last executing test programs: 5m33.098922165s ago: executing program 4 (id=1563): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x4, 0x1, 0x9ee, 0x7ac, 0x9, 0x9, 0x100, 0x6, 0x100fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) 5m28.854493292s ago: executing program 4 (id=1585): add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) syz_clone(0x4240400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000001200)="00000000de3cf4ea3d7947b2d9", 0xd, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x3, 0x9, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe92, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x0, 0xa, 0x6, 0x9, 0x30, 0xffffffffffffffe7}, @exit]}, &(0x7f0000001300)='syzkaller\x00', 0x2, 0x78, &(0x7f0000001340)=""/120, 0x41100, 0x72, '\x00', r1, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001480)=[{0x1, 0x3, 0xb, 0x6}, {0x5, 0x2, 0xe, 0x4}, {0x3, 0x1, 0x8, 0x2}, {0x1, 0x5, 0x8, 0x5}, {0x3, 0x3, 0xf, 0x6}, {0x5, 0x1, 0x10, 0xa}, {0x0, 0x4, 0x1, 0x9}, {0x3, 0x2, 0xe, 0xa}, {0x4, 0x4, 0x7}], 0x10, 0xb}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote}}}}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001080)={[0xffffffffffffffa1]}, 0x8, 0x0) 5m28.641529935s ago: executing program 4 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x1, 0x3a5) semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f0000000340)=""/217) 5m27.608156347s ago: executing program 4 (id=1591): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 5m26.629458619s ago: executing program 4 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 5m24.450052812s ago: executing program 4 (id=1599): unshare(0x62040200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e1c, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 5m8.762415955s ago: executing program 32 (id=1599): unshare(0x62040200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e1c, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 28.579179024s ago: executing program 5 (id=2456): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x20000, 0x7e, 0xffffdfff, 0x0, 0x0, 0x1}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5bc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(0x3) r3 = socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) 25.826677021s ago: executing program 5 (id=2469): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x300, 0x0, 0x300, 0x320, 0x0, 0x6, 0x0, 0x1, {0xa, 0xff, 0x1}, {0x8000, 0x4}, {0x200, 0x5, 0x1}, {0x9, 0xd, 0x1}, 0x1, 0x80, 0x6, 0xa8000000, 0x0, 0x8, 0xfffff87e, 0x4, 0xb63, 0x2, 0x7, 0x4, 0x36, 0x0, 0x3, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, 0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000000000400000000141a7b4702000000240001801400018008000100e000000108000000007fffffff000280050001000000000024000280140001800800a7cef4137f3d6e780200ac1e00010c0002800500dc02345c000008000740000000010800164000000004"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) getdents(r2, &(0x7f0000000700)=""/90, 0x20000) 25.081913278s ago: executing program 5 (id=2471): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 20.486273623s ago: executing program 5 (id=2483): r0 = fsopen(&(0x7f0000000080)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) statx(0xffffffffffffffff, 0x0, 0x400, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 17.854296767s ago: executing program 3 (id=2490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mknodat$loop(r2, 0x0, 0x4, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000880)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04<\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa7\xfb\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4v\xecW\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\xcc\b\fR\xdc}\\\xb6\xc5u\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfav\\*\xac\xb1\x973_\fT\xe95T\xf7\xce\x12\x04\x91\x8b\xf1p\xb5\xadp\xcb&\xb3\x82\xca\xab\x88!oz\x88\xf1\xb3q6\x82\tXM\x9d\xa7v\xcd\x17R\x10\xe5\xd0cOS}$\xd8\xee{\x01\x00\x8fv]\x06I\xa0\xb8A9\x01\xdd@\xe9\xfb\x8f\x1d\x98\x9c\xab\x89\xf2\xa3\x93t@~Y#', 0x0) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.320929982s ago: executing program 5 (id=2493): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 16.326072898s ago: executing program 5 (id=2495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x14, r4, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r5 = geteuid() quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r5, &(0x7f0000000000)={0x44, 0xaf, 0x0, 0x5}) 14.998598971s ago: executing program 33 (id=2495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x14, r4, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r5 = geteuid() quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r5, &(0x7f0000000000)={0x44, 0xaf, 0x0, 0x5}) 13.408847745s ago: executing program 3 (id=2503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0xff) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x118) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xa00, 0x6, 0x800000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x24}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x6, 0x2}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x3505, 0xa, 0xa}]}]}, 0xa0}}, 0x10) 11.526640485s ago: executing program 3 (id=2506): socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x90) 10.125169929s ago: executing program 2 (id=2508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xec, 0xfbed, 0x0, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 9.535848643s ago: executing program 3 (id=2510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c670000000004000000030000000005f2250dbb08444b", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb0000000103915300020000"], 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010325bd7000fcff7fff0700bc12e55cedb7f80000"], 0x14}}, 0x0) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r4, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xd, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x6, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x10002, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0xdd31, 0x6, 0x7, 0x3, 0x3, 0x44, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0x10002, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0xffffffff, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x6a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) 8.309185459s ago: executing program 0 (id=2512): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) chdir(0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, 0x0, 0x4000) 8.208675893s ago: executing program 0 (id=2513): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000040)={[{'lock'}]}) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffff80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.877812948s ago: executing program 2 (id=2514): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x9) openat$dsp(0xffffffffffffff9c, 0x0, 0x54b300, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) open$dir(0x0, 0x10000, 0x100) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) mlockall(0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 7.8139843s ago: executing program 2 (id=2515): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0xfffc, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000004c0)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x13, 0x84, 0x46}, 0x2c) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.562726802s ago: executing program 2 (id=2516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ca", 0x1, 0x20000005, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000002180)={r5, 0x7, 0x9, 0x5e}, &(0x7f00000021c0)=0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}]}, 0x154}}, 0x20004000) 7.361212102s ago: executing program 1 (id=2517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000000)={r0, r6, 0x1}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) 5.11869989s ago: executing program 1 (id=2518): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, 0x0, 0x4040810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x5250c0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x4100) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.115126331s ago: executing program 2 (id=2519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x13, 0x0, &(0x7f0000000040)=0xff13) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) 4.478699184s ago: executing program 2 (id=2520): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0xa, 0x4) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@flushpolicy={0x10, 0x12, 0x105}, 0x10}}, 0x0) 4.47829175s ago: executing program 3 (id=2521): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) brk(0x3b9c019e) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20401, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.421088357s ago: executing program 1 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.416939034s ago: executing program 1 (id=2523): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) 3.145196652s ago: executing program 0 (id=2524): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x50b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) vmsplice(r2, 0x0, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x14, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}}, 0x14}}, 0x8080) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x322, 0x6, 0x0, 0x4, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 2.254971155s ago: executing program 1 (id=2525): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x6d8300) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000001540)={0xc0000000, 0x9, "bc1fccd448e681382a542e9ea2fa96dc8d376751732903451bd2472430af00", 0x3, 0x7, 0x6, 0x1, 0x9, 0x4, 0x9, 0x9971a997, [0x5, 0x3, 0x80, 0x3]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c0000000706010800000000effffffffffffdff05000100060000bffa942ec1dda9c27a83fb6a6d679d66f1ce7739dfe9dcb5fa6fdea28bd856ac38765249e5e92ac86ad77f2647fbb904a375987a23e9069c312a39c57ee594"], 0x1c}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) unshare(0x62040200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r5 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1ff, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54) 2.193504207s ago: executing program 0 (id=2526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(0x0, 0x0) geteuid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) 937.37987ms ago: executing program 0 (id=2527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 218.446053ms ago: executing program 1 (id=2528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x100) setns(0xffffffffffffffff, 0x24020000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 174.788518ms ago: executing program 3 (id=2529): socket$alg(0x26, 0x5, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x40043d14, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, 0x0, 