last executing test programs: 12m47.003317293s ago: executing program 1 (id=2613): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a37c1, 0x42) 12m46.935194144s ago: executing program 1 (id=2615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0fb9b23b55b83b55b8c90fee36ee362edcaa0018db0d66b9f902000066b80300000066b9800000c00f326635000100000f300f30670fc7744e9066ed66b9800000c00f326635000400000f30ba4200b0046736650fdfe566b9800000c00f326635008000000f30", 0x67}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m46.578284692s ago: executing program 1 (id=2618): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendto$inet(r0, &(0x7f0000000800)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca3a74fd4147e826abed9b5d1de578682288c19ac26d7744fadd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944ca84677d2ed33bc831e7480000004f6d9f2afd635b51e0b6", 0xb6, 0x29b2597cd56bcc0f, 0x0, 0x0) 12m46.51553828s ago: executing program 1 (id=2619): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 12m46.295426424s ago: executing program 1 (id=2621): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="620ac4ff000000007110b3000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 12m45.505602324s ago: executing program 1 (id=2627): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r1, 0x0, 0x0) close(r0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 12m44.514616205s ago: executing program 32 (id=2627): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r1, 0x0, 0x0) close(r0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 19.145085601s ago: executing program 2 (id=4748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) 18.013396714s ago: executing program 2 (id=4749): syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1b, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000950000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000080850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d0000008500000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) open$dir(0x0, 0x40041, 0x100) clock_gettime(0x0, &(0x7f0000000140)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48094) 15.848195601s ago: executing program 2 (id=4756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13.35779888s ago: executing program 3 (id=4761): openat$kvm(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000380)='\r', 0x160a}], 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x400000000105) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x300, 0x100, 0x100, 0x21, 0x1}}) 12.490820578s ago: executing program 3 (id=4763): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x1e) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) 12.386278569s ago: executing program 5 (id=4764): r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x4, 0x1) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e64, 0x0, @private1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x40}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x76, 0x6bf8999d}, {0x6, 0x25, 0x3, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20048040) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x1, 0x4, 0x31ba, 0x36, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) 11.102672373s ago: executing program 2 (id=4767): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000002195"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) symlink(0x0, &(0x7f0000000280)='./file0\x00') 10.224782927s ago: executing program 5 (id=4768): r0 = fsopen(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, 0x0) mq_open(0x0, 0x80, 0x196, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0xd000], 0x100, 0x42}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 10.217388128s ago: executing program 4 (id=4769): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 9.949353058s ago: executing program 0 (id=4770): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="61d30a5bf90453714fc2c72781eaa58b33a96952e5ebff4412", 0x19) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000", 0x4}], 0x1}, 0x20000000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt(r2, 0x1, 0x4c, 0x0, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e2", 0x3d) syz_open_dev$video(&(0x7f0000000180), 0x8000000001000003, 0x16b142) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 9.194324262s ago: executing program 4 (id=4771): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x1e) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 9.111627719s ago: executing program 0 (id=4772): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0xfe44, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 9.04144182s ago: executing program 2 (id=4773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7d, 0x0, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4, 0x100}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000440)}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8.398990423s ago: executing program 3 (id=4774): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(0x0, 0x75, 0x80080) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100), 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x149882, 0x20) write$cgroup_int(r5, &(0x7f0000000040)=0x40000, 0x12) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) read(r0, &(0x7f0000006fc0)=""/240, 0xf0) 8.186502972s ago: executing program 0 (id=4776): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x1e) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 7.101752297s ago: executing program 3 (id=4777): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioprio_get$pid(0x1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r1, r0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24040880) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f260102030109021200010000000009"], 0x0) 6.122879756s ago: executing program 5 (id=4778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000240), &(0x7f0000000380)=r0}, 0x20) mkdir(&(0x7f00000002c0)='./file0\x00', 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e1479e4c7", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket(0x1, 0x1, 0x1) getsockopt$SO_COOKIE(r1, 0x1, 0x47, 0x0, &(0x7f0000000180)) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000340)=0x7737, 0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2002, 0x10005, 0xcc9, 0xf, 0x3, 0x5, 0x2000000, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x259a, 0x10003, 0x40000007, 0x9d, 0xcaa7, 0x3, 0x20001e58, 0x4, 0x3, 0x3, 0x8, 0x5, 0x0, 0xfffffff8]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 6.059423562s ago: executing program 4 (id=4779): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0x110, &(0x7f0000000a80)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1=0xac1414aa, {[@generic={0x44, 0x2}, @rr={0x7, 0x3, 0xa7}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {0x0, 0x0, 0xe2, 0x0, @opaque="41a53bc57d107c6ff061f03cf6bb904c78ef576fdf1a82582813d34772ce2518f6e064561bc8e7c4c3b88889ba6f28ff51a9fa5b94875a7f49e85b4bac7040c621fa1ab002461bb46e93c9f5664d16a8691bdff00d19f7d7fa1a06180e28c9c4ba89da8d2b37f8b0922eaf0298e2395e4b02c08e80b8dfbdfaf63d3c0cd02bc258452710b9ef5347ac7329042cbf02c5878b573d4abaeb9da781b320fd79d482302a8a531644f0d27c0bef42ed5444393fcb1886713b667dc79bd243ea971d9779b208dea2b767d07df0f49a807f9e23d1a8affe410311d17962"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002103) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 5.025494394s ago: executing program 5 (id=4780): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x6, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a000}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 4.855909606s ago: executing program 4 (id=4781): syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) shutdown(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.36687213s ago: executing program 4 (id=4782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12}, 0x94) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1000, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 3.366032529s ago: executing program 5 (id=4792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) close(r5) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) 3.328755611s ago: executing program 0 (id=4783): socket$packet(0x11, 0x3, 0x300) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000005c0)) 2.513954434s ago: executing program 3 (id=4784): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r2, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) 2.385760576s ago: executing program 5 (id=4785): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) ptrace$peeksig(0x4209, r2, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) inotify_init1(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x7fffffff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 2.189871497s ago: executing program 2 (id=4786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x2ce, 0x0, 0x4ac00000, 0x2}}, 0x101301) syz_emit_ethernet(0x56, &(0x7f0000000280)={@random="a50ed9bfa23a", @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @pid}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000ff0f00000400000000000000000000000900000008000000000000000000000000000000000000000000000000000000118502681e4909dc53c9158b0e465342f3dbf15c627d104b1a01f08b7acc1619dd150a6e1800d173119b1167d8c1886e8b50ad604fd0bedbad1d00d5f07b6627a7b419beca466ec59bde25913f4095baa6f9c64a972708c6091d985bfdcc0f1456bcb0161bdb8067a23a4d249f6002fd5aa51c2ec46cc80e7cabc301cd3f8e5888d5a12cb73d0ba0160dc17fc341ad9c808da6565836091012893f4da822ffbd988a342a6756fbcac62ac73cb4d0f7c34da0d01620f1e5ae6f30389bd61120fdb6bf1b067076a93c1c062fa29148dbf2dc4bcf57"]) 2.169778697s ago: executing program 0 (id=4787): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}}, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000680)={0x3, 0x7, 0xfffffffc, 0x1004, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}]}) ftruncate(r1, 0x9) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) r5 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000780)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0xfffff448, 0x7ff, 0x1000, 0x9, 0x9, 0x7, 0x9f2, 0x8001, 0xff, 0x8, 0xffff0000, 0x5887, 0x7, 0x10001, 0x509, 0xfffffffe, 0x2, 0x2, 0x0, 0x5, 0x0, 0x3, 0x9, 0x1, 0x6, 0xc0000, 0x10000, 0xb, 0x3, 0x5, 0x9, 0xbe, 0x0, 0x6, 0x8, 0x8, 0xa37, 0x1, 0x5, 0xa, 0x933, 0x4, 0x8000, 0x0, 0x1, 0x2, 0x9, 0x7ff, 0x100, 0x8, 0x5, 0xf, 0xba, 0x2, 0x5, 0x4, 0x1, 0x80c, 0x0, 0x200, 0x95, 0x0, 0x6, 0x8, 0x7f, 0xfffff001, 0x7c2, 0x47, 0x1ff, 0x56ce, 0xfffffff7, 0xb75, 0xfffffffd, 0xacad, 0x3, 0x80000001, 0x9, 0x20000000, 0x4000, 0x5, 0x9, 0xfff, 0x8, 0x55c, 0x401, 0x4, 0x80000001, 0x0, 0x7, 0x101, 0x34, 0x2, 0x0, 0x5, 0x2, 0x9, 0x7, 0x4, 0x3, 0xf, 0x2, 0xf1, 0x7f, 0x3, 0x3ff, 0xff, 0x2, 0x80000000, 0x3, 0x1, 0x4af6, 0x7f, 0x401, 0xaad, 0x8001, 0xff, 0x4, 0x10001, 0x8, 0x5, 0x5, 0x3, 0xd, 0x63, 0x8, 0x3, 0xffff], "f4b3d39ee2db51403862804a5fc57caf57746c9009788e9f6a40140d743fcae11d25a5d13447beb7e9a5ba10ce1b066615cbfa9df330cdd4a85e85af8b0666572d27096341696d674cd68127550425080bbadd87353d0e2752b7df22d12aa8d7f116ba2455e823ed5666f721046e666ec48461bdd2e1132f25321928219b470d000a7ed861cc48f1ccbed0fa3ce1ad6194ba964904247fd1a2df9564b3c0c36376c33ffd2377285f3823fba49bc6c808a96c52a1dd129891a0592ffa27babc7757e4c818d6dfc51c869e44f99c3e3421223d9a69b3e5e3881c65c79b62bdce60ac6d539fd939d917c0b35d"}}) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48) 831.933912ms ago: executing program 3 (id=4788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x9, 0x7f, 0x6f, 0x80, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 153.48514ms ago: executing program 4 (id=4789): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x1e) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 0s ago: executing program 0 (id=4790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1015e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1173.197361][T20855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.565409][T20855] vivid-001: kernel_thread() failed [ 1174.014923][T20864] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1175.106885][ T978] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1175.342769][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 1175.378221][ T978] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1175.429605][ T978] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1175.453681][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.472448][ T978] usb 1-1: Product: syz [ 1175.487370][ T978] usb 1-1: Manufacturer: syz [ 1175.507747][ T978] usb 1-1: SerialNumber: syz [ 1175.592468][ T978] usb 1-1: config 0 descriptor?? [ 1176.108454][T20871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1176.691097][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.698295][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.717741][ T2908] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1177.357167][T20879] usb 1-1: USB disconnect, device number 90 [ 1178.001611][T20905] tipc: Enabled bearer , priority 0 [ 1178.043734][T20905] syzkaller0: entered promiscuous mode [ 1178.057695][T20905] syzkaller0: entered allmulticast mode [ 1178.216300][T20905] tipc: Resetting bearer [ 1178.675966][T20903] tipc: Resetting bearer [ 1178.719397][T20903] tipc: Disabling bearer [ 1178.743503][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1178.934015][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1178.949089][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1178.959047][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1179.686869][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.963751][T20909] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1179.981711][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1180.215526][ T24] usb 3-1: USB disconnect, device number 82 [ 1181.063989][T20946] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1181.684413][T11605] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1181.853466][T11605] usb 3-1: Using ep0 maxpacket: 32 [ 1181.913564][T11605] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1181.959970][T11605] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1181.989858][T11605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.040948][T11605] usb 3-1: Product: syz [ 1182.068317][T11605] usb 3-1: Manufacturer: syz [ 1182.078381][T11605] usb 3-1: SerialNumber: syz [ 1182.103102][T11605] usb 3-1: config 0 descriptor?? [ 1183.874435][T11605] usb 3-1: USB disconnect, device number 83 [ 1184.268389][T20981] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1185.408899][T20997] fuse: Unknown parameter 'user_id00000000000000000000' [ 1186.864791][T21014] syz_tun: entered allmulticast mode [ 1186.866053][T21014] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1186.866099][T21014] mroute: pending queue full, dropping entries [ 1186.866983][T21013] syz_tun: left allmulticast mode [ 1188.222751][T21023] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1188.560637][T21027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4082'. [ 1188.588195][T21023] tipc: Enabled bearer , priority 0 [ 1188.750188][T21023] syzkaller0: entered promiscuous mode [ 1188.759736][T21023] syzkaller0: entered allmulticast mode [ 1188.804985][T21023] tipc: Resetting bearer [ 1189.180270][T21021] tipc: Resetting bearer [ 1189.302523][T21021] tipc: Disabling bearer [ 1189.584375][ T30] audit: type=1400 audit(1756955940.809:654): avc: denied { accept } for pid=21041 comm="syz.3.4086" lport=43709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1189.604897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1189.942668][T21048] fuse: Bad value for 'fd' [ 1191.358583][T21067] tc_dump_action: action bad kind [ 1191.765671][ T30] audit: type=1400 audit(1756955943.005:655): avc: denied { bind } for pid=21068 comm="syz.0.