normal='NumberCyInstances\x00', {0x5}}}, {&(0x7f0000000b00)={'KERNEL\x00'}}}}}}, 0x2f}) listen(r0, 0xf) 3.544232617s ago: executing program 4 (id=402): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$inet(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4000, 0x7, 0x0, 0x88e, 0x0, 0x2d}, {0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.706162374s ago: executing program 0 (id=403): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x801) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1f, 0x0, 0x1000000}) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) 2.098088007s ago: executing program 0 (id=404): r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) mkdir(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x1, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 1.186183157s ago: executing program 3 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.032301331s ago: executing program 0 (id=406): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="000700000000040014001a80100005800c00"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x4084) r4 = semget(0x0, 0x4, 0x39c) semop(r4, &(0x7f0000000000), 0x0) semctl$SETALL(r4, 0x0, 0x11, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 878.38934ms ago: executing program 2 (id=407): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x10000) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x44a2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac07140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a320000"], 0x54}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) 628.34829ms ago: executing program 2 (id=408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x410, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x3fffffd, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x3a0, 0x1, [@m_ctinfo={0xcc, 0x10, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x9, 0x8, 0x3, 0xb}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x5, 0x0, 0xd, 0x7fff}}]}, {0x5f, 0x6, "fbe5522f6324862102680d01fd6115e067d4be4021d88ccf3af2466dfe888e0c6bda06a0ecd99e7473dbe356066bb3591038d58d5d472f6af2e4af97e9a7601a2e67fe472de706f44772d3bfd8389270fedaaade7d5a6d2e6ca3a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x124, 0x9, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x3, 0x0, 0x5, 0xfff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf2e, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x7fffffff, 0x8, 0x3a, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x1, 0x2, 0xd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x3f7f4068, 0xffffffffffffffff, 0x7, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2508, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x6, 0x4, 0x9d, 0x7ff}}]}, {0x66, 0x6, "e7714d2a64c9276c5addb5dd4018fc941aee2c4e6c6742da5755476ee2517885098f73c9fa340f9bf82901a298647b3029bdf61cb947f853e2fd41c5c4a8176b9a5fb35221e237df42cf4e5b6192c35ff0dfa4cd039a7035ad78e61212b852468b15"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x3c, 0x3, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x9c, 0x8, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffffd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x3, 0x0, 0x6, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}]}, {0x40, 0x6, "2bdd6bad6720cfd180c10dce7e3c62ab62605240c1825d282368e6cc375085a9cc684fdbf5c5455939ae638b82f93d88d0aba9bd40d9452c1d693656"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x4c, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x15, 0x6, "b5377b436d588562062cd33dc13a37321b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x88, 0x15, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x7, 0x2, 0xf5, 0x9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x7, 0x8, 0x5}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}]}, {0xf, 0x6, "0c4a12d74da5bec5ea8758"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 452.01096ms ago: executing program 1 (id=409): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x16, @empty, 0x4e23, 0x3, 'ovf\x00', 0x4, 0x0, 0x3a}, 0x2c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1, 0x80000001, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) getdents64(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=410): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r4}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4c, 0x0, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 53.396669][ T30] audit: type=1400 audit(1775558802.320:62): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.420214][ T30] audit: type=1400 audit(1775558802.340:63): avc: denied { mount } for pid=5795 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.422909][ T5795] cgroup: Unknown subsys name 'net' [ 53.449484][ T30] audit: type=1400 audit(1775558802.370:64): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.597589][ T5795] cgroup: Unknown subsys name 'cpuset' [ 53.605308][ T5795] cgroup: Unknown subsys name 'rlimit' [ 53.704088][ T30] audit: type=1400 audit(1775558802.620:65): avc: denied { setattr } for pid=5795 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.729325][ T30] audit: type=1400 audit(1775558802.620:66): avc: denied { create } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.765837][ T30] audit: type=1400 audit(1775558802.620:67): avc: denied { write } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.791009][ T30] audit: type=1400 audit(1775558802.620:68): avc: denied { read } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.811585][ T30] audit: type=1400 audit(1775558802.620:69): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 53.836532][ T30] audit: type=1400 audit(1775558802.620:70): avc: denied { mount } for pid=5795 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 53.861460][ T5797] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 53.870784][ T30] audit: type=1400 audit(1775558802.790:71): avc: denied { relabelto } for pid=5797 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 54.812625][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.516101][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 58.516116][ T30] audit: type=1400 audit(1775558807.440:76): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.562558][ T30] audit: type=1400 audit(1775558807.470:77): avc: denied { read write } for pid=5807 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.596874][ T30] audit: type=1400 audit(1775558807.470:78): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.598706][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.630543][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.638417][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.646243][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.654129][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.657935][ T30] audit: type=1400 audit(1775558807.480:79): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="socket:[4622]" dev="sockfs" ino=4622 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.662417][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.686410][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.699682][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.707732][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.707855][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.715635][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.723063][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.729591][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.738045][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.744009][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.757744][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.758733][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.772222][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.772592][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.779965][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.787310][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.801815][ T30] audit: type=1400 audit(1775558807.680:80): avc: denied { read } for pid=5807 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.823148][ T30] audit: type=1400 audit(1775558807.680:81): avc: denied { open } for pid=5807 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.825166][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.849742][ T30] audit: type=1400 audit(1775558807.680:82): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.885530][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.892574][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.900695][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.204275][ T30] audit: type=1400 audit(1775558808.120:83): avc: denied { module_request } for pid=5808 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 59.317771][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 59.344124][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 59.389242][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 59.424462][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 59.462772][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 59.557195][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.564671][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.571953][ T5808] bridge_slave_0: entered allmulticast mode [ 59.578750][ T5808] bridge_slave_0: entered promiscuous mode [ 59.586219][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.593292][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.600613][ T5813] bridge_slave_0: entered allmulticast mode [ 59.607323][ T5813] bridge_slave_0: entered promiscuous mode [ 59.628607][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.635705][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.642980][ T5820] bridge_slave_0: entered allmulticast mode [ 59.649897][ T5820] bridge_slave_0: entered promiscuous mode [ 59.656652][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.663715][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.671032][ T5808] bridge_slave_1: entered allmulticast mode [ 59.677733][ T5808] bridge_slave_1: entered promiscuous mode [ 59.684554][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.691912][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.699179][ T5813] bridge_slave_1: entered allmulticast mode [ 59.706083][ T5813] bridge_slave_1: entered promiscuous mode [ 59.729016][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.736121][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.743210][ T5820] bridge_slave_1: entered allmulticast mode [ 59.749961][ T5820] bridge_slave_1: entered promiscuous mode [ 59.771898][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.779076][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.786212][ T5815] bridge_slave_0: entered allmulticast mode [ 59.792821][ T5815] bridge_slave_0: entered promiscuous mode [ 59.824865][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.832043][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.839307][ T5815] bridge_slave_1: entered allmulticast mode [ 59.845964][ T5815] bridge_slave_1: entered promiscuous mode [ 59.861150][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.872480][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.883601][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.907475][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.924639][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.942053][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.949367][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.956727][ T5807] bridge_slave_0: entered allmulticast mode [ 59.963336][ T5807] bridge_slave_0: entered promiscuous mode [ 59.978197][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.000068][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.007322][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.014396][ T5807] bridge_slave_1: entered allmulticast mode [ 60.021315][ T5807] bridge_slave_1: entered promiscuous mode [ 60.029788][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.047756][ T5808] team0: Port device team_slave_0 added [ 60.061196][ T5813] team0: Port device team_slave_0 added [ 60.068216][ T5813] team0: Port device team_slave_1 added [ 60.080982][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.091917][ T5808] team0: Port device team_slave_1 added [ 60.098747][ T5820] team0: Port device team_slave_0 added [ 60.129752][ T5820] team0: Port device team_slave_1 added [ 60.143312][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.172727][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.179811][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.206004][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.218765][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.235791][ T5815] team0: Port device team_slave_0 added [ 60.241843][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.248830][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.274972][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.292512][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.299528][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.325413][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.343715][ T5815] team0: Port device team_slave_1 added [ 60.354415][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.361494][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.387585][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.398915][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.406424][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.432913][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.449984][ T5807] team0: Port device team_slave_0 added [ 60.467067][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.473992][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.502552][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.514875][ T5807] team0: Port device team_slave_1 added [ 60.535547][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.542476][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.568359][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.580075][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.587061][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.613000][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.661715][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.668784][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.694858][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.709728][ T5813] hsr_slave_0: entered promiscuous mode [ 60.716068][ T5813] hsr_slave_1: entered promiscuous mode [ 60.741195][ T5808] hsr_slave_0: entered promiscuous mode [ 60.747962][ T5808] hsr_slave_1: entered promiscuous mode [ 60.753800][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 60.759763][ T5808] Cannot create hsr debugfs directory [ 60.765887][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.772822][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.799074][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.825760][ T5823] Bluetooth: hci0: command tx timeout [ 60.825761][ T5818] Bluetooth: hci3: command tx timeout [ 60.837084][ T5819] Bluetooth: hci2: command tx timeout [ 60.873158][ T5815] hsr_slave_0: entered promiscuous mode [ 60.879368][ T5815] hsr_slave_1: entered promiscuous mode [ 60.885305][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 60.891032][ T5815] Cannot create hsr debugfs directory [ 60.911399][ T5820] hsr_slave_0: entered promiscuous mode [ 60.917449][ T5820] hsr_slave_1: entered promiscuous mode [ 60.923280][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 60.929108][ T5820] Cannot create hsr debugfs directory [ 60.975221][ T5818] Bluetooth: hci1: command tx timeout [ 60.980859][ T5819] Bluetooth: hci4: command tx timeout [ 61.039362][ T5807] hsr_slave_0: entered promiscuous mode [ 61.045651][ T5807] hsr_slave_1: entered promiscuous mode [ 61.051472][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 61.057514][ T5807] Cannot create hsr debugfs directory [ 61.296354][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.307161][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.321266][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.339160][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.384009][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.393950][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.416784][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.427192][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.475329][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.484302][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.509056][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.518125][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.579985][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.600957][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.627521][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.646096][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.695005][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.707995][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.732014][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.751403][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.761748][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.776629][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.785665][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.799195][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.810912][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.818125][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.827195][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.834232][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.861359][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.868478][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.889301][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.902142][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.909281][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.951718][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.975473][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.985904][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.024986][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.032147][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.047483][ T30] audit: type=1400 audit(1775558810.970:84): avc: denied { sys_module } for pid=5820 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.089849][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.097046][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.183484][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.203338][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.246670][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.261189][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.279061][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.286207][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.319395][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.326552][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.373125][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.380293][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.402631][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.409840][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.436966][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.462940][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.508415][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.553175][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.601767][ T5813] veth0_vlan: entered promiscuous mode [ 62.631105][ T5813] veth1_vlan: entered promiscuous mode [ 62.699280][ T5820] veth0_vlan: entered promiscuous mode [ 62.729769][ T5820] veth1_vlan: entered promiscuous mode [ 62.760592][ T5813] veth0_macvtap: entered promiscuous mode [ 62.773428][ T5808] veth0_vlan: entered promiscuous mode [ 62.790013][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.806691][ T5813] veth1_macvtap: entered promiscuous mode [ 62.820463][ T5808] veth1_vlan: entered promiscuous mode [ 62.844597][ T5820] veth0_macvtap: entered promiscuous mode [ 62.853826][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.874928][ T5820] veth1_macvtap: entered promiscuous mode [ 62.884285][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.895942][ T5819] Bluetooth: hci2: command tx timeout [ 62.901347][ T5819] Bluetooth: hci3: command tx timeout [ 62.908444][ T5823] Bluetooth: hci0: command tx timeout [ 62.916107][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.934434][ T5807] veth0_vlan: entered promiscuous mode [ 62.960920][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.977435][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.001055][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.020272][ T5807] veth1_vlan: entered promiscuous mode [ 63.032413][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.050183][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.057512][ T5819] Bluetooth: hci1: command tx timeout [ 63.057582][ T5823] Bluetooth: hci4: command tx timeout [ 63.071490][ T5808] veth0_macvtap: entered promiscuous mode [ 63.109942][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.119937][ T5808] veth1_macvtap: entered promiscuous mode [ 63.150120][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.159430][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.182782][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.191859][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.214294][ T5807] veth0_macvtap: entered promiscuous mode [ 63.233965][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.242869][ T5807] veth1_macvtap: entered promiscuous mode [ 63.245919][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.262603][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.281083][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.307133][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.318483][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.347535][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.356938][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.373958][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.383048][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.394890][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.422487][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.441922][ T30] audit: type=1400 audit(1775558812.360:85): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.p6jAXN/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.446594][ T176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.476230][ T176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.497131][ T176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.521123][ T5815] veth0_vlan: entered promiscuous mode [ 63.526880][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.534668][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.548655][ T176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.573800][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.607145][ T5815] veth1_vlan: entered promiscuous mode [ 63.615015][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.630405][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.637797][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 63.637810][ T30] audit: type=1400 audit(1775558812.560:97): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.638110][ T30] audit: type=1400 audit(1775558812.560:98): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.718868][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.727678][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.744230][ T30] audit: type=1400 audit(1775558812.560:99): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.783096][ T5815] veth0_macvtap: entered promiscuous mode [ 63.792656][ T5815] veth1_macvtap: entered promiscuous mode [ 63.813687][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.824735][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.877631][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.887021][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.896070][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.908594][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.124526][ T30] audit: type=1400 audit(1775558812.900:100): avc: denied { name_bind } for pid=5922 comm="syz.0.1" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.218938][ T30] audit: type=1400 audit(1775558812.900:101): avc: denied { node_bind } for pid=5922 comm="syz.0.1" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.272941][ T30] audit: type=1400 audit(1775558812.910:102): avc: denied { prog_load } for pid=5922 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.291920][ T30] audit: type=1400 audit(1775558812.910:103): avc: denied { bpf } for pid=5922 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.313523][ T30] audit: type=1400 audit(1775558812.910:104): avc: denied { perfmon } for pid=5922 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.359423][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.371489][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.436882][ T30] audit: type=1400 audit(1775558813.360:105): avc: denied { create } for pid=5929 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.453019][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.512051][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.784013][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.818247][ T30] audit: type=1400 audit(1775558813.650:106): avc: denied { map_create } for pid=5929 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.892588][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.071826][ T5823] Bluetooth: hci3: command tx timeout [ 65.077453][ T5823] Bluetooth: hci2: command tx timeout [ 65.084751][ T5823] Bluetooth: hci0: command tx timeout [ 65.135217][ T5818] Bluetooth: hci4: command tx timeout [ 65.140726][ T5818] Bluetooth: hci1: command tx timeout [ 65.581133][ T5937] x_tables: duplicate underflow at hook 2 [ 65.638263][ T5937] overlay: ./file0 is not a directory [ 65.666875][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.725682][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.487201][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.517571][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.694956][ T5948] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 66.705261][ T5948] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7'. [ 66.849478][ T5951] sp0: Synchronizing with TNC [ 66.894932][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.904129][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.915118][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.923788][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.934121][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.942810][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.953317][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.962304][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.972267][ T5951] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.200762][ T5818] Bluetooth: hci0: command tx timeout [ 67.206357][ T5818] Bluetooth: hci2: command tx timeout [ 67.211843][ T5818] Bluetooth: hci3: command tx timeout [ 67.217693][ T5818] Bluetooth: hci1: command tx timeout [ 67.224006][ T5818] Bluetooth: hci4: command tx timeout [ 68.170648][ T5958] tipc: Started in network mode [ 68.181766][ T5958] tipc: Node identity 7af0391961ce, cluster identity 4711 [ 68.190433][ T5958] tipc: Enabled bearer , priority 0 [ 68.697045][ T5958] tipc: Resetting bearer [ 68.801183][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 68.801199][ T30] audit: type=1400 audit(1775558817.720:124): avc: denied { bind } for pid=5972 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.854466][ T30] audit: type=1400 audit(1775558817.720:125): avc: denied { getopt } for pid=5972 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.020837][ T30] audit: type=1400 audit(1775558817.750:126): avc: denied { write } for pid=5959 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.344064][ T30] audit: type=1400 audit(1775558818.240:127): avc: denied { name_bind } for pid=5976 comm="syz.3.12" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 69.375259][ T30] audit: type=1400 audit(1775558818.240:128): avc: denied { node_bind } for pid=5976 comm="syz.3.12" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 69.397159][ T30] audit: type=1400 audit(1775558818.260:129): avc: denied { watch watch_reads } for pid=5975 comm="syz.0.13" path="pipe:[4605]" dev="pipefs" ino=4605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 69.421387][ T5957] tipc: Disabling bearer [ 69.431583][ T793] tipc: Node number set to 457062681 [ 69.503038][ T30] audit: type=1400 audit(1775558818.420:130): avc: denied { name_bind } for pid=5972 comm="syz.2.11" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 70.031246][ T5997] ======================================================= [ 70.031246][ T5997] WARNING: The mand mount option has been deprecated and [ 70.031246][ T5997] and is ignored by this kernel. Remove the mand [ 70.031246][ T5997] option from the mount to silence this warning. [ 70.031246][ T5997] ======================================================= [ 70.094435][ T5997] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.495680][ T5998] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.808110][ T5997] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 70.820493][ T5997] overlayfs: failed to look up (tracing) for ino (-66) [ 70.900130][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.089067][ T30] audit: type=1400 audit(1775558818.990:131): avc: denied { mount } for pid=5990 comm="syz.4.15" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.560270][ T30] audit: type=1400 audit(1775558819.020:132): avc: denied { mount } for pid=5990 comm="syz.4.15" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.610132][ T30] audit: type=1400 audit(1775558820.000:133): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.198094][ T793] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.274799][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 74.274815][ T30] audit: type=1326 audit(1775558823.190:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 74.296339][ T6023] __nla_validate_parse: 136 callbacks suppressed [ 74.296354][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 74.326809][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 74.387133][ T793] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 74.405116][ T793] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.409478][ T30] audit: type=1326 audit(1775558823.190:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 74.444995][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 74.453651][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 74.488811][ T793] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 74.498895][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 74.507891][ T793] usb 4-1: Product: syz [ 74.515134][ T793] usb 4-1: Manufacturer: syz [ 74.522265][ T793] usb 4-1: SerialNumber: syz [ 74.534449][ T6011] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.558107][ T6025] ceph: No mds server is up or the cluster is laggy [ 74.630326][ T30] audit: type=1326 audit(1775558823.260:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 74.982710][ T30] audit: type=1326 audit(1775558823.270:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 75.020891][ T30] audit: type=1326 audit(1775558823.270:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 75.044909][ T30] audit: type=1326 audit(1775558823.270:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 75.127536][ T793] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 75.201516][ T6038] netlink: 80 bytes leftover after parsing attributes in process `syz.0.24'. [ 75.441067][ T30] audit: type=1326 audit(1775558823.270:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 75.602357][ T793] usb 4-1: USB disconnect, device number 2 [ 75.623677][ T793] usblp0: removed [ 75.643713][ T5819] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 75.681469][ T30] audit: type=1326 audit(1775558823.270:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 75.731307][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 76.047581][ T10] cfg80211: failed to load regulatory.db [ 76.502518][ T30] audit: type=1326 audit(1775558823.270:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 76.646313][ T30] audit: type=1326 audit(1775558823.270:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046399c819 code=0x7ffc0000 [ 76.831207][ T6052] evm: overlay not supported [ 78.590117][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 79.446674][ T6085] netlink: 44 bytes leftover after parsing attributes in process `syz.0.35'. [ 79.471456][ T792] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.607733][ T6088] syz.3.37 uses obsolete (PF_INET,SOCK_PACKET) [ 79.650403][ T792] usb 5-1: device descriptor read/64, error -71 [ 81.825155][ T792] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.902927][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 81.902957][ T30] audit: type=1400 audit(1775558830.810:212): avc: denied { setopt } for pid=6092 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.373166][ T30] audit: type=1400 audit(1775558831.290:213): avc: denied { read } for pid=6080 comm="syz.3.37" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 82.373721][ T6100] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 82.759722][ T6084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.778242][ T30] audit: type=1400 audit(1775558831.290:214): avc: denied { open } for pid=6080 comm="syz.3.37" path="/6/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 82.820310][ T6088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.923830][ T6084] block device autoloading is deprecated and will be removed. [ 82.931401][ T30] audit: type=1400 audit(1775558831.800:215): avc: denied { create } for pid=6101 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.976242][ T6088] block device autoloading is deprecated and will be removed. [ 83.197218][ T30] audit: type=1400 audit(1775558831.800:216): avc: denied { setopt } for pid=6101 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.294509][ T30] audit: type=1400 audit(1775558831.880:217): avc: denied { ioctl } for pid=6103 comm="syz.0.42" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 83.324729][ T30] audit: type=1400 audit(1775558831.970:218): avc: denied { create } for pid=6105 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.855161][ T30] audit: type=1400 audit(1775558831.990:219): avc: denied { setopt } for pid=6105 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.653543][ T30] audit: type=1400 audit(1775558832.010:220): avc: denied { write } for pid=6105 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.685987][ T30] audit: type=1400 audit(1775558832.270:221): avc: denied { name_connect } for pid=6098 comm="syz.4.39" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.229792][ T6130] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 86.321331][ T6135] Zero length message leads to an empty skb [ 86.965275][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 86.965288][ T30] audit: type=1400 audit(1775558835.470:228): avc: denied { listen } for pid=6136 comm="syz.4.48" path=0000204E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 87.150208][ T30] audit: type=1400 audit(1775558836.070:229): avc: denied { mount } for pid=6145 comm="syz.3.50" name="/" dev="configfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 87.309791][ T30] audit: type=1400 audit(1775558836.230:230): avc: denied { watch watch_reads } for pid=6143 comm="syz.0.49" path="/13" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.864679][ T30] audit: type=1400 audit(1775558836.780:231): avc: denied { read write } for pid=6150 comm="syz.4.51" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.888692][ T30] audit: type=1400 audit(1775558836.780:232): avc: denied { open } for pid=6150 comm="syz.4.51" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.888848][ T6148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6148 comm=syz.0.49 [ 88.036474][ T30] audit: type=1400 audit(1775558836.960:233): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 88.352421][ T30] audit: type=1400 audit(1775558837.260:234): avc: denied { create } for pid=6152 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.127060][ T30] audit: type=1400 audit(1775558838.050:235): avc: denied { create } for pid=6163 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 89.645015][ T30] audit: type=1400 audit(1775558838.080:236): avc: denied { create } for pid=6163 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.705148][ T30] audit: type=1400 audit(1775558838.080:237): avc: denied { setopt } for pid=6163 comm="syz.1.55" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.895131][ T29] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.468235][ T29] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 90.477366][ T29] usb 2-1: config 8 has no interface number 0 [ 90.483833][ T29] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 90.861458][ T6183] netlink: 'syz.4.59': attribute type 21 has an invalid length. [ 90.869419][ T6183] netlink: 'syz.4.59': attribute type 6 has an invalid length. [ 90.877731][ T6183] netlink: 132 bytes leftover after parsing attributes in process `syz.4.59'. [ 91.264500][ T29] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 91.459038][ T29] usb 2-1: config 8 interface 177 has no altsetting 0 [ 92.270557][ T29] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 92.397530][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.429591][ T29] usb 2-1: can't set config #8, error -71 [ 92.459420][ T29] usb 2-1: USB disconnect, device number 2 [ 92.494056][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 92.494071][ T30] audit: type=1400 audit(1775558841.410:251): avc: denied { mount } for pid=6197 comm="syz.4.64" name="/" dev="ramfs" ino=9648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.715490][ T6200] netlink: 14 bytes leftover after parsing attributes in process `syz.3.63'. [ 93.585338][ T30] audit: type=1400 audit(1775558841.630:252): avc: denied { ioctl } for pid=6199 comm="syz.3.63" path="socket:[9651]" dev="sockfs" ino=9651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.911711][ T30] audit: type=1400 audit(1775558841.630:253): avc: denied { bind } for pid=6199 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.801243][ T6190] syz.0.61 (6190) used greatest stack depth: 19328 bytes left [ 94.890591][ T30] audit: type=1400 audit(1775558841.770:254): avc: denied { create } for pid=6197 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.410312][ T30] audit: type=1400 audit(1775558843.130:255): avc: denied { firmware_load } for pid=6186 comm="syz.0.61" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 96.537491][ T30] audit: type=1400 audit(1775558843.290:256): avc: denied { ioctl } for pid=6211 comm="syz.1.67" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.562713][ T30] audit: type=1400 audit(1775558843.300:257): avc: denied { read } for pid=6211 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.582259][ T30] audit: type=1400 audit(1775558843.300:258): avc: denied { ioctl } for pid=6211 