last executing test programs: 18.837692231s ago: executing program 4 (id=152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x6, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x24004800) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x200, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_RESET(r9, 0x5000, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 15.741075393s ago: executing program 1 (id=156): mount(0x0, 0x0, 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={r3, r4+60000000}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, 0x0, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) sendfile(r6, r6, 0x0, 0x6) 14.767247655s ago: executing program 1 (id=158): socket$kcm(0x2, 0x1, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde2feacc831eec04c24eeec7ff3d31378508003d2d5c89ab0220cefebd4687636417b9822766c1bfea4e01fd43c6a4caeaf049a572a9774d3b882663b4a66c5ec48c29f065d"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x20}, {}, {0x0, 0x3}], 0x3f}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_int(r5, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) 13.491036895s ago: executing program 1 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0xc, 0xa0, 0xffffffff, 0xc, 0x0, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8a, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0xfffffffc, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x3, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xd, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x6, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0x9, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0xffffffff, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0xa1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x10000401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) syz_emit_ethernet(0x122, &(0x7f0000000140)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xab, "2db1", "001000", 0x883e, "7b4f08002000000000bba48d22fb621d6d6c98959ffa00638557ba3a07b25f289fbc3a2b98ccb4cdd65f7c0abc7a41f23218b2264dd8164bfe45fe03339fe5097592b90f96c25033b9da83005b7c66b9b8f1ae4d4f7417cef6e4d0379c7c73db544765e9c8535518894259669253fb8b682b935d03f6f85ea255013c1163507f360ae33e0ba617e1e2cafdc2b5e82f69a74913d3a0d0314037f5b5ac9ee8c970ebd43361976b83f6b3c923085f1dce2c1624e92c3ec3e80a9f71fc86dff4844a8e05cf2303c2e88962bb0c53b05a1f04b60f915a91a1d85ad0139c8cedfe7ad5fc0ae6702176c01123b8cf86274f0ab20b19b23bbd9dc7f5fc2e104a708bb447ce54c527fb03c8d5d0ddfb"}}}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 12.905992426s ago: executing program 0 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r8}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 12.045926208s ago: executing program 4 (id=162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r3) accept(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80) syz_usb_connect(0x0, 0x32e, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b20000935aa8257f90b39e3ce07964"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000200)={0x3, 0x100, 0xfffffff0, 0x6, 0x10, 0x2}) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000540)="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", 0x644, 0x0) pipe2$watch_queue(0x0, 0x80) syz_io_uring_setup(0x2bf4, &(0x7f0000000300)={0x0, 0xf554, 0x8, 0x3, 0x5b, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000280)) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x3b) close_range(r0, 0xffffffffffffffff, 0x0) 11.948997657s ago: executing program 3 (id=163): add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500002000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x3d810686a7d95765, 0x70bd29, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44881) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400048c0}, 0x0) socket$rds(0x15, 0x5, 0x0) 11.216776269s ago: executing program 0 (id=164): ioperm(0x3, 0x1, 0x400) ioperm(0x100, 0x1, 0x7fffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000002c0)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000980)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_b, @device_b, @random="c7b9c9454a0b", {0x5, 0x6}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}, 0xf7d6000000, @random=0x8, 0x9410, @void, @void, @val={0x3, 0x1, 0x8c}, @void, @val={0x6, 0x2, 0x8}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x48, "ebc4893163344add3366d43b8ece61d5d7c07def16f5b29377e8dd57ff5fc0e1d374d402ff0667a163861e76c2116e6e469f23539f8054093d2badd22c8fc7736499d7b40e4a6033"}, {0xdd, 0x5d, "0a0d3d309a27da9c204ebb58f63985bf71325f4e0eca9dcfcbe34cc8c8fbfc48c516863ae79a4ba9a5a0f4e59fae6d0a68fb183578ecce07380c23c3877b7a790f8f97932a413aa0c9219b4a031b60c16fb19b70d651b58b7ad5a0fa36"}, {0xdd, 0x1a, "801ea7ed2cde750345f88bf5403ffe1b3c1b936ce8cb21741d6f"}, {0xdd, 0xe6, "863e0f8195c3bc6975802c3ce845fad8c182827f0a4a4251d5b46a236ba43f6bd10254af486625b7da607387c186243c2651ec2267a5aa65cd69d8d92e605d3d55030a770fd95af38ee25294c310a0775b1a50b0933f4356ed60e0f4cf4ec56342b9881e2225c3d663be562bfbabd3cca1c7ddc325b5bf8e046d12a34d8b570c73821e46d771df2cd4e1d5d5e441d8dae6e32335765c691507931219777ece9ff8b23bcddf1094e7915f5ad3587f009f58500d02d1d976cf246d885410c9aad3d92e8a2ec108561e15f0aa09ac0d364e653c04b314b1501522f0bf8b3eab84c99748e648a0c2"}, {0xdd, 0xf, "9a044648885be5edbf1f429e6da30d"}, {0xdd, 0x4b, "c39c74d9c1583b15b848405cff1f906b608bc8d001ef9bf146f6b1ec55f5ef5384ed63e889af4cf8644c0e953698d1304e360e5e85f41e8d3cdb7803ab23a5a8b0f7a804ecf5f097362e1c"}]}, 0x242) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)={0x0}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000580)=@ctrl_frame=@ba={{}, {0xf}, @broadcast, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x4}, {0x9, 0x9}, "bb1eb204d83240d68483290e2a114688d5093b2ca0f2685c66615adac021632677c6d0134048bd6e48c127d565d3e8fe8601b6be897cbab7eca4b8530c4148327a4712f1454b78f0be110d4696a2bd4f56b919a8efd0882f8265e793115057e2368435c9d8543e58eb719eb88113872e62a310d07db848ce26c878834e4f4c7b"}}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRESDEC=r5, @ANYRES8=r3, @ANYRES8=r3, @ANYBLOB="e943ea112cb3ca9a0432493da6fd73ddbcb3665a240442fa46267e31a7323659764dafeccdf3bd24147c21ebfe13b827d35f571655aee2eb726b0373a5017df260015fd2be14a3ad88ef4c18d0dd361a9ff6b2920be1738a93c4ad43f2d74aaba67a26916bb2f1472e1fa1b6785278d48d53ff11f42b61ef765627b2915c05ae8cc22b033aec85d3ce4d2a81eb0fb32c71476a1dccd8289db5519c8dc289fa2be7282c55afbd6e5a5b520c03d7888c15369b708b23992a3dd662e78956be6794b0a9a7f038560e40a879abe14082686255edb6b9916419279bcd3979307586ba9db489801dbe312ea0fe1e5021f620a401fe4bcfb85d6cbd4f9881ef6a958e4b163220ad353d1987d6e6ae1eeb871515ae417e00c974f3269a23c2b59e32c544dfac4e57a01bb52e503b16d2b694961ee2259aa8511902535aac4d513a342217acc77de5523126e5979611ab239daa81de56f2f709ed3109d55178dac37c1f6342ea99211148be2588992ef7335074d6d811c80e054d7598b3affa49cb61ba06294efa648dbae7f293767467a95e80e1bb725ed8013d0ea7b60e44d858a97154dcf9da3bb7fc785e68a6afafc7cdb9193728e34a07b396a09b32d78f2de6b29d5cbf717ac650391ca533c849e4307e88f7d7216dc04c9657fd17c16d0915e73b4a5473b7704fed95e153bade318382c703cf2fd0920e047ca791bc2f5e688dc362505505e9614c3c467f1be6d7fea6dfa2f968a5e2fe156ec52fd120bda308299ddda422109af1ab6f694a8b2d228115915b15f9d77fa5915ce0d1ce47d6ccfd21cc96565250d6e73a46d09a56296567783aba1c9136faccc8b8bdfb4c5f8a93c4c9681eaad388353b1e8f1fd7375adb17a945bd255343044c07cad62a6aa9ea2388fe9502c3728914d49bf95d84888d6580654f136fa65a5e97e919682651e1e31b451ceda4eb9696032614b68fc3104a8f8ce51d2b870c2216e9a186117860935db94efdf9fbc4c03de94fe1a5ba3ff15bd065a62740af73cce559a6e9de0a4a23db5b59461f65a42798ad7cbc415883b571409099eda3e77ee17c672caf69ef2f25df8e01695fcfb39594b8ea7ec35ed3db799e139e239e2e0971a43e92578949eaa1fbf13fbee7711111a225065e16549735862ac18d79a8e27a00b3dc1eca1adb33b709ad46907a30f3c5687bcdfc6d9c4fb4bf0e267fbb353b2fe5747c9998e7ef59abbdd1b376d7a882627538d543c931939df92259fdd32d519d7b3a886600e6d8db82933f62da816ac0898c10be314faf0516cc366226d52d7f9c3555e365b8803a553df06f430db612a72f38d5124e091eaec0e80fdde991d5f206fbe3b09e2edb5010a5510e1cf1fbe851715b6cbf9c7392af74bb87b4b19babe38eebc05d1f8d19d326e7338eb827cb9a7da9fbdc9968edd573e900f056ed101e525ef1293c09f75649962ea8492045e692d27a2d9324a20591a642c27a6b88da82d04da2c9d72f43566778eda123c78a2eaab7abed92483cd5a9de1a27896150b28a0b088574bfa3e1338614fe827bdfedf9ea6e42bc8555d74daa8e5c522cdd1e527285b000fb54a59aa20d3ad6c41676023ecaee6f1a83018597954b8b8c13167965dacc8449698ca4890150d2b20d959e5fd8657e6dde731130215736bdaa59a615849f86ec511207fc7dff93e6146f0f00f7ee7a061df6ad6a906d41a66bf9a0f3bc219154e9df772eb521ecb10ab041a1d6f272df9d17702738879be60bda6ff06e820efda68410b4e43939291164f43bd3ccc6e7786b10019cb50909aeb5c2c5e98185ff84d89afeb67f19fe5baddf440e55c3151a6c3237b4bac281d8444c2177278ee962427af6236735ab7a365335f3c90987a3103cc01fd7802d11ad090611f10df7ed646e565bd768e2e40524ca9ca17318a621c2b0ee40aeec6a0e12d8786fab1b54086de16378db158ab0facb10984e239a83ae0c474bcc2e4d6060a33abb2e2d02f5129739ba51eaa367adafec048e12c2116e1f89b52cf17d2771d117e213c5fd59a405f58ad204ba18f5f5c943adac6c0d48432c62741080ac57ff5aa3ac4cba94ce55edf2e3797bafc3d287591bb4aee7b2a580529c263971b1277ab274051ffff2f192f81028f6ca0bbea07498da3309aae6e264d56e7ef5caacbb0d2103d7e7ae1eb8af5c394183c711cf072f46e793b6848f8c7220fa3f5e7d73e9a5d3ba6b7b4f29b0a213f234b00bbdeab93e5e1ec92fa7bf13183a66f6b15580e3ddad8a44ca7947a21aabbaa9e6a07adee26bd6645eac49e8863442f64e07a598c9613d4f6bf90f85957e3d88406b9d12b0adfb4a2f5cce01b6985afd9c95e8c8927a01fb9bae6a12575df7170c91cc046a03abd42dbec31ba29d2d72b53560c432f3f698821d0c300bde7611df13d468689d4a04326248b6b0220d8a7aa5c93f025207af557d03268a8783eb22eecabe304d3f2b63a1797ff68ff5149d9f0ba284405270b4f55204a9bbd7d18a8df91f537931301348c9b6bb819ddf905e2660eaed3b0628e5764be9de8df6c29a36143ffa85523e8cf955c832e2778332615c19255fc16ba57c3d7dd03ce1346fe5c942eb2a93b3d6c497aeee61251f8dcce75fc26ed3ae69e0e8257c2ea1c97e1b675b48bd8be080825050d06e809267257963bb05d41bdec6484434148605a3cabab33694740425bc905ed9ca5e0067fa8674f327f16e97917a7becec90f1669e6f6ba2b6c21b722e98240567fe29fd9ec3f2cf71012f0427a600a8c1f80e57a9786b54b5a787c3ccf99a1af14f8a4fbeefbd710a2c67ab3d5e41601dd89b13f4edda850013f7a14a3174ebe82725de1cf8c0255fd6651df363225d3da400a22d1e6596af71fa69214381d12da9e96ca0be1dac1d36269d1bcd71d37692a8d30bd2cdf7357e328a5987cc96368d50654782ced3c8da3f316f72d177f5b5fedc4e160a00d80441bd42a276ef82635be7e4ebe842dd1c26ace7ed8e78f920c59325a71b696d54b6133e4f661a47da5cd7a01f3f43f6db448fdcbb92d4977f509a976c61f6728964a751e742839291f9ef499e751fb1e39db5c7d082928ad51ceb2038e493bd57982daaaab4e1e29de5714a7b1cf6e7813b62144943dfae4d9ea3dc812ec934d0ae78edaeda429f10ffb3f072daa8a421a196486177d8a331ba27616f9cb8bc398835acf3f69b5eb96d83db8668dc819cc162b4a18e6c03f4b8f1e387fb6bf98d94283996004fd0f2da616660115c2f328f079a2d22f8e20cbcbdd4095b68b04f996e53cbf07e5ef13872130d25d4a78bfb35b1e40e4f81587b1a2477cf0efe2c7cb9b06502c68c93540a7fd2575d718df994c2ec5e4ec00cf1540737641972f165ef62a26e2b578a7eebf41094566f953a2c5e282ef410097592ecdf19c49535673de5a5ee754b1bb2b1f6b091c0b8dd2ee0e4cfb87e64c701deb88c8aa0b265ba624c75bee4b7a962e8d280fb52666bc07915cf27e282ac1b00d9a5c4da81c701beb26519b16040b5c31d3f3d349e4faf74c031e2efc8a5b3ca6ea3a96e1ca9465d27a73a4136a399b5aed662c4a92ad11ab027dfe22c4f200cf347291e9e9c0ef0fad8a6f56a2cf257b5d5566c6d2891bcce393ec248de4a83d9d1b4c703b6f55c00354814476d5c7bad917a659417fbd6cc942c0e56f9052c60ed9325e89e2c456725d0f676a6379712e49c2fe46349701cd2c33f6b8c358228e46906cf6cf61bd844bd8bf7aa78921324e38250998f80bdd376e5be005d8abec107cad4a12093b42abf6481616ebc14bbb2e29fd567d7b0b61ce42a4af800c801b16