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1194.984685][T21110] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1194.992573][T21110] /dev/nullb0: Can't open blockdev [ 1195.674850][T21116] random: crng reseeded on system resumption [ 1197.197886][T21127] usb usb1: usbfs: process 21127 (syz.4.4105) did not claim interface 0 before use [ 1198.155927][ T30] audit: type=1400 audit(1756955949.230:656): avc: denied { mount } for pid=21104 comm="syz.3.4099" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1198.822274][T21151] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1200.254388][ T30] audit: type=1400 audit(1756955951.516:657): avc: denied { map } for pid=21162 comm="syz.2.4112" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1201.806152][ T30] audit: type=1400 audit(1756955952.909:658): avc: denied { read } for pid=21191 comm="syz.2.4118" path="socket:[69695]" dev="sockfs" ino=69695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1202.727565][ T30] audit: type=1404 audit(1756955953.971:659): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1203.269961][ T30] audit: type=1400 audit(1756955954.041:660): avc: denied { read write } for pid=21199 comm="syz.4.4119" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 1203.295491][ T30] audit: type=1400 audit(1756955954.071:661): avc: denied { recv } for pid=21199 comm="syz.4.4119" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=36272 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1203.324858][ T30] audit: type=1400 audit(1756955954.282:662): avc: denied { recv } for pid=21199 comm="syz.4.4119" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=36272 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1203.388304][ T30] audit: type=1400 audit(1756955954.322:663): avc: denied { mount } for pid=21197 comm="syz.2.4120" name="/" dev="ramfs" ino=68860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 1203.421797][T21202] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1203.432854][T21202] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1203.603249][ T30] audit: type=1400 audit(1756955954.492:664): avc: denied { recv } for pid=21197 comm="syz.2.4120" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=36272 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1204.024169][ T30] audit: type=1400 audit(1756955954.683:665): avc: denied { recv } for pid=1164 comm="kworker/u8:5" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=36272 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1204.650936][ T30] audit: type=1400 audit(1756955954.683:666): avc: denied { recv } for pid=1164 comm="kworker/u8:5" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=36272 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1204.735900][ T30] audit: type=1400 audit(1756955954.683:667): avc: denied { read write } for pid=5853 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1204.854301][ T30] audit: type=1404 audit(1756955954.703:668): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1204.891146][ T30] audit: type=1400 audit(1756955954.743:669): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=36272 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1208.522641][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1208.522658][ T30] audit: type=1400 audit(1756955959.793:723): avc: denied { ioctl } for pid=21262 comm="syz.5.4133" path="socket:[69809]" dev="sockfs" ino=69809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1208.948859][ T30] audit: type=1400 audit(1756955959.843:724): avc: denied { create } for pid=21262 comm="syz.5.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1209.001911][ T30] audit: type=1400 audit(1756955959.843:725): avc: denied { setopt } for pid=21262 comm="syz.5.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1209.098669][ T30] audit: type=1400 audit(1756955959.863:726): avc: denied { create } for pid=21269 comm="syz.0.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1209.470026][ T30] audit: type=1400 audit(1756955959.893:727): avc: denied { getopt } for pid=21262 comm="syz.5.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1209.612426][ T30] audit: type=1400 audit(1756955959.943:728): avc: denied { write } for pid=21268 comm="syz.4.4135" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1209.676832][ T30] audit: type=1400 audit(1756955960.214:729): avc: denied { write } for pid=21269 comm="syz.0.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1209.848439][ T30] audit: type=1400 audit(1756955960.364:730): avc: denied { read write } for pid=21276 comm="syz.2.4137" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1209.964247][ T30] audit: type=1400 audit(1756955960.364:731): avc: denied { open } for pid=21276 comm="syz.2.4137" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1209.997981][ T30] audit: type=1400 audit(1756955960.494:732): avc: denied { mount } for pid=21276 comm="syz.2.4137" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1213.623345][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1213.623365][ T30] audit: type=1400 audit(1756955964.913:743): avc: denied { bind } for pid=21321 comm="syz.2.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1214.290481][ T30] audit: type=1400 audit(1756955965.133:744): avc: denied { write } for pid=21321 comm="syz.2.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1214.694341][ T30] audit: type=1400 audit(1756955965.704:745): avc: denied { getopt } for pid=21323 comm="syz.4.4148" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1216.316984][ T30] audit: type=1400 audit(1756955967.227:746): avc: denied { map_read map_write } for pid=21336 comm="syz.5.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1216.418715][ T30] audit: type=1400 audit(1756955967.708:747): avc: denied { create } for pid=21343 comm="syz.4.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1216.608094][T21346] tc_dump_action: action bad kind [ 1218.269669][ T30] audit: type=1400 audit(1756955969.280:748): avc: denied { create } for pid=21353 comm="syz.0.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1218.348012][ T30] audit: type=1400 audit(1756955969.641:749): avc: denied { ioctl } for pid=21353 comm="syz.0.4156" path="/dev/input/event3" dev="devtmpfs" ino=972 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1218.905910][ T30] audit: type=1400 audit(1756955970.202:750): avc: denied { create } for pid=21370 comm="syz.5.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1218.952620][T21375] fuse: Unknown parameter '0x0000000000000008' [ 1220.675977][ T30] audit: type=1400 audit(1756955971.875:751): avc: denied { create } for pid=21388 comm="syz.0.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1220.729693][ T30] audit: type=1400 audit(1756955971.905:752): avc: denied { bind } for pid=21388 comm="syz.0.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1220.823713][ T30] audit: type=1400 audit(1756955971.905:753): avc: denied { name_bind } for pid=21388 comm="syz.0.4165" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1220.901364][ T30] audit: type=1400 audit(1756955971.915:754): avc: denied { node_bind } for pid=21388 comm="syz.0.4165" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1221.353699][ T30] audit: type=1400 audit(1756955971.935:755): avc: denied { write } for pid=21388 comm="syz.0.4165" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.469905][ T30] audit: type=1400 audit(1756955971.935:756): avc: denied { connect } for pid=21388 comm="syz.0.4165" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.574876][ T30] audit: type=1400 audit(1756955971.935:757): avc: denied { name_connect } for pid=21388 comm="syz.0.4165" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1221.721857][ T30] audit: type=1400 audit(1756955972.326:758): avc: denied { ioctl } for pid=21393 comm="syz.4.4166" path="/dev/cec4" dev="devtmpfs" ino=976 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1222.087177][ T30] audit: type=1400 audit(1756955972.746:759): avc: denied { create } for pid=21396 comm="syz.0.4167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1223.824861][T21425] netlink: 'syz.0.4172': attribute type 12 has an invalid length. [ 1223.837428][T21425] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4172'. [ 1224.534057][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1224.534073][ T30] audit: type=1400 audit(1756955975.841:766): avc: denied { append } for pid=21427 comm="syz.3.4174" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1224.534289][T21428] random: crng reseeded on system resumption [ 1224.540453][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'. [ 1224.591423][ T30] audit: type=1400 audit(1756955975.841:767): avc: denied { open } for pid=21427 comm="syz.3.4174" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1224.707651][ T30] audit: type=1400 audit(1756955975.851:768): avc: denied { write } for pid=21409 comm="syz.2.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1224.758429][ T30] audit: type=1400 audit(1756955976.041:769): avc: denied { firmware_load } for pid=19212 comm="kworker/u8:4" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1225.235393][ T30] audit: type=1400 audit(1756955976.212:770): avc: denied { write } for pid=21429 comm="syz.5.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1225.254917][ T30] audit: type=1400 audit(1756955976.212:771): avc: denied { read } for pid=21429 comm="syz.5.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1225.679653][ T30] audit: type=1400 audit(1756955976.632:772): avc: denied { ioctl } for pid=21427 comm="syz.3.4174" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1226.251115][ T30] audit: type=1400 audit(1756955976.792:773): avc: denied { create } for pid=21433 comm="syz.0.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1226.347052][ T30] audit: type=1400 audit(1756955977.654:774): avc: denied { create } for pid=21427 comm="syz.3.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1226.690405][ T30] audit: type=1400 audit(1756955977.654:775): avc: denied { setopt } for pid=21427 comm="syz.3.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1226.739715][T21444] fuse: Unknown parameter '0x0000000000000008' [ 1231.905787][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1231.905820][ T30] audit: type=1400 audit(1756955983.212:779): avc: denied { read write } for pid=21492 comm="syz.2.4190" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1231.937044][ T10] IPVS: starting estimator thread 0... [ 1232.288606][ T30] audit: type=1400 audit(1756955983.212:780): avc: denied { open } for pid=21492 comm="syz.2.4190" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1232.391262][T21498] IPVS: using max 71 ests per chain, 170400 per kthread [ 1233.170084][T21511] 9pnet_fd: Insufficient options for proto=fd [ 1233.336079][T21514] fuse: Unknown parameter '0x0000000000000008' [ 1233.551627][ T30] audit: type=1400 audit(1756955984.874:781): avc: denied { write } for pid=21518 comm="syz.3.4195" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1235.373749][ T30] audit: type=1400 audit(1756955986.246:782): avc: denied { mounton } for pid=21545 comm="syz.4.4201" path="/866/file0" dev="tmpfs" ino=4552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1235.437768][ T30] audit: type=1400 audit(1756955986.256:783): avc: denied { mount } for pid=21545 comm="syz.4.4201" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1235.674223][ T30] audit: type=1400 audit(1756955986.987:784): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1237.734673][ T30] audit: type=1400 audit(1756955989.019:785): avc: denied { setopt } for pid=21575 comm="syz.5.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1237.995179][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.001705][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.258742][ T30] audit: type=1400 audit(1756955989.550:786): avc: denied { write } for pid=21572 comm="syz.4.4208" path="socket:[70777]" dev="sockfs" ino=70777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1238.890480][ T30] audit: type=1400 audit(1756955989.990:787): avc: denied { read } for pid=21578 comm="syz.2.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1239.683542][T21600] fuse: Unknown parameter '0x0000000000000008' [ 1239.689799][ T30] audit: type=1400 audit(1756955990.801:788): avc: denied { ioctl } for pid=21593 comm="syz.4.4212" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1239.730674][ T30] audit: type=1400 audit(1756955991.062:789): avc: denied { execute } for pid=21597 comm="syz.2.4214" path="/885/pids.events" dev="tmpfs" ino=4673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1240.504535][T21612] trusted_key: syz.5.4207 sent an empty control message without MSG_MORE. [ 1244.716665][T21650] netlink: 'syz.0.4223': attribute type 1 has an invalid length. [ 1245.096776][T21656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4223'. [ 1245.277902][ T30] audit: type=1400 audit(1756955996.608:790): avc: denied { append } for pid=21651 comm="syz.3.4225" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1245.304674][T21656] bond2: entered promiscuous mode [ 1245.309718][T21656] bond2: entered allmulticast mode [ 1245.323830][T21656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1245.808859][ T5901] IPVS: starting estimator thread 0... [ 1245.945137][ T30] audit: type=1400 audit(1756955997.279:791): avc: denied { read write } for pid=21665 comm="syz.4.4228" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1245.946598][T21664] IPVS: using max 43 ests per chain, 103200 per kthread [ 1245.976584][ T30] audit: type=1400 audit(1756955997.279:792): avc: denied { open } for pid=21665 comm="syz.4.4228" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1247.549855][ T30] audit: type=1400 audit(1756955998.861:793): avc: denied { mount } for pid=21675 comm="syz.4.4232" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1247.582018][T21686] syz_tun: entered allmulticast mode [ 1247.669620][ T30] audit: type=1400 audit(1756955998.921:794): avc: denied { setopt } for pid=21684 comm="syz.3.4233" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1247.796435][T21693] fuse: Unknown parameter '0x0000000000000008' [ 1248.022428][ T30] audit: type=1400 audit(1756955998.941:795): avc: denied { create } for pid=21675 comm="syz.4.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1248.049416][ T30] audit: type=1400 audit(1756955998.951:796): avc: denied { connect } for pid=21675 comm="syz.4.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1248.177071][ T30] audit: type=1400 audit(1756955999.351:797): avc: denied { create } for pid=21691 comm="syz.3.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1248.197071][ T30] audit: type=1400 audit(1756955999.351:798): avc: denied { setopt } for pid=21691 comm="syz.3.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1251.106659][T21713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1251.312435][ T30] audit: type=1400 audit(1756956002.645:799): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1253.854704][ T30] audit: type=1400 audit(1756956004.196:800): avc: denied { connect } for pid=21736 comm="syz.0.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1256.440580][ T30] audit: type=1400 audit(1756956007.780:801): avc: denied { create } for pid=21751 comm="syz.3.