comm="syz.1.67" path="socket:[9014]" dev="sockfs" ino=9014 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.606954][ T30] audit: type=1400 audit(1775558843.660:259): avc: denied { read write } for pid=6209 comm="syz.4.66" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.632489][ T30] audit: type=1400 audit(1775558843.660:260): avc: denied { open } for pid=6209 comm="syz.4.66" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.175382][ T6234] gfs2: not a GFS2 filesystem [ 99.117454][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 99.117470][ T30] audit: type=1400 audit(1775558847.380:264): avc: denied { execute } for pid=6244 comm="syz.2.73" path="/9/file1" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.738285][ T6260] process 'syz.2.79' launched '/dev/fd/5' with NULL argv: empty string added [ 100.754533][ T30] audit: type=1400 audit(1775558849.370:265): avc: denied { sqpoll } for pid=6261 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.776871][ T30] audit: type=1400 audit(1775558849.700:266): avc: denied { execute_no_trans } for pid=6259 comm="syz.2.79" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.467001][ T6273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.744708][ T30] audit: type=1400 audit(1775558850.410:267): avc: denied { create } for pid=6270 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.804942][ T30] audit: type=1400 audit(1775558850.410:268): avc: denied { connect } for pid=6270 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.860429][ T30] audit: type=1400 audit(1775558850.420:269): avc: denied { write } for pid=6270 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.902687][ T30] audit: type=1400 audit(1775558850.450:270): avc: denied { create } for pid=6268 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.967496][ T30] audit: type=1400 audit(1775558850.450:271): avc: denied { setopt } for pid=6268 comm="syz.0.74" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.046272][ T30] audit: type=1400 audit(1775558850.650:272): avc: denied { bind } for pid=6270 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.260390][ T30] audit: type=1400 audit(1775558851.180:273): avc: denied { name_connect } for pid=6275 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 102.429092][ T6284] overlayfs: cannot append lower layer [ 103.091902][ T6290] kAFS: unable to lookup cell '(' [ 103.211352][ T6291] kAFS: unable to lookup cell '(,c¾ûL' [ 104.508470][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 104.508482][ T30] audit: type=1400 audit(1775558853.430:285): avc: denied { getopt } for pid=6308 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.023569][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 105.029640][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 105.039737][ T30] audit: type=1326 audit(1775558853.860:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 105.226128][ T6316] ceph: No mds server is up or the cluster is laggy [ 105.277923][ T30] audit: type=1326 audit(1775558853.860:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 105.296261][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 105.315702][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 105.362037][ T6326] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[6326] [ 105.647628][ T30] audit: type=1326 audit(1775558853.870:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 105.752519][ T30] audit: type=1326 audit(1775558853.870:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 105.785026][ T6289] delete_channel: no stack [ 105.833594][ T30] audit: type=1326 audit(1775558853.870:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 105.908108][ T30] audit: type=1326 audit(1775558853.870:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 106.116851][ T30] audit: type=1326 audit(1775558853.870:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 106.145221][ T30] audit: type=1326 audit(1775558853.870:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 106.245979][ T6335] syz.0.93 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 106.268535][ T6335] ubi31: attaching mtd0 [ 106.282370][ T6335] ubi31: scanning is finished [ 106.287170][ T6335] ubi31: empty MTD device detected [ 106.689567][ T5819] Bluetooth: Frame is too long (len 12, expected len 4) [ 107.056528][ T6341] ±ÿ: renamed from lo (while UP) [ 107.142119][ T30] audit: type=1326 audit(1775558853.870:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7eda19c819 code=0x7ffc0000 [ 107.378422][ T29] libceph: connect (1)[c::]:6789 error -101 [ 107.402221][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 107.591409][ T6335] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 107.679898][ T29] libceph: connect (1)[c::]:6789 error -101 [ 107.736363][ T6340] ceph: No mds server is up or the cluster is laggy [ 107.766947][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 109.905167][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.216513][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 110.216525][ T30] audit: type=1326 audit(1775558859.130:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 110.247423][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 110.257199][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.267749][ T29] usb 1-1: Product: syz [ 110.276997][ T792] libceph: connect (1)[c::]:6789 error -101 [ 110.283149][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 110.291163][ T29] usb 1-1: Manufacturer: syz [ 110.298245][ T29] usb 1-1: SerialNumber: syz [ 110.330208][ T30] audit: type=1326 audit(1775558859.130:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 110.387457][ T6378] ceph: No mds server is up or the cluster is laggy [ 110.387553][ T30] audit: type=1326 audit(1775558859.130:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 110.543148][ T30] audit: type=1326 audit(1775558859.130:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 110.545845][ T792] libceph: connect (1)[c::]:6789 error -101 [ 110.589848][ T6373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.102'. [ 110.604500][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 110.621236][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 110.623350][ T30] audit: type=1326 audit(1775558859.130:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 110.651988][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 110.692285][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 110.749168][ T30] audit: type=1326 audit(1775558859.130:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 110.759193][ T29] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 110.811798][ T30] audit: type=1326 audit(1775558859.130:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 110.863261][ T29] usb 1-1: USB disconnect, device number 2 [ 110.872011][ T30] audit: type=1326 audit(1775558859.130:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 110.977521][ T30] audit: type=1326 audit(1775558859.130:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 111.019457][ T30] audit: type=1326 audit(1775558859.130:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105999c819 code=0x7ffc0000 [ 115.386462][ T6435] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.062824][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 118.062842][ T30] audit: type=1400 audit(1775558866.970:362): avc: denied { connect } for pid=6449 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.155222][ T30] audit: type=1400 audit(1775558866.970:363): avc: denied { write } for pid=6449 comm="syz.3.122" laddr=fe80::13 lport=25296 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.502327][ T30] audit: type=1400 audit(1775558868.420:364): avc: denied { write } for pid=6455 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 120.369087][ T6476] random: crng reseeded on system resumption [ 120.445376][ T30] audit: type=1400 audit(1775558869.290:365): avc: denied { write } for pid=6471 comm="syz.0.127" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.639596][ T30] audit: type=1400 audit(1775558869.290:366): avc: denied { open } for pid=6471 comm="syz.0.127" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.889132][ T30] audit: type=1400 audit(1775558869.620:367): avc: denied { create } for pid=6475 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.976778][ T6472] FAT-fs (nbd0): unable to read boot sector [ 121.110542][ T30] audit: type=1400 audit(1775558869.630:368): avc: denied { setopt } for pid=6475 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.309328][ T30] audit: type=1400 audit(1775558869.640:369): avc: denied { audit_write } for pid=6475 comm="syz.1.128" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 123.065750][ T30] audit: type=1400 audit(1775558871.990:370): avc: denied { read } for pid=6500 comm="syz.4.136" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 124.297492][ T30] audit: type=1400 audit(1775558872.020:371): avc: denied { open } for pid=6500 comm="syz.4.136" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 124.435182][ T30] audit: type=1400 audit(1775558873.220:372): avc: denied { create } for pid=6493 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 124.539141][ T30] audit: type=1400 audit(1775558873.260:373): avc: denied { connect } for pid=6493 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.750667][ T30] audit: type=1400 audit(1775558873.270:374): avc: denied { write } for pid=6488 comm="syz.1.133" laddr=fe80::16 lport=255 faddr=ff01::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.135099][ T5873] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 125.330336][ T5873] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.345137][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.436702][ T5873] usb 3-1: Product: syz [ 125.441558][ T5873] usb 3-1: Manufacturer: syz [ 125.446802][ T5873] usb 3-1: SerialNumber: syz [ 125.503392][ T5873] usb 3-1: config 0 descriptor?? [ 125.802936][ T5873] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.990619][ T6533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.175412][ T30] audit: type=1400 audit(1775558875.090:375): avc: denied { setopt } for pid=6531 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.915077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.670423][ T5873] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 127.929581][ T5873] usb 3-1: USB disconnect, device number 2 [ 129.726151][ T30] audit: type=1400 audit(1775558878.180:376): avc: denied { name_connect } for pid=6585 comm="syz.2.146" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 129.779328][ T30] audit: type=1400 audit(1775558878.700:377): avc: denied { create } for pid=6585 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.776799][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.517866][ T5873] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.532859][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.545316][ T5873] usb 2-1: Product: syz [ 131.549510][ T5873] usb 2-1: Manufacturer: syz [ 131.557470][ T5873] usb 2-1: SerialNumber: syz [ 131.630333][ T30] audit: type=1400 audit(1775558880.490:378): avc: denied { mount } for pid=6612 comm="syz.0.152" name="/" dev="ramfs" ino=10887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 132.151080][ T5873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 132.198637][ T5873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 132.217720][ T5873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 132.291309][ T5873] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 132.357513][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.411472][ T5873] usb 2-1: USB disconnect, device number 3 [ 133.065340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.794153][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.055124][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 134.160517][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.174311][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 134.212772][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.278134][ T10] usb 3-1: Product: syz [ 134.282297][ T10] usb 3-1: Manufacturer: syz [ 134.311575][ T10] usb 3-1: SerialNumber: syz [ 134.367278][ T10] usb 3-1: config 0 descriptor?? [ 134.457343][ T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 134.915184][ T30] audit: type=1400 audit(1775558883.710:379): avc: denied { read write } for pid=6667 comm="syz.3.158" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 134.945206][ T30] audit: type=1400 audit(1775558883.710:380): avc: denied { open } for pid=6667 comm="syz.3.158" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 134.969067][ T30] audit: type=1400 audit(1775558883.710:381): avc: denied { ioctl } for pid=6667 comm="syz.3.158" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.011007][ T6669] input: syz1 as /devices/virtual/input/input5 [ 135.224785][ T30] audit: type=1400 audit(1775558884.140:382): avc: denied { map } for pid=6660 comm="syz.1.157" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.542398][ T1091] usb 3-1: Failed to submit usb control message: -110 [ 135.556053][ T1091] usb 3-1: unable to send the bmi data to the device: -110 [ 135.597831][ T1091] usb 