ac5f99b70835bbe3ae2c0aee5caa0ce67bcd811a24fdbeeb8057d3d8890eee968a71d7effc97cea6ebdde84bb2019e9bbb6c557de7a4539b131b0db4c2f7e35afbd03f6005b03b57480c294fc69e4c25b52ba5e0e2daa39c417538eb9ed926a1f1c42587bc56408c28011c16a88103d109fdafe23393eb8554208d0ced9e49f8a3c1ba17f6aa97cded247923af6b37a58e8a44d3ebd780deb450295beeb4a49369f1d4da7cac3308bc8c47de1b3c8ca14c1a900e0e7f592d3eb2e981a1f0e5096bc798c83061d22933245ed9ce2394098395f749148fb3d9f98b4674c9b6e8c94d2e907e24cae52d4d7f7737197e396af56d0d7d178c27a41bdfd7b9334e4cab10e1b8e173db27ca8777e5477d31f5e22f8be8e5d5ce1aa7f46d315b51d2eba415821c87345be06464283693198254458fee149dd28f770fa773371719a3add7ef11e033c8368ba84cde362d1fdc13fed8dece3dbd01381193b82a14c89f38475c00d1cab83eb8ff16e793c613ae8e5d18bdcbb6e4bec478b6e9b129a104ceabfd8a198b18853f01996f8cced0e16183edaeb9062b04c984483861201dda02297012e0174e5f8b9448fdfb843944d0ef3617038fdcea9a65ddae8d07028dce669b0d09afbb98deafc00dd864df0767abebf4e355bbd45df6b727cc9c76e9601444f2fbb74c6910f850df42f15de16d421accdc0d47779bca9cedc24d35f2b097e4d82153ef748b9f0e7f4958e77d113ae14588babea00f2e835ad007d5c3c262e8fefda66a21a6ca129be6528da01b10bdae7a28547bba3c546a00d28f2a0f019fa1e75fe07e75cf25be6f0852c4d1d7c5358f5b3f39f4de4cec5e32bd3ae2c04e7285d66368f4d64daea686bed575a414ed2af6b8672a3946fab02cc5024518dee0adc84ea355b056af25733b3f908a185307f12f6c10521c97145fc6c44c6d541d0eceb6565c1190717837be5a0fb7451603d2f1f1fbdd1971e99a5d6ff6d2b35b9ecfd62d76b266f9c53588065ec8643aff3d33972e32d05d0ab5f318f00b7d960cda0053923b2b305b6bf7be8eee9e89c6e78ecd37c5588a2b21a5f274d743ff9748a97a804846d4bbdd79b293fca284e63fc34891ca41f800fb49dc867d028a1dc92c90d94242d2249e2b79dd55f8d03802362dfba0455910b0197669583f4e1caef3399907bbcb911a50b894f46e9d2f0eec181281aefd779246af6fe2b98e26f32657048c463233db74a31d124c37686ba48e10e9438ef9f859aa898b3621646f5298db8e618d8dc9bf1947d4f6e38e7047b5b30d238db64f26d9178f9bf886c027bb046d2042c4342beab3253c225acbdffe77ffc9ca8640c6e6a15bc826d0cc11aae112b4bd480d38ebcd0f908f02838e9a963dac2823763a56b25c527dc607c272a8b7926d1bdba764acedba269c37eec9e7ea739c507945f9d7ff018ea115471a6170b3440e547686e1aaee477f743333d05df6c3ebce6b38192f09bc2491c8a1f861c82a5cdff2a1786261f5efd99d7a97806a1f7eab779b8e1248f487846b47164c7f985a6e9176b884151b4b64268ef425f57e08c70d015079dc8ff11e7367a72100e8466f1f57ea51384248e5a3358587e7263a09af3716060139edd28d4b48238529d1779864bb3739b059c8db0cd52fe862500cf3be2ae786de436efecd84d8cb92861903f8a0ecb51b53b60a2c8951598e85716f0eab0197c1f8ce34c4c4b59e704135264c9ab638e32d89233be4380d64da0d0f8e049be03e474136d44aecdcd19b5eb5dad0caaf5a6ee573e2d4b55ea6bce29fe3c200fac8f5528e4adb885bfbc40ec345b12d050551930732e78ae2acde6bb46d6995068d1755a1b9f64747bc0963d4ca008d69f8e96838e6d4d8bec2e05ff8f2bcf6087edfe02d2fb5b2b0c58b6659f67a2cac0fdc1651930c6ec69aba0061164dfc73bc63e4eeb6c74b0", @ANYRES32=r5], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) copy_file_range(r6, 0x0, r6, &(0x7f00000004c0)=0xdc, 0xfffffffffffffff8, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) io_uring_setup(0x2508, &(0x7f0000000500)={0x0, 0xe, 0x200, 0x1, 0x185, 0x0, r8}) 11.213247297s ago: executing program 3 (id=165): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) setrlimit(0xa, &(0x7f0000000040)={0x3, 0x6}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ftruncate(r6, 0x200004) read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r5, r6, 0x0, 0x80001d00c0d1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) 11.127280799s ago: executing program 2 (id=166): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000007c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0xfffc, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x4, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x200, 0xd}, @nop, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000361000/0x800000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) cachestat(r0, &(0x7f0000000200)={0x80000000, 0x7f}, &(0x7f0000000240), 0x0) fanotify_init(0x8, 0x101400) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000011d40)='stack\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 9.705961673s ago: executing program 3 (id=167): openat$sndseq(0xffffffffffffff9c, 0x0, 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, 0x0, 0x0, 0x6, 0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) 9.018581468s ago: executing program 3 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x9) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x7) fsopen(0x0, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) 8.980777408s ago: executing program 2 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) r7 = mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) mq_timedreceive(r7, &(0x7f0000000300)=""/122, 0x7a, 0x8, &(0x7f0000000380)={0x0, 0x3938700}) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0xc, 0xa0, 0xffffffff, 0xc, 0x0, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8a, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0xfffffffc, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x3, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xd, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x6, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0x9, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0xffffffff, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0xa1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x10000401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) syz_emit_ethernet(0x17, &(0x7f0000000140)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xab, "2db1", "001000", 0x883e}}}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 8.776799974s ago: executing program 0 (id=170): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x60010020, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.862463725s ago: executing program 3 (id=171): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) 7.644290075s ago: executing program 2 (id=172): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$SG_IO(r4, 0x2285, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aef", 0x10}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/676], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b6617d50793e321eb000000001800120400000000000000000c0002806dc77c9d2c0e119d7cd27b13fe5016a76a3cd010682c36d0057fb575000c"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x40, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 6.707438359s ago: executing program 3 (id=173): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @mlv2_report={0x8f, 0x0, 0x0, 0x26, 0x1, [{0xc, 0x0, 0x0, @local}]}}}}}}, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='!,$\x00', &(0x7f0000000240)='@\\-}.)^^\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r1, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) 6.647135329s ago: executing program 4 (id=174): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24000040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) 6.365528966s ago: executing program 1 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r8}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 6.307814875s ago: executing program 0 (id=176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r3, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 5.295984939s ago: executing program 1 (id=177): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) 5.215117969s ago: executing program 4 (id=178): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x5, @any, 0x1, 0x1}, 0xe) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r3 = eventfd(0x1) ioctl$FIONCLEX(r3, 0x5450) syz_open_dev$media(&(0x7f0000000240), 0x9, 0x2) mknod$loop(0x0, 0x2480, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) 3.622130769s ago: executing program 0 (id=179): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0xa, 0x8000) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff020400", 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x800, 0x0, @loopback, 0x3}, 0x1c) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3.280559203s ago: executing program 2 (id=180): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0, 0x0) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = gettid() setpgid(r4, 0x0) lstat(&(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800400, &(0x7f00000006c0)={[{}, {@gid={'gid', 0x3d, r3}}, {}, {}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) 2.313047376s ago: executing program 2 (id=181): socket$inet6(0xa, 0x1, 0xfffffff9) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x27, @short}, 0x14) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) 2.16209887s ago: executing program 4 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) r7 = mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) mq_timedreceive(r7, &(0x7f0000000300)=""/122, 0x7a, 0x8, &(0x7f0000000380)={0x0, 0x3938700}) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0xc, 0xa0, 0xffffffff, 0xc, 0x0, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8a, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0xfffffffc, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x3, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xd, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x6, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0x9, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0xffffffff, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0xa1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x10000401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) syz_emit_ethernet(0x17, &(0x7f0000000140)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xab, "2db1", "001000", 0x883e}}}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 2.141151416s ago: executing program 0 (id=183): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, 0x0}, 0x296) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) r3 = getuid() ioprio_set$uid(0x0, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x5, &(0x7f0000000080)=0x2) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x0, 0x2, 0x3, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045519, 0xffffffffffffffff) 960.395085ms ago: executing program 1 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c000000020601010000000140000000010000000c00078008000800000000800900020073797a502900000005020a2300000000450005000a00000005000100060000002802000000001500040000000c000280080001400a01010124000640000000040500140002000000c3d539682c46d4104934d986cabe4f0911143ad66d6717c9523ed52ed56716182551cad906525ddb25e9c3"], 0x6c}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x40, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x1, 0x1, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0xd, "0adb3fb8"}, 0x5}) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00') r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20008804) 958.68328ms ago: executing program 2 (id=185): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r6, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) 0s ago: executing program 4 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0xc, 0xa0, 0xffffffff, 0xc, 0x0, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8a, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0xfffffffc, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x3, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xd, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x6, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0x9, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0xffffffff, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0xa1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x10000401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) syz_emit_ethernet(0x122, &(0x7f0000000140)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xab, "2db1", "001000", 