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1257.160423][ T30] audit: type=1400 audit(1756956007.780:802): avc: denied { write } for pid=21751 comm="syz.3.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1257.789892][ T30] audit: type=1326 audit(1756956008.830:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21763 comm="syz.2.4252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd57c78ebe9 code=0x0 [ 1258.140182][ T30] audit: type=1400 audit(1756956009.431:804): avc: denied { recv } for pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=38420 daddr=10.128.0.64 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1259.555790][ T30] audit: type=1400 audit(1756956010.792:805): avc: denied { read } for pid=21783 comm="syz.3.4257" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1260.172212][ T30] audit: type=1400 audit(1756956010.792:806): avc: denied { open } for pid=21783 comm="syz.3.4257" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1260.196840][ T30] audit: type=1400 audit(1756956010.942:807): avc: denied { ioctl } for pid=21783 comm="syz.3.4257" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1262.116350][ T30] audit: type=1400 audit(1756956013.324:808): avc: denied { connect } for pid=21828 comm="syz.4.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1265.933182][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1266.036020][ T5169] Bluetooth: hci3: command 0x0406 tx timeout [ 1266.110001][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.182960][ T10] usb 3-1: config 0 has no interfaces? [ 1266.188482][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1266.306458][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.806525][ T30] audit: type=1400 audit(1756956017.768:809): avc: denied { bind } for pid=21881 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1266.942634][ T30] audit: type=1400 audit(1756956017.778:810): avc: denied { listen } for pid=21881 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1266.965551][ T30] audit: type=1400 audit(1756956017.778:811): avc: denied { connect } for pid=21881 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1267.108026][T17599] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1267.109741][ T30] audit: type=1400 audit(1756956017.858:812): avc: denied { accept } for pid=21881 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1267.219243][ T10] usb 3-1: config 0 descriptor?? [ 1267.351969][T17599] usb 4-1: Using ep0 maxpacket: 32 [ 1267.358631][T17599] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1267.372085][T17599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.382506][T17599] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1267.422525][T17599] usb 4-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 1267.435925][T17599] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1267.439322][ T30] audit: type=1400 audit(1756956018.789:813): avc: denied { bind } for pid=21892 comm="syz.4.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1267.485430][T17599] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1267.495369][T17599] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1267.503933][T17599] usb 4-1: Product: syz [ 1267.508486][T17599] usb 4-1: Manufacturer: syz [ 1267.513290][T17599] usb 4-1: SerialNumber: syz [ 1267.710843][T17599] usb 4-1: config 0 descriptor?? [ 1267.988801][T17599] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1268.077065][T11605] usb 3-1: USB disconnect, device number 84 [ 1268.112279][ T5169] Bluetooth: hci3: command 0x0406 tx timeout [ 1269.044849][T21902] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1269.060953][ T30] audit: type=1400 audit(1756956019.960:814): avc: denied { listen } for pid=21885 comm="syz.3.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1270.155271][T17599] usb 4-1: USB disconnect, device number 98 [ 1270.782096][ T30] audit: type=1400 audit(1756956022.141:815): avc: denied { mount } for pid=21924 comm="syz.5.4284" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1270.853971][T21929] netlink: 'syz.0.4283': attribute type 1 has an invalid length. [ 1271.275222][ T30] audit: type=1400 audit(1756956022.632:816): avc: denied { mounton } for pid=21924 comm="syz.5.4284" path="/289/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1271.275258][ T30] audit: type=1400 audit(1756956022.632:817): avc: denied { mount } for pid=21924 comm="syz.5.4284" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1271.346382][ T30] audit: type=1400 audit(1756956022.702:818): avc: denied { mount } for pid=21924 comm="syz.5.4284" name="/" dev="pstore" ino=3413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1271.379983][ T30] audit: type=1400 audit(1756956022.712:819): avc: denied { mounton } for pid=21924 comm="syz.5.4284" path="/" dev="pstore" ino=3413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 1271.865304][ T30] audit: type=1400 audit(1756956023.222:820): avc: denied { unmount } for pid=15240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1271.967732][ T30] audit: type=1400 audit(1756956023.322:821): avc: denied { unmount } for pid=15240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1272.132823][ T30] audit: type=1400 audit(1756956023.492:822): avc: denied { unmount } for pid=15240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1273.009638][ T30] audit: type=1400 audit(1756956024.333:823): avc: denied { unlink } for pid=21943 comm="syz.2.4287" name="#43" dev="tmpfs" ino=4771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1273.717356][ T30] audit: type=1400 audit(1756956024.963:824): avc: denied { setopt } for pid=21947 comm="syz.5.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1274.658043][T21963] fuse: Unknown parameter '0x0000000000000008' [ 1274.978791][T21968] syz.4.4291 uses old SIOCAX25GETINFO [ 1276.808156][ T30] audit: type=1400 audit(1756956028.166:825): avc: denied { append } for pid=21981 comm="syz.4.4299" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1277.794831][ T30] audit: type=1400 audit(1756956028.166:826): avc: denied { open } for pid=21981 comm="syz.4.4299" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1277.826220][T21984] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1277.832766][T21984] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1277.860126][ T30] audit: type=1400 audit(1756956028.176:827): avc: denied { create } for pid=21981 comm="syz.4.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1277.954175][T21984] vhci_hcd vhci_hcd.0: Device attached [ 1277.983089][T21985] vhci_hcd: connection closed [ 1278.194210][ T5922] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1278.859805][ T30] audit: type=1400 audit(1756956029.296:828): avc: denied { read write } for pid=21989 comm="syz.2.4300" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1278.932569][ T1164] vhci_hcd: stop threads [ 1278.972505][ T1164] vhci_hcd: release socket [ 1279.004836][ T1164] vhci_hcd: disconnect device [ 1279.097979][ T5169] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1279.603412][ T30] audit: type=1400 audit(1756956029.296:829): avc: denied { open } for pid=21989 comm="syz.2.4300" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1280.232681][ T30] audit: type=1400 audit(1756956029.326:830): avc: denied { bind } for pid=21989 comm="syz.2.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1280.289163][ T30] audit: type=1400 audit(1756956029.326:831): avc: denied { shutdown } for pid=21989 comm="syz.2.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1280.962638][ T30] audit: type=1400 audit(1756956030.277:832): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1281.675780][ T30] audit: type=1400 audit(1756956030.277:833): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1281.732260][ T30] audit: type=1400 audit(1756956031.678:834): avc: denied { create } for pid=22001 comm="syz.4.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1282.273085][ T30] audit: type=1400 audit(1756956031.688:835): avc: denied { write } for pid=22001 comm="syz.4.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1282.403666][ T30] audit: type=1400 audit(1756956031.758:836): avc: denied { read } for pid=22001 comm="syz.4.4303" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1282.445924][ T30] audit: type=1400 audit(1756956031.758:837): avc: denied { open } for pid=22001 comm="syz.4.4303" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1284.520436][ T5922] vhci_hcd: vhci_device speed not set [ 1284.536912][T22032] ALSA: seq fatal error: cannot create timer (-19) [ 1284.561526][T22046] pim6reg1: entered promiscuous mode [ 1284.566850][T22046] pim6reg1: entered allmulticast mode [ 1284.603412][T22042] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1285.044805][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 1285.562614][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1285.562631][ T30] audit: type=1400 audit(1756956036.041:839): avc: denied { block_suspend } for pid=22045 comm="syz.2.4316" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1285.611235][ T30] audit: type=1400 audit(1756956036.361:840): avc: denied { create } for pid=22047 comm="syz.4.4315" name="#49" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1285.635335][ T30] audit: type=1400 audit(1756956036.361:841): avc: denied { link } for pid=22047 comm="syz.4.4315" name="#49" dev="tmpfs" ino=4706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1285.659862][ T30] audit: type=1400 audit(1756956036.361:842): avc: denied { rename } for pid=22047 comm="syz.4.4315" name="#4a" dev="tmpfs" ino=4706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1285.684896][ T30] audit: type=1400 audit(1756956036.971:843): avc: denied { watch watch_reads } for pid=22030 comm="syz.0.4312" path="/875" dev="tmpfs" ino=4580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1285.718451][ T30] audit: type=1400 audit(1756956036.971:844): avc: denied { read write } for pid=22045 comm="syz.2.4316" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1285.753007][ T30] audit: type=1400 audit(1756956036.971:845): avc: denied { open } for pid=22045 comm="syz.2.4316" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1286.659204][ T5169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1286.846734][ T30] audit: type=1400 audit(1756956038.212:846): avc: denied { bind } for pid=22064 comm="syz.4.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1286.885745][T22065] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1286.943254][ T30] audit: type=1400 audit(1756956038.242:847): avc: denied { setopt } for pid=22064 comm="syz.4.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1286.944766][T22065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.116807][ T30] audit: type=1400 audit(1756956038.252:848): avc: denied { read write } for pid=22064 comm="syz.4.4319" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1288.973127][T22089] netlink: 'syz.0.4325': attribute type 12 has an invalid length. [ 1288.983587][T22089] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1290.353968][T22097] tipc: Enabling of bearer rejected, failed to enable media [ 1292.585960][T22135] fuse: Unknown parameter 'fd0x0000000000000008' [ 1293.413454][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1293.413470][ T30] audit: type=1400 audit(1756956044.786:853): avc: denied { map } for pid=22138 comm="syz.2.4336" path="socket:[71931]" dev="sockfs" ino=71931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1295.396113][T22166] random: crng reseeded on system resumption [ 1296.171059][ T30] audit: type=1400 audit(1756956047.107:854): avc: denied { write } for pid=22168 comm="syz.0.4343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1296.294387][ T30] audit: type=1400 audit(1756956047.107:855): avc: denied { nlmsg_write } for pid=22168 comm="syz.0.4343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1297.123782][T22180] /dev/nullb0: Can't open blockdev [ 1297.246280][ T30] audit: type=1400 audit(1756956048.487:856): avc: denied { mounton } for pid=22177 comm="syz.4.4345" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1299.101974][ T30] audit: type=1400 audit(1756956050.048:857): avc: denied { ioctl } for pid=22185 comm="syz.0.4347" path="socket:[72068]" dev="sockfs" ino=72068 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1299.182071][T22199] fuse: Unknown parameter 'fd0x0000000000000008' [ 1299.393033][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.447594][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.359366][T22211] fuse: Unknown parameter 'fd0x0000000000000008' [ 1301.533273][T22227] random: crng reseeded on system resumption [ 1302.621241][ T30] audit: type=1400 audit(1756956053.890:858): avc: denied { ioctl } for pid=22228 comm="syz.2.4360" path="socket:[73297]" dev="sockfs" ino=73297 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1303.149175][ T30] audit: type=1400 audit(1756956054.520:859): avc: denied { bind } for pid=22239 comm="syz.2.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1306.404220][T22274] fuse: Unknown parameter 'fd0x0000000000000008' [ 1306.535754][T22272] vivid-004: disconnect [ 1306.558610][T22272] vivid-004: reconnect [ 1307.929086][T22288] random: crng reseeded on system resumption [ 1309.535681][ T30] audit: type=1400 audit(1756956060.913:860): avc: denied { bind } for pid=22268 comm="syz.3.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1309.557932][ T30] audit: type=1400 audit(1756956060.913:861): avc: denied { node_bind } for pid=22268 comm="syz.3.4368" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1310.441888][ T30] audit: type=1400 audit(1756956061.803:862): avc: denied { append } for pid=22292 comm="syz.5.4374" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1312.622635][ T30] audit: type=1400 audit(1756956063.994:863): avc: denied { setopt } for pid=22325 comm="syz.0.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1313.155357][ T30] audit: type=1400 audit(1756956064.284:864): avc: denied { accept } for pid=22325 comm="syz.0.4382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1313.454187][T22342] fuse: Bad value for 'fd' [ 1313.717876][ T30] audit: type=1400 audit(1756956065.095:865): avc: denied { listen } for pid=22343 comm="syz.3.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1314.026199][ T30] audit: type=1400 audit(1756956065.095:866): avc: denied { accept } for pid=22343 comm="syz.3.