3-1: unable to get target info from device [ 135.637731][ T1091] usb 3-1: could not get target info (-110) [ 135.656875][ T1091] usb 3-1: could not probe fw (-110) [ 135.764157][ T6675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.945099][ T30] audit: type=1400 audit(1775558885.750:383): avc: denied { read write } for pid=6688 comm="syz.3.162" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.397331][ T30] audit: type=1400 audit(1775558885.750:384): avc: denied { open } for pid=6688 comm="syz.3.162" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.426354][ T30] audit: type=1400 audit(1775558885.970:385): avc: denied { bind } for pid=6688 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.480282][ T10] usb 3-1: USB disconnect, device number 3 [ 137.808857][ T6699] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[6699] [ 139.170225][ T30] audit: type=1400 audit(1775558888.090:386): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 139.920295][ T6715] netlink: 68 bytes leftover after parsing attributes in process `syz.3.167'. [ 140.414519][ T6717] syzkaller0: entered promiscuous mode [ 140.441115][ T6717] syzkaller0: entered allmulticast mode [ 140.509521][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 140.706199][ T5819] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 141.104867][ T30] audit: type=1400 audit(1775558890.010:387): avc: denied { getopt } for pid=6723 comm="syz.3.172" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.145134][ T30] audit: type=1400 audit(1775558890.020:388): avc: denied { bind } for pid=6723 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.700706][ T30] audit: type=1400 audit(1775558890.270:389): avc: denied { accept } for pid=6727 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 142.194884][ T6739] ksmbd: Unknown IPC event: 4, ignore. [ 142.865795][ T5943] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.139829][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 143.160878][ T5943] usb 5-1: config 0 has no interfaces? [ 143.170823][ T5943] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 143.255112][ T6753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.271169][ T30] audit: type=1400 audit(1775558892.160:390): avc: denied { read } for pid=6745 comm="syz.2.178" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.299842][ T6750] Bluetooth: MGMT ver 1.23 [ 143.541350][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.566878][ T5943] usb 5-1: Product: syz [ 143.573482][ T5943] usb 5-1: Manufacturer: syz [ 143.578767][ T30] audit: type=1400 audit(1775558892.160:391): avc: denied { open } for pid=6745 comm="syz.2.178" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.622273][ T5943] usb 5-1: SerialNumber: syz [ 143.650271][ T5943] usb 5-1: config 0 descriptor?? [ 144.315691][ T30] audit: type=1400 audit(1775558892.220:392): avc: denied { write } for pid=6749 comm="syz.0.179" path="socket:[11955]" dev="sockfs" ino=11955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.766345][ T30] audit: type=1400 audit(1775558893.680:393): avc: denied { bind } for pid=6763 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.254995][ T30] audit: type=1400 audit(1775558893.770:394): avc: denied { mount } for pid=6738 comm="syz.4.175" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 145.455312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 145.675969][ T30] audit: type=1400 audit(1775558893.860:395): avc: denied { write } for pid=6738 comm="syz.4.175" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 145.799234][ T30] audit: type=1400 audit(1775558893.860:396): avc: denied { open } for pid=6738 comm="syz.4.175" path="/32/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 146.581012][ T5887] usb 5-1: USB disconnect, device number 4 [ 146.602112][ T30] audit: type=1400 audit(1775558895.380:397): avc: denied { listen } for pid=6775 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.084587][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.644268][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 147.828792][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.987999][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 147.999160][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 148.637339][ T9] usb 4-1: Product: syz [ 148.641544][ T9] usb 4-1: Manufacturer: syz [ 148.646490][ T9] usb 4-1: SerialNumber: syz [ 148.658628][ T6784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.818636][ T5819] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 148.827142][ T5819] Bluetooth: hci2: Injecting HCI hardware error event [ 148.836438][ T5819] Bluetooth: hci2: hardware error 0x00 [ 148.948530][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 149.319690][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.332702][ T30] audit: type=1400 audit(1775558898.040:398): avc: denied { bind } for pid=6817 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.384876][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.551865][ T6822] netlink: 'syz.3.187': attribute type 8 has an invalid length. [ 149.573264][ C0] usblp0: nonzero write bulk status received: -71 [ 149.662647][ T30] audit: type=1400 audit(1775558898.490:399): avc: denied { read write } for pid=6783 comm="syz.3.187" name="lp0" dev="devtmpfs" ino=2825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 149.699630][ T30] audit: type=1400 audit(1775558898.490:400): avc: denied { open } for pid=6783 comm="syz.3.187" path="/dev/usb/lp0" dev="devtmpfs" ino=2825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 149.785116][ T5873] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.975409][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 149.991101][ T5873] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.001216][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.916265][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.235850][ T5819] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 151.275122][ T5873] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.292701][ T5873] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.301991][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.528136][ T6831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 151.534872][ T6831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.620342][ T6831] vhci_hcd vhci_hcd.0: Device attached [ 151.645739][ T5873] usb 2-1: GET_CAPABILITIES returned 0 [ 151.671877][ T5873] usbtmc 2-1:16.0: can't read capabilities [ 151.865163][ T5894] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 152.256688][ T6832] vhci_hcd: connection reset by peer [ 152.314514][ T6555] vhci_hcd vhci_hcd.4: stop threads [ 152.372624][ T6555] vhci_hcd vhci_hcd.4: release socket [ 152.396839][ T6821] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 152.453790][ T6555] vhci_hcd vhci_hcd.4: disconnect device [ 152.478227][ T5873] usb 4-1: USB disconnect, device number 3 [ 152.680865][ T30] audit: type=1400 audit(1775558901.520:401): avc: denied { getopt } for pid=6820 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.798189][ T5873] usblp0: removed [ 152.843305][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 153.988424][ T30] audit: type=1400 audit(1775558901.720:402): avc: denied { ioctl } for pid=6820 comm="syz.1.194" path="socket:[12164]" dev="sockfs" ino=12164 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.329451][ T6821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.463217][ T9] usb 2-1: USB disconnect, device number 4 [ 155.705238][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 156.007771][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 156.100319][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 156.105130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 156.185091][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.210528][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.220253][ T5819] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 156.240034][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.355139][ T9] usb 2-1: Product: syz [ 156.381856][ T9] usb 2-1: Manufacturer: syz [ 156.406754][ T9] usb 2-1: SerialNumber: syz [ 156.436580][ T9] usb 2-1: config 0 descriptor?? [ 156.473664][ T9] usb 2-1: selecting invalid altsetting 0 [ 156.993557][ T6928] overlayfs: overlapping lowerdir path [ 157.587142][ T30] audit: type=1400 audit(1775558905.950:403): avc: denied { mount } for pid=6923 comm="syz.3.203" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 157.700934][ T5894] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 157.866622][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.899090][ T30] audit: type=1400 audit(1775558906.820:404): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 158.061107][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.281104][ T30] audit: type=1400 audit(1775558907.110:405): avc: denied { write } for pid=6931 comm="syz.0.209" name="wireless" dev="proc" ino=4026532942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 158.539995][ T5873] usb 2-1: USB disconnect, device number 5 [ 158.594603][ T30] audit: type=1400 audit(1775558907.120:406): avc: denied { ioctl } for pid=6931 comm="syz.0.209" path="socket:[12211]" dev="sockfs" ino=12211 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.549644][ T30] audit: type=1400 audit(1775558908.420:407): avc: denied { create } for pid=6950 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.600554][ T6954] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 159.614128][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.626220][ T6954] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.106572][ T30] audit: type=1400 audit(1775558908.420:408): avc: denied { connect } for pid=6950 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 161.416264][ T30] audit: type=1400 audit(1775558908.840:409): avc: denied { listen } for pid=6950 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 161.478608][ T30] audit: type=1400 audit(1775558910.390:410): avc: denied { ioctl } for pid=6964 comm="syz.4.214" path="socket:[12253]" dev="sockfs" ino=12253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.681731][ T30] audit: type=1400 audit(1775558910.390:411): avc: denied { ioctl } for pid=6964 comm="syz.4.214" path="socket:[12261]" dev="sockfs" ino=12261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.862128][ T30] audit: type=1400 audit(1775558910.390:412): avc: denied { bind } for pid=6964 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.306724][ T30] audit: type=1400 audit(1775558910.390:413): avc: denied { write } for pid=6964 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.604407][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 162.635068][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 162.647514][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 162.660675][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 164.157939][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 164.159694][ T30] audit: type=1400 audit(1775558913.070:417): avc: denied { write } for pid=6976 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.398266][ T6984] ceph: No mds server is up or the cluster is laggy [ 165.287648][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 165.678064][ T30] audit: type=1400 audit(1775558914.360:418): avc: denied { ioctl } for pid=6993 comm="syz.2.221" path="socket:[13344]" dev="sockfs" ino=13344 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.396729][ T7004] bond1: Unable to set down delay as MII monitoring is disabled [ 166.565432][ T7004] bond1 (unregistering): Released all slaves [ 166.594363][ T30] audit: type=1400 audit(1775558915.200:419): avc: denied { setopt } for pid=7011 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.708353][ T30] audit: type=1400 audit(1775558915.630:420): avc: denied { shutdown } for pid=7016 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.836199][ T30] audit: type=1400 audit(1775558918.710:421): avc: denied { read write } for pid=7040 comm="syz.2.231" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.150035][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.186932][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.223679][ T30] audit: type=1400 audit(1775558918.720:422): avc: denied { open } for pid=7040 comm="syz.2.231" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.352735][ T7050] fido_id[7050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.374154][ T7051] 9p: Bad value for 'rfdno' [ 170.381227][ T7051] openvswitch: netlink: Key 26 has unexpected len 12 expected 16 [ 170.905533][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.094562][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.340192][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.466816][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.539524][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.690327][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.720621][ T24] usb 1-1: config 0 descriptor?? [ 171.839110][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 172.977097][ T30] audit: type=1400 audit(1775558921.860:423): avc: denied { connect } for pid=7067 