0x883e, "7b4f08002000000000bba48d22fb621d6d6c98959ffa00638557ba3a07b25f289fbc3a2b98ccb4cdd65f7c0abc7a41f23218b2264dd8164bfe45fe03339fe5097592b90f96c25033b9da83005b7c66b9b8f1ae4d4f7417cef6e4d0379c7c73db544765e9c8535518894259669253fb8b682b935d03f6f85ea255013c1163507f360ae33e0ba617e1e2cafdc2b5e82f69a74913d3a0d0314037f5b5ac9ee8c970ebd43361976b83f6b3c923085f1dce2c1624e92c3ec3e80a9f71fc86dff4844a8e05cf2303c2e88962bb0c53b05a1f04b60f915a91a1d85ad0139c8cedfe7ad5fc0ae6702176c01123b8cf86274f0ab20b19b23bbd9dc7f5fc2e104a708bb447ce54c527fb03c8d5d0ddfb"}}}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 65.275200][ T30] audit: type=1400 audit(1746827846.084:66): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.279800][ T5797] cgroup: Unknown subsys name 'net' [ 65.298002][ T30] audit: type=1400 audit(1746827846.084:67): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.325446][ T30] audit: type=1400 audit(1746827846.114:68): avc: denied { unmount } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.451698][ T5797] cgroup: Unknown subsys name 'cpuset' [ 65.459884][ T5797] cgroup: Unknown subsys name 'rlimit' [ 65.644926][ T30] audit: type=1400 audit(1746827846.454:69): avc: denied { setattr } for pid=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.677015][ T30] audit: type=1400 audit(1746827846.454:70): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.701440][ T30] audit: type=1400 audit(1746827846.454:71): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.725925][ T30] audit: type=1400 audit(1746827846.454:72): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.746494][ T30] audit: type=1400 audit(1746827846.454:73): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.771446][ T30] audit: type=1400 audit(1746827846.454:74): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.794730][ T30] audit: type=1400 audit(1746827846.484:75): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.816914][ T5799] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.734754][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.793881][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.802977][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.811392][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.811535][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.819728][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.827209][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.834002][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.847757][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.848474][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.855616][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.863644][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.871403][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.876909][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.891550][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.898847][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.923658][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.934716][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.942823][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.951809][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.959615][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.988832][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.002503][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.010764][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.029501][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.037601][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.330788][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 69.471276][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 69.540600][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 69.587847][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 69.605892][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.613775][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.621503][ T5814] bridge_slave_0: entered allmulticast mode [ 69.628706][ T5814] bridge_slave_0: entered promiscuous mode [ 69.663431][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.671954][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.679551][ T5814] bridge_slave_1: entered allmulticast mode [ 69.686352][ T5814] bridge_slave_1: entered promiscuous mode [ 69.762731][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.769988][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.777149][ T5807] bridge_slave_0: entered allmulticast mode [ 69.784167][ T5807] bridge_slave_0: entered promiscuous mode [ 69.814485][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.826454][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.845467][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.852748][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.860484][ T5807] bridge_slave_1: entered allmulticast mode [ 69.867266][ T5807] bridge_slave_1: entered promiscuous mode [ 69.887453][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.894645][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.901992][ T5808] bridge_slave_0: entered allmulticast mode [ 69.909339][ T5808] bridge_slave_0: entered promiscuous mode [ 69.964502][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.971929][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.979511][ T5808] bridge_slave_1: entered allmulticast mode [ 69.986260][ T5808] bridge_slave_1: entered promiscuous mode [ 70.003076][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.015021][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.048824][ T5814] team0: Port device team_slave_0 added [ 70.076289][ T5807] team0: Port device team_slave_0 added [ 70.093119][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.105647][ T5814] team0: Port device team_slave_1 added [ 70.111743][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 70.123404][ T5807] team0: Port device team_slave_1 added [ 70.129582][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.136698][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.144068][ T5810] bridge_slave_0: entered allmulticast mode [ 70.150890][ T5810] bridge_slave_0: entered promiscuous mode [ 70.160605][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.188924][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.196057][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.203617][ T5810] bridge_slave_1: entered allmulticast mode [ 70.210955][ T5810] bridge_slave_1: entered promiscuous mode [ 70.254674][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.261707][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.287626][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.314243][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.321490][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.347719][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.368619][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.375589][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.401638][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.422605][ T5808] team0: Port device team_slave_0 added [ 70.430906][ T5808] team0: Port device team_slave_1 added [ 70.437175][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.444269][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.470402][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.503946][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.538988][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.571984][ T5807] hsr_slave_0: entered promiscuous mode [ 70.578613][ T5807] hsr_slave_1: entered promiscuous mode [ 70.594605][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.601737][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.628047][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.640821][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.647795][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.673777][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.692725][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.700879][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.708245][ T5823] bridge_slave_0: entered allmulticast mode [ 70.714993][ T5823] bridge_slave_0: entered promiscuous mode [ 70.754556][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.761771][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.769295][ T5823] bridge_slave_1: entered allmulticast mode [ 70.776034][ T5823] bridge_slave_1: entered promiscuous mode [ 70.785079][ T5810] team0: Port device team_slave_0 added [ 70.843330][ T5810] team0: Port device team_slave_1 added [ 70.853260][ T5814] hsr_slave_0: entered promiscuous mode [ 70.860200][ T5814] hsr_slave_1: entered promiscuous mode [ 70.866121][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.873889][ T5814] Cannot create hsr debugfs directory [ 70.884016][ T5808] hsr_slave_0: entered promiscuous mode [ 70.890250][ T5808] hsr_slave_1: entered promiscuous mode [ 70.896121][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.903899][ T5808] Cannot create hsr debugfs directory [ 70.915717][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.945995][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.953127][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.979686][ T55] Bluetooth: hci0: command tx timeout [ 70.985352][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.988676][ T55] Bluetooth: hci1: command tx timeout [ 70.995902][ T5812] Bluetooth: hci3: command tx timeout [ 71.011113][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.038450][ T5812] Bluetooth: hci2: command tx timeout [ 71.049289][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.056252][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.082434][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.118346][ T5812] Bluetooth: hci4: command tx timeout [ 71.162503][ T5823] team0: Port device team_slave_0 added [ 71.203984][ T5823] team0: Port device team_slave_1 added [ 71.227276][ T5810] hsr_slave_0: entered promiscuous mode [ 71.233903][ T5810] hsr_slave_1: entered promiscuous mode [ 71.240347][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.247896][ T5810] Cannot create hsr debugfs directory [ 71.317657][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.324828][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.351338][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.391660][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.399445][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.425822][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.545376][ T5823] hsr_slave_0: entered promiscuous mode [ 71.551649][ T5823] hsr_slave_1: entered promiscuous mode [ 71.557528][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.565299][ T5823] Cannot create hsr debugfs directory [ 