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1314.318246][T22348] random: crng reseeded on system resumption [ 1314.357956][ T30] audit: type=1400 audit(1756956065.745:867): avc: denied { ioctl } for pid=22347 comm="syz.5.4387" path="socket:[72340]" dev="sockfs" ino=72340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1315.350161][T22353] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1315.356705][T22353] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1315.378773][T22353] vhci_hcd vhci_hcd.0: Device attached [ 1315.481756][ T30] audit: type=1400 audit(1756956066.865:868): avc: denied { ioctl } for pid=22358 comm="syz.3.4389" path="socket:[73522]" dev="sockfs" ino=73522 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1315.585579][ T5901] vhci_hcd: vhci_device speed not set [ 1316.062766][ T5901] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 1317.857465][T17599] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1318.015984][T17599] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.030233][T17599] usb 6-1: config 0 has no interfaces? [ 1318.043569][T17599] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1318.062288][T17599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.073238][T17599] usb 6-1: config 0 descriptor?? [ 1318.639340][T22354] vhci_hcd: connection reset by peer [ 1318.679872][ T12] vhci_hcd: stop threads [ 1318.684287][ T12] vhci_hcd: release socket [ 1318.692045][ T12] vhci_hcd: disconnect device [ 1319.540376][T22393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.558576][T22393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.800817][ T30] audit: type=1400 audit(1756956071.137:869): avc: denied { mount } for pid=22398 comm="syz.2.4400" name="/" dev="ramfs" ino=73587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1321.669703][T22405] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4401'. [ 1321.678804][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4401'. [ 1321.688685][T22405] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4401'. [ 1321.697835][T22405] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4401'. [ 1321.706967][T22405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4401'. [ 1321.769419][ T5901] vhci_hcd: vhci_device speed not set [ 1322.034565][T17599] usb 6-1: USB disconnect, device number 25 [ 1322.239075][T22416] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.4402'. [ 1322.803672][T22422] fuse: Bad value for 'fd' [ 1323.053116][T17599] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1323.094257][T22426] md: md2 stopped. [ 1323.099931][ T30] audit: type=1400 audit(1756956074.468:870): avc: denied { read } for pid=22425 comm="syz.0.4407" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1323.224450][T17599] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 1323.239699][ T30] audit: type=1400 audit(1756956074.468:871): avc: denied { open } for pid=22425 comm="syz.0.4407" path="/894/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1323.255007][T17599] usb 3-1: config 0 has no interface number 0 [ 1323.262893][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.531117][T17599] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.13 [ 1323.542231][T17599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.560686][ T30] audit: type=1400 audit(1756956074.478:872): avc: denied { ioctl } for pid=22425 comm="syz.0.4407" path="/894/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1323.580845][T17599] usb 3-1: Product: syz [ 1323.592992][T17599] usb 3-1: Manufacturer: syz [ 1323.597638][T17599] usb 3-1: SerialNumber: syz [ 1323.708182][T17599] usb 3-1: config 0 descriptor?? [ 1324.067788][ T30] audit: type=1400 audit(1756956075.288:873): avc: denied { watch watch_reads } for pid=22432 comm="syz.0.4409" path="/895/file0" dev="tmpfs" ino=4690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1324.472847][ T30] audit: type=1400 audit(1756956075.288:874): avc: denied { execute_no_trans } for pid=22432 comm="syz.0.4409" path="/895/file0" dev="tmpfs" ino=4690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1324.500889][ T30] audit: type=1400 audit(1756956075.838:875): avc: denied { read write } for pid=22436 comm="syz.4.4410" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1324.528602][ T30] audit: type=1400 audit(1756956075.838:876): avc: denied { open } for pid=22436 comm="syz.4.4410" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1324.700876][ T30] audit: type=1400 audit(1756956075.838:877): avc: denied { ioctl } for pid=22436 comm="syz.4.4410" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1326.398785][T17599] usb 3-1: bad CDC descriptors [ 1326.417375][T17599] usb 3-1: USB disconnect, device number 85 [ 1327.534596][T22455] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4413'. [ 1328.712048][ T30] audit: type=1400 audit(1756956080.090:878): avc: denied { mount } for pid=22473 comm="syz.4.4419" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1328.796286][ T30] audit: type=1400 audit(1756956080.100:879): avc: denied { write } for pid=22473 comm="syz.4.4419" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1328.844416][ T30] audit: type=1400 audit(1756956080.100:880): avc: denied { open } for pid=22473 comm="syz.4.4419" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1329.123507][ T30] audit: type=1400 audit(1756956080.340:881): avc: denied { ioctl } for pid=22476 comm="syz.2.4420" path="socket:[73807]" dev="sockfs" ino=73807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1329.194874][ T30] audit: type=1400 audit(1756956080.340:882): avc: denied { bind } for pid=22476 comm="syz.2.4420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1329.251041][ T30] audit: type=1400 audit(1756956080.340:883): avc: denied { mount } for pid=22476 comm="syz.2.4420" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1329.960895][ T30] audit: type=1400 audit(1756956080.520:884): avc: denied { read append } for pid=22473 comm="syz.4.4419" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1331.815487][ T30] audit: type=1800 audit(1756956083.200:885): pid=22475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4419" name="/" dev="9p" ino=2 res=0 errno=0 [ 1331.896258][ T30] audit: type=1400 audit(1756956083.280:886): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1332.348541][ T30] audit: type=1400 audit(1756956083.731:887): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1335.061526][T22533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1335.068793][T22533] IPv6: NLM_F_CREATE should be set when creating new route [ 1335.076257][T22533] IPv6: NLM_F_CREATE should be set when creating new route [ 1335.083560][T22533] IPv6: NLM_F_CREATE should be set when creating new route [ 1336.242433][T19217] Bluetooth: hci5: Frame reassembly failed (-84) [ 1336.386772][T22540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1336.394061][T22540] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.331794][ T30] audit: type=1400 audit(1756956088.682:888): avc: denied { execute } for pid=22557 comm="syz.3.4441" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=74048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1337.753152][ T30] audit: type=1400 audit(1756956088.732:889): avc: denied { name_bind } for pid=22557 comm="syz.3.4441" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1337.999047][ T5169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1338.647841][ T5908] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1339.322272][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 1340.812921][ T5908] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1340.851450][ T5908] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1340.862201][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.883172][ T5908] usb 4-1: Product: syz [ 1340.887495][ T5908] usb 4-1: Manufacturer: syz [ 1340.892366][ T5908] usb 4-1: SerialNumber: syz [ 1340.899209][ T5908] usb 4-1: config 0 descriptor?? [ 1341.616528][ T5908] usb 4-1: USB disconnect, device number 99 [ 1345.101625][ T30] audit: type=1400 audit(1756956096.494:890): avc: denied { read write } for pid=22624 comm="syz.0.4456" name="mouse0" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1345.387673][ T30] audit: type=1400 audit(1756956096.494:891): avc: denied { open } for pid=22624 comm="syz.0.4456" path="/dev/input/mouse0" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1345.796833][ T10] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1345.958345][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.977081][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1346.186721][T22638] sd 0:0:1:0: PR command failed: 1026 [ 1346.192354][T22638] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1346.199223][T22638] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1346.424440][ T10] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1346.506713][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1346.541207][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1346.551511][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.561870][ T10] usb 4-1: Product: syz [ 1346.570273][ T10] usb 4-1: Manufacturer: syz [ 1346.581193][ T10] usb 4-1: SerialNumber: syz [ 1347.098877][ T30] audit: type=1400 audit(1756956098.294:892): avc: denied { map } for pid=22643 comm="syz.4.4461" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1347.101162][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1347.193262][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1347.201147][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1347.208805][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1347.217265][ T10] usb 4-1: 0:2 : does not exist [ 1347.222504][ T10] usb 4-1: unit 6 not found! [ 1347.265923][ T10] usb 4-1: USB disconnect, device number 100 [ 1347.375629][ T30] audit: type=1400 audit(1756956098.294:893): avc: denied { execute } for pid=22643 comm="syz.4.4461" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1349.370923][ T30] audit: type=1400 audit(1756956100.655:894): avc: denied { create } for pid=22670 comm="syz.0.4469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1350.599311][ T30] audit: type=1400 audit(1756956101.355:895): avc: denied { execmem } for pid=22676 comm="syz.0.4470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1350.662060][ T30] audit: type=1400 audit(1756956101.435:896): avc: denied { recv } for pid=22676 comm="syz.0.4470" saddr=10.128.0.169 src=30006 daddr=10.128.0.64 dest=36272 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1350.813900][ T30] audit: type=1400 audit(1756956101.575:897): avc: denied { read } for pid=22676 comm="syz.0.4470" dev="nsfs" ino=4026532920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1350.863594][T22684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22684 comm=syz.2.4471 [ 1350.896759][ T30] audit: type=1400 audit(1756956101.575:898): avc: denied { open } for pid=22676 comm="syz.0.4470" path="net:[4026532920]" dev="nsfs" ino=4026532920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1350.987843][T22685] input: syz1 as /devices/virtual/input/input46 [ 1351.204167][ T30] audit: type=1400 audit(1756956101.585:899): avc: denied { create } for pid=22676 comm="syz.0.4470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1351.527712][ T30] audit: type=1400 audit(1756956101.605:900): avc: denied { ioctl } for pid=22676 comm="syz.0.4470" path="socket:[75368]" dev="sockfs" ino=75368 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1351.554201][ T30] audit: type=1400 audit(1756956102.105:901): avc: denied { read write } for pid=5853 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.586106][ T30] audit: type=1400 audit(1756956102.105:902): avc: denied { open } for pid=5853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.616999][ T30] audit: type=1400 audit(1756956102.105:903): avc: denied { ioctl } for pid=5853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.664203][ T30] audit: type=1400 audit(1756956102.145:904): avc: denied { create } for pid=22655 comm="syz.3.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1353.329262][T22697] sd 0:0:1:0: PR command failed: 1026 [ 1353.334678][T22697] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1353.341430][T22697] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1353.438382][T22696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4473'. [ 1353.833939][T22706] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1353.833939][T22706] program syz.5.4474 not setting count and/or reply_len properly [ 1355.163067][T22723] netlink: 'syz.2.4478': attribute type 12 has an invalid length. [ 1355.171072][T22723] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4478'. [ 1355.565169][T22731] input: syz1 as /devices/virtual/input/input47 [ 1355.695721][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1355.695736][ T30] audit: type=1400 audit(1756956107.096:962): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5248 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1356.450147][ T30] audit: type=1400 audit(1756956107.416:963): avc: denied { map_create } for pid=22732 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1356.495597][ T30] audit: type=1400 audit(1756956107.426:964): avc: denied { map_read map_write } for pid=22732 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1356.526017][ T30] audit: type=1400 audit(1756956107.436:965): avc: denied { prog_run } for pid=22732 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1356.553904][ T30] audit: type=1400 audit(1756956107.456:966): avc: denied { mount } for pid=22732 comm="syz.0.4481" name="/" dev="ramfs" ino=74552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1356.727016][ T30] audit: type=1400 audit(1756956108.126:967): avc: denied { create } for pid=22736 comm="syz.0.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1356.758242][ T30] audit: type=1400 audit(1756956108.126:968): avc: denied { create } for pid=22736 comm="syz.0.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1356.922916][ T30] audit: type=1400 audit(1756956108.186:969): avc: denied { allowed } for pid=22736 comm="syz.0.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1356.975775][ T30] audit: type=1400 audit(1756956108.186:970): avc: denied { create } for pid=22736 comm="syz.0.4483" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1356.997014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.004801][ T30] audit: type=1400 audit(1756956108.186:971): avc: denied { map } for pid=22736 comm="syz.0.4483" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1357.194422][T17128] Bluetooth: hci3: command 0x0406 tx timeout [ 1360.796397][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.802686][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.093886][ T978] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1361.183097][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1361.183112][ T30] audit: type=1400 audit(1756956112.567:988): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1361.275517][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.366238][ T978] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1361.929298][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.943065][ T978] usb 3-1: config 0 descriptor?? [ 1361.964901][ T30] audit: type=1400 audit(1756956113.347:989): avc: denied { create } for pid=22783 comm="syz.5.4497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1361.971807][ T978] usbhid 3-1:0.0: can't add hid device: -22 [ 1361.992444][ T978] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1362.325142][ T30] audit: type=1400 audit(1756956113.357:990): avc: denied { read } for pid=22783 comm="syz.5.4497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1362.516036][ T30] audit: type=1400 audit(1756956113.867:991): avc: denied { ioctl } for pid=22786 comm="syz.4.4498" path="socket:[74717]" dev="sockfs" ino=74717 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1362.668795][ T30] audit: type=1400 audit(1756956113.877:992): avc: denied { setopt } for pid=22786 comm="syz.4.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1363.967048][ T30] audit: type=1400 audit(1756956114.347:993): avc: denied { kexec_image_load } for pid=22775 comm="syz.2.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1364.039743][ T24] usb 3-1: USB disconnect, device number 86 [ 1364.334130][ T30] audit: type=1400 audit(1756956115.658:994): avc: denied { create } for pid=22795 comm="syz.5.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1364.437324][T22805] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1364.439605][ T30] audit: type=1400 audit(1756956115.668:995): avc: denied { write } for pid=22795 comm="syz.5.