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.749904][ T30] audit: type=1400 audit(1775558921.870:424): avc: denied { ioctl } for pid=7067 comm="syz.3.238" path="socket:[12826]" dev="sockfs" ino=12826 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.792585][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 173.804155][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 173.836041][ T24] usb 1-1: USB disconnect, device number 3 [ 174.575854][ T5943] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 176.665899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 176.895190][ T5943] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 176.903468][ T5943] usb 3-1: config 0 has no interface number 0 [ 177.454966][ T5943] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 177.523739][ T5943] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 177.556954][ T5943] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 177.701298][ T5943] usb 3-1: string descriptor 0 read error: -71 [ 177.707850][ T5943] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 177.736967][ T7094] fuse: Bad value for 'fd' [ 177.745110][ T30] audit: type=1400 audit(1775558926.660:425): avc: denied { mounton } for pid=7092 comm="syz.4.245" path="/47/file1" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.776629][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 177.830409][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.842060][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.851314][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.860882][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.870076][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.879495][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.888678][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.898125][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.907249][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 177.917886][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 178.947404][ T5943] usb 3-1: config 0 descriptor?? [ 178.953475][ T5943] usb 3-1: can't set config #0, error -71 [ 178.961217][ T5943] usb 3-1: USB disconnect, device number 4 [ 179.723246][ T7111] ubi31: attaching mtd0 [ 179.734427][ T7111] ubi31: scanning is finished [ 180.179674][ T5819] Bluetooth: Frame is too long (len 12, expected len 4) [ 180.368443][ T7111] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 180.839292][ T30] audit: type=1400 audit(1775558929.760:426): avc: denied { read } for pid=7116 comm="syz.2.251" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.092103][ T30] audit: type=1400 audit(1775558929.760:427): avc: denied { open } for pid=7116 comm="syz.2.251" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.127008][ T7123] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 181.157131][ T30] audit: type=1400 audit(1775558929.810:428): avc: denied { ioctl } for pid=7116 comm="syz.2.251" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.357284][ T30] audit: type=1400 audit(1775558929.940:429): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 181.490313][ T7123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.698015][ T30] audit: type=1400 audit(1775558930.590:430): avc: denied { ioctl } for pid=7127 comm="syz.4.253" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.508397][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.567912][ T793] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 183.304835][ T30] audit: type=1400 audit(1775558932.080:431): avc: denied { accept } for pid=7132 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.349747][ T30] audit: type=1400 audit(1775558932.080:432): avc: denied { read } for pid=7132 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.378321][ T30] audit: type=1400 audit(1775558932.280:433): avc: denied { setopt } for pid=7147 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.527327][ T30] audit: type=1400 audit(1775558932.440:434): avc: denied { setopt } for pid=7149 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.631059][ T7145] warning: `syz.0.246' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 183.764035][ T7153] syzkaller0: entered allmulticast mode [ 183.784897][ T7153] syzkaller0: entered promiscuous mode [ 184.034452][ T30] audit: type=1400 audit(1775558932.950:435): avc: denied { create } for pid=7152 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.833431][ T7153] syzkaller0 (unregistering): left allmulticast mode [ 184.850637][ T7153] syzkaller0 (unregistering): left promiscuous mode [ 184.957650][ T30] audit: type=1400 audit(1775558933.750:436): avc: denied { ioctl } for pid=7152 comm="syz.3.258" path="socket:[12938]" dev="sockfs" ino=12938 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.999184][ T793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 185.172571][ T793] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 185.195309][ T793] usb 1-1: can't read configurations, error -71 [ 186.119665][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 186.256945][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 186.270203][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 186.889315][ T7183] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.897291][ T7183] overlayfs: failed to set xattr on upper [ 186.903519][ T7183] overlayfs: ...falling back to redirect_dir=nofollow. [ 186.910521][ T7183] overlayfs: ...falling back to index=off. [ 186.916723][ T7183] overlayfs: ...falling back to uuid=null. [ 187.101194][ T7184] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 187.362393][ T30] audit: type=1400 audit(1775558935.770:437): avc: denied { mounton } for pid=7172 comm="syz.2.264" path="/file0" dev="ramfs" ino=12960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 189.370596][ T30] audit: type=1400 audit(1775558938.270:438): avc: denied { bind } for pid=7189 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.408733][ T30] audit: type=1400 audit(1775558938.280:439): avc: denied { bind } for pid=7189 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 189.468990][ T30] audit: type=1400 audit(1775558938.280:440): avc: denied { read } for pid=7189 comm="syz.0.266" path="socket:[12996]" dev="sockfs" ino=12996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 189.549970][ T30] audit: type=1400 audit(1775558938.380:441): avc: denied { setopt } for pid=7189 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 189.872492][ T793] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 189.947703][ T7205] __nla_validate_parse: 11 callbacks suppressed [ 189.947715][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 189.989876][ T30] audit: type=1400 audit(1775558938.670:442): avc: denied { bind } for pid=7203 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.013755][ T30] audit: type=1400 audit(1775558938.670:443): avc: denied { setopt } for pid=7203 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.037647][ T30] audit: type=1400 audit(1775558938.960:444): avc: denied { connect } for pid=7206 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.445070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 191.312180][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.321733][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.331238][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.341096][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.350279][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.359682][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.368845][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.378776][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.387947][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 192.525726][ T793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 192.540858][ T793] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 192.550146][ T793] usb 5-1: can't read configurations, error -71 [ 192.725429][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.479474][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 193.585253][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.627197][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.845755][ T30] audit: type=1400 audit(1775558942.550:445): avc: denied { create } for pid=7229 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 193.865539][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.873163][ T10] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 194.830581][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.839073][ T30] audit: type=1400 audit(1775558942.950:446): avc: denied { bind } for pid=7229 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.860172][ T30] audit: type=1400 audit(1775558943.280:447): avc: denied { listen } for pid=7229 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.881910][ T10] usb 2-1: config 0 descriptor?? [ 194.887213][ T30] audit: type=1400 audit(1775558943.510:448): avc: denied { mounton } for pid=7230 comm="syz.2.276" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 194.976735][ T10] usb 2-1: can't set config #0, error -71 [ 194.996017][ T10] usb 2-1: USB disconnect, device number 6 [ 196.193385][ T30] audit: type=1400 audit(1775558944.700:449): avc: denied { setopt } for pid=7251 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.645566][ T30] audit: type=1400 audit(1775558945.560:450): avc: denied { audit_read } for pid=7264 comm="syz.2.282" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.094954][ T30] audit: type=1400 audit(1775558946.010:451): avc: denied { create } for pid=7270 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 197.528502][ T30] audit: type=1400 audit(1775558946.450:452): avc: denied { ioctl } for pid=7275 comm="syz.1.285" path="socket:[13895]" dev="sockfs" ino=13895 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.325156][ T5943] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 198.416991][ T30] audit: type=1400 audit(1775558946.870:453): avc: denied { watch } for pid=7280 comm="syz.3.287" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.215062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 199.315051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 199.920614][ T30] audit: type=1400 audit(1775558948.840:454): avc: denied { create } for pid=7300 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 200.393516][ T30] audit: type=1400 audit(1775558949.310:455): avc: denied { sys_admin } for pid=7300 comm="syz.4.291" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 200.407441][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.459312][ T5943] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 200.481497][ T5943] usb 2-1: can't read configurations, error -71 [ 202.603459][ T7324] netlink: 'syz.1.296': attribute type 5 has an invalid length. [ 202.940122][ T7330] hfsplus: unable to find HFS+ superblock [ 203.375739][ T793] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 203.539524][ T793] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 203.652427][ T793] usb 2-1: config 0 has no interface number 0 [ 203.675641][ T793] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 203.700881][ T30] audit: type=1400 audit(1775558952.620:456): avc: denied { create } for pid=7334 comm="syz.0.298" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.129869][ T793] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.140797][ T793] usb 2-1: config 0 interface 113 has no altsetting 0 [ 204.157343][ T793] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 204.166793][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.175638][ T793] usb 2-1: Product: syz [ 204.181547][ T793] usb 2-1: Manufacturer: syz [ 204.187170][ T793] usb 2-1: SerialNumber: syz [ 204.297658][ T30] audit: type=1400 audit(1775558953.180:457): avc: denied { mounton } for pid=7334 comm="syz.0.298" path="/62/file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.436633][ T793] usb 2-1: config 0 descriptor?? [ 204.558673][ C0] usb 2-1: NFC: Urb failure (status -71) [ 204.638104][ T793] usb 2-1: NFC: Unable to get FW version [ 204.684673][ T30] audit: type=1400 audit(1775558953.190:458): avc: denied { append } for pid=7334 comm="syz.0.298" name="file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.729685][ T793] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 204.862610][ T7344] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 204.870513][ T7344] __nla_validate_parse: 11 callbacks suppressed [ 204.870531][ T7344] netlink: 152 bytes leftover after parsing attributes in process `syz.2.299'. [ 204.891914][ T7344] .