0x22) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=2530): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000300)={0x1000f9, 0x10017f, 0x40000}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r4, 0x402, 0x80000023) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x40000008) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 335.979457][ T7488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.002364][ T7488] usb 1-1: Product: syz [ 336.008471][T11157] chnl_net:caif_netlink_parms(): no params data found [ 336.016873][ T7488] usb 1-1: Manufacturer: syz [ 336.016894][ T7488] usb 1-1: SerialNumber: syz [ 336.560742][ T5130] Bluetooth: hci5: command tx timeout [ 337.026014][T11157] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.065040][T11157] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.086513][T11157] bridge_slave_0: entered allmulticast mode [ 337.101013][T11157] bridge_slave_0: entered promiscuous mode [ 337.110401][T11157] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.118971][T11157] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.127196][T11157] bridge_slave_1: entered allmulticast mode [ 337.138320][T11157] bridge_slave_1: entered promiscuous mode [ 337.336608][T11157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.404785][ T6349] Bluetooth: hci6: Frame reassembly failed (-84) [ 337.459422][T11210] fuse: Bad value for 'user_id' [ 337.501879][T11210] fuse: Bad value for 'user_id' [ 337.531092][ T7488] kaweth 1-1:12.34: couldn't find required endpoints [ 337.543097][ T7488] usb 1-1: USB disconnect, device number 14 [ 337.617256][T11157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.819217][T11214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=11214 comm=syz.3.1666 [ 337.834200][T11157] team0: Port device team_slave_0 added [ 337.843409][T11157] team0: Port device team_slave_1 added [ 337.924223][T11157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.939404][T11157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.971451][T11157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.040647][T11157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.048506][T11157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.083298][T11157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.096432][T11216] syzkaller0: entered promiscuous mode [ 338.105894][T11216] syzkaller0: entered allmulticast mode [ 338.201792][T11157] hsr_slave_0: entered promiscuous mode [ 338.208788][T11157] hsr_slave_1: entered promiscuous mode [ 338.305766][T11157] debugfs: 'hsr0' already exists in 'hsr' [ 338.312660][T11157] Cannot create hsr debugfs directory [ 338.436388][T11227] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1671'. [ 338.489338][T11228] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 338.648861][ T5817] Bluetooth: hci5: command tx timeout [ 338.726363][T11228] CIFS mount error: No usable UNC path provided in device string! [ 338.726363][T11228] [ 338.781292][T11228] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 338.983929][T11157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 339.023071][T11157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.038349][T11157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.050493][T11157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.232393][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1674'. [ 339.441918][ T5817] Bluetooth: hci6: command 0xfc11 tx timeout [ 339.470729][ T5130] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 339.537836][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1674'. [ 340.290670][T11157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.318163][T11157] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.331409][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.339183][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.375638][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.383457][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.721514][ T5130] Bluetooth: hci5: command tx timeout [ 340.859024][T11157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.029895][T11277] netlink: 'syz.2.1683': attribute type 4 has an invalid length. [ 341.527215][T11157] veth0_vlan: entered promiscuous mode [ 341.575955][T11157] veth1_vlan: entered promiscuous mode [ 341.670710][T11157] veth0_macvtap: entered promiscuous mode [ 341.739166][T11157] veth1_macvtap: entered promiscuous mode [ 341.803794][T11157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.851476][T11157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.220744][ T6342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.260847][ T6342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.312569][ T6342] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.334202][ T6342] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.799131][ T5130] Bluetooth: hci5: command tx timeout [ 343.218850][T11298] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 343.225736][ T6342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.237167][ T6342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.251441][T11298] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1688'. [ 343.605232][ T6355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.665739][ T6355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.761035][ T29] audit: type=1400 audit(3922547958.980:627): avc: denied { transfer } for pid=11318 comm="syz.1.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 343.955026][ T29] audit: type=1400 audit(3922547959.020:628): avc: denied { mounton } for pid=11157 comm="syz-executor" path="/root/syzkaller.WDp8Ls/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 344.725243][ T29] audit: type=1400 audit(3922547959.060:629): avc: denied { mounton } for pid=11157 comm="syz-executor" path="/root/syzkaller.WDp8Ls/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 344.975641][ T29] audit: type=1400 audit(3922547959.160:630): avc: denied { mounton } for pid=11157 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 345.241210][T11339] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 347.057190][ T29] audit: type=1400 audit(3922547962.261:631): avc: denied { setopt } for pid=11362 comm="syz.2.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 347.421437][T11376] syzkaller0: entered promiscuous mode [ 347.428094][T11376] syzkaller0: entered allmulticast mode [ 347.542281][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 355.094217][T11475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1728'. [ 355.122440][T11394] lo speed is unknown, defaulting to 1000 [ 355.167970][T11475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11475 comm=syz.5.1728 [ 355.248111][ T29] audit: type=1400 audit(3922547970.476:632): avc: denied { connect } for pid=11476 comm="syz.1.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.315357][ T29] audit: type=1400 audit(3922547970.546:633): avc: denied { shutdown } for pid=11476 comm="syz.1.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.062259][ T7477] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 356.259079][ T7477] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 356.332974][ T7477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.367567][ T7477] usb 6-1: Product: syz [ 356.383275][ T7477] usb 6-1: Manufacturer: syz [ 356.396191][ T7477] usb 6-1: SerialNumber: syz [ 356.520384][ T7475] IPVS: starting estimator thread 0... [ 356.632358][T11503] IPVS: using max 65 ests per chain, 156000 per kthread [ 356.828543][ T7477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 356.899743][ T7477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 357.518949][T11500] lo speed is unknown, defaulting to 1000 [ 357.836085][T11521] syzkaller0: entered promiscuous mode [ 357.884809][T11521] syzkaller0: entered allmulticast mode [ 358.819527][ T7477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 358.953326][ T7477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 359.005530][ T7477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 359.044547][ T7477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 359.098718][ T7477] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 359.162931][ T7477] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 359.229880][ T7477] usb 6-1: USB disconnect, device number 2 [ 359.867617][T11561] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 359.893787][T11561] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.1746'. [ 360.027331][ T5474] veth0_macvtap: left promiscuous mode [ 362.703501][T11617] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 362.877780][T11617] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.919558][T11621] bond7: entered promiscuous mode [ 363.035144][ T29] audit: type=1400 audit(3922547978.269:634): avc: denied { accept } for pid=11615 comm="syz.1.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.382340][T11637] netlink: 'syz.5.1763': attribute type 1 has an invalid length. [ 364.573550][T11637] veth3: entered promiscuous mode [ 365.688859][T11647] syzkaller0: entered promiscuous mode [ 365.694860][T11647] syzkaller0: entered allmulticast mode [ 365.869458][ T29] audit: type=1400 audit(3922547981.061:635): avc: denied { read } for pid=11649 comm="syz.3.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.151978][ T7467] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 366.234486][T11657] syzkaller0: entered promiscuous mode [ 366.241272][T11657] syzkaller0: entered allmulticast mode [ 366.337121][ T7467] usb 1-1: Using ep0 maxpacket: 8 [ 366.346318][ T7467] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.455143][ T7467] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.512285][ T7467] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.647159][ T7467] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.673637][ T29] audit: type=1400 audit(3922547981.891:636): avc: denied { read append } for pid=11664 comm="syz.3.1771" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 366.673684][ T29] audit: type=1400 audit(3922547981.891:637): avc: denied { open } for pid=11664 comm="syz.3.1771" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 366.673721][ T29] audit: type=1400 audit(3922547981.901:638): avc: denied { ioctl } for pid=11664 comm="syz.3.1771" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 366.674233][ T7467] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.674311][ T7467] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.137099][ T7467] usb 1-1: GET_CAPABILITIES returned 0 [ 367.137144][ T7467] usbtmc 1-1:16.0: can't read capabilities [ 367.148985][ T5935] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 367.318294][ T5935] usb 4-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 367.346223][ T5935] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.368307][ T7477] usb 1-1: USB disconnect, device number 15 [ 367.392827][ T5935] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 