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1364.487788][T22801] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1364.494338][T22801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1364.666491][T22801] vhci_hcd vhci_hcd.0: Device attached [ 1364.792533][T22805] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1364.843555][ T24] vhci_hcd: vhci_device speed not set [ 1364.933218][ T24] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 1364.964078][T22809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1365.399275][T22814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1365.409625][T22801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1365.535362][ T30] audit: type=1400 audit(1756956116.908:996): avc: denied { create } for pid=22816 comm="syz.5.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1366.078392][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4504'. [ 1366.105153][T22805] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(16) [ 1366.105697][T22809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1366.111781][T22805] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1366.157876][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4504'. [ 1366.171555][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4504'. [ 1366.183014][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4504'. [ 1366.412611][T22801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1366.426766][T22805] vhci_hcd vhci_hcd.0: Device attached [ 1366.440760][T22818] vhci_hcd: connection closed [ 1366.442402][T22802] vhci_hcd: connection reset by peer [ 1366.456916][ T1164] vhci_hcd: stop threads [ 1366.461868][ T1164] vhci_hcd: release socket [ 1366.595488][ T30] audit: type=1400 audit(1756956117.878:997): avc: denied { module_request } for pid=22813 comm="syz.2.4503" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1366.616204][ T1164] vhci_hcd: disconnect device [ 1367.093315][ T30] audit: type=1400 audit(1756956118.098:998): avc: denied { read } for pid=22825 comm="syz.0.4506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1367.114880][ T1164] vhci_hcd: stop threads [ 1367.119140][ T1164] vhci_hcd: release socket [ 1367.180027][ T1164] vhci_hcd: disconnect device [ 1367.243381][ T30] audit: type=1400 audit(1756956118.638:999): avc: denied { create } for pid=22831 comm="syz.5.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1367.712612][ T978] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1369.486698][ T978] usb 6-1: config 0 has no interfaces? [ 1369.503887][ T978] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1369.585406][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.726021][ T978] usb 6-1: Product: syz [ 1369.730320][ T978] usb 6-1: Manufacturer: syz [ 1369.735062][ T978] usb 6-1: SerialNumber: syz [ 1369.758931][ T30] audit: type=1400 audit(1756956121.029:1000): avc: denied { read write } for pid=22847 comm="syz.4.4511" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1369.759205][ T978] usb 6-1: config 0 descriptor?? [ 1370.501893][ T24] vhci_hcd: vhci_device speed not set [ 1370.548357][ T30] audit: type=1400 audit(1756956121.029:1001): avc: denied { open } for pid=22847 comm="syz.4.4511" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1370.950084][ T30] audit: type=1400 audit(1756956122.339:1002): avc: denied { write } for pid=22858 comm="syz.3.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1372.272913][ T30] audit: type=1400 audit(1756956122.399:1003): avc: denied { setopt } for pid=22858 comm="syz.3.4514" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1373.910482][ T30] audit: type=1400 audit(1756956124.889:1004): avc: denied { mounton } for pid=22865 comm="syz.0.4516" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1373.995910][ T978] usb 6-1: can't set config #0, error -71 [ 1374.037298][ T978] usb 6-1: USB disconnect, device number 26 [ 1374.115844][ T30] audit: type=1400 audit(1756956125.489:1005): avc: denied { create } for pid=22874 comm="syz.0.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1374.246083][ T30] audit: type=1400 audit(1756956125.619:1006): avc: denied { create } for pid=22880 comm="syz.5.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1374.275611][T22881] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4521'. [ 1374.345974][ T30] audit: type=1400 audit(1756956125.639:1007): avc: denied { write } for pid=22874 comm="syz.0.4519" path="socket:[75916]" dev="sockfs" ino=75916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1374.404126][T22885] ªªªªªª: renamed from wg2 (while UP) [ 1374.506569][ T30] audit: type=1400 audit(1756956125.849:1008): avc: denied { create } for pid=22874 comm="syz.0.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1374.618726][ T30] audit: type=1400 audit(1756956125.849:1009): avc: denied { read } for pid=22874 comm="syz.0.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1374.864385][ T30] audit: type=1400 audit(1756956125.929:1010): avc: denied { ioctl } for pid=22880 comm="syz.5.4521" path="socket:[77000]" dev="sockfs" ino=77000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1375.911505][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1376.064827][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1376.074286][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.089223][ T24] usb 6-1: Product: syz [ 1376.111368][ T24] usb 6-1: Manufacturer: syz [ 1376.132406][ T24] usb 6-1: SerialNumber: syz [ 1376.150074][ T30] audit: type=1400 audit(1756956127.529:1011): avc: denied { listen } for pid=22906 comm="syz.2.4527" lport=54997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1376.271889][ T30] audit: type=1400 audit(1756956127.590:1012): avc: denied { accept } for pid=22906 comm="syz.2.4527" lport=54997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1377.046848][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1377.365073][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1377.428233][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1377.504338][ T30] audit: type=1400 audit(1756956128.880:1013): avc: denied { getopt } for pid=22909 comm="syz.3.4528" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1377.554867][ T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1377.646367][ T24] usb 6-1: USB disconnect, device number 27 [ 1379.279265][ T30] audit: type=1400 audit(1756956130.670:1014): avc: denied { connect } for pid=22922 comm="syz.3.4531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1379.553148][ T30] audit: type=1400 audit(1756956130.670:1015): avc: denied { ioctl } for pid=22922 comm="syz.3.4531" path="socket:[76077]" dev="sockfs" ino=76077 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1379.598307][ T30] audit: type=1400 audit(1756956130.710:1016): avc: denied { ioctl } for pid=22922 comm="syz.3.4531" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1379.733755][ T30] audit: type=1400 audit(1756956130.990:1017): avc: denied { read write } for pid=22927 comm="syz.5.4532" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1379.758138][ T30] audit: type=1400 audit(1756956130.990:1018): avc: denied { open } for pid=22927 comm="syz.5.4532" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1379.788292][ T30] audit: type=1400 audit(1756956131.030:1019): avc: denied { read } for pid=22922 comm="syz.3.4531" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1379.815234][ T30] audit: type=1400 audit(1756956131.030:1020): avc: denied { open } for pid=22922 comm="syz.3.4531" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1379.840032][ T30] audit: type=1400 audit(1756956131.030:1021): avc: denied { ioctl } for pid=22922 comm="syz.3.4531" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae6a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1381.251273][ T30] audit: type=1400 audit(1756956131.050:1022): avc: denied { create } for pid=22927 comm="syz.5.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1382.616395][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1382.616408][ T30] audit: type=1400 audit(1756956134.010:1027): avc: denied { ioctl } for pid=22949 comm="syz.2.4537" path="socket:[77070]" dev="sockfs" ino=77070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1382.803362][ T30] audit: type=1400 audit(1756956134.020:1028): avc: denied { bind } for pid=22949 comm="syz.2.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1382.858534][ T30] audit: type=1400 audit(1756956134.020:1029): avc: denied { mounton } for pid=22949 comm="syz.2.4537" path="/proc/3254/task" dev="proc" ino=77073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1382.928916][ T30] audit: type=1400 audit(1756956134.020:1030): avc: denied { mount } for pid=22949 comm="syz.2.4537" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1383.331037][ T30] audit: type=1400 audit(1756956134.650:1031): avc: denied { create } for pid=22961 comm="syz.0.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1384.161203][ T30] audit: type=1400 audit(1756956135.121:1032): avc: denied { create } for pid=22959 comm="syz.4.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1384.402727][ T30] audit: type=1400 audit(1756956135.761:1033): avc: denied { write } for pid=22961 comm="syz.0.4538" name="fib_trie" dev="proc" ino=4026532933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1384.849195][ T30] audit: type=1400 audit(1756956136.191:1034): avc: denied { ioctl } for pid=22967 comm="syz.3.4540" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1387.379716][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1388.360620][ T30] audit: type=1400 audit(1756956139.241:1035): avc: denied { ioctl } for pid=23001 comm="syz.3.4548" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=76181 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1388.905266][ T30] audit: type=1400 audit(1756956139.821:1036): avc: denied { ioctl } for pid=22998 comm="syz.4.4545" path="socket:[76193]" dev="sockfs" ino=76193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1391.359509][ T30] audit: type=1400 audit(1756956142.641:1037): avc: denied { getopt } for pid=23026 comm="syz.2.4555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1392.109158][ T30] audit: type=1400 audit(1756956143.051:1038): avc: denied { read write } for pid=23031 comm="syz.0.4556" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1392.246555][ T30] audit: type=1400 audit(1756956143.051:1039): avc: denied { open } for pid=23031 comm="syz.0.4556" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1393.345222][ T30] audit: type=1400 audit(1756956144.692:1040): avc: denied { bind } for pid=23047 comm="syz.0.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1393.500917][ T30] audit: type=1400 audit(1756956144.702:1041): avc: denied { name_bind } for pid=23047 comm="syz.0.4559" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1393.610712][ T30] audit: type=1400 audit(1756956144.702:1042): avc: denied { node_bind } for pid=23047 comm="syz.0.4559" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1394.000361][ T30] audit: type=1400 audit(1756956144.722:1043): avc: denied { name_connect } for pid=23047 comm="syz.0.4559" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1394.051821][ T30] audit: type=1400 audit(1756956144.742:1044): avc: denied { getopt } for pid=23047 comm="syz.0.4559" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1394.519018][T11605] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1395.268280][ T30] audit: type=1400 audit(1756956145.782:1045): avc: denied { read write } for pid=23058 comm="syz.2.4562" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1395.380479][ T30] audit: type=1400 audit(1756956145.782:1046): avc: denied { open } for pid=23058 comm="syz.2.4562" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1395.464709][ T30] audit: type=1400 audit(1756956146.852:1047): avc: denied { write } for pid=23066 comm="syz.0.4564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1395.680912][T23069] loop2: detected capacity change from 0 to 7 [ 1395.751212][T23069] loop2: p1 p4 [ 1395.768734][T23069] loop2: partition table partially beyond EOD, truncated [ 1395.784461][T11605] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1395.793649][T11605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.803171][T23069] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1395.821127][T11605] usb 6-1: Product: syz [ 1395.826462][T11605] usb 6-1: Manufacturer: syz [ 1395.835534][T11605] usb 6-1: SerialNumber: syz [ 1395.868251][T11605] usb 6-1: config 0 descriptor?? [ 1395.914273][T23069] loop2: p4 start 2495 is beyond EOD, truncated [ 1396.669945][T11605] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1396.695794][T11605] asix 6-1:0.0: probe with driver asix failed with error -32 [ 1397.157628][ T30] audit: type=1326 audit(1756956148.552:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.5.4563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb25938ebe9 code=0x0 [ 1397.180581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1397.703984][ T30] audit: type=1400 audit(1756956148.642:1049): avc: denied { nlmsg_write } for pid=23078 comm="syz.4.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1398.110055][T23085] kvm: kvm [23084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000d000 [ 1398.119473][T23085] kvm: kvm [23084]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1398.131418][T23085] kvm: kvm [23084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4080 [ 1398.221554][ T30] audit: type=1400 audit(1756956149.602:1050): avc: denied { create } for pid=23087 comm="syz.0.4569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1398.564524][T23085] kvm: kvm [23084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4080 [ 1398.581713][ T30] audit: type=1400 audit(1756956149.612:1051): avc: denied { connect } for pid=23087 comm="syz.0.4569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1398.605992][T23085] kvm: kvm [23084]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1398.618385][T23085] kvm: kvm [23084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xd80 [ 1398.629870][ T30] audit: type=1400 audit(1756956149.612:1052): avc: denied { write } for pid=23087 comm="syz.0.4569" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1398.650044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.667363][T23085] kvm: kvm [23084]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc000 [ 1398.769067][ T978] usb 6-1: USB disconnect, device number 28 [ 1398.948452][ T30] audit: type=1400 audit(1756956150.332:1053): avc: denied { read append } for pid=23095 comm="syz.5.4570" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1398.973975][ T30] audit: type=1400 audit(1756956150.332:1054): avc: denied { open } for pid=23095 comm="syz.5.4570" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1398.999077][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.099175][ T30] audit: type=1400 audit(1756956150.412:1055): avc: denied { ioctl } for pid=23095 comm="syz.5.4570" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1399.178789][ T30] audit: type=1400 audit(1756956150.552:1056): avc: denied { write } for pid=23093 comm="syz.0.