`: renamed from bond0 (while UP) [ 204.922091][ T30] audit: type=1400 audit(1775558953.190:459): avc: denied { open } for pid=7334 comm="syz.0.298" path="/62/file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.953247][ T30] audit: type=1400 audit(1775558953.680:460): avc: denied { module_request } for pid=7338 comm="syz.2.299" kmod="net-pf-22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 205.606481][ T30] audit: type=1400 audit(1775558954.520:461): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 205.840520][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.302'. [ 205.944659][ T30] audit: type=1400 audit(1775558954.790:462): avc: denied { setopt } for pid=7351 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.291516][ T5810] usb 2-1: USB disconnect, device number 9 [ 206.376976][ T7361] netlink: 248 bytes leftover after parsing attributes in process `syz.3.304'. [ 207.087392][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 207.096510][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 207.105952][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 207.114935][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 207.123876][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 207.132878][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 207.141849][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 208.694698][ T30] audit: type=1400 audit(1775558957.400:463): avc: denied { compute_member } for pid=7374 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 208.824160][ T30] audit: type=1400 audit(1775558957.740:464): avc: denied { append } for pid=7386 comm="syz.2.309" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.370347][ T7391] 9p: p9: multiple sources not supported [ 209.604453][ T30] audit: type=1400 audit(1775558957.890:465): avc: denied { node_bind } for pid=7375 comm="syz.4.308" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 209.793792][ T30] audit: type=1400 audit(1775558958.710:466): avc: denied { setattr } for pid=7377 comm="syz.3.307" name="NETLINK" dev="sockfs" ino=14045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.029957][ T7406] __nla_validate_parse: 16 callbacks suppressed [ 211.029975][ T7406] netlink: 2796 bytes leftover after parsing attributes in process `syz.2.312'. [ 211.136625][ T7402] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.737953][ T30] audit: type=1400 audit(1775558960.650:467): avc: denied { setattr } for pid=7412 comm="syz.1.317" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 212.440175][ T7422] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 212.449033][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.457333][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.474474][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.481655][ T7422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.490160][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.497302][ T7422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.515000][ T7422] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 212.655246][ T30] audit: type=1400 audit(1775558961.290:468): avc: denied { read } for pid=7418 comm="syz.0.318" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.923791][ T30] audit: type=1400 audit(1775558961.290:469): avc: denied { open } for pid=7418 comm="syz.0.318" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 213.036986][ T30] audit: type=1400 audit(1775558961.300:470): avc: denied { ioctl } for pid=7418 comm="syz.0.318" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 213.634966][ T7430] wg1: entered promiscuous mode [ 213.646681][ T7430] wg1: entered allmulticast mode [ 214.931439][ T30] audit: type=1400 audit(1775558963.840:471): avc: denied { block_suspend } for pid=7429 comm="syz.3.321" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.200087][ T7450] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 215.806249][ T30] audit: type=1326 audit(1775558964.310:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 215.956988][ T7458] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 216.430407][ T30] audit: type=1326 audit(1775558964.310:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 216.540202][ T30] audit: type=1326 audit(1775558964.310:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 216.574053][ T30] audit: type=1326 audit(1775558964.310:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 216.953006][ T30] audit: type=1326 audit(1775558964.310:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 217.056782][ T7466] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 217.063812][ T7466] overlayfs: failed to set xattr on upper [ 217.069655][ T7466] overlayfs: ...falling back to redirect_dir=nofollow. [ 217.076563][ T7466] overlayfs: ...falling back to index=off. [ 217.082384][ T7466] overlayfs: ...falling back to uuid=null. [ 217.129977][ T7467] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 217.351367][ T30] audit: type=1326 audit(1775558964.310:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 218.403762][ T30] audit: type=1326 audit(1775558964.310:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 218.428109][ T30] audit: type=1326 audit(1775558964.310:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 218.451534][ T30] audit: type=1326 audit(1775558964.310:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 218.568893][ T30] audit: type=1326 audit(1775558964.310:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 218.600437][ T30] audit: type=1326 audit(1775558964.320:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 218.785285][ T30] audit: type=1326 audit(1775558964.320:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 219.228426][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 219.363233][ T30] audit: type=1326 audit(1775558964.320:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 219.459682][ T30] audit: type=1326 audit(1775558964.320:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe0eeb9c819 code=0x7ffc0000 [ 219.460790][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.214288][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 222.269593][ T5819] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 222.615125][ T1209] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 223.625545][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 223.625562][ T30] audit: type=1400 audit(1775558972.550:500): avc: denied { getopt } for pid=7509 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.692589][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 223.705883][ T1209] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 223.725189][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 224.295455][ T1209] usb 3-1: Product: syz [ 224.299661][ T1209] usb 3-1: SerialNumber: syz [ 224.331115][ T1209] usb 3-1: config 0 descriptor?? [ 224.341072][ T1209] usb 3-1: can't set config #0, error -71 [ 224.427725][ T1209] usb 3-1: USB disconnect, device number 5 [ 225.625337][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 225.776259][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 227.539713][ T7553] overlayfs: failed to clone upperpath [ 228.457085][ T30] audit: type=1400 audit(1775558977.330:501): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 229.470471][ T30] audit: type=1400 audit(1775558978.390:502): avc: denied { create } for pid=7560 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 229.675971][ T30] audit: type=1400 audit(1775558978.470:503): avc: denied { ioctl } for pid=7560 comm="syz.0.352" path="socket:[14717]" dev="sockfs" ino=14717 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 229.769482][ T30] audit: type=1400 audit(1775558978.670:504): avc: denied { getopt } for pid=7560 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.924141][ T30] audit: type=1400 audit(1775558978.670:505): avc: denied { write } for pid=7560 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 229.947927][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 230.339951][ T30] audit: type=1400 audit(1775558978.670:506): avc: denied { getopt } for pid=7560 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.489345][ T7574] capability: warning: `syz.0.355' uses deprecated v2 capabilities in a way that may be insecure [ 230.559853][ T30] audit: type=1400 audit(1775558979.470:507): avc: denied { ioctl } for pid=7573 comm="syz.0.355" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.648448][ T30] audit: type=1400 audit(1775558979.560:508): avc: denied { create } for pid=7573 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.509380][ T7602] vlan2: entered promiscuous mode [ 232.514454][ T7602] macvlan1: entered promiscuous mode [ 233.016843][ T30] audit: type=1400 audit(1775558981.940:509): avc: denied { bind } for pid=7593 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.780736][ T7607] netlink: 'syz.2.362': attribute type 10 has an invalid length. [ 234.410545][ T7607] syz_tun: entered promiscuous mode [ 234.556139][ T7607] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 235.738661][ T7628] netlink: 14 bytes leftover after parsing attributes in process `syz.3.368'. [ 235.905403][ T7631] nbd: must specify a device to reconfigure [ 237.434571][ T30] audit: type=1400 audit(1775558986.330:510): avc: denied { write } for pid=7638 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 237.895121][ T7659] 9p: Bad value for 'rfdno' [ 238.269107][ T7660] kAFS: unable to lookup cell 'ÿ' [ 238.276419][ T7660] kAFS: unable to lookup cell '(,c¾Ì' [ 239.228943][ T7667] GUP no longer grows the stack in syz.4.379 (7667): 200000003000-200000200000 (200000002000) [ 239.239625][ T7667] CPU: 0 UID: 0 PID: 7667 Comm: syz.4.379 Not tainted syzkaller #0 PREEMPT(full) [ 239.239643][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 239.239650][ T7667] Call Trace: [ 239.239655][ T7667] [ 239.239659][ T7667] dump_stack_lvl+0x100/0x190 [ 239.239682][ T7667] gup_vma_lookup.cold+0x83/0x96 [ 239.239700][ T7667] __get_user_pages+0x241/0x34d0 [ 239.239717][ T7667] ? down_read_killable+0x30e/0x4c0 [ 239.239731][ T7667] ? __lock_acquire+0x4a5/0x2630 [ 239.239743][ T7667] ? __pfx___get_user_pages+0x10/0x10 [ 239.239761][ T7667] __gup_longterm_locked+0x279/0x16f0 [ 239.239779][ T7667] ? __pfx___gup_longterm_locked+0x10/0x10 [ 239.239795][ T7667] ? __get_pfnblock_flags_mask+0x140/0x250 [ 239.239810][ T7667] ? find_held_lock+0x2b/0x80 [ 239.239826][ T7667] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 239.239842][ T7667] gup_fast_fallback+0x18c6/0x2460 [ 239.239866][ T7667] ? __pfx_gup_fast_fallback+0x10/0x10 [ 239.239885][ T7667] pin_user_pages_fast+0xa7/0xf0 [ 239.239898][ T7667] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 239.239910][ T7667] ? io_pin_pages+0xc3/0x1e0 [ 239.239927][ T7667] ? avc_has_perm_noaudit+0x145/0x3b0 [ 239.239941][ T7667] io_pin_pages+0xe6/0x1e0 [ 239.239958][ T7667] io_create_region+0x3f9/0xbe0 [ 239.239977][ T7667] ? __pfx_io_create_region+0x10/0x10 [ 239.239993][ T7667] ? rcu_is_watching+0x12/0xc0 [ 239.240007][ T7667] ? cap_capable+0x107/0x460 [ 239.240024][ T7667] ? bpf_lsm_capable+0x9/0x10 [ 239.240035][ T7667] ? security_capable+0x80/0x260 [ 239.240050][ T7667] io_uring_setup.cold+0x11b0/0x1df9 [ 239.240064][ T7667] ? __pfx_io_uring_setup+0x10/0x10 [ 239.240086][ T7667] ? find_held_lock+0x2b/0x80 [ 239.240115][ T7667] ? xfd_validate_state+0x129/0x190 [ 239.240132][ T7667] __x64_sys_io_uring_setup+0xc2/0x170 [ 239.240147][ T7667] do_syscall_64+0x106/0xf80 [ 239.240158][ T7667] ? clear_bhb_loop+0x40/0x90 [ 239.240173][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.240185][ T7667] RIP: 0033:0x7f105999c819 [ 239.240195][ T7667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.240205][ T7667] RSP: 002b:00007f105a81a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 239.240216][ T7667] RAX: ffffffffffffffda RBX: 00007f1059c15fa0 RCX: 00007f105999c819 [ 239.240223][ T7667] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000007f9 [ 239.240229][ T7667] RBP: 00007f1059a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 239.240235][ T7667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.240241][ T7667] R13: 00007f1059c16038 R14: 00007f1059c15fa0 R15: 00007fffea16f958 [ 239.240255][ T7667] [ 239.902776][ T7675] IPv6: NLM_F_REPLACE set, but no existing node found! [ 240.018896][ T7675] netlink: 56 bytes leftover after parsing attributes in process `syz.3.380'. [ 240.126718][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.380'. [ 241.011837][ T30] audit: type=1400 audit(1775558989.810:511): avc: denied { nlmsg_read } for pid=7688 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.455092][ T30] audit: type=1400 audit(1775558991.360:512): avc: denied { map } for pid=7697 comm="syz.3.386" path="socket:[15462]" dev="sockfs" ino=15462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.560042][ T7707] xt_cgroup: path and classid specified [ 242.779141][ T30] audit: type=1400 audit(1775558991.360:513): avc: denied { read } for pid=7697 comm="syz.3.386" path="socket:[15462]" dev="sockfs" ino=15462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 244.153909][ T7725] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 244.161044][ T7725] overlayfs: failed to set xattr on upper [ 244.166838][ T7725] overlayfs: ...falling back to redirect_dir=nofollow. [ 244.173975][ T7725] overlayfs: ...falling back to index=off. [ 244.179949][ T7725] overlayfs: ...falling back to uuid=null. [ 244.225218][ T7726] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 244.536674][ T7728] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 244.560362][ T7728] veth0_vlan: left promiscuous mode [ 244.570201][ T7728] veth0_vlan: entered promiscuous mode [ 244.584335][ T7728] team0: Device veth0_vlan failed to register rx_handler [ 245.145049][ T5887] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 245.378307][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 245.389787][ T5887] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 245.400580][ T5887] usb 3-1: config 0 has no interface number 0 [ 245.696411][ T5887] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.724242][ T5887] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 245.735995][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.748301][ T5887] usb 3-1: Product: syz [ 245.753623][ T5887] usb 3-1: Manufacturer: syz [ 245.821065][ T5887] usb 3-1: SerialNumber: syz [ 245.877831][ T5887] usb 3-1: config 0 descriptor?? [ 246.540151][ T5887] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 246.550563][ T5887] em28xx 3-1:0.132: Video interface 132 found: [ 246.957663][ T5887] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 248.098735][ T30] audit: type=1400 audit(1775559253.021:514): avc: denied { connect } for pid=7762 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.118662][ T5887] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 248.136300][ T5887] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 249.127143][ T7765] kvm: user requested TSC rate below hardware speed [ 249.272936][ T5887] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 249.283614][ T5887] em28xx 3-1:0.132: analog set to bulk mode. [ 249.336742][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 249.456295][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 249.490098][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 249.515161][ T5887] usb 3-1: USB disconnect, device number 6 [ 249.521696][ T5887] em28xx 3-1:0.132: Disconnecting em28xx [ 250.081535][ T7785] tipc: Started in network mode [ 250.086561][ T7785] tipc: Node identity ac07140f, cluster identity 4711 [ 250.093674][ T7785] tipc: Enabling of bearer rejected, failed to enable media [ 250.580877][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 250.645565][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 250.686318][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 250.724533][ T10] usb 3-1: Decoder not found [ 250.808770][ T10] em28xx 3-1:0.132: failed to create media graph [ 250.880524][ T7793] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20003 [ 251.584101][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 251.635067][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 251.645574][ T5887] em28xx 3-1:0.132: Closing input extension [ 251.645953][ T7794] ================================================================== [ 251.659886][ T7794] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 251.667345][ T7794] Read of size 8 at addr ffff888035a18790 by task v4l_id/7794 [ 251.674774][ T7794] [ 251.677088][ T7794] CPU: 1 UID: 0 PID: 7794 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 251.677102][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.677109][ T7794] Call Trace: [ 251.677113][ T7794] [ 251.677117][ T7794] dump_stack_lvl+0x100/0x190 [ 251.677137][ T7794] print_report+0x156/0x4c9 [ 251.677153][ T7794] ? __virt_addr_valid+0x239/0x430 [ 251.677170][ T7794] ? v4l2_fh_init+0x27d/0x2c0 [ 251.677186][ T7794] kasan_report+0xdf/0x1e0 [ 251.677198][ T7794] ? v4l2_fh_init+0x27d/0x2c0 [ 251.677215][ T7794] v4l2_fh_init+0x27d/0x2c0 [ 251.677231][ T7794] v4l2_fh_open+0x64/0xa0 [ 251.677251][ T7794] em28xx_v4l2_open+0x11e/0x570 [ 251.677271][ T7794] v4l2_open+0x1d2/0x490 [ 251.677280][ T7794] ? __pfx_v4l2_open+0x10/0x10 [ 251.677293][ T7794] chrdev_open+0x234/0x6a0 [ 251.677305][ T7794] ? __pfx_chrdev_open+0x10/0x10 [ 251.677320][ T7794] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 251.677339][ T7794] do_dentry_open+0x6d8/0x1660 [ 251.677350][ T7794] ? __pfx_chrdev_open+0x10/0x10 [ 251.677366][ T7794] vfs_open+0x82/0x3f0 [ 251.677383][ T7794] path_openat+0x208c/0x31a0 [ 251.677397][ T7794] ? __pfx_path_openat+0x10/0x10 [ 251.677410][ T7794] do_file_open+0x20e/0x430 [ 251.677423][ T7794] ? __pfx_do_file_open+0x10/0x10 [ 251.677438][ T7794] ? alloc_fd+0x476/0x790 [ 251.677450][ T7794] ? do_getname+0x191/0x390 [ 251.677465][ T7794] do_sys_openat2+0x10d/0x1e0 [ 251.677478][ T7794] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.677494][ T7794] __x64_sys_openat+0x12d/0x210 [ 251.677508][ T7794] ? __pfx___x64_sys_openat+0x10/0x10 [ 251.677522][ T7794] ? do_user_addr_fault+0x8d6/0x12f0 [ 251.677536][ T7794] do_syscall_64+0x106/0xf80 [ 251.677546][ T7794] ? clear_bhb_loop+0x40/0x90 [ 251.677558][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.677573][ T7794] RIP: 0033:0x7f9a56ca7407 [ 251.677582][ T7794] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 251.677593][ T7794] RSP: 002b:00007ffdeaaac0d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 251.677604][ T7794] RAX: ffffffffffffffda RBX: 00007f9a57343880 RCX: 00007f9a56ca7407 [ 251.677610][ T7794] RDX: 0000000000000000 RSI: 00007ffdeaaadf1c RDI: ffffffffffffff9c [ 251.677617][ T7794] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 251.677623][ T7794] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 251.677629][ T7794] R13: 00007ffdeaaac320 R14: 00007f9a57448000 R15: 000055a5d83e64d8 [ 251.677638][ T7794] [ 251.677642][ T7794] [ 251.927471][ T7794] Allocated by task 10: [ 251.931609][ T7794] kasan_save_stack+0x30/0x50 [ 251.936272][ T7794] kasan_save_track+0x14/0x30 [ 251.940924][ T7794] __kasan_kmalloc+0xaa/0xb0 [ 251.945495][ T7794] em28xx_v4l2_init.cold+0x94/0x3503 [ 251.950755][ T7794] em28xx_init_extension+0x13a/0x200 [ 251.956025][ T7794] request_module_async+0x61/0x80 [ 251.961036][ T7794] process_one_work+0xa23/0x19a0 [ 251.965949][ T7794] worker_thread+0x5ef/0xe50 [ 251.970521][ T7794] kthread+0x370/0x450 [ 251.974575][ T7794] ret_from_fork+0x754/0xd80 [ 251.979136][ T7794] ret_from_fork_asm+0x1a/0x30 [ 251.983887][ T7794] [ 251.986185][ T7794] Freed by task 10: [ 251.989967][ T7794] kasan_save_stack+0x30/0x50 [ 251.994626][ T7794] kasan_save_track+0x14/0x30 [ 251.999288][ T7794] kasan_save_free_info+0x3b/0x70 [ 252.004287][ T7794] __kasan_slab_free+0x5f/0x80 [ 252.009038][ T7794] kfree+0x1f6/0x6b0 [ 252.012911][ T7794] kref_put.isra.0+0x56/0x90 [ 252.017488][ T7794] em28xx_v4l2_init.cold+0x280/0x3503 [ 252.022848][ T7794] em28xx_init_extension+0x13a/0x200 [ 252.028112][ T7794] request_module_async+0x61/0x80 [ 252.033123][ T7794] process_one_work+0xa23/0x19a0 [ 252.038044][ T7794] worker_thread+0x5ef/0xe50 [ 252.042611][ T7794] kthread+0x370/0x450 [ 252.046672][ T7794] ret_from_fork+0x754/0xd80 [ 252.051235][ T7794] ret_from_fork_asm+0x1a/0x30 [ 252.055986][ T7794] [ 252.058285][ T7794] The buggy address belongs to the object at ffff888035a18000 [ 252.058285][ T7794] which belongs to the cache kmalloc-8k of size 8192 [ 252.072306][ T7794] The buggy address is located 1936 bytes inside of [ 252.072306][ T7794] freed 8192-byte region [ffff888035a18000, ffff888035a1a000) [ 252.086255][ T7794] [ 252.088557][ T7794] The buggy address belongs to the physical page: [ 252.094956][ T7794] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035a1c000 pfn:0x35a18 [ 252.104996][ T7794] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 252.113463][ T7794] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 252.121930][ T7794] page_type: f5(slab) [ 252.125897][ T7794] raw: 00fff00000000240 ffff88813fe41280 ffffea000123c010 ffffea0001279010 [ 252.134452][ T7794] raw: ffff888035a1c000 0000000800020001 00000000f5000000 0000000000000000 [ 252.143024][ T7794] head: 00fff00000000240 ffff88813fe41280 ffffea000123c010 ffffea0001279010 [ 252.151680][ T7794] head: ffff888035a1c000 0000000800020001 00000000f5000000 0000000000000000 [ 252.160321][ T7794] head: 00fff00000000003 ffffea0000d68601 00000000ffffffff 00000000ffffffff [ 252.168965][ T7794] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 252.177617][ T7794] page dumped because: kasan: bad access detected [ 252.183996][ T7794] page_owner tracks the page as allocated [ 252.189678][ T7794] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5573, tgid 5573 (init), ts 34959391147, free_ts 34909026899 [ 252.209545][ T7794] post_alloc_hook+0x153/0x170 [ 252.214289][ T7794] get_page_from_freelist+0x111d/0x3140 [ 252.219812][ T7794] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 252.225678][ T7794] new_slab+0xa6/0x6b0 [ 252.229720][ T7794] refill_objects+0x26b/0x400 [ 252.234370][ T7794] __pcs_replace_empty_main+0x1ab/0x660 [ 252.239888][ T7794] __kmalloc_cache_noprof+0x493/0x6f0 [ 252.245245][ T7794] tomoyo_init_log+0xc4f/0x20c0 [ 252.250076][ T7794] tomoyo_supervisor+0x506/0x1340 [ 252.255075][ T7794] tomoyo_env_perm+0x191/0x200 [ 252.259824][ T7794] tomoyo_find_next_domain+0x13d7/0x2010 [ 252.265430][ T7794] tomoyo_bprm_check_security+0x12d/0x1d0 [ 252.271138][ T7794] security_bprm_check+0x87/0x1e0 [ 252.276140][ T7794] bprm_execve+0x84b/0x1680 [ 252.280622][ T7794] do_execveat_common.isra.0+0x4a5/0x580 [ 252.286238][ T7794] __x64_sys_execve+0x93/0xd0 [ 252.290886][ T7794] page last free pid 5561 tgid 5561 stack trace: [ 252.297181][ T7794] __free_frozen_pages+0x7e1/0x10d0 [ 252.302354][ T7794] qlist_free_all+0x47/0xe0 [ 252.306833][ T7794] kasan_quarantine_reduce+0x1a0/0x1f0 [ 252.312267][ T7794] __kasan_slab_alloc+0x69/0x90 [ 252.317085][ T7794] kmem_cache_alloc_noprof+0x241/0x6e0 [ 252.322522][ T7794] vm_area_dup+0x27/0x8e0 [ 252.326826][ T7794] dup_mmap+0x6f6/0x2180 [ 252.331040][ T7794] copy_process+0x7523/0x7a40 [ 252.335710][ T7794] kernel_clone+0xfc/0x9a0 [ 252.340130][ T7794] __do_sys_clone+0xd9/0x120 [ 252.344705][ T7794] do_syscall_64+0x106/0xf80 [ 252.349269][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.355134][ T7794] [ 252.357436][ T7794] Memory state around the buggy address: [ 252.363059][ T7794] ffff888035a18680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.371091][ T7794] ffff888035a18700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.379135][ T7794] >ffff888035a18780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.387164][ T7794] ^ [ 252.391721][ T7794] ffff888035a18800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.399751][ T7794] ffff888035a18880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.407781][ T7794] ================================================================== [ 252.501378][ T7794] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 252.508622][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 252.517571][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.527636][ T7794] Call Trace: [ 252.530929][ T7794] [ 252.533864][ T7794] dump_stack_lvl+0x100/0x190 [ 252.538566][ T7794] vpanic+0x552/0x970 [ 252.542554][ T7794] ? __pfx_vpanic+0x10/0x10 [ 252.547050][ T7794] ? v4l2_fh_init+0x27d/0x2c0 [ 252.551725][ T7794] panic+0xd1/0xe0 [ 252.555439][ T7794] ? __pfx_panic+0x10/0x10 [ 252.559844][ T7794] ? v4l2_fh_init+0x27d/0x2c0 [ 252.564524][ T7794] ? preempt_schedule_common+0x42/0xc0 [ 252.569990][ T7794] ? check_panic_on_warn+0x1f/0x90 [ 252.575092][ T7794] check_panic_on_warn.cold+0x19/0x34 [ 252.580456][ T7794] end_report.part.0+0x3a/0x90 [ 252.585217][ T7794] kasan_report.cold+0xe/0x18 [ 252.589893][ T7794] ? v4l2_fh_init+0x27d/0x2c0 [ 252.594576][ T7794] v4l2_fh_init+0x27d/0x2c0 [ 252.599079][ T7794] v4l2_fh_open+0x64/0xa0 [ 252.603407][ T7794] em28xx_v4l2_open+0x11e/0x570 [ 252.608256][ T7794] v4l2_open+0x1d2/0x490 [ 252.612488][ T7794] ? __pfx_v4l2_open+0x10/0x10 [ 252.617239][ T7794] chrdev_open+0x234/0x6a0 [ 252.621648][ T7794] ? __pfx_chrdev_open+0x10/0x10 [ 252.626586][ T7794] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 252.632913][ T7794] do_dentry_open+0x6d8/0x1660 [ 252.637671][ T7794] ? __pfx_chrdev_open+0x10/0x10 [ 252.642608][ T7794] vfs_open+0x82/0x3f0 [ 252.646673][ T7794] path_openat+0x208c/0x31a0 [ 252.651259][ T7794] ? __pfx_path_openat+0x10/0x10 [ 252.656188][ T7794] do_file_open+0x20e/0x430 [ 252.660683][ T7794] ? __pfx_do_file_open+0x10/0x10 [ 252.665701][ T7794] ? alloc_fd+0x476/0x790 [ 252.670008][ T7794] ? do_getname+0x191/0x390 [ 252.674496][ T7794] do_sys_openat2+0x10d/0x1e0 [ 252.679150][ T7794] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.684324][ T7794] __x64_sys_openat+0x12d/0x210 [ 252.689150][ T7794] ? __pfx___x64_sys_openat+0x10/0x10 [ 252.694496][ T7794] ? do_user_addr_fault+0x8d6/0x12f0 [ 252.699766][ T7794] do_syscall_64+0x106/0xf80 [ 252.704328][ T7794] ? clear_bhb_loop+0x40/0x90 [ 252.708989][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.714854][ T7794] RIP: 0033:0x7f9a56ca7407 [ 252.719249][ T7794] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 252.738843][ T7794] RSP: 002b:00007ffdeaaac0d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 252.747235][ T7794] RAX: ffffffffffffffda RBX: 00007f9a57343880 RCX: 00007f9a56ca7407 [ 252.755180][ T7794] RDX: 0000000000000000 RSI: 00007ffdeaaadf1c RDI: ffffffffffffff9c [ 252.763122][ T7794] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 252.771075][ T7794] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 252.779020][ T7794] R13: 00007ffdeaaac320 R14: 00007f9a57448000 R15: 000055a5d83e64d8 [ 252.786978][ T7794] [ 252.790269][ T7794] Kernel Offset: disabled [ 252.794569][ T7794] Rebooting in 86400 seconds..