367.419027][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.428942][ T5935] usb 4-1: Product: syz [ 367.433533][ T5935] usb 4-1: Manufacturer: syz [ 367.438682][ T5935] usb 4-1: SerialNumber: syz [ 367.457407][ T5935] usb 4-1: config 0 descriptor?? [ 367.737305][ T5935] usb 4-1: USB disconnect, device number 20 [ 369.092338][T11719] team0 (unregistering): Port device team_slave_0 removed [ 369.148362][T11719] team0 (unregistering): Port device team_slave_1 removed [ 369.536221][T11727] tipc: Started in network mode [ 369.541611][T11727] tipc: Node identity 5228dbc6614e, cluster identity 4711 [ 369.560284][T11727] tipc: Enabled bearer , priority 0 [ 369.571540][T11727] syzkaller0: entered promiscuous mode [ 369.577727][T11727] syzkaller0: entered allmulticast mode [ 370.472272][ T29] audit: type=1400 audit(3922547985.713:639): avc: denied { sys_module } for pid=11740 comm="syz.5.1784" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 370.520135][T11738] tipc: Resetting bearer [ 370.536567][T11725] tipc: Resetting bearer [ 370.655429][T11725] tipc: Disabling bearer [ 370.731022][ T7488] tipc: Node number set to 862378950 [ 371.358186][T11771] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 371.393837][T11771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.416341][ T29] audit: type=1400 audit(3922547986.664:640): avc: denied { create } for pid=11770 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 371.423553][T11771] vlan3: entered allmulticast mode [ 371.444354][T11771] bond4: entered allmulticast mode [ 371.645657][T11771] bond4: (slave geneve3): making interface the new active one [ 371.720271][T11771] geneve3: entered allmulticast mode [ 371.789750][T11771] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 371.827950][ T1154] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.286357][ T1154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.295544][ T1154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.304850][ T1154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.354255][ T5935] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 373.569494][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 373.588994][ T5935] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 373.614483][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.664761][ T5935] usb 4-1: Product: syz [ 373.687520][ T29] audit: type=1400 audit(3922547988.925:641): avc: denied { map } for pid=11798 comm="syz.0.1796" path="socket:[35288]" dev="sockfs" ino=35288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 373.723660][ T5935] usb 4-1: Manufacturer: syz [ 373.741726][ T5935] usb 4-1: SerialNumber: syz [ 373.989620][ T5935] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 374.075531][ T5935] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 374.148920][ T5935] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 374.206593][ T5935] usb 4-1: media controller created [ 374.288507][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.406121][ T5935] zl10353_read_register: readreg error (reg=127, ret==-32) [ 374.621265][ T5935] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 374.721347][ T5935] usb 4-1: USB disconnect, device number 21 [ 375.856039][T11845] syzkaller0: entered promiscuous mode [ 375.883027][T11845] syzkaller0: entered allmulticast mode [ 376.043384][T11848] syzkaller0: entered promiscuous mode [ 376.069205][T11848] syzkaller0: entered allmulticast mode [ 376.543602][ T29] audit: type=1400 audit(3922547991.666:642): avc: denied { checkpoint_restore } for pid=11856 comm="syz.0.1807" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.671132][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.192020][T11891] tipc: Enabled bearer , priority 0 [ 379.222506][T11891] syzkaller0: entered promiscuous mode [ 379.238343][T11891] syzkaller0: entered allmulticast mode [ 379.283298][T11891] tipc: Resetting bearer [ 379.311111][T11888] tipc: Resetting bearer [ 379.339712][T11888] tipc: Disabling bearer [ 379.348193][ T29] audit: type=1400 audit(3922547994.598:643): avc: denied { setopt } for pid=11893 comm="syz.5.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 380.118573][ T5935] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 380.380708][ T29] audit: type=1400 audit(3922547995.628:644): avc: denied { create } for pid=11908 comm="syz.0.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 380.433637][ T5935] usb 6-1: config 0 has no interfaces? [ 380.444953][ T5935] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 380.465463][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.590832][ T5935] usb 6-1: config 0 descriptor?? [ 380.677472][ T5130] Bluetooth: hci4: SCO packet for unknown connection handle 4074 [ 381.077350][ T7467] usb 6-1: USB disconnect, device number 3 [ 381.685877][T11919] orangefs_mount: mount request failed with -4 [ 382.915888][T11929] wireguard0: entered promiscuous mode [ 382.921974][T11929] wireguard0: entered allmulticast mode [ 383.908746][ T7467] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 384.167475][ T29] audit: type=1400 audit(3922547999.410:645): avc: denied { setopt } for pid=11935 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.468867][ T7467] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.229987][ T29] audit: type=1400 audit(3922548000.481:646): avc: denied { getopt } for pid=11935 comm="syz.1.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 385.347428][ T7467] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 385.359145][ T7467] usb 6-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 385.369141][ T7467] usb 6-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 385.378437][ T7467] usb 6-1: Product: syz [ 385.383013][ T7467] usb 6-1: SerialNumber: syz [ 385.455139][ T7467] usb 6-1: config 0 descriptor?? [ 385.520520][T11960] syzkaller0: entered promiscuous mode [ 385.526667][T11960] syzkaller0: entered allmulticast mode [ 385.544575][T11960] 0: reclassify loop, rule prio 0, protocol 800 [ 385.585980][T11962] syzkaller0: entered promiscuous mode [ 385.592070][T11962] syzkaller0: entered allmulticast mode [ 385.669039][T11964] comedi comedi0: No channels found! [ 385.712361][ T7467] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 385.744134][ T8091] usb 6-1: USB disconnect, device number 4 [ 385.950760][ T7467] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.960946][ T7467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.971079][ T7467] usb 1-1: Product: syz [ 385.975699][ T7467] usb 1-1: Manufacturer: syz [ 385.981356][ T7467] usb 1-1: SerialNumber: syz [ 386.431363][ T7467] usb 1-1: config 0 descriptor?? [ 386.501168][T11976] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1841'. [ 386.722959][ T7467] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 387.036809][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 387.713341][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 389.110313][ T7467] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 389.143055][ T7467] usb 1-1: USB disconnect, device number 16 [ 390.469662][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 391.341352][T12034] kvm: pic: non byte read [ 391.346356][T12034] kvm: pic: non byte read [ 391.351166][T12034] kvm: pic: non byte read [ 391.372984][T12034] kvm: pic: non byte read [ 391.392674][ T29] audit: type=1326 audit(3922548006.644:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.3.1856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c0499c819 code=0x0 [ 391.498564][T12034] kvm: pic: non byte read [ 392.297827][T12048] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 392.338605][T12048] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.1859'. [ 392.559768][T12059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.893480][ T29] audit: type=1400 audit(3922548008.134:648): avc: denied { create } for pid=12067 comm="syz.0.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 392.996129][ T29] audit: type=1400 audit(3922548008.234:649): avc: denied { bind } for pid=12067 comm="syz.0.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 395.448496][T12089] syz_tun: entered allmulticast mode [ 395.507186][T12089] dvmrp8: entered allmulticast mode [ 395.661733][T12087] syz_tun: left allmulticast mode [ 395.770958][T12095] netlink: 'syz.1.1872': attribute type 9 has an invalid length. [ 395.779913][T12095] netlink: 'syz.1.1872': attribute type 7 has an invalid length. [ 395.788531][T12095] netlink: 'syz.1.1872': attribute type 8 has an invalid length. [ 398.092899][T12110] syzkaller0: entered promiscuous mode [ 398.106028][T12110] syzkaller0: entered allmulticast mode [ 398.219535][ T29] audit: type=1400 audit(3922548013.467:650): avc: denied { getopt } for pid=12107 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 398.662442][T12118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1879'. [ 399.136253][T12120] netlink: 'syz.5.1880': attribute type 10 has an invalid length. [ 399.222159][T12120] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 399.384116][T12123] netlink: 'syz.0.1881': attribute type 1 has an invalid length. [ 400.045949][T12123] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.132306][ T29] audit: type=1326 audit(3922548015.328:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.5.1883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0404b9c819 code=0x0 [ 400.180745][T12126] vlan4: entered promiscuous mode [ 400.199726][T12126] bond5: entered promiscuous mode [ 400.247073][T12126] vlan4: entered allmulticast mode [ 400.314665][T12126] bond5: entered allmulticast mode [ 400.379537][T12128] bond5: (slave bridge2): making interface the new active one [ 400.393465][T12128] bridge2: entered promiscuous mode [ 400.408221][T12128] bridge2: entered allmulticast mode [ 400.417955][T12128] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 400.468897][T12139] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1885'. [ 400.498427][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 400.780485][T12154] overlayfs: failed to resolve './file2': -2 [ 400.830311][T12156] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1888'. [ 402.191662][T12179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1892'. [ 402.625530][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1894'. [ 403.024424][T12176] orangefs_mount: mount request failed with -4 [ 405.225663][T12213] openvswitch: netlink: IP tunnel dst address not specified [ 407.009290][ T6355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.153686][T12228] vlan5: entered promiscuous mode [ 407.191021][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 407.220255][T12228] vlan5: entered allmulticast mode [ 407.225905][T12228] hsr_slave_1: entered allmulticast mode [ 407.597158][ T29] audit: type=1400 audit(3922548022.822:652): avc: denied { create } for pid=12237 comm="syz.5.