71.621515][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.655681][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.672117][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.702699][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.788909][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.802966][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.824377][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.834089][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.910359][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.929877][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.939864][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.961381][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.028942][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.041007][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.084289][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.093913][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.137895][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.159896][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.167894][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.184968][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.195674][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.219339][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.237764][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.257606][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.283317][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.296870][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.304172][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.315961][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.323102][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.346984][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.354177][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.386779][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.393910][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.404775][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.414861][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.474655][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.495340][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.502559][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.512297][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.519420][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.600702][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.600717][ T30] audit: type=1400 audit(1746827853.414:90): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.636223][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.649399][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.704746][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.726159][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.790819][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.829914][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.862639][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.875114][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.882321][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.914459][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.921739][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.962637][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.969816][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.998053][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.005200][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.040363][ T5812] Bluetooth: hci1: command tx timeout [ 73.040419][ T55] Bluetooth: hci0: command tx timeout [ 73.045800][ T5124] Bluetooth: hci3: command tx timeout [ 73.077356][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.089770][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.119858][ T5124] Bluetooth: hci2: command tx timeout [ 73.135708][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.161447][ T5808] veth0_vlan: entered promiscuous mode [ 73.187242][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.199357][ T5124] Bluetooth: hci4: command tx timeout [ 73.260381][ T5808] veth1_vlan: entered promiscuous mode [ 73.333158][ T5808] veth0_macvtap: entered promiscuous mode [ 73.371853][ T5808] veth1_macvtap: entered promiscuous mode [ 73.407208][ T5814] veth0_vlan: entered promiscuous mode [ 73.472424][ T5814] veth1_vlan: entered promiscuous mode [ 73.496447][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.529665][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.565486][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.604341][ T5814] veth0_macvtap: entered promiscuous mode [ 73.617203][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.628020][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.637203][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.646184][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.665810][ T5814] veth1_macvtap: entered promiscuous mode [ 73.691611][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.748005][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.761010][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.773325][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.786794][ T5807] veth0_vlan: entered promiscuous mode [ 73.810768][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.822911][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.835227][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.857301][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.866555][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.875341][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.884397][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.914196][ T5807] veth1_vlan: entered promiscuous mode [ 73.941269][ T5823] veth0_vlan: entered promiscuous mode [ 73.942316][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.957033][ T5823] veth1_vlan: entered promiscuous mode [ 73.964882][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.036639][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.040897][ T5823] veth0_macvtap: entered promiscuous mode [ 74.050585][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.075213][ T5807] veth0_macvtap: entered promiscuous mode [ 74.102105][ T5810] veth0_vlan: entered promiscuous mode [ 74.119893][ T5807] veth1_macvtap: entered promiscuous mode [ 74.127614][ T5823] veth1_macvtap: entered promiscuous mode [ 74.134247][ T30] audit: type=1400 audit(1746827854.944:91): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.WUOdwv/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.153612][ T5810] veth1_vlan: entered promiscuous mode [ 74.188740][ T30] audit: type=1400 audit(1746827854.944:92): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.231516][ T30] audit: type=1400 audit(1746827854.974:93): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.WUOdwv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.257778][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.258447][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.278025][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.290734][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.297115][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.301773][ T30] audit: type=1400 audit(1746827854.974:94): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.315842][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.336034][ T30] audit: type=1400 audit(1746827855.004:95): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.WUOdwv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.354216][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.372542][ T30] audit: type=1400 audit(1746827855.004:96): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.WUOdwv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.385733][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.411046][ T30] audit: type=1400 audit(1746827855.004:97): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.442410][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.454158][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.454494][ T30] audit: type=1400 audit(1746827855.034:98): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.466740][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.490721][ T30] audit: type=1400 audit(1746827855.034:99): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="gadgetfs" ino=6100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.503428][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.532413][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.552648][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.563355][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.572630][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.581450][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.617214][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.630493][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.642377][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.653461][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.663908][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.676184][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.692664][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.712700][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.723088][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.799110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.870110][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.885629][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.895654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.941663][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.962148][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.973276][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.998207][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.118623][ T5124] Bluetooth: hci0: command tx timeout [ 75.124906][ T5124] Bluetooth: hci3: command tx timeout [ 75.128205][ T5812] Bluetooth: hci1: command tx timeout [ 75.208837][ T5812] Bluetooth: hci2: command tx timeout [ 75.209883][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.276513][ T5810] veth0_macvtap: entered promiscuous mode [ 75.283027][ T5812] Bluetooth: hci4: command tx timeout [ 75.345422][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.373113][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.385386][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.412958][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.566398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.668797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.726955][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.773102][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.830206][ T5810] veth1_macvtap: entered promiscuous mode [ 75.900595][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.912284][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.873297][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.884857][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.894935][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.906159][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.916215][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.978289][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.025498][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.278503][ T5812] Bluetooth: hci1: command tx timeout [ 77.284005][ T5812] Bluetooth: hci3: command tx timeout [ 77.288208][ T5124] Bluetooth: hci0: command tx timeout [ 77.289569][ T5812] Bluetooth: hci2: command tx timeout [ 