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1399.198387][ C0] vkms_vblank_simulate: vblank timer overrun [ 1403.657496][ T30] audit: type=1400 audit(1756956155.053:1057): avc: denied { ioctl } for pid=23132 comm="syz.4.4580" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1403.682739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.046185][ T30] audit: type=1400 audit(1756956156.393:1058): avc: denied { create } for pid=23154 comm="syz.4.4586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1405.109885][ T30] audit: type=1400 audit(1756956156.423:1059): avc: denied { connect } for pid=23154 comm="syz.4.4586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1405.815566][T23157] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1407.313510][T23177] bridge_slave_0: left allmulticast mode [ 1407.321679][T23177] bridge_slave_0: left promiscuous mode [ 1407.328442][T23177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.352022][T23177] bridge_slave_1: left allmulticast mode [ 1407.373204][T23177] bridge_slave_1: left promiscuous mode [ 1407.384950][T23177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.433629][ T30] audit: type=1400 audit(1756956158.823:1060): avc: denied { sys_module } for pid=23176 comm="syz.0.4591" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1407.439379][T23177] bond0: (slave bond_slave_0): Releasing backup interface [ 1407.546434][T23177] bond0: (slave bond_slave_1): Releasing backup interface [ 1407.593726][T23177] team0: Port device team_slave_0 removed [ 1407.787364][T23177] team0: Port device team_slave_1 removed [ 1407.885820][T23181] team0: Mode changed to "activebackup" [ 1408.015188][T23178] tipc: Enabled bearer , priority 0 [ 1408.056305][ T30] audit: type=1400 audit(1756956159.443:1061): avc: denied { bind } for pid=23172 comm="syz.2.4590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1408.524643][ T30] audit: type=1400 audit(1756956159.923:1062): avc: denied { block_suspend } for pid=23195 comm="syz.0.4593" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1410.197433][ T30] audit: type=1400 audit(1756956161.223:1063): avc: denied { mount } for pid=23206 comm="syz.4.4596" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1410.528291][ T30] audit: type=1400 audit(1756956161.923:1064): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1413.135680][ T30] audit: type=1400 audit(1756956164.533:1065): avc: denied { mount } for pid=23241 comm="syz.3.4603" name="/" dev="autofs" ino=76698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1413.290003][T23246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=23246 comm=syz.0.4604 [ 1413.638513][T23252] input: syz1 as /devices/virtual/input/input49 [ 1413.870522][ T30] audit: type=1400 audit(1756956165.274:1066): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1414.875004][ T5922] IPVS: starting estimator thread 0... [ 1415.022242][T23265] IPVS: using max 48 ests per chain, 115200 per kthread [ 1415.563370][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.202386][ T4234] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1416.246219][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1416.707530][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1416.778173][ T30] audit: type=1400 audit(1756956168.184:1067): avc: denied { set_context_mgr } for pid=23275 comm="syz.4.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1416.798591][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.800706][T23276] binder: 23275:23276 ioctl c0306201 200000000080 returned -14 [ 1416.857808][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1416.908123][ T30] audit: type=1400 audit(1756956168.304:1068): avc: denied { write } for pid=23275 comm="syz.4.4610" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1417.118633][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1417.237550][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1417.247411][ T30] audit: type=1400 audit(1756956168.314:1069): avc: denied { map } for pid=23275 comm="syz.4.4610" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1417.738210][T23281] block device autoloading is deprecated and will be removed. [ 1417.803361][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1417.840004][ T30] audit: type=1400 audit(1756956168.314:1070): avc: denied { call } for pid=23275 comm="syz.4.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1417.868384][ T30] audit: type=1400 audit(1756956168.734:1071): avc: denied { create } for pid=23277 comm="syz.0.4611" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1417.889959][ T30] audit: type=1400 audit(1756956168.734:1072): avc: denied { write } for pid=23277 comm="syz.0.4611" name="file0" dev="tmpfs" ino=4936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1417.912894][ T30] audit: type=1400 audit(1756956168.734:1073): avc: denied { open } for pid=23277 comm="syz.0.4611" path="/942/file0" dev="tmpfs" ino=4936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1418.005664][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1418.333937][ T30] audit: type=1400 audit(1756956169.194:1074): avc: denied { unlink } for pid=5846 comm="syz-executor" name="file0" dev="tmpfs" ino=4936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1418.972256][ T30] audit: type=1400 audit(1756956169.194:1075): avc: denied { ioctl } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=5272 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1419.964961][T23299] lo speed is unknown, defaulting to 1000 [ 1420.128709][ T30] audit: type=1400 audit(1756956171.514:1076): avc: denied { bind } for pid=23298 comm="syz.4.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1421.377548][ T6634] net_ratelimit: 7 callbacks suppressed [ 1421.377562][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1422.093207][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1422.094063][ T30] audit: type=1400 audit(1756956173.104:1080): avc: denied { write } for pid=23315 comm="syz.0.4621" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1422.230665][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.238458][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.320640][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1422.552764][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1422.694056][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1422.998791][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1423.285922][ T30] audit: type=1400 audit(1756956174.634:1081): avc: denied { unlink } for pid=23328 comm="syz.4.4624" name="#4e" dev="tmpfs" ino=5038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1423.426602][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1423.478341][ T30] audit: type=1400 audit(1756956174.654:1082): avc: denied { mount } for pid=23328 comm="syz.4.4624" name="/" dev="overlay" ino=5033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1423.748555][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1423.940018][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1423.993040][T23336] SELinux: failed to load policy [ 1424.406678][ T30] audit: type=1400 audit(1756956175.334:1083): avc: denied { load_policy } for pid=23332 comm="syz.3.4625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1424.411177][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1424.589372][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1424.629372][ T30] audit: type=1400 audit(1756956176.024:1084): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1424.637726][ T30] audit: type=1400 audit(1756956176.044:1085): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1424.772051][T23334] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1426.459216][ T49] net_ratelimit: 9 callbacks suppressed [ 1426.459232][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1426.712510][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1426.900160][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1427.026731][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1427.231091][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1427.815882][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1427.957662][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1428.256436][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1428.380673][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1428.940937][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1429.536311][ T30] audit: type=1400 audit(1756956180.935:1086): avc: denied { read } for pid=23383 comm="syz.4.4637" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1429.536519][ T30] audit: type=1400 audit(1756956180.935:1087): avc: denied { open } for pid=23383 comm="syz.4.4637" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1429.536643][ T30] audit: type=1400 audit(1756956180.935:1088): avc: denied { ioctl } for pid=23383 comm="syz.4.4637" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1429.670527][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.323188][ T30] audit: type=1326 audit(1756956181.725:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23390 comm="syz.2.4638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd57c78ebe9 code=0x0 [ 1430.783216][T23406] fuse: Unknown parameter 'grou00000000000000000000' [ 1431.490476][ T49] net_ratelimit: 11 callbacks suppressed [ 1431.490498][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1431.636766][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1431.792183][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1431.950327][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1432.412424][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1432.526187][ T30] audit: type=1400 audit(1756956183.915:1090): avc: denied { mounton } for pid=23417 comm="syz.3.4645" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1432.565778][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1432.750833][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1432.831044][ T30] audit: type=1400 audit(1756956183.915:1091): avc: denied { mount } for pid=23417 comm="syz.3.4645" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1432.853417][ C1] vkms_vblank_simulate: vblank timer overrun [ 1432.881439][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1433.151396][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1433.267941][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1433.467575][T23428] : renamed from bridge_slave_0 [ 1433.586966][ T30] audit: type=1400 audit(1756956184.955:1092): avc: denied { write } for pid=23425 comm="syz.5.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1433.925636][ T30] audit: type=1400 audit(1756956185.145:1093): avc: denied { create } for pid=23425 comm="syz.5.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1434.452070][T23439] overlayfs: failed to resolve './file0': -2 [ 1435.024040][ T30] audit: type=1400 audit(1756956185.955:1094): avc: denied { create } for pid=23437 comm="syz.0.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1435.061805][T23444] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4661'. [ 1435.445993][ T30] audit: type=1400 audit(1756956185.965:1095): avc: denied { write } for pid=23437 comm="syz.0.4650" path="socket:[78959]" dev="sockfs" ino=78959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1435.470258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.924359][ T30] audit: type=1400 audit(1756956185.985:1096): avc: denied { read } for pid=23437 comm="syz.0.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1436.968016][ T36] net_ratelimit: 14 callbacks suppressed [ 1436.968036][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1437.196092][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1437.258719][T23467] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1437.266704][T23467] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1437.275728][T23467] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1437.283518][T23467] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1437.417907][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1437.768444][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1437.889544][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1438.219405][ T30] audit: type=1400 audit(1756956189.625:1097): avc: denied { read } for pid=23475 comm="syz.3.4659" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1438.295910][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1438.450135][ T30] audit: type=1400 audit(1756956189.655:1098): avc: denied { open } for pid=23475 comm="syz.3.4659" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1438.566735][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1438.641489][ T30] audit: type=1400 audit(1756956189.995:1099): avc: denied { read } for pid=23480 comm="syz.5.4660" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1438.675870][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1438.723862][ T30] audit: type=1400 audit(1756956189.995:1100): avc: denied { open } for pid=23480 comm="syz.5.4660" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1438.769560][T23487] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.4660'. [ 1438.791424][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1438.843173][ T30] audit: type=1400 audit(1756956190.045:1101): avc: denied { firmware_load } for pid=4234 comm="kworker/u8:7" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1438.868491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.043987][T23491] binder: BINDER_SET_CONTEXT_MGR already set [ 1439.050463][T23491] binder: 23488:23491 ioctl 4018620d 200000000040 returned -16 [ 1439.281606][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1439.707312][T23485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1440.346524][T23485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1440.508767][T23485] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1440.685084][T23485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1440.697999][T23485] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1441.811106][ T5169] Bluetooth: hci1: command 0x0c1a tx timeout [ 1442.007423][ T13] net_ratelimit: 8 callbacks suppressed [ 1442.007438][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1442.056713][ T30] audit: type=1400 audit(1756956193.465:1102): avc: denied { execute } for pid=23500 comm="syz.4.4665" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=78159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1442.127617][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1442.260794][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1442.397250][ T5169] Bluetooth: hci2: command 0x0c1a tx timeout [ 1442.409613][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1442.545571][ T5169] Bluetooth: hci4: command 0x0405 tx timeout [ 1442.564223][ T30] audit: type=1400 audit(1756956193.965:1103): avc: denied { accept } for pid=23497 comm="syz.0.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1442.606613][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1442.782795][ T5169] Bluetooth: hci3: command 0x0406 tx timeout [ 1442.794076][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1442.906101][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1443.042634][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 1443.256158][ T30] audit: type=1400 audit(1756956194.325:1104): avc: denied { create } for pid=23515 comm="syz.2.4668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1443.279175][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1443.513470][ T30] audit: type=1400 audit(1756956194.915:1105): avc: denied { write } for pid=23518 comm="syz.0.4669" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1443.546227][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1444.155259][ T30] audit: type=1400 audit(1756956195.245:1106): avc: denied { create } for pid=23524 comm="syz.4.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1444.174960][ T30] audit: type=1400 audit(1756956195.315:1107): avc: denied { setopt } for pid=23524 comm="syz.4.