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 407.966718][ T29] audit: type=1400 audit(3922548022.852:653): avc: denied { ioctl } for pid=12237 comm="syz.5.1909" path="socket:[37194]" dev="sockfs" ino=37194 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 408.259545][ T29] audit: type=1400 audit(3922548023.502:654): avc: denied { read write } for pid=11157 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.023663][ T29] audit: type=1400 audit(3922548023.502:655): avc: denied { open } for pid=11157 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.152524][ T6355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.164058][ T29] audit: type=1400 audit(3922548023.502:656): avc: denied { ioctl } for pid=11157 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.398647][T12264] input: syz0 as /devices/virtual/input/input19 [ 409.468138][ T6355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.731371][ T7467] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 409.811977][ T6355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.887579][ T7467] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 409.934053][ T7467] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 409.997779][ T7467] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 410.023516][ T7467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.041757][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 410.071629][ T7467] usb 6-1: Product: syz [ 410.092606][ T7467] usb 6-1: Manufacturer: syz [ 410.103401][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 410.120016][ T7467] usb 6-1: SerialNumber: syz [ 410.322172][ T6355] vlan2: left allmulticast mode [ 410.338266][ T6355] geneve0: left allmulticast mode [ 410.376044][ T6355] vlan2: left promiscuous mode [ 410.406129][ T7467] usb 6-1: unit 4 not found! [ 410.426957][ T6355] geneve0: left promiscuous mode [ 410.433413][ T7467] usb 6-1: unit 2 not found! [ 410.461997][ T6355] bridge0: port 3(vlan2) entered disabled state [ 410.492740][ T7467] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 410.569529][ T6355] bridge_slave_1: left allmulticast mode [ 410.609658][ T6355] bridge_slave_1: left promiscuous mode [ 410.622504][ T7467] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 410.749449][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.755364][ T7467] usb 6-1: USB disconnect, device number 5 [ 411.281292][ T6355] bridge_slave_0: left allmulticast mode [ 411.287574][ T6355] bridge_slave_0: left promiscuous mode [ 411.293990][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.441794][ T6468] udevd[6468]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.784443][ T29] audit: type=1400 audit(3922548028.034:657): avc: denied { create } for pid=12322 comm="syz.1.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 413.452716][ T29] audit: type=1400 audit(3922548028.034:658): avc: denied { read } for pid=12322 comm="syz.1.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 413.506968][ T6355] bond6 (unregistering): (slave gretap1): Releasing active interface [ 413.537566][ T29] audit: type=1400 audit(3922548028.214:659): avc: denied { setopt } for pid=12322 comm="syz.1.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 413.743975][ T29] audit: type=1400 audit(3922548028.224:660): avc: denied { write } for pid=12322 comm="syz.1.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 415.153474][ T6355] bond4 (unregistering): (slave bridge3): Releasing active interface [ 415.327408][ T6355] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 415.377623][ T6355] bridge5 (unregistering): left promiscuous mode [ 415.526108][ T6355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.557964][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1930'. [ 415.607971][ T6355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.628659][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 415.655382][ T6355] bond0 (unregistering): Released all slaves [ 415.686320][ T6355] bond1 (unregistering): Released all slaves [ 415.747206][ T6355] bond2 (unregistering): Released all slaves [ 415.796319][ T6355] bond3 (unregistering): Released all slaves [ 415.836382][ T6355] bond4 (unregistering): Released all slaves [ 415.880309][ T6355] bond5 (unregistering): Released all slaves [ 415.958403][ T6355] bond6 (unregistering): Released all slaves [ 416.202836][T12353] qnx6: unable to read the first superblock [ 416.211169][T12353] qnx6: unable to read the first superblock [ 416.217783][T12353] qnx6: unable to read the first superblock [ 416.561843][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 416.586434][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 416.622982][ T4537] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.698737][ T4537] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.885518][ T4537] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.207851][ T4537] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.389782][ T6355] tipc: Left network mode [ 418.298925][ T29] audit: type=1400 audit(3922548033.557:661): avc: denied { execute } for pid=12365 comm="syz.5.1935" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=38123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 418.515032][T12376] futex_wake_op: syz.2.1936 tries to shift op by 144; fix this program [ 418.561928][T12360] kexec: Could not allocate control_code_buffer [ 418.597531][ T29] audit: type=1400 audit(3922548033.857:662): avc: denied { getattr } for pid=12374 comm="syz.2.1936" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=38130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 418.985799][T12380] comedi comedi3: comedi_test: 23586 microvolt, 3 microsecond waveform attached [ 419.761386][T12389] lo speed is unknown, defaulting to 1000 [ 419.910809][ T29] audit: type=1400 audit(3922548035.168:663): avc: denied { create } for pid=12404 comm="syz.5.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 419.944510][T12387] syzkaller0: entered promiscuous mode [ 419.992599][T12387] syzkaller0: entered allmulticast mode [ 425.122369][T12458] misc userio: The device must be registered before sending interrupts [ 425.707479][ T7475] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 426.305874][ T7475] usb 4-1: Using ep0 maxpacket: 32 [ 426.325374][ T7475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.350290][ T7475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 426.362756][ T7475] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.373353][ T7475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.384774][ T7475] usb 4-1: config 0 descriptor?? [ 426.391241][T12460] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 426.412190][ T7475] hub 4-1:0.0: USB hub found [ 426.620432][ T7475] hub 4-1:0.0: 1 port detected [ 427.119676][ T6355] hsr_slave_0: left promiscuous mode [ 427.147524][ T6355] hsr_slave_1: left promiscuous mode [ 427.179000][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.199915][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.211447][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.388917][ T6355] veth1_macvtap: left promiscuous mode [ 427.395287][ T6355] veth0_macvtap: left promiscuous mode [ 427.402938][ T6355] veth1_vlan: left promiscuous mode [ 427.409297][ T6355] veth0_vlan: left promiscuous mode [ 428.327043][ T7475] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 428.478081][ T7475] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 428.665993][ T7475] usb 4-1: device descriptor read/64, error -32 [ 428.819002][ T6355] team0 (unregistering): Port device team_slave_1 removed [ 429.265898][T12474] tipc: Enabling of bearer rejected, failed to enable media [ 429.893601][ T7477] usb 4-1: USB disconnect, device number 22 [ 430.039581][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.047691][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.063575][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.354350][T12517] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 430.425945][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.455391][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.463579][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.471687][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.479807][T12517] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.133428][ T29] audit: type=1800 audit(3922548046.404:664): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1962" name="bus" dev="ramfs" ino=38243 res=0 errno=0 [ 431.333546][ T6355] IPVS: stop unused estimator thread 0... [ 431.370623][T12529] tipc: Started in network mode [ 431.386335][T12529] tipc: Node identity 5264eb7b57f3, cluster identity 4711 [ 431.394364][T12529] tipc: Enabled bearer , priority 0 [ 431.447389][T12534] syzkaller0: entered promiscuous mode [ 431.487122][T12534] syzkaller0: entered allmulticast mode [ 431.592894][T12529] tipc: Resetting bearer [ 431.673264][T12528] tipc: Resetting bearer [ 432.102103][T12528] tipc: Disabling bearer [ 432.545505][ T29] audit: type=1400 audit(3922548047.804:665): avc: denied { listen } for pid=12553 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 433.165096][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1974'. [ 433.251618][ T29] audit: type=1400 audit(3922548048.505:666): avc: denied { unmount } for pid=11157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 433.297779][T12564] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12564 comm=syz.1.1974 [ 433.667163][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1976'. [ 436.637455][T12626] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1987'. [ 438.591182][ T29] audit: type=1400 audit(3922548053.847:667): avc: denied { open } for pid=12655 comm="syz.0.1993" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 438.846803][ T29] audit: type=1400 audit(3922548054.117:668): avc: denied { ioctl } for pid=12656 comm="syz.3.1994" path="socket:[37873]" dev="sockfs" ino=37873 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 439.835556][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.960132][T12707] syzkaller0: entered promiscuous mode [ 442.977331][T12707] 0: reclassify loop, rule prio 0, protocol 800 [ 448.314778][T12769] overlayfs: failed to clone lowerpath [ 448.796220][T12764] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2016'. [ 448.807842][T12764] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.2016'. [ 452.160264][T12828] syzkaller0: entered promiscuous mode [ 452.186224][T12826] syzkaller0: entered promiscuous mode [ 452.198117][T12828] 0: reclassify loop, rule prio 0, protocol 800 [ 452.214224][T12826] syzkaller0: entered allmulticast mode [ 453.055442][ T29] audit: type=1400 audit(3922548068.334:669): avc: denied { mount } for pid=12845 comm="syz.3.2032" name="/" dev="hugetlbfs" ino=38616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 453.084087][T12846] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 453.084087][T12846] [ 453.092241][ T29] audit: type=1400 audit(3922548068.364:670): avc: denied { remount } for pid=12845 comm="syz.3.2032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 453.132392][ T7477] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 453.154894][T12850] syzkaller0: entered promiscuous mode [ 453.166076][T12850] syzkaller0: entered allmulticast mode [ 453.271989][ T7477] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 453.672161][ T29] audit: type=1400 audit(3922548068.945:671): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 454.740332][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2042'. [ 454.796159][T12904] syzkaller0: entered promiscuous mode [ 454.819722][T12904] syzkaller0: entered allmulticast mode [ 455.454023][ T29] audit: type=1400 audit(3922548070.726:672): avc: denied { nlmsg_read } for pid=12918 comm="syz.2.