77.305506][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.324105][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.330795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.351605][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.362608][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.373188][ T5812] Bluetooth: hci4: command tx timeout [ 77.388414][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.398787][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.410215][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.428655][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.439879][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.451371][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.513665][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.538703][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.553297][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.562342][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.588247][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.615475][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.692656][ T5815] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.748731][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 77.748750][ T30] audit: type=1400 audit(1746827858.554:129): avc: denied { read write } for pid=5926 comm="syz.4.5" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 78.206217][ T30] audit: type=1400 audit(1746827858.554:130): avc: denied { open } for pid=5926 comm="syz.4.5" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 78.207391][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.230345][ T30] audit: type=1400 audit(1746827858.704:131): avc: denied { mounton } for pid=5926 comm="syz.4.5" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 78.260869][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.260894][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.277401][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.281766][ T30] audit: type=1400 audit(1746827858.934:132): avc: denied { read } for pid=5924 comm="syz.1.10" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.313758][ T30] audit: type=1400 audit(1746827858.934:133): avc: denied { open } for pid=5924 comm="syz.1.10" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.344495][ T30] audit: type=1400 audit(1746827858.954:134): avc: denied { ioctl } for pid=5924 comm="syz.1.10" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.402819][ T30] audit: type=1400 audit(1746827859.204:135): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="gadgetfs" ino=6100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.414605][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.441389][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.450853][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.461338][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.522708][ T5815] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 78.627964][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.666094][ T30] audit: type=1400 audit(1746827859.474:136): avc: denied { create } for pid=5932 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.710623][ T30] audit: type=1400 audit(1746827859.514:137): avc: denied { write } for pid=5933 comm="syz.4.11" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.711744][ T5815] usb 1-1: config 0 descriptor?? [ 78.886425][ T30] audit: type=1400 audit(1746827859.524:138): avc: denied { open } for pid=5933 comm="syz.4.11" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.928536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.119574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.253133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.262113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.379460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.387841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.761497][ T5934] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.294071][ T5951] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 80.400993][ T5815] usbhid 1-1:0.0: can't add hid device: -71 [ 80.947230][ T5815] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 80.965663][ T5815] usb 1-1: USB disconnect, device number 2 [ 82.724031][ T5969] hub 9-0:1.0: USB hub found [ 82.729818][ T5969] hub 9-0:1.0: 1 port detected [ 82.810112][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 82.810132][ T30] audit: type=1400 audit(1746827863.624:154): avc: denied { create } for pid=5967 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.820171][ T24] cfg80211: failed to load regulatory.db [ 83.327403][ T5856] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.705029][ T5980] use of bytesused == 0 is deprecated and will be removed in the future, [ 83.713797][ T5980] use the actual size instead. [ 84.242954][ T30] audit: type=1400 audit(1746827863.654:155): avc: denied { bind } for pid=5967 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.492405][ T30] audit: type=1400 audit(1746827863.654:156): avc: denied { setopt } for pid=5967 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.709140][ T5856] usb 1-1: device descriptor read/all, error -71 [ 84.988837][ T30] audit: type=1400 audit(1746827863.694:157): avc: denied { accept } for pid=5967 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.159666][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.168446][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.177121][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.185824][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.195129][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.217794][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.226834][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.235579][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.244288][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.252971][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.268003][ T30] audit: type=1400 audit(1746827863.704:158): avc: denied { write } for pid=5967 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.304396][ T30] audit: type=1400 audit(1746827864.274:159): avc: denied { ioctl } for pid=5976 comm="syz.2.19" path="socket:[7757]" dev="sockfs" ino=7757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.375022][ T30] audit: type=1400 audit(1746827864.364:160): avc: denied { read write } for pid=5976 comm="syz.2.19" name="video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 85.987225][ T30] audit: type=1400 audit(1746827864.364:161): avc: denied { open } for pid=5976 comm="syz.2.19" path="/dev/video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.061983][ T30] audit: type=1400 audit(1746827864.374:162): avc: denied { ioctl } for pid=5976 comm="syz.2.19" path="/dev/video0" dev="devtmpfs" ino=932 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.568336][ T30] audit: type=1400 audit(1746827864.564:163): avc: denied { map } for pid=5976 comm="syz.2.19" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.506604][ T6018] ======================================================= [ 88.506604][ T6018] WARNING: The mand mount option has been deprecated and [ 88.506604][ T6018] and is ignored by this kernel. Remove the mand [ 88.506604][ T6018] option from the mount to silence this warning. [ 88.506604][ T6018] ======================================================= [ 88.589414][ T30] audit: type=1400 audit(1746827864.564:164): avc: denied { read write } for pid=5976 comm="syz.2.19" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.614476][ T30] audit: type=1400 audit(1746827865.204:165): avc: denied { mount } for pid=5964 comm="syz.0.17" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 88.636148][ T30] audit: type=1400 audit(1746827865.204:166): avc: denied { read } for pid=5986 comm="syz.2.21" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.868550][ T30] audit: type=1400 audit(1746827865.204:167): avc: denied { open } for pid=5986 comm="syz.2.21" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.137569][ T6027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.418430][ T30] audit: type=1400 audit(1746827865.244:168): avc: denied { ioctl } for pid=5986 comm="syz.2.21" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.460839][ T30] audit: type=1400 audit(1746827865.304:169): avc: denied { append } for pid=5986 comm="syz.2.21" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.681872][ T30] audit: type=1400 audit(1746827865.524:170): avc: denied { create } for pid=5988 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.720114][ T30] audit: type=1400 audit(1746827865.694:171): avc: denied { create } for pid=5988 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.018834][ T6038] (syz.2.32,6038,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 90.027635][ T6038] (syz.2.32,6038,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 90.557484][ T30] audit: type=1400 audit(1746827866.264:172): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 90.579159][ T30] audit: type=1400 audit(1746827866.954:173): avc: denied { setattr } for pid=6001 comm="syz.1.24" name="sequencer" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 91.665784][ T6051] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[6051] [ 91.893446][ T6040] macvtap1: entered promiscuous mode [ 91.898973][ T6040] vlan0: entered promiscuous mode [ 91.904199][ T6040] macvtap1: entered allmulticast mode [ 91.909791][ T6040] vlan0: entered allmulticast mode [ 91.914883][ T6040] veth0_vlan: entered allmulticast mode [ 91.961733][ T6040] vlan0: left allmulticast mode [ 91.966644][ T6040] veth0_vlan: left allmulticast mode [ 91.973033][ T6040] vlan0: left promiscuous mode [ 92.608192][ T6055] Zero length message leads to an empty skb [ 94.004345][ T6077] process 'syz.1.39' launched './file0' with NULL argv: empty string added [ 94.050287][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 94.050891][ T30] audit: type=1400 audit(1746827874.804:192): avc: denied { write } for pid=6067 comm="syz.1.39" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.108324][ T30] audit: type=1400 audit(1746827874.814:193): avc: denied { execute } for pid=6067 comm="syz.1.39" name="file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.245178][ T30] audit: type=1400 audit(1746827874.834:194): avc: denied { execute_no_trans } for pid=6067 comm="syz.1.39" path="/10/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.062869][ T30] audit: type=1400 audit(1746827875.394:195): avc: denied { create } for pid=6071 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.082489][ T30] audit: type=1400 audit(1746827876.594:196): avc: denied { create } for pid=6081 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.213112][ T30] audit: type=1400 audit(1746827878.984:197): avc: denied { map } for pid=6071 comm="syz.0.41" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.988784][ T30] audit: type=1400 audit(1746827878.984:198): avc: denied { execute } for pid=6071 comm="syz.0.41" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.450213][ T30] audit: type=1400 audit(1746827878.984:199): avc: denied { ioctl } for pid=6071 comm="syz.0.41" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.477364][ T30] audit: type=1400 audit(1746827879.694:200): avc: denied { setopt } for pid=6095 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.666145][ T30] audit: type=1400 audit(1746827879.784:201): avc: denied { write } for pid=6095 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.693981][ T30] audit: type=1400 audit(1746827879.784:202): avc: denied { nlmsg_write } for pid=6095 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.724376][ T30] audit: type=1400 audit(1746827880.194:203): avc: denied { read append } for pid=6094 comm="syz.4.46" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.749351][ T30] audit: type=1400 audit(1746827880.224:204): avc: denied { open } for pid=6094 comm="syz.4.46" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 100.684348][ T30] audit: type=1400 audit(1746827880.224:205): avc: denied { execute } for pid=6094 comm="syz.4.46" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.793336][ T30] audit: type=1400 audit(1746827880.244:206): avc: denied { execute_no_trans } for pid=6094 comm="syz.4.46" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.929467][ T30] audit: type=1400 audit(1746827880.824:207): avc: denied { getopt } for pid=6099 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.953991][ T6114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.966445][ T30] audit: type=1400 audit(1746827880.824:208): avc: denied { connect } for pid=6099 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.119649][ T6116] xt_connbytes: Forcing CT accounting to be enabled [ 101.126744][ T6116] Cannot find set identified by id 0 to match [ 101.172783][ T6116] __nla_validate_parse: 44 callbacks suppressed [ 101.172821][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.50'. [ 105.321641][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 105.321665][ T30] audit: type=1400 audit(1746827884.474:223): avc: denied { mount } for pid=6133 comm="syz.3.56" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.349897][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.548629][ T30] audit: type=1400 audit(1746827884.624:224): avc: denied { kexec_image_load } for pid=6133 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 105.568316][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.575702][ T30] audit: type=1400 audit(1746827886.384:225): avc: denied { connect } for pid=6134 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.576232][ T6142] netlink: 5 bytes leftover after parsing attributes in process `syz.4.57'. [ 105.903890][ T6142] 0ªX¹¦D: renamed from gretap0 (while UP) [ 105.995772][ T30] audit: type=1400 audit(1746827886.794:226): avc: denied { read append } for pid=6145 comm="syz.1.59" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.019114][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.035591][ T6152] netlink: 56 bytes leftover after parsing attributes in process `syz.1.59'. [ 106.123560][ T30] audit: type=1400 audit(1746827886.794:227): avc: denied { open } for pid=6145 comm="syz.1.59" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.288928][ T30] audit: type=1400 audit(1746827887.074:228): avc: denied { name_bind } for pid=6150 comm="syz.3.60" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 106.331436][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 106.342678][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 106.376871][ T6146] ceph: No mds server is up or the cluster is laggy [ 106.605737][ T30] audit: type=1400 audit(1746827887.074:229): avc: denied { node_bind } for pid=6150 comm="syz.3.60" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.700477][ T6142] 0ªX¹¦D: entered allmulticast mode [ 106.830729][ T6142] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 106.937559][ T6163] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 106.947070][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.956065][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.981719][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.988953][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.997176][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.004378][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.026610][ T6163] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.175455][ T6151] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.191511][ T30] audit: type=1400 audit(1746827887.744:230): avc: denied { create } for pid=6158 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.225462][ T6151] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.235287][ T6162] Unsupported ieee802154 address type: 0 [ 107.373965][ T6151] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.127927][ T6169] kexec: Could not allocate swap buffer [ 108.223745][ T30] audit: type=1400 audit(1746827888.584:231): avc: denied { setattr } for pid=6166 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.429298][ T6151] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.439385][ T30] audit: type=1400 audit(1746827889.244:232): avc: denied { mount } for pid=6180 comm="syz.2.65" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.765028][ T6151] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.345428][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.787610][ T6151] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.814064][ T6151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.814112][ T6151] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.815140][ T6151] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.816167][ T6151] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.816210][ T6151] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.817679][ T6151] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.818462][ T6151] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.818747][ T6151] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.820158][ T6151] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.919732][ T6198] netlink: 56 bytes leftover after parsing attributes in process `syz.0.66'. [ 110.448247][ T5812] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.449143][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 110.449156][ T30] audit: type=1400 audit(1746827891.144:241): avc: denied { bind } for pid=6200 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.358136][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.709204][ T6203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.840254][ T5812] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.840311][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.840327][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.202234][ T6198] input: syz1 as /devices/virtual/input/input5 [ 112.219289][ T30] audit: type=1400 audit(1746827893.024:242): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=2791 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.378502][ T6178] tty tty20: ldisc open failed (-12), clearing slot 19 [ 112.469095][ T6215] netlink: 5 bytes leftover after parsing attributes in process `syz.4.72'. [ 112.479463][ T5124] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.479689][ T6215] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 112.830771][ T6215] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 112.911967][ T30] audit: type=1400 audit(1746827893.024:243): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2791 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.955353][ T30] audit: type=1400 audit(1746827893.034:244): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2791 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.094561][ T30] audit: type=1400 audit(1746827893.904:245): avc: denied { unlink } for pid=5814 comm="syz-executor" name="file1" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.601874][ T5124] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.375313][ T6228] mkiss: ax0: crc mode is auto. [ 114.704785][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.706990][ T5812] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.711955][ T5124] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.718366][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.243125][ T30] audit: type=1400 audit(1746827895.624:246): avc: denied { read } for pid=6226 comm="syz.4.76" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.366816][ T30] audit: type=1400 audit(1746827895.624:247): avc: denied { open } for pid=6226 comm="syz.4.76" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 116.139521][ T30] audit: type=1400 audit(1746827895.734:248): avc: denied { ioctl } for pid=6226 comm="syz.4.76" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 116.798194][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.804363][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.810542][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.928256][ T30] audit: type=1400 audit(1746827896.354:249): avc: denied { write } for pid=6232 comm="syz.2.77" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.269999][ T6246] Cannot find add_set index 0 as target [ 117.604401][ T30] audit: type=1400 audit(1746827896.384:250): avc: denied { write } for pid=6232 comm="syz.2.77" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.288384][ T30] audit: type=1400 audit(1746827896.394:251): avc: denied { map } for pid=6232 comm="syz.2.77" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.316101][ T30] audit: type=1400 audit(1746827896.394:252): avc: denied { execute } for pid=6232 comm="syz.2.77" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.347034][ T30] audit: type=1400 audit(1746827898.094:253): avc: denied { create } for pid=6242 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 120.880908][ T6258] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 120.887664][ T6258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.958976][ T6258] vhci_hcd vhci_hcd.0: Device attached [ 120.980321][ T6262] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 120.986345][ T6268] bond0: entered promiscuous mode [ 120.986874][ T6262] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.992035][ T6268] bond_slave_0: entered promiscuous mode [ 121.005439][ T6268] bond_slave_1: entered promiscuous mode [ 121.124269][ T6262] vhci_hcd vhci_hcd.0: Device attached [ 121.208248][ T5855] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 122.537557][ T30] audit: type=1400 audit(1746827901.904:254): avc: denied { write } for pid=6266 comm="syz.1.85" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.823432][ T30] audit: type=1400 audit(1746827902.034:255): avc: denied { write } for pid=6271 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.035240][ T30] audit: type=1400 audit(1746827902.034:256): avc: denied { name_connect } for pid=6271 comm="syz.3.86" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 123.322031][ T30] audit: type=1400 audit(1746827902.224:257): avc: denied { setopt } for pid=6271 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.014682][ T30] audit: type=1400 audit(1746827903.244:258): avc: denied { read } for pid=6257 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.061839][ T6264] vhci_hcd: connection closed [ 124.063485][ T5984] vhci_hcd: stop threads [ 124.080029][ T5984] vhci_hcd: release socket [ 124.084699][ T6263] vhci_hcd: connection reset by peer [ 124.100790][ T5984] vhci_hcd: disconnect device [ 124.125328][ T5984] vhci_hcd: stop threads [ 124.147051][ T5984] vhci_hcd: release socket [ 124.357636][ T5984] vhci_hcd: disconnect device [ 124.865682][ T6293] block nbd0: NBD_DISCONNECT [ 125.182101][ T5856] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 126.482053][ T5856] usb 3-1: device not accepting address 2, error -71 [ 126.503102][ T30] audit: type=1400 audit(1746827907.214:259): avc: denied { listen } for pid=6283 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.238937][ T30] audit: type=1400 audit(1746827907.554:260): avc: denied { map } for pid=6299 comm="syz.1.93" path="socket:[9364]" dev="sockfs" ino=9364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 127.261589][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.518380][ T6305] sctp: failed to load transform for md5: -2 [ 127.648622][ T5855] vhci_hcd: vhci_device speed not set [ 128.192193][ T30] audit: type=1400 audit(1746827908.074:261): avc: denied { mount } for pid=6301 comm="syz.2.95" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 128.313198][ T30] audit: type=1400 audit(1746827908.074:262): avc: denied { read } for pid=6301 comm="syz.2.95" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 128.461530][ T6322] bond0: entered promiscuous mode [ 128.466593][ T6322] bond_slave_0: entered promiscuous mode [ 128.472397][ T6322] bond_slave_1: entered promiscuous mode [ 128.483146][ T30] audit: type=1400 audit(1746827908.074:263): avc: denied { open } for pid=6301 comm="syz.2.95" path="/18/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 128.754902][ T30] audit: type=1400 audit(1746827909.544:264): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 128.769403][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 129.260150][ T30] audit: type=1400 audit(1746827909.584:265): avc: denied { ioctl } for pid=6323 comm="syz.0.99" path="socket:[9396]" dev="sockfs" ino=9396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.292537][ T6330] syzkaller0: entered promiscuous mode [ 129.304640][ T30] audit: type=1400 audit(1746827909.654:266): avc: denied { create } for pid=6325 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.330493][ T6330] syzkaller0: entered allmulticast mode [ 129.574253][ T30] audit: type=1400 audit(1746827910.384:267): avc: denied { mount } for pid=6323 comm="syz.0.99" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 130.318191][ T30] audit: type=1400 audit(1746827910.684:268): avc: denied { mount } for pid=6336 comm="syz.1.101" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 130.406231][ T6342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.498266][ T30] audit: type=1400 audit(1746827911.284:269): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 131.198116][ T6354] netlink: 'syz.1.103': attribute type 4 has an invalid length. [ 131.416953][ T6354] netlink: 'syz.1.103': attribute type 4 has an invalid length. [ 131.738224][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.848205][ T6354] syz.1.103 (6354) used greatest stack depth: 20504 bytes left [ 132.004732][ T6356] input: syz1 as /devices/virtual/input/input6 [ 132.380531][ T5855] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.427176][ T5855] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.448029][ T5855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.457857][ T5855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 132.479284][ T5855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 132.511377][ T5855] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.520912][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.533072][ T5855] usb 4-1: Product: syz [ 132.537294][ T5855] usb 4-1: Manufacturer: syz [ 133.539318][ T5855] cdc_wdm 4-1:1.0: skipping garbage [ 133.555216][ T5855] cdc_wdm 4-1:1.0: skipping garbage [ 133.803218][ T30] audit: type=1400 audit(1746827914.384:270): avc: denied { create } for pid=6345 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.823629][ T5855] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 133.829652][ T5855] cdc_wdm 4-1:1.0: Unknown control protocol [ 133.846925][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.853391][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.859102][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.908875][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.791697][ T30] audit: type=1400 audit(1746827915.604:271): avc: denied { connect } for pid=6345 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.816992][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.842698][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.880138][ T6346] overlayfs: workdir and upperdir must be separate subtrees [ 135.034750][ T30] audit: type=1400 audit(1746827915.844:272): avc: denied { setopt } for pid=6345 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.156185][ T6386] bond0: entered promiscuous mode [ 135.161650][ T6386] bond_slave_0: entered promiscuous mode [ 135.167995][ T6386] bond_slave_1: entered promiscuous mode [ 135.407932][ T30] audit: type=1400 audit(1746827915.894:273): avc: denied { write } for pid=6345 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.427167][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.450903][ T6360] tipc: Started in network mode [ 135.481389][ T47] usb 4-1: USB disconnect, device number 2 [ 135.507552][ T6360] tipc: Node identity 32e9df284c1f, cluster identity 4711 [ 135.685035][ T6360] tipc: Enabled bearer , priority 0 [ 135.706260][ T30] audit: type=1400 audit(1746827915.994:274): avc: denied { read write } for pid=6345 comm="syz.3.104" name="cdc-wdm0" dev="devtmpfs" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 136.320764][ T6359] tipc: Resetting bearer [ 136.366749][ T30] audit: type=1400 audit(1746827915.994:275): avc: denied { open } for pid=6345 comm="syz.3.104" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 136.428365][ T30] audit: type=1400 audit(1746827916.004:276): avc: denied { ioctl } for pid=6375 comm="syz.1.111" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8766 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.553102][ T30] audit: type=1400 audit(1746827917.364:277): avc: denied { setopt } for pid=6392 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.640305][ T5923] tipc: Node number set to 2130108200 [ 136.659315][ T6391] tipc: Can't bind to reserved service type 2 [ 136.675648][ T30] audit: type=1400 audit(1746827917.444:278): avc: denied { map } for pid=6392 comm="syz.3.116" path="socket:[9523]" dev="sockfs" ino=9523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.716064][ T30] audit: type=1400 audit(1746827917.444:279): avc: denied { read write } for pid=6392 comm="syz.3.116" path="socket:[9523]" dev="sockfs" ino=9523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.581271][ T6405] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 137.658518][ T6406] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 140.175540][ T6359] tipc: Disabling bearer [ 141.521385][ T6424] block nbd1: NBD_DISCONNECT [ 143.933921][ T6438] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 143.970084][ T6438] netlink: 192 bytes leftover after parsing attributes in process `syz.3.125'. [ 144.004245][ T6438] netlink: zone id is out of range [ 144.009900][ T6438] netlink: zone id is out of range [ 144.015070][ T6438] netlink: set zone limit has 4 unknown bytes [ 144.365049][ T6442] netlink: 56 bytes leftover after parsing attributes in process `syz.2.124'. [ 144.475628][ T6442] input: syz1 as /devices/virtual/input/input7 [ 145.081290][ T6439] mmap: syz.1.123 (6439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.565922][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 145.565938][ T30] audit: type=1400 audit(1746827925.894:285): avc: denied { create } for pid=6429 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.165627][ T6465] netlink: 56 bytes leftover after parsing attributes in process `syz.4.126'. [ 146.195325][ T6465] input: syz1 as /devices/virtual/input/input8 [ 146.674985][ T30] audit: type=1400 audit(1746827925.894:286): avc: denied { listen } for pid=6429 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.752602][ T30] audit: type=1400 audit(1746827927.164:287): avc: denied { ioctl } for pid=6457 comm="syz.3.129" path="socket:[9626]" dev="sockfs" ino=9626 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 147.519672][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.130'. [ 147.556532][ T6472] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 148.208543][ T30] audit: type=1400 audit(1746827929.004:288): avc: denied { read write } for pid=6480 comm="syz.4.133" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 148.683612][ T6491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.131'. [ 148.956900][ T30] audit: type=1400 audit(1746827929.004:289): avc: denied { open } for pid=6480 comm="syz.4.133" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 148.965981][ T6491] input: syz1 as /devices/virtual/input/input9 [ 148.980299][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.215391][ T6494] netlink: 56 bytes leftover after parsing attributes in process `syz.2.134'. [ 149.340041][ T6489] input: syz1 as /devices/virtual/input/input10 [ 149.458822][ T30] audit: type=1400 audit(1746827930.264:290): avc: denied { create } for pid=6496 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.478261][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.413403][ T30] audit: type=1400 audit(1746827930.294:291): avc: denied { connect } for pid=6496 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.532115][ T30] audit: type=1400 audit(1746827930.294:292): avc: denied { read } for pid=6496 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.602634][ T30] audit: type=1400 audit(1746827930.514:293): avc: denied { listen } for pid=6500 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.738626][ T30] audit: type=1400 audit(1746827930.514:294): avc: denied { read } for pid=6500 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 151.781944][ T30] audit: type=1400 audit(1746827932.584:295): avc: denied { getopt } for pid=6514 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.932054][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 152.676779][ T6531] input: syz1 as /devices/virtual/input/input12 [ 154.745256][ T30] audit: type=1400 audit(1746827934.894:296): avc: denied { read } for pid=6526 comm="syz.3.144" name="cec3" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.876529][ T6528] netlink: 60 bytes leftover after parsing attributes in process `syz.3.144'. [ 154.900077][ T30] audit: type=1400 audit(1746827934.894:297): avc: denied { open } for pid=6526 comm="syz.3.144" path="/dev/cec3" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.931698][ T30] audit: type=1400 audit(1746827935.604:298): avc: denied { ioctl } for pid=6526 comm="syz.3.144" path="/dev/cec3" dev="devtmpfs" ino=965 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.535014][ T30] audit: type=1400 audit(1746827936.334:299): avc: denied { read write } for pid=6544 comm="syz.3.145" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.572602][ T30] audit: type=1400 audit(1746827936.334:300): avc: denied { open } for pid=6544 comm="syz.3.145" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.667769][ T30] audit: type=1400 audit(1746827936.434:301): avc: denied { setopt } for pid=6546 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.381544][ T6556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.147'. [ 156.399781][ T30] audit: type=1400 audit(1746827936.754:302): avc: denied { watch } for pid=6546 comm="syz.2.146" path="/29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.597254][ T6556] input: syz1 as /devices/virtual/input/input13 [ 156.618379][ T30] audit: type=1400 audit(1746827936.754:303): avc: denied { watch_sb watch_reads } for pid=6546 comm="syz.2.146" path="/29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.078225][ T5872] IPVS: starting estimator thread 0... [ 158.410401][ T6567] IPVS: using max 79 ests per chain, 189600 per kthread [ 158.769298][ T6579] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 158.777023][ T6579] netlink: 17 bytes leftover after parsing attributes in process `syz.3.151'. [ 159.631765][ T30] audit: type=1400 audit(1746827940.414:304): avc: denied { write } for pid=6575 comm="syz.4.152" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.178207][ T5936] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 160.476236][ T6591] loop6: detected capacity change from 0 to 524287999 [ 160.498453][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 161.475510][ T5936] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 161.487552][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 161.495508][ T5936] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 161.531021][ T5936] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.546859][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 161.558382][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 161.588175][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 161.596229][ T5936] usb 4-1: Product: syz [ 161.707350][ T6590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.709744][ T30] audit: type=1400 audit(1746827942.524:305): avc: denied { append } for pid=6600 comm="syz.2.157" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 161.714818][ T6590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.225937][ T5936] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.269555][ T6588] Invalid logical block size (6) [ 162.276307][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.332311][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.384473][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.476649][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.535315][ T30] audit: type=1400 audit(1746827943.344:306): avc: denied { ioctl } for pid=6600 comm="syz.2.157" path="socket:[9173]" dev="sockfs" ino=9173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.827562][ T6591] ldm_validate_partition_table(): Disk read failed. [ 162.973818][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.496130][ T30] audit: type=1400 audit(1746827943.894:307): avc: denied { read write } for pid=6607 comm="syz.1.158" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.623874][ T30] audit: type=1400 audit(1746827943.904:308): avc: denied { open } for pid=6607 comm="syz.1.158" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.731627][ T5936] usb 4-1: USB disconnect, device number 3 [ 163.798806][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 163.806777][ T6591] Dev loop6: unable to read RDB block 0 [ 163.880397][ T6591] loop6: unable to read partition table [ 163.924225][ T6591] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 164.087042][ T30] audit: type=1400 audit(1746827944.824:309): avc: denied { mounton } for pid=6614 comm="syz.3.160" path="/31/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 164.280641][ T30] audit: type=1400 audit(1746827944.824:310): avc: denied { mount } for pid=6614 comm="syz.3.160" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 165.205975][ T30] audit: type=1400 audit(1746827946.014:311): avc: denied { sys_module } for pid=6619 comm="syz.0.161" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 165.368645][ T30] audit: type=1400 audit(1746827946.184:312): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 165.681615][ T6631] 9pnet_fd: Insufficient options for proto=fd [ 165.938272][ T5855] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.095257][ T6617] input: syz1 as /devices/virtual/input/input14 [ 166.130616][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.160793][ T30] audit: type=1400 audit(1746827946.974:313): avc: denied { read write } for pid=6633 comm="syz.0.164" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.192878][ T6634] binder: 6633:6634 ioctl c00c620f 2000000002c0 returned -22 [ 166.200772][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.234073][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.284835][ T6634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.307882][ T30] audit: type=1400 audit(1746827946.974:314): avc: denied { open } for pid=6633 comm="syz.0.164" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.817849][ T5855] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.827215][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.844764][ T30] audit: type=1400 audit(1746827947.004:315): avc: denied { ioctl } for pid=6633 comm="syz.0.164" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.870593][ T5855] usb 5-1: config 0 descriptor?? [ 167.539806][ T30] audit: type=1400 audit(1746827947.004:316): avc: denied { read write } for pid=6633 comm="syz.0.164" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.548218][ T6634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.583283][ T30] audit: type=1400 audit(1746827947.004:317): avc: denied { open } for pid=6633 comm="syz.0.164" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.643388][ T30] audit: type=1400 audit(1746827947.004:318): avc: denied { ioctl } for pid=6633 comm="syz.0.164" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.741671][ T5855] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 167.771251][ T5855] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 167.896927][ T30] audit: type=1400 audit(1746827948.674:319): avc: denied { create } for pid=6644 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 168.188182][ T30] audit: type=1400 audit(1746827948.694:320): avc: denied { ioctl } for pid=6644 comm="syz.3.167" path="socket:[9880]" dev="sockfs" ino=9880 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 168.307318][ T30] audit: type=1400 audit(1746827948.704:321): avc: denied { write } for pid=6644 comm="syz.3.167" name="mcfilter6" dev="proc" ino=4026533186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 168.782544][ T30] audit: type=1400 audit(1746827948.764:322): avc: denied { bind } for pid=6644 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.151484][ T5858] usb 5-1: USB disconnect, device number 2 [ 169.216584][ T6657] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 169.434453][ T30] audit: type=1400 audit(1746827948.764:323): avc: denied { node_bind } for pid=6644 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 169.540020][ T30] audit: type=1400 audit(1746827949.934:324): avc: denied { getopt } for pid=6648 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.409613][ T6668] Bluetooth: MGMT ver 1.23 [ 173.640356][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 173.640391][ T30] audit: type=1400 audit(1746827954.454:329): avc: denied { create } for pid=6696 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.771405][ T30] audit: type=1400 audit(1746827954.454:330): avc: denied { connect } for pid=6696 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.104233][ T30] audit: type=1400 audit(1746827955.904:331): avc: denied { create } for pid=6710 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.176602][ T30] audit: type=1400 audit(1746827955.914:332): avc: denied { connect } for pid=6710 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.787555][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.897143][ T6717] input: syz1 as /devices/virtual/input/input15 [ 176.523672][ T6727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.350268][ T55] non-paged memory [ 177.372796][ T55] list_del corruption, ffff8880338dca00->next is LIST_POISON1 (dead000000000100) [ 177.382765][ T55] ------------[ cut here ]------------ [ 177.388278][ T55] kernel BUG at lib/list_debug.c:56! [ 177.393627][ T55] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 177.400099][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 177.412105][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 177.422196][ T55] Workqueue: hci4 hci_conn_timeout [ 177.427345][ T55] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 177.434377][ T55] Code: 48 c7 c7 20 86 f4 8b e8 0d 4a c4 fc 90 0f 0b 4c 89 e7 e8 e2 10 28 fd 4c 89 e2 48 89 de 48 c7 c7 80 86 f4 8b e8 f0 49 c4 fc 90 <0f> 0b 48 89 ef e8 c5 10 28 fd 48 89 ea 48 89 de 48 c7 c7 e0 86 f4 [ 177.454017][ T55] RSP: 0018:ffffc9000121fb80 EFLAGS: 00010286 [ 177.460092][ T55] RAX: 000000000000004e RBX: ffff8880338dca00 RCX: ffffffff819a80d9 [ 177.468092][ T55] RDX: 0000000000000000 RSI: ffffffff819aff66 RDI: 0000000000000005 [ 177.476055][ T55] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 177.484008][ T55] R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100 [ 177.491961][ T55] R13: dffffc0000000000 R14: ffff8880237f8618 R15: ffff8880338dca00 [ 177.499921][ T55] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 177.508835][ T55] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.515402][ T55] CR2: 0000001b2edf6ff8 CR3: 000000000e180000 CR4: 00000000003526f0 [ 177.523376][ T55] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.531330][ T55] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.539293][ T55] Call Trace: [ 177.542556][ T55] [ 177.545482][ T55] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 [ 177.552171][ T55] hci_cancel_connect_sync+0xfa/0x2b0 [ 177.557537][ T55] hci_abort_conn+0x15a/0x340 [ 177.562212][ T55] hci_conn_timeout+0x1a2/0x210 [ 177.567046][ T55] process_one_work+0x9cc/0x1b70 [ 177.571974][ T55] ? __pfx_process_one_work+0x10/0x10 [ 177.577330][ T55] ? assign_work+0x1a0/0x250 [ 177.581909][ T55] worker_thread+0x6c8/0xf10 [ 177.586508][ T55] ? __pfx_worker_thread+0x10/0x10 [ 177.591606][ T55] kthread+0x3c2/0x780 [ 177.595657][ T55] ? __pfx_kthread+0x10/0x10 [ 177.600224][ T55] ? __pfx_kthread+0x10/0x10 [ 177.604792][ T55] ? __pfx_kthread+0x10/0x10 [ 177.609364][ T55] ? __pfx_kthread+0x10/0x10 [ 177.613943][ T55] ? rcu_is_watching+0x12/0xc0 [ 177.618693][ T55] ? __pfx_kthread+0x10/0x10 [ 177.623275][ T55] ret_from_fork+0x45/0x80 [ 177.627675][ T55] ? __pfx_kthread+0x10/0x10 [ 177.632244][ T55] ret_from_fork_asm+0x1a/0x30 [ 177.636998][ T55] [ 177.639997][ T55] Modules linked in: [ 177.646851][ T55] ---[ end trace 0000000000000000 ]--- [ 177.698301][ T55] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 177.708118][ T55] Code: 48 c7 c7 20 86 f4 8b e8 0d 4a c4 fc 90 0f 0b 4c 89 e7 e8 e2 10 28 fd 4c 89 e2 48 89 de 48 c7 c7 80 86 f4 8b e8 f0 49 c4 fc 90 <0f> 0b 48 89 ef e8 c5 10 28 fd 48 89 ea 48 89 de 48 c7 c7 e0 86 f4 [ 177.728368][ T55] RSP: 0018:ffffc9000121fb80 EFLAGS: 00010286 [ 177.734595][ T55] RAX: 000000000000004e RBX: ffff8880338dca00 RCX: ffffffff819a80d9 [ 177.749022][ T55] RDX: 0000000000000000 RSI: ffffffff819aff66 RDI: 0000000000000005 [ 177.757128][ T55] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 177.765945][ T55] R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100 [ 177.774167][ T55] R13: dffffc0000000000 R14: ffff8880237f8618 R15: ffff8880338dca00 [ 177.782260][ T55] FS: 0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 177.792439][ T55] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.799155][ T55] CR2: 0000200000029000 CR3: 0000000031df8000 CR4: 00000000003526f0 [ 177.807173][ T55] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.815336][ T55] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.823403][ T55] Kernel panic - not syncing: Fatal exception [ 177.829704][ T55] Kernel Offset: disabled [ 177.834010][ T55] Rebooting in 86400 seconds..