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1444.232932][T23523] : Can't lookup blockdev [ 1444.349396][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1444.716182][T23523] bridge0: entered promiscuous mode [ 1444.724841][T23523] macsec1: entered promiscuous mode [ 1444.738901][T23523] bridge0: port 1(macsec1) entered blocking state [ 1444.748627][T23523] bridge0: port 1(macsec1) entered disabled state [ 1444.756577][T23523] macsec1: entered allmulticast mode [ 1444.761888][T23523] bridge0: entered allmulticast mode [ 1444.826210][T23523] macsec1: left allmulticast mode [ 1444.831391][T23523] bridge0: left allmulticast mode [ 1444.865474][T17128] Bluetooth: hci3: command 0x0406 tx timeout [ 1444.892200][T23523] bridge0: left promiscuous mode [ 1445.106540][T17128] Bluetooth: hci5: command 0x1003 tx timeout [ 1445.107746][ T5169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1445.625951][T23539] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1445.633944][T23539] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 1445.643292][T23539] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1445.651291][T23539] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 1446.227058][ T30] audit: type=1400 audit(1756956197.525:1108): avc: denied { getopt } for pid=23543 comm="syz.0.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1446.697990][T23552] netlink: 'syz.3.4675': attribute type 12 has an invalid length. [ 1446.705936][T23552] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.4675'. [ 1447.208389][ T36] net_ratelimit: 11 callbacks suppressed [ 1447.208407][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1448.254972][ T30] audit: type=1400 audit(1756956198.996:1109): avc: denied { ioctl } for pid=23555 comm="syz.2.4676" path="socket:[78266]" dev="sockfs" ino=78266 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1448.499508][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1449.897329][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1449.909266][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1450.555737][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1451.126616][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1451.259548][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1451.806387][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1452.598391][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1452.625156][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1452.756974][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1452.927532][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1452.975039][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1452.983209][ T24] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1453.006121][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.066494][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1453.255563][ T24] usb 6-1: config 0 has no interface number 0 [ 1453.261727][ T24] usb 6-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1453.325016][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.356230][ T24] usb 6-1: config 0 descriptor?? [ 1453.415275][ T24] usb 6-1: Found UVC 0.00 device (0bd3:05f4) [ 1453.432473][T17128] Bluetooth: hci3: command 0x0406 tx timeout [ 1453.517760][ T24] usb 6-1: No valid video chain found. [ 1453.669262][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1453.803539][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1454.417866][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1454.651241][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1454.785343][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1454.907275][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1455.745598][ T5901] usb 6-1: USB disconnect, device number 29 [ 1457.706194][T19217] net_ratelimit: 10 callbacks suppressed [ 1457.706209][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1457.844831][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1457.955099][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1458.065350][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1458.243142][T23654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4698'. [ 1458.284602][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1458.506810][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1458.656963][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1458.776128][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1458.905503][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1459.166011][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1459.337778][T23664] fuse: Unknown parameter 'group_i00000000000000000000' [ 1459.402910][ T30] audit: type=1400 audit(1756956210.756:1110): avc: denied { read } for pid=23659 comm="syz.0.4702" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1459.533552][ T30] audit: type=1400 audit(1756956210.756:1111): avc: denied { open } for pid=23659 comm="syz.0.4702" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1460.135061][T23675] fuse: Bad value for 'fd' [ 1460.799954][ T30] audit: type=1400 audit(1756956212.126:1112): avc: denied { ioctl } for pid=23680 comm="syz.2.4704" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1460.825629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1462.182675][ T30] audit: type=1400 audit(1756956213.586:1113): avc: denied { bind } for pid=23695 comm="syz.4.4709" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1462.293378][T23701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4709'. [ 1462.584691][ T30] audit: type=1400 audit(1756956213.586:1114): avc: denied { name_bind } for pid=23695 comm="syz.4.4709" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1462.609807][ T30] audit: type=1400 audit(1756956213.586:1115): avc: denied { node_bind } for pid=23695 comm="syz.4.4709" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1462.740197][T19212] net_ratelimit: 20 callbacks suppressed [ 1462.740212][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1463.008354][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1463.247332][T23707] /dev/nullb0: Can't open blockdev [ 1463.434724][ T30] audit: type=1400 audit(1756956214.776:1116): avc: denied { write } for pid=23704 comm="syz.5.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1463.965993][T23707] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1464.287168][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1464.425254][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1464.605610][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1464.745083][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1464.884528][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1465.155104][ T4234] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1465.211159][ T30] audit: type=1400 audit(1756956216.616:1117): avc: denied { getopt } for pid=23718 comm="syz.2.4714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1465.448461][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1465.584712][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1465.695558][T23731] libceph: resolve '4..' (ret=-3): failed [ 1466.280942][T23738] IPv6: NLM_F_CREATE should be specified when creating new route [ 1466.424496][ T5922] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1466.574587][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1466.899304][ T5922] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1467.034554][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1467.192686][ T5922] usb usb4-port1: attempt power cycle [ 1467.590618][ T30] audit: type=1400 audit(1756956218.936:1118): avc: denied { map } for pid=23746 comm="syz.2.4720" path="socket:[79470]" dev="sockfs" ino=79470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1467.635156][ T5922] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1467.718355][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1467.746337][ T30] audit: type=1400 audit(1756956218.936:1119): avc: denied { accept } for pid=23746 comm="syz.2.4720" path="socket:[79470]" dev="sockfs" ino=79470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1467.881022][T19212] net_ratelimit: 15 callbacks suppressed [ 1467.881044][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.604129][ T30] audit: type=1400 audit(1756956218.956:1120): avc: denied { setopt } for pid=23746 comm="syz.2.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1468.664548][ T5922] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1468.707082][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.938494][ T5922] usb 4-1: device not accepting address 104, error -71 [ 1469.048168][ T5922] usb usb4-port1: unable to enumerate USB device [ 1469.084370][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1469.284050][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1469.394533][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1469.545925][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1469.695313][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1469.928504][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1470.216939][T23782] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1470.230658][T23782] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1470.275951][ T30] audit: type=1400 audit(1756956221.636:1121): avc: denied { firmware_load } for pid=23778 comm="syz.0.4726" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1470.533857][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1470.654457][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1472.095813][T23800] netlink: 'syz.2.4731': attribute type 12 has an invalid length. [ 1472.103687][T23800] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1472.539088][T23802] netlink: 'syz.5.4732': attribute type 9 has an invalid length. [ 1472.892607][T19212] net_ratelimit: 10 callbacks suppressed [ 1472.892629][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1472.966125][T23809] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1473.084653][T23813] xt_policy: too many policy elements [ 1473.557020][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.702290][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4735'. [ 1473.768867][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1473.964260][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1474.221586][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1474.244371][T23795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1474.339351][ T30] audit: type=1400 audit(1756956225.737:1122): avc: denied { append } for pid=23818 comm="syz.2.4738" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1474.374686][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1474.494905][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1474.744375][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1475.098684][T23819] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1475.174493][T23819] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1475.180656][T23819] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1475.274803][T23819] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1475.333330][T23812] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1476.304189][T17128] Bluetooth: hci1: command 0x0c1a tx timeout [ 1476.353435][T23843] : renamed from bridge_slave_0 (while UP) [ 1478.671786][ T49] net_ratelimit: 13 callbacks suppressed [ 1478.671805][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1478.683925][T17128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1478.691301][T17128] Bluetooth: hci4: command 0x0405 tx timeout [ 1478.697469][T17128] Bluetooth: hci3: command 0x0406 tx timeout [ 1479.024280][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1479.149239][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1479.410458][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1479.600221][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1480.643340][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1481.113256][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1481.234115][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1481.354168][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1481.845233][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1482.912396][T23898] fuse: Unknown parameter 'user_id00000000000000000000' [ 1483.469093][T23908] netlink: 'syz.0.4755': attribute type 12 has an invalid length. [ 1483.477032][T23908] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1484.135916][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.142324][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.152604][ T13] net_ratelimit: 5 callbacks suppressed [ 1484.152622][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1484.344466][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1484.818666][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1485.004111][ T6634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1485.453114][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1485.586717][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1485.708940][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1485.753428][T23923] [U] [ 1485.756900][T23923] [U] [ 1485.759595][T23923] [U] [ 1485.762259][T23923] [U] [ 1485.764921][T23923] [U] [ 1485.767596][T23923] [U] [ 1485.770334][T23923] [U] [ 1485.773013][T23923] [U] [ 1485.776219][T23923] [U] [ 1485.778914][T23923] [U] [ 1485.781615][T23923] [U] [ 1486.082265][ T30] audit: type=1400 audit(1756956237.477:1123): avc: denied { connect } for pid=23924 comm="syz.0.4762" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1486.288602][ T2908] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1486.312004][T23921] [U] [ 1486.434581][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1486.553976][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1487.210730][ T30] audit: type=1400 audit(1756956238.227:1124): avc: denied { setopt } for pid=23931 comm="syz.5.4764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1487.383491][T23943] binder: BINDER_SET_CONTEXT_MGR already set [ 1487.389671][T23943] binder: 23935:23943 ioctl 4018620d 200000000040 returned -16 [ 1488.726550][T23948] delete_channel: no stack [ 1488.966108][T23963] /dev/nullb0: Can't open blockdev [ 1489.366933][ T12] net_ratelimit: 9 callbacks suppressed [ 1489.366955][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1489.427873][ T30] audit: type=1400 audit(1756956240.827:1125): avc: denied { setopt } for pid=23965 comm="syz.0.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1489.515605][T23967] ptrace attach of "./syz-executor exec"[15240] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  \x07 8  G\x0b \x09   € €  @ /dev/kvm \x5c"[23967] [ 1489.594001][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1489.604136][ T30] audit: type=1400 audit(1756956240.917:1126): avc: denied { ioctl } for pid=23961 comm="syz.5.4768" path="socket:[79834]" dev="sockfs" ino=79834 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1489.709027][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1489.734067][ T30] audit: type=1400 audit(1756956241.127:1127): avc: denied { getopt } for pid=23965 comm="syz.0.