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.901909][ T29] audit: type=1400 audit(3922548072.096:673): avc: denied { connect } for pid=12940 comm="syz.3.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 457.283734][T12948] overlayfs: failed to clone upperpath [ 457.807146][ T29] audit: type=1400 audit(3922548073.087:674): avc: denied { mount } for pid=12960 comm="syz.0.2057" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 458.384744][T12967] syzkaller0: entered promiscuous mode [ 458.923016][T12976] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 459.790659][T12976] 8021q: adding VLAN 0 to HW filter on device bond8 [ 459.856198][T12977] bond8: entered allmulticast mode [ 460.588886][T12979] bond8: (slave ip6gretap1): making interface the new active one [ 460.649963][T12979] ip6gretap1: entered allmulticast mode [ 460.701147][T12979] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 460.916726][ T29] audit: type=1326 audit(3922548076.198:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 460.999872][ T29] audit: type=1326 audit(3922548076.198:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 461.104014][ T29] audit: type=1326 audit(3922548076.228:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 461.338184][ T29] audit: type=1326 audit(3922548076.228:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 461.828975][ T29] audit: type=1326 audit(3922548076.228:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 461.854806][ T29] audit: type=1326 audit(3922548076.308:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 461.906059][ T29] audit: type=1326 audit(3922548076.308:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 461.975781][ T29] audit: type=1326 audit(3922548076.308:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 462.029393][ T29] audit: type=1326 audit(3922548076.338:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 462.096943][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 462.138051][ T29] audit: type=1326 audit(3922548076.338:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 462.196177][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 463.556254][T13013] fuse: Bad value for 'fd' [ 466.045487][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 466.045880][ T29] audit: type=1400 audit(3922548081.331:725): avc: denied { create } for pid=13037 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 466.075701][ T29] audit: type=1400 audit(3922548081.331:726): avc: denied { setopt } for pid=13037 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 466.496145][ T29] audit: type=1400 audit(3922548081.441:727): avc: denied { write } for pid=13037 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 466.524339][ T29] audit: type=1400 audit(3922548081.441:728): avc: denied { nlmsg_write } for pid=13037 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 467.340565][ T29] audit: type=1400 audit(3922548081.861:729): avc: denied { create } for pid=13037 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 468.325862][ T29] audit: type=1400 audit(3922548082.632:730): avc: denied { mount } for pid=13045 comm="syz.1.2080" name="/" dev="ramfs" ino=39553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 468.369920][ T29] audit: type=1400 audit(3922548082.672:731): avc: denied { create } for pid=13044 comm="syz.2.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 468.825792][ T29] audit: type=1400 audit(3922548082.842:732): avc: denied { prog_run } for pid=13042 comm="syz.5.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 468.950757][ T29] audit: type=1400 audit(3922548084.122:733): avc: denied { ioctl } for pid=13053 comm="syz.2.2083" path="socket:[38855]" dev="sockfs" ino=38855 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 469.688458][ T29] audit: type=1400 audit(3922548084.122:734): avc: denied { read } for pid=13053 comm="syz.2.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 469.833433][T13061] netlink: 'syz.3.2084': attribute type 4 has an invalid length. [ 469.842426][T13061] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2084'. [ 469.908080][T13061] .`: renamed from bond0 (while UP) [ 470.702765][T13076] macsec1: entered allmulticast mode [ 470.722139][T13076] dummy0: entered allmulticast mode [ 470.740616][T13076] dummy0: left allmulticast mode [ 471.956131][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 471.956164][ T29] audit: type=1400 audit(3922548087.214:745): avc: denied { watch } for pid=13087 comm="syz.1.2092" path="/411/blkio.throttle.io_serviced" dev="tmpfs" ino=2182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 472.150014][ T29] audit: type=1400 audit(3922548087.214:746): avc: denied { watch_sb watch_reads } for pid=13087 comm="syz.1.2092" path="/411/blkio.throttle.io_serviced" dev="tmpfs" ino=2182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 472.278410][ T29] audit: type=1400 audit(3922548087.314:747): avc: denied { execute } for pid=13087 comm="syz.1.2092" path="/411/file0" dev="tmpfs" ino=2181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 472.491813][ T29] audit: type=1400 audit(3922548087.774:748): avc: denied { read } for pid=13091 comm="syz.3.2093" dev="nsfs" ino=4026532999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 472.573723][ T29] audit: type=1400 audit(3922548087.774:749): avc: denied { open } for pid=13091 comm="syz.3.2093" path="net:[4026532999]" dev="nsfs" ino=4026532999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 472.602477][ T29] audit: type=1400 audit(3922548087.774:750): avc: denied { create } for pid=13091 comm="syz.3.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.737259][ T29] audit: type=1400 audit(3922548087.864:751): avc: denied { ioctl } for pid=13091 comm="syz.3.2093" path="socket:[38908]" dev="sockfs" ino=38908 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.828477][ T29] audit: type=1400 audit(3922548087.884:752): avc: denied { create } for pid=13091 comm="syz.3.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 473.005355][ T29] audit: type=1400 audit(3922548087.934:753): avc: denied { ioctl } for pid=13091 comm="syz.3.2093" path="socket:[39937]" dev="sockfs" ino=39937 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 473.032527][ T7467] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 473.048693][ T29] audit: type=1400 audit(3922548088.014:754): avc: denied { name_bind } for pid=13094 comm="syz.3.2096" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 473.245512][ T7467] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.256975][ T7467] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.276416][ T7467] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 473.479395][ T7467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.828635][ T7467] usb 4-1: config 0 descriptor?? [ 475.153874][T13123] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2103'. [ 475.172690][T13123] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2103'. [ 475.777386][ T7467] usb 4-1: USB disconnect, device number 23 [ 476.055826][T13144] overlayfs: failed to clone lowerpath [ 477.470824][T13158] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2113'. [ 477.909150][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 477.909167][ T29] audit: type=1400 audit(3922548093.197:770): avc: denied { write } for pid=13159 comm="syz.5.2114" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 478.090085][ T29] audit: type=1400 audit(3922548093.197:771): avc: denied { open } for pid=13159 comm="syz.5.2114" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 478.251040][ T29] audit: type=1400 audit(3922548093.517:772): avc: denied { read } for pid=13164 comm="syz.1.2115" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.481088][ T29] audit: type=1400 audit(3922548093.517:773): avc: denied { open } for pid=13164 comm="syz.1.2115" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.743575][ T29] audit: type=1400 audit(3922548093.537:774): avc: denied { ioctl } for pid=13164 comm="syz.1.2115" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.879301][ T29] audit: type=1400 audit(3922548093.677:775): avc: denied { setopt } for pid=13164 comm="syz.1.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 478.962998][ T29] audit: type=1400 audit(3922548093.687:776): avc: denied { write } for pid=13164 comm="syz.1.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 479.082563][ T29] audit: type=1400 audit(3922548093.727:777): avc: denied { read } for pid=13164 comm="syz.1.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 479.111026][ T5928] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 479.246798][ T29] audit: type=1400 audit(3922548093.917:778): avc: denied { write } for pid=13164 comm="syz.1.2115" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 479.295727][ T29] audit: type=1400 audit(3922548094.528:779): avc: denied { name_bind } for pid=13172 comm="syz.5.2118" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 479.324148][ T5928] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 479.340160][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.392385][ T5928] usb 4-1: Product: syz [ 479.401615][ T5928] usb 4-1: Manufacturer: syz [ 479.447574][ T5928] usb 4-1: SerialNumber: syz [ 479.481839][ T5928] usb 4-1: config 0 descriptor?? [ 479.709343][ T5928] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 480.045000][T13188] bond0: (slave bond_slave_1): Releasing backup interface [ 481.781427][ T5928] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 481.804337][ T5928] usb 4-1: USB disconnect, device number 24 [ 481.970169][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2125'. [ 481.997445][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 482.027612][T13200] netlink: 'syz.0.2125': attribute type 4 has an invalid length. [ 482.047181][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.067030][T13200] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2125'. [ 482.088421][T13198] bond6: (slave bond0): making interface the new active one [ 482.122461][T13198] bond6: (slave bond0): Enslaving as an active interface with an up link [ 482.176595][T13200] .