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1489.844844][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1490.547393][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1490.767339][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1490.795217][ T30] audit: type=1400 audit(1756956242.197:1128): avc: denied { append } for pid=23975 comm="syz.2.4773" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1491.026977][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1491.593790][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1491.753779][ T30] audit: type=1400 audit(1756956243.047:1129): avc: denied { map } for pid=23975 comm="syz.2.4773" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1491.778833][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1492.004486][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1492.994491][ T5908] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1494.103716][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 1494.167179][ T5908] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1494.628852][ T5908] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1494.631637][ T12] net_ratelimit: 8 callbacks suppressed [ 1494.631658][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1494.638081][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.638103][ T5908] usb 4-1: Product: syz [ 1494.638118][ T5908] usb 4-1: Manufacturer: syz [ 1494.638132][ T5908] usb 4-1: SerialNumber: syz [ 1494.683679][ T30] audit: type=1400 audit(1756956245.657:1130): avc: denied { mount } for pid=24008 comm="syz.5.4780" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1494.706666][ T5908] usb 4-1: config 0 descriptor?? [ 1494.818602][ T30] audit: type=1400 audit(1756956245.667:1131): avc: denied { write } for pid=24008 comm="syz.5.4780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1495.492284][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1495.622039][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1496.174481][ T24] usb 4-1: USB disconnect, device number 105 [ 1496.424703][T19217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1496.629645][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1496.728885][ T30] audit: type=1400 audit(1756956248.117:1132): avc: denied { connect } for pid=24028 comm="syz.3.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1496.763808][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1497.137488][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1497.354751][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1497.402284][T24038] ptrace attach of "./syz-executor exec"[15240] was attempted by "./syz-executor exec"[24038] [ 1497.474660][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1497.644015][T19212] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1498.455522][T24050] serio: Serial port ptm0 [ 1498.698893][ T30] audit: type=1400 audit(1756956249.807:1133): avc: denied { setopt } for pid=24046 comm="syz.3.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1499.023967][ C1] ================================================================== [ 1499.032061][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x45a/0x4d0 [ 1499.040050][ C1] Read of size 2 at addr ffff888034ff8c2a by task syz.2.4786/24032 [ 1499.047934][ C1] [ 1499.050248][ C1] CPU: 1 UID: 0 PID: 24032 Comm: syz.2.4786 Not tainted syzkaller #0 PREEMPT(full) [ 1499.050272][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1499.050285][ C1] Call Trace: [ 1499.050295][ C1] [ 1499.050303][ C1] dump_stack_lvl+0x116/0x1f0 [ 1499.050329][ C1] print_report+0xcd/0x630 [ 1499.050353][ C1] ? __virt_addr_valid+0x81/0x610 [ 1499.050378][ C1] ? __phys_addr+0xe8/0x180 [ 1499.050404][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 1499.050431][ C1] kasan_report+0xe0/0x110 [ 1499.050453][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 1499.050482][ C1] rose_timer_expiry+0x45a/0x4d0 [ 1499.050510][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1499.050536][ C1] call_timer_fn+0x197/0x620 [ 1499.050566][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1499.050603][ C1] ? rcu_is_watching+0x12/0xc0 [ 1499.050626][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1499.050653][ C1] __run_timers+0x6ef/0x960 [ 1499.050683][ C1] ? __pfx___run_timers+0x10/0x10 [ 1499.050718][ C1] run_timer_base+0x114/0x190 [ 1499.050746][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1499.050774][ C1] ? rcu_is_watching+0x12/0xc0 [ 1499.050798][ C1] run_timer_softirq+0x1a/0x40 [ 1499.050825][ C1] handle_softirqs+0x216/0x8e0 [ 1499.050850][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1499.050876][ C1] __irq_exit_rcu+0x109/0x170 [ 1499.050898][ C1] irq_exit_rcu+0x9/0x30 [ 1499.050920][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1499.050940][ C1] [ 1499.050947][ C1] [ 1499.050954][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1499.050976][ C1] RIP: 0010:__schedule+0x1198/0x5de0 [ 1499.050996][ C1] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 83 43 00 00 49 89 5e 10 48 8b bd 10 ff ff ff 48 89 de e8 f0 7d 97 f5 48 89 c7 e8 38 76 f4 f5 <8b> bd 08 ff ff ff e8 ed 35 f4 f5 48 8b b5 90 fe ff ff 48 b8 00 00 [ 1499.051015][ C1] RSP: 0000:ffffc900053d7d48 EFLAGS: 00000206 [ 1499.051033][ C1] RAX: 00000000000052ed RBX: ffff88805c664880 RCX: ffffffff81c3721f [ 1499.051046][ C1] RDX: 0000000000000000 RSI: ffffffff8de50330 RDI: ffffffff8c162900 [ 1499.051059][ C1] RBP: ffffc900053d7f00 R08: 0000000000000001 R09: 0000000000000001 [ 1499.051071][ C1] R10: ffffffff90ab4c97 R11: 0000000000000000 R12: 0000000000000000 [ 1499.051083][ C1] R13: 0000000000000000 R14: ffff8880b853a300 R15: ffff88805c664880 [ 1499.051099][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1499.051124][ C1] ? __schedule+0x3ff4/0x5de0 [ 1499.051149][ C1] ? __pfx___schedule+0x10/0x10 [ 1499.051167][ C1] ? rcu_is_watching+0x12/0xc0 [ 1499.051188][ C1] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1499.051219][ C1] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1499.051248][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1499.051279][ C1] schedule+0xe7/0x3a0 [ 1499.051297][ C1] irqentry_exit_to_user_mode+0xcf/0x270 [ 1499.051319][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1499.051339][ C1] RIP: 0033:0x7fd57c668035 [ 1499.051353][ C1] Code: 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 <48> 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b 49 8b 14 24 eb bf 48 39 [ 1499.051371][ C1] RSP: 002b:00007ffcac935420 EFLAGS: 00000287 [ 1499.051386][ C1] RAX: 00007fd57bae74c0 RBX: 00007fd57badfee8 RCX: ffffffff81f68fc0 [ 1499.051399][ C1] RDX: ffffffff81f68ede RSI: ffffffff81f68e48 RDI: 00007fd57bae8540 [ 1499.051413][ C1] RBP: 00007fd57badec70 R08: 00007fd57bae38d0 R09: 00007fd57c9a2000 [ 1499.051426][ C1] R10: 00007fd57b9fb008 R11: 0000000000000010 R12: 00007fd57badec68 [ 1499.051439][ C1] R13: 000000000000001c R14: 00007ffcac9355a8 R15: 00007fd57b9fb008 [ 1499.051455][ C1] ? lru_gen_add_folio+0x1f0/0xef0 [ 1499.051475][ C1] ? lru_gen_add_folio+0x10e/0xef0 [ 1499.051494][ C1] ? lru_gen_add_folio+0x78/0xef0 [ 1499.051515][ C1] [ 1499.051522][ C1] [ 1499.421039][ C1] Allocated by task 5218: [ 1499.425346][ C1] kasan_save_stack+0x33/0x60 [ 1499.430010][ C1] kasan_save_track+0x14/0x30 [ 1499.434677][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1499.439243][ C1] kernfs_fop_open+0x244/0xda0 [ 1499.443983][ C1] do_dentry_open+0x97f/0x1530 [ 1499.448813][ C1] vfs_open+0x82/0x3f0 [ 1499.452862][ C1] path_openat+0x1de4/0x2cb0 [ 1499.457431][ C1] do_filp_open+0x20b/0x470 [ 1499.461912][ C1] do_sys_openat2+0x11b/0x1d0 [ 1499.466575][ C1] __x64_sys_openat+0x174/0x210 [ 1499.471409][ C1] do_syscall_64+0xcd/0x4c0 [ 1499.475893][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.481767][ C1] [ 1499.484068][ C1] Freed by task 5218: [ 1499.488021][ C1] kasan_save_stack+0x33/0x60 [ 1499.492675][ C1] kasan_save_track+0x14/0x30 [ 1499.497346][ C1] kasan_save_free_info+0x3b/0x60 [ 1499.502367][ C1] __kasan_slab_free+0x60/0x70 [ 1499.507107][ C1] kfree+0x2b4/0x4d0 [ 1499.511005][ C1] kernfs_fop_release+0x12c/0x1e0 [ 1499.516016][ C1] __fput+0x402/0xb70 [ 1499.519993][ C1] fput_close_sync+0x118/0x210 [ 1499.524761][ C1] __x64_sys_close+0x8b/0x120 [ 1499.529421][ C1] do_syscall_64+0xcd/0x4c0 [ 1499.533902][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.539773][ C1] [ 1499.542101][ C1] The buggy address belongs to the object at ffff888034ff8c00 [ 1499.542101][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1499.556129][ C1] The buggy address is located 42 bytes inside of [ 1499.556129][ C1] freed 512-byte region [ffff888034ff8c00, ffff888034ff8e00) [ 1499.569815][ C1] [ 1499.572119][ C1] The buggy address belongs to the physical page: [ 1499.578588][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34ff8 [ 1499.587325][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1499.595830][ C1] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1499.603699][ C1] page_type: f5(slab) [ 1499.607660][ C1] raw: 00fff00000000040 ffff88801b841c80 ffffea00008fed00 dead000000000003 [ 1499.616223][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1499.624801][ C1] head: 00fff00000000040 ffff88801b841c80 ffffea00008fed00 dead000000000003 [ 1499.633460][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1499.642112][ C1] head: 00fff00000000002 ffffea0000d3fe01 00000000ffffffff 00000000ffffffff [ 1499.651227][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1499.659882][ C1] page dumped because: kasan: bad access detected [ 1499.666269][ C1] page_owner tracks the page as allocated [ 1499.671957][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5218, tgid 5218 (udevd), ts 27002500037, free_ts 25920563434 [ 1499.692686][ C1] post_alloc_hook+0x1c0/0x230 [ 1499.697445][ C1] get_page_from_freelist+0x132b/0x38e0 [ 1499.702965][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1499.708835][ C1] alloc_pages_mpol+0x1fb/0x550 [ 1499.713780][ C1] new_slab+0x247/0x330 [ 1499.717926][ C1] ___slab_alloc+0xcf2/0x1740 [ 1499.722585][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 1499.727942][ C1] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1499.733221][ C1] kernfs_fop_open+0x244/0xda0 [ 1499.737962][ C1] do_dentry_open+0x97f/0x1530 [ 1499.742736][ C1] vfs_open+0x82/0x3f0 [ 1499.746785][ C1] path_openat+0x1de4/0x2cb0 [ 1499.751353][ C1] do_filp_open+0x20b/0x470 [ 1499.755853][ C1] do_sys_openat2+0x11b/0x1d0 [ 1499.760509][ C1] __x64_sys_openat+0x174/0x210 [ 1499.765342][ C1] do_syscall_64+0xcd/0x4c0 [ 1499.769823][ C1] page last free pid 5231 tgid 5231 stack trace: [ 1499.776120][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 1499.781300][ C1] qlist_free_all+0x4d/0x120 [ 1499.785868][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 1499.791309][ C1] __kasan_slab_alloc+0x69/0x90 [ 1499.796140][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1499.801575][ C1] getname_flags.part.0+0x4c/0x550 [ 1499.806669][ C1] getname_flags+0x93/0xf0 [ 1499.811060][ C1] do_readlinkat+0xb4/0x3a0 [ 1499.815559][ C1] __x64_sys_readlink+0x78/0xc0 [ 1499.820391][ C1] do_syscall_64+0xcd/0x4c0 [ 1499.824873][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.830742][ C1] [ 1499.833050][ C1] Memory state around the buggy address: [ 1499.838667][ C1] ffff888034ff8b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1499.846701][ C1] ffff888034ff8b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1499.855432][ C1] >ffff888034ff8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.863468][ C1] ^ [ 1499.868817][ C1] ffff888034ff8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.876851][ C1] ffff888034ff8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1499.884883][ C1] ================================================================== [ 1499.893020][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1499.900208][ C1] CPU: 1 UID: 0 PID: 24032 Comm: syz.2.4786 Not tainted syzkaller #0 PREEMPT(full) [ 1499.909561][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1499.919596][ C1] Call Trace: [ 1499.922853][ C1] [ 1499.925681][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1499.930259][ C1] vpanic+0x6e8/0x7a0 [ 1499.934243][ C1] ? handle_edge_irq+0x196/0x9e0 [ 1499.939171][ C1] ? __pfx_vpanic+0x10/0x10 [ 1499.943672][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 1499.948762][ C1] panic+0xca/0xd0 [ 1499.952463][ C1] ? __pfx_panic+0x10/0x10 [ 1499.956857][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1499.961939][ C1] check_panic_on_warn+0xab/0xb0 [ 1499.966847][ C1] end_report+0x107/0x170 [ 1499.971153][ C1] kasan_report+0xee/0x110 [ 1499.975544][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 1499.980642][ C1] rose_timer_expiry+0x45a/0x4d0 [ 1499.985557][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1499.990997][ C1] call_timer_fn+0x197/0x620 [ 1499.995569][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1500.000667][ C1] ? rcu_is_watching+0x12/0xc0 [ 1500.005411][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1500.010844][ C1] __run_timers+0x6ef/0x960 [ 1500.015321][ C1] ? __pfx___run_timers+0x10/0x10 [ 1500.020343][ C1] run_timer_base+0x114/0x190 [ 1500.025027][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1500.030308][ C1] ? rcu_is_watching+0x12/0xc0 [ 1500.035079][ C1] run_timer_softirq+0x1a/0x40 [ 1500.039918][ C1] handle_softirqs+0x216/0x8e0 [ 1500.044684][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1500.049974][ C1] __irq_exit_rcu+0x109/0x170 [ 1500.054637][ C1] irq_exit_rcu+0x9/0x30 [ 1500.058860][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1500.064464][ C1] [ 1500.067367][ C1] [ 1500.070279][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1500.076315][ C1] RIP: 0010:__schedule+0x1198/0x5de0 [ 1500.081665][ C1] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 83 43 00 00 49 89 5e 10 48 8b bd 10 ff ff ff 48 89 de e8 f0 7d 97 f5 48 89 c7 e8 38 76 f4 f5 <8b> bd 08 ff ff ff e8 ed 35 f4 f5 48 8b b5 90 fe ff ff 48 b8 00 00 [ 1500.101261][ C1] RSP: 0000:ffffc900053d7d48 EFLAGS: 00000206 [ 1500.107326][ C1] RAX: 00000000000052ed RBX: ffff88805c664880 RCX: ffffffff81c3721f [ 1500.115636][ C1] RDX: 0000000000000000 RSI: ffffffff8de50330 RDI: ffffffff8c162900 [ 1500.123591][ C1] RBP: ffffc900053d7f00 R08: 0000000000000001 R09: 0000000000000001 [ 1500.131540][ C1] R10: ffffffff90ab4c97 R11: 0000000000000000 R12: 0000000000000000 [ 1500.139482][ C1] R13: 0000000000000000 R14: ffff8880b853a300 R15: ffff88805c664880 [ 1500.147436][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1500.153415][ C1] ? __schedule+0x3ff4/0x5de0 [ 1500.158102][ C1] ? __pfx___schedule+0x10/0x10 [ 1500.162931][ C1] ? rcu_is_watching+0x12/0xc0 [ 1500.167679][ C1] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1500.173733][ C1] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1500.180120][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1500.186162][ C1] schedule+0xe7/0x3a0 [ 1500.190201][ C1] irqentry_exit_to_user_mode+0xcf/0x270 [ 1500.195812][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1500.201261][ C1] RIP: 0033:0x7fd57c668035 [ 1500.205649][ C1] Code: 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 <48> 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b 49 8b 14 24 eb bf 48 39 [ 1500.225227][ C1] RSP: 002b:00007ffcac935420 EFLAGS: 00000287 [ 1500.231264][ C1] RAX: 00007fd57bae74c0 RBX: 00007fd57badfee8 RCX: ffffffff81f68fc0 [ 1500.239205][ C1] RDX: ffffffff81f68ede RSI: ffffffff81f68e48 RDI: 00007fd57bae8540 [ 1500.247147][ C1] RBP: 00007fd57badec70 R08: 00007fd57bae38d0 R09: 00007fd57c9a2000 [ 1500.255090][ C1] R10: 00007fd57b9fb008 R11: 0000000000000010 R12: 00007fd57badec68 [ 1500.263029][ C1] R13: 000000000000001c R14: 00007ffcac9355a8 R15: 00007fd57b9fb008 [ 1500.270971][ C1] ? lru_gen_add_folio+0x1f0/0xef0 [ 1500.276053][ C1] ? lru_gen_add_folio+0x10e/0xef0 [ 1500.281139][ C1] ? lru_gen_add_folio+0x78/0xef0 [ 1500.286134][ C1] [ 1500.289340][ C1] Kernel Offset: disabled [ 1500.293638][ C1] Rebooting in 86400 seconds..