`: renamed from bond0 (while UP) [ 482.973193][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 482.973210][ T29] audit: type=1400 audit(3922548098.259:784): avc: denied { setopt } for pid=13208 comm="syz.0.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 483.142541][ T29] audit: type=1400 audit(3922548098.440:785): avc: denied { write } for pid=13212 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 483.866869][T13231] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 483.911987][T13228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 484.018627][ T29] audit: type=1400 audit(3922548099.310:786): avc: denied { write } for pid=13225 comm="syz.1.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 484.082524][T13231] lo speed is unknown, defaulting to 1000 [ 484.208014][T13218] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 484.219551][T13218] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 484.237986][T13218] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 484.330951][ T29] audit: type=1400 audit(3922548099.500:787): avc: denied { mounton } for pid=13216 comm="syz.5.2130" path="/90/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 484.594359][ T29] audit: type=1400 audit(3922548099.510:788): avc: denied { mount } for pid=13216 comm="syz.5.2130" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 484.786804][ T29] audit: type=1400 audit(3922548099.830:789): avc: denied { unmount } for pid=11157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 485.002812][ T29] audit: type=1400 audit(3922548099.850:790): avc: denied { unmount } for pid=11157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 485.903666][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2137'. [ 486.098603][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 486.163632][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 486.488711][ T5130] Bluetooth: hci2: unexpected cc 0x0402 length: 61 > 1 [ 486.496527][ T5130] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 487.120928][ T29] audit: type=1400 audit(3922548101.711:791): avc: denied { write } for pid=13271 comm="syz.3.2139" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 489.473983][ T29] audit: type=1800 audit(3922548104.763:792): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2141" name="bus" dev="ramfs" ino=40122 res=0 errno=0 [ 490.270613][ T29] audit: type=1400 audit(3922548105.153:793): avc: denied { ioctl } for pid=13289 comm="syz.3.2140" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=40149 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 490.475010][ T29] audit: type=1400 audit(3922548105.173:794): avc: denied { sqpoll } for pid=13289 comm="syz.3.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 490.565298][ T29] audit: type=1400 audit(3922548105.573:795): avc: denied { map } for pid=13289 comm="syz.3.2140" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 490.594960][ T29] audit: type=1400 audit(3922548105.573:796): avc: denied { read write } for pid=13289 comm="syz.3.2140" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 490.738184][ T29] audit: type=1400 audit(3922548106.043:797): avc: denied { read } for pid=13305 comm="syz.3.2147" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 490.812973][T13306] xt_ecn: cannot match TCP bits for non-tcp packets [ 491.024939][ T29] audit: type=1400 audit(3922548106.043:798): avc: denied { open } for pid=13305 comm="syz.3.2147" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 491.222204][ T29] audit: type=1400 audit(3922548106.113:799): avc: denied { ioctl } for pid=13305 comm="syz.3.2147" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 491.387153][ T29] audit: type=1400 audit(3922548106.163:800): avc: denied { create } for pid=13305 comm="syz.3.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 491.419976][ T29] audit: type=1400 audit(3922548106.233:801): avc: denied { ioctl } for pid=13305 comm="syz.3.2147" path="socket:[40169]" dev="sockfs" ino=40169 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 495.466605][T13336] syzkaller0: entered promiscuous mode [ 495.479305][T13336] syzkaller0: entered allmulticast mode [ 495.522583][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 495.522599][ T29] audit: type=1400 audit(3922548110.826:803): avc: denied { write } for pid=13334 comm="syz.5.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 495.895576][T13341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2165'. [ 498.795842][T13363] IPVS: fo: FWM 3 0x00000003 - no destination available [ 499.830411][ T29] audit: type=1400 audit(3922548115.128:804): avc: denied { shutdown } for pid=13368 comm="syz.3.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 501.147447][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.010782][ T29] audit: type=1400 audit(3922548117.319:805): avc: denied { setopt } for pid=13407 comm="syz.5.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 502.819354][T13419] No such timeout policy "syz0" [ 503.381662][T13412] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2174'. [ 503.529195][ T29] audit: type=1400 audit(3922548118.830:806): avc: denied { create } for pid=13426 comm="syz.5.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 503.668241][ T29] audit: type=1400 audit(3922548118.880:807): avc: denied { setopt } for pid=13421 comm="syz.1.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 503.777966][T13431] lo speed is unknown, defaulting to 1000 [ 503.815390][T13431] virt_wifi0 speed is unknown, defaulting to 1000 [ 504.687839][ T29] audit: type=1400 audit(3922548119.920:808): avc: denied { firmware_load } for pid=13436 comm="syz.2.2180" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 506.279080][ T29] audit: type=1400 audit(3922548121.591:809): avc: denied { create } for pid=13454 comm="syz.3.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 506.404502][ T29] audit: type=1400 audit(3922548121.651:810): avc: denied { setopt } for pid=13454 comm="syz.3.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 506.469031][ T29] audit: type=1400 audit(3922548121.651:811): avc: denied { connect } for pid=13454 comm="syz.3.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 506.648782][ T7477] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 506.837051][ T7477] usb 4-1: Using ep0 maxpacket: 16 [ 506.877546][ T7477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.925065][ T7477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.956089][ T7477] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 506.986790][ T7477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.017385][ T7477] usb 4-1: config 0 descriptor?? [ 507.432453][ T7477] ntrig 0003:1B96:0008.000C: item fetching failed at offset 5/7 [ 507.467073][ T7477] ntrig 0003:1B96:0008.000C: parse failed [ 507.626489][ T7477] ntrig 0003:1B96:0008.000C: probe with driver ntrig failed with error -22 [ 507.708046][ T7477] usb 4-1: USB disconnect, device number 25 [ 508.130779][T13466] tipc: Enabling of bearer rejected, failed to enable media [ 508.775950][ T29] audit: type=1400 audit(3922548124.082:812): avc: denied { create } for pid=13472 comm="syz.0.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 508.896215][ T29] audit: type=1400 audit(3922548124.172:813): avc: denied { bind } for pid=13482 comm="syz.3.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 508.980422][ T29] audit: type=1400 audit(3922548124.172:814): avc: denied { node_bind } for pid=13482 comm="syz.3.2192" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 509.385660][T13495] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 509.400315][T13495] qnx6: wrong signature (magic) in superblock #1. [ 509.408502][T13495] qnx6: unable to read the first superblock [ 509.410744][ T29] audit: type=1400 audit(3922548124.693:815): avc: denied { mounton } for pid=13491 comm="syz.1.2195" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 509.812102][T13496] random: crng reseeded on system resumption [ 509.827060][ T29] audit: type=1400 audit(3922548125.123:816): avc: denied { write } for pid=13493 comm="syz.5.2196" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 509.930779][T13502] tipc: Enabling of bearer rejected, failed to enable media [ 509.938407][T13496] FAT-fs (nbd5): unable to read boot sector [ 510.096280][ T29] audit: type=1400 audit(3922548125.123:817): avc: denied { open } for pid=13493 comm="syz.5.2196" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 510.581362][ T29] audit: type=1400 audit(3922548125.493:818): avc: denied { connect } for pid=13499 comm="syz.3.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.602963][ T29] audit: type=1400 audit(3922548125.493:819): avc: denied { read } for pid=13499 comm="syz.3.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.808543][ T29] audit: type=1400 audit(3922548125.583:820): avc: denied { write } for pid=13499 comm="syz.3.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 512.763843][ T29] audit: type=1400 audit(3922548128.054:821): avc: denied { mount } for pid=13528 comm="syz.1.2204" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 513.717100][T13539] syzkaller0: entered promiscuous mode [ 513.761804][T13539] syzkaller0: entered allmulticast mode [ 515.257696][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 515.257712][ T29] audit: type=1400 audit(3922548130.566:826): avc: denied { write } for pid=13553 comm="syz.5.2213" name="dev" dev="proc" ino=4026534182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 515.723110][ T29] audit: type=1400 audit(3922548131.036:827): avc: denied { read write } for pid=13555 comm="syz.3.2214" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 515.772374][ T29] audit: type=1400 audit(3922548131.036:828): avc: denied { open } for pid=13555 comm="syz.3.2214" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 516.783765][ T29] audit: type=1400 audit(3922548132.086:829): avc: denied { mount } for pid=13573 comm="syz.3.2216" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 517.201692][ T29] audit: type=1400 audit(3922548132.487:830): avc: denied { write } for pid=13577 comm="syz.1.2218" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 517.659882][ T29] audit: type=1400 audit(3922548132.967:831): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 518.564146][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 518.628820][ T29] audit: type=1400 audit(3922548133.927:832): avc: denied { mount } for pid=13586 comm="syz.0.2220" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 518.803519][ T29] audit: type=1400 audit(3922548134.077:833): avc: denied { shutdown } for pid=13586 comm="syz.0.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 518.976499][ T29] audit: type=1400 audit(3922548134.077:834): avc: denied { getopt } for pid=13586 comm="syz.0.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 521.055255][T13612] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.063155][T13612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.072769][T13612] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.080670][T13612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.107822][T13612] 8021q: adding VLAN 0 to HW filter on device .` [ 521.950547][T13612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.347605][ T5130] Bluetooth: hci4: unexpected event for opcode 0x200b [ 523.938199][ T29] audit: type=1400 audit(3922548139.200:835): avc: denied { bind } for pid=13636 comm="syz.3.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 524.731330][ T29] audit: type=1400 audit(3922548139.200:836): avc: denied { setopt } for pid=13636 comm="syz.3.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 524.770227][ T29] audit: type=1400 audit(3922548139.200:837): avc: denied { read write } for pid=13636 comm="syz.3.2231" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 524.817332][ T29] audit: type=1400 audit(3922548139.200:838): avc: denied { open } for pid=13636 comm="syz.3.2231" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 524.843576][ T29] audit: type=1400 audit(3922548139.280:839): avc: denied { map } for pid=13636 comm="syz.3.2231" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 525.113538][ T29] audit: type=1400 audit(3922548140.030:840): avc: denied { create } for pid=13636 comm="syz.3.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 525.168129][ T29] audit: type=1400 audit(3922548140.040:841): avc: denied { write } for pid=13636 comm="syz.3.2231" path="socket:[41709]" dev="sockfs" ino=41709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 526.620276][ T29] audit: type=1400 audit(3922548141.931:842): avc: denied { read } for pid=13662 comm="syz.1.2237" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 526.766502][T13664] tipc: Failed to remove unknown binding: 66,1,1/862378950:3418700654/3418700656 [ 527.472072][T13662] tipc: Failed to remove unknown binding: 66,1,1/862378950:3418700654/3418700656 [ 527.507473][T13662] tipc: Failed to remove unknown binding: 66,1,1/862378950:3418700654/3418700656 [ 528.020037][T13663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.034287][T13663] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 528.295559][T13663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 528.339596][T13663] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 528.416965][T13663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 528.494037][T13663] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 528.639847][T13663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 528.671576][T13663] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 528.679093][T13663] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 528.835739][ T29] audit: type=1400 audit(3922548144.152:843): avc: denied { write } for pid=13688 comm="syz.1.2243" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 528.935798][ T5130] Bluetooth: hci0: command 0x0406 tx timeout [ 528.958907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 528.977860][ T7467] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 529.036109][ T7467] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 529.045797][ T29] audit: type=1400 audit(3922548144.292:844): avc: denied { read write } for pid=13688 comm="syz.1.2243" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 529.200625][ T29] audit: type=1400 audit(3922548144.292:845): avc: denied { open } for pid=13688 comm="syz.1.2243" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 529.636611][ T29] audit: type=1400 audit(3922548144.943:846): avc: denied { unlink } for pid=13696 comm="syz.3.2245" name="#30" dev="tmpfs" ino=2225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 530.365227][ T5130] Bluetooth: hci2: command 0x2016 tx timeout [ 530.501704][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 530.714945][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 530.721791][ T5130] Bluetooth: hci4: command 0x0406 tx timeout [ 530.944751][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 531.688055][ T29] audit: type=1400 audit(3922548147.014:847): avc: denied { ioctl } for pid=13713 comm="syz.2.2249" path="socket:[40729]" dev="sockfs" ino=40729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 531.767104][T13716] trusted_key: syz.1.2250 sent an empty control message without MSG_MORE. [ 532.397210][ T5817] Bluetooth: hci2: command 0x2016 tx timeout [ 532.543971][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 532.609365][ T29] audit: type=1400 audit(3922548147.924:848): avc: denied { ioctl } for pid=13725 comm="syz.0.2252" path="socket:[40746]" dev="sockfs" ino=40746 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 533.405137][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 533.544755][ T29] audit: type=1400 audit(3922548148.865:849): avc: denied { create } for pid=13733 comm="syz.2.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 533.627028][ T29] audit: type=1400 audit(3922548148.895:850): avc: denied { connect } for pid=13733 comm="syz.2.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 534.387046][ T29] audit: type=1400 audit(3922548149.705:851): avc: denied { read write } for pid=13745 comm="syz.5.2259" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 534.457782][ T29] audit: type=1400 audit(3922548149.745:852): avc: denied { open } for pid=13745 comm="syz.5.2259" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 534.952784][T13465] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 535.742273][T13465] usb 4-1: Using ep0 maxpacket: 16 [ 535.768974][T13465] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 535.795653][T13465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.810017][T13465] usb 4-1: Product: syz [ 535.822354][T13465] usb 4-1: Manufacturer: syz [ 535.836658][T13465] usb 4-1: SerialNumber: syz [ 536.073641][T13465] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 536.111617][T13465] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 536.144971][T13465] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 536.171927][T13465] usb 4-1: media controller created [ 536.205425][T13465] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.269517][ T29] audit: type=1400 audit(3922548151.586:853): avc: denied { append } for pid=13753 comm="syz.3.2260" name="i2c-1" dev="devtmpfs" ino=3703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 536.365326][ T29] audit: type=1400 audit(3922548151.686:854): avc: denied { lock } for pid=13753 comm="syz.3.2260" path="socket:[41824]" dev="sockfs" ino=41824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 536.474502][T13465] zl10353_read_register: readreg error (reg=127, ret==-110) [ 536.495128][ T29] audit: type=1400 audit(3922548151.796:855): avc: denied { mount } for pid=13750 comm="syz.0.2256" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 536.699832][T13465] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 536.769750][T13465] usb 4-1: USB disconnect, device number 26 [ 539.133731][ T29] audit: type=1400 audit(3922548154.458:856): avc: denied { getopt } for pid=13791 comm="syz.0.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 539.292432][T13796] vlan4: entered promiscuous mode [ 539.298173][T13796] vlan4: entered allmulticast mode [ 539.305355][ T29] audit: type=1400 audit(3922548154.588:857): avc: denied { getopt } for pid=13791 comm="syz.0.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 539.345566][T13796] hsr_slave_1: entered allmulticast mode [ 539.480512][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 539.492722][ T29] audit: type=1400 audit(3922548154.598:858): avc: denied { ioctl } for pid=13791 comm="syz.0.2268" path="socket:[40827]" dev="sockfs" ino=40827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 539.635782][ T29] audit: type=1400 audit(3922548154.678:859): avc: denied { read } for pid=13800 comm="syz.3.2272" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 539.707100][ T29] audit: type=1400 audit(3922548154.678:860): avc: denied { open } for pid=13800 comm="syz.3.2272" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 539.831175][ T29] audit: type=1400 audit(3922548154.708:861): avc: denied { ioctl } for pid=13795 comm="syz.1.2271" path="socket:[40833]" dev="sockfs" ino=40833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 539.860064][ T29] audit: type=1400 audit(3922548154.988:862): avc: denied { append } for pid=13805 comm="syz.3.2274" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 540.380327][ T29] audit: type=1400 audit(3922548155.288:863): avc: denied { create } for pid=13807 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 540.445024][ T29] audit: type=1400 audit(3922548155.288:864): avc: denied { write } for pid=13807 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 540.453468][T13813] tipc: Started in network mode [ 540.509919][ T29] audit: type=1400 audit(3922548155.298:865): avc: denied { read } for pid=13807 comm="syz.0.2273" path="socket:[41884]" dev="sockfs" ino=41884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 540.529330][T13813] tipc: Node identity 8e93e501b9e8, cluster identity 4711 [ 540.611439][T13813] tipc: Enabled bearer , priority 0 [ 540.666776][T13817] syzkaller0: entered promiscuous mode [ 540.673080][T13817] syzkaller0: entered allmulticast mode [ 540.702925][T13812] tipc: Resetting bearer [ 540.713584][T13811] tipc: Resetting bearer [ 540.731568][T13811] tipc: Disabling bearer [ 541.948965][ T29] audit: type=1400 audit(3922548157.269:866): avc: denied { mount } for pid=13829 comm="syz.3.2280" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 543.205405][T13847] kAFS: No cell specified [ 543.543221][T13465] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 543.758782][T13465] usb 4-1: Using ep0 maxpacket: 32 [ 543.773198][T13465] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 543.899774][T13465] usb 4-1: config 0 has no interface number 0 [ 543.906497][T13465] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 544.355631][T13465] usb 4-1: config 0 interface 89 has no altsetting 0 [ 544.366096][T13855] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 544.374626][T13855] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2285'. [ 544.384545][T13855] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2285'. [ 544.394311][T13855] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 544.402805][T13855] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2285'. [ 544.489835][T13465] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 544.522909][ T29] audit: type=1400 audit(3922548159.850:867): avc: denied { read write } for pid=13866 comm="syz.5.2288" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 544.558209][T13465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.581077][T13465] usb 4-1: Product: syz [ 544.591896][T13465] usb 4-1: Manufacturer: syz [ 544.673577][T13465] usb 4-1: SerialNumber: syz [ 545.074639][ T29] audit: type=1400 audit(3922548159.850:868): avc: denied { open } for pid=13866 comm="syz.5.2288" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 545.116015][T13465] usb 4-1: config 0 descriptor?? [ 545.357764][ T29] audit: type=1400 audit(3922548160.671:869): avc: denied { create } for pid=13872 comm="syz.1.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 545.437467][T13874] netlink: 'syz.1.2290': attribute type 12 has an invalid length. [ 545.493422][T13465] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 545.521308][T13465] em28xx 4-1:0.89: Video interface 89 found: [ 546.769182][T13465] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 546.851623][T13465] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 546.869625][T13465] em28xx 4-1:0.89: board has no eeprom [ 547.150366][ T29] audit: type=1400 audit(3922548162.472:870): avc: denied { mount } for pid=13886 comm="syz.5.2294" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 547.196573][T13465] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 547.204776][T13465] em28xx 4-1:0.89: analog set to bulk mode. [ 547.553860][ T5935] em28xx 4-1:0.89: Registering V4L2 extension [ 547.577105][T13465] usb 4-1: USB disconnect, device number 27 [ 547.608481][T13465] em28xx 4-1:0.89: Disconnecting em28xx [ 547.707989][ T29] audit: type=1400 audit(3922548163.032:871): avc: denied { unmount } for pid=11157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 547.815058][T13901] No such timeout policy "syz0" [ 548.232227][ T5935] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 548.257726][ T29] audit: type=1326 audit(3922548163.582:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511379c819 code=0x7ffc0000 [ 548.335265][ T29] audit: type=1326 audit(3922548163.642:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511379c819 code=0x7ffc0000 [ 548.364638][ T5935] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 548.468785][ T5935] em28xx 4-1:0.89: No AC97 audio processor [ 548.484809][ T29] audit: type=1326 audit(3922548163.662:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f511379c819 code=0x7ffc0000 [ 548.517215][ T5935] usb 4-1: Decoder not found [ 548.532323][ T5935] em28xx 4-1:0.89: failed to create media graph [ 548.548013][ T5935] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 548.571390][ T5935] em28xx 4-1:0.89: Registering snapshot button... [ 549.104743][ T29] audit: type=1326 audit(3922548163.762:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511379c819 code=0x7ffc0000 [ 549.164101][ T5935] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input21 [ 549.228007][ T29] audit: type=1326 audit(3922548163.762:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.2.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511379c819 code=0x7ffc0000 [ 549.309495][ T5935] em28xx 4-1:0.89: Remote control support is not available for this card. [ 549.375896][T13465] em28xx 4-1:0.89: Closing input extension [ 549.451070][T13465] em28xx 4-1:0.89: Deregistering snapshot button [ 549.600390][T13919] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2303'. [ 550.432935][T13465] em28xx 4-1:0.89: Freeing device [ 551.026936][T13931] tipc: Enabled bearer , priority 0 [ 551.035322][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 551.035337][ T29] audit: type=1400 audit(3922548166.363:884): avc: denied { write } for pid=13932 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 551.065220][T13931] syzkaller0: entered promiscuous mode [ 551.071221][T13931] syzkaller0: entered allmulticast mode [ 551.220777][T13931] tipc: Resetting bearer [ 551.332742][T13930] tipc: Resetting bearer [ 551.569755][T13930] tipc: Disabling bearer [ 551.661677][T13943] netlink: 'syz.1.2309': attribute type 1 has an invalid length. [ 554.831927][T13959] bridge0: port 3(hsr0) entered blocking state [ 554.839308][T13959] bridge0: port 3(hsr0) entered disabled state [ 554.847105][T13959] hsr0: entered allmulticast mode [ 554.852801][T13959] hsr_slave_0: entered allmulticast mode [ 554.868354][T13959] hsr0: entered promiscuous mode [ 555.848385][T13965] .`: (slave bond_slave_0): Releasing backup interface [ 556.808521][ T29] audit: type=1400 audit(3922548172.136:885): avc: denied { getopt } for pid=13978 comm="syz.0.2319" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 556.974574][ T29] audit: type=1400 audit(3922548172.166:886): avc: denied { create } for pid=13978 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 557.141772][ T29] audit: type=1400 audit(3922548172.166:887): avc: denied { write } for pid=13978 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 557.167307][ T29] audit: type=1400 audit(3922548172.166:888): avc: denied { bind } for pid=13978 comm="syz.0.2319" lport=45410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 557.718026][ T29] audit: type=1400 audit(3922548172.166:889): avc: denied { node_bind } for pid=13978 comm="syz.0.2319" saddr=172.20.20.57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 557.786526][ T29] audit: type=1400 audit(3922548172.457:890): avc: denied { create } for pid=13977 comm="syz.5.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 559.951891][ T29] audit: type=1400 audit(3922548175.278:891): avc: denied { watch watch_reads } for pid=14004 comm="syz.1.2324" path="pipe:[3882]" dev="pipefs" ino=3882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 561.348657][ T29] audit: type=1400 audit(3922548176.679:892): avc: denied { create } for pid=14018 comm="syz.3.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 561.643455][ T29] audit: type=1400 audit(3922548176.679:893): avc: denied { write } for pid=14018 comm="syz.3.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 561.999480][ T29] audit: type=1400 audit(3922548177.309:894): avc: denied { read } for pid=14027 comm="syz.2.2330" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 562.457949][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.705602][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 563.048736][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 563.123669][T14046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=14046 comm=syz.0.2334 [ 563.558456][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 563.566918][ T5893] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 563.577829][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 563.591410][ T5893] usb 6-1: Product: syz [ 563.596068][ T5893] usb 6-1: SerialNumber: syz [ 563.615494][ T5893] usb 6-1: config 0 descriptor?? [ 563.649951][ T5893] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 563.652304][T14051] netlink: 'syz.1.2336': attribute type 10 has an invalid length. [ 563.693883][ T5893] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 563.698654][T14051] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2336'. [ 563.808520][ T5893] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 563.815575][ T5893] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 564.548854][ T29] audit: type=1400 audit(3922548179.890:895): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 564.832592][ T29] audit: type=1400 audit(3922548180.170:896): avc: denied { search } for pid=14063 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.939775][ T29] audit: type=1400 audit(3922548180.200:897): avc: denied { search } for pid=14063 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.247758][ T29] audit: type=1400 audit(3922548180.200:898): avc: denied { search } for pid=14063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.777303][ T29] audit: type=1400 audit(3922548180.200:899): avc: denied { search } for pid=14063 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.988798][ T29] audit: type=1400 audit(3922548180.210:900): avc: denied { read open } for pid=14066 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.056492][T14079] lo speed is unknown, defaulting to 1000 [ 566.063649][T14079] virt_wifi0 speed is unknown, defaulting to 1000 [ 566.143977][ T29] audit: type=1400 audit(3922548180.210:901): avc: denied { getattr } for pid=14066 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.211911][ T29] audit: type=1400 audit(3922548180.210:902): avc: denied { getattr } for pid=14066 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.394362][T14085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.424039][ T29] audit: type=1400 audit(3922548180.250:903): avc: denied { create } for pid=14035 comm="syz.5.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 567.582316][ T29] audit: type=1400 audit(3922548180.250:904): avc: denied { write } for pid=14035 comm="syz.5.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 567.604791][ T29] audit: type=1400 audit(3922548180.410:905): avc: denied { read } for pid=14070 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 568.136098][ T29] audit: type=1400 audit(3922548180.420:906): avc: denied { open } for pid=14070 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 568.286309][ T29] audit: type=1400 audit(3922548181.801:907): avc: denied { add_name } for pid=14063 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.376052][ T29] audit: type=1400 audit(3922548181.801:908): avc: denied { create } for pid=14063 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 569.465580][ T29] audit: type=1400 audit(3922548181.801:909): avc: denied { write } for pid=14063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=9279 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 569.948476][ T29] audit: type=1400 audit(3922548181.801:910): avc: denied { append } for pid=14063 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=9279 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 569.979508][ T29] audit: type=1400 audit(3922548183.452:911): avc: denied { mount } for pid=14096 comm="syz.0.2343" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 570.049437][ T29] audit: type=1400 audit(3922548183.672:912): avc: denied { remove_name } for pid=14099 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=9279 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.245797][ T7467] usb 6-1: USB disconnect, device number 6 [ 570.274584][ T29] audit: type=1400 audit(3922548183.672:913): avc: denied { unlink } for pid=14099 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=9279 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 575.890744][T14161] lo speed is unknown, defaulting to 1000 [ 575.900675][T14161] virt_wifi0 speed is unknown, defaulting to 1000 [ 576.247977][ T29] audit: type=1326 audit(3922548191.586:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14174 comm="syz.2.2360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f511379c819 code=0x0 [ 576.427159][ T29] audit: type=1400 audit(3922548191.766:915): avc: denied { write } for pid=14181 comm="syz.1.2354" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 576.453433][ T5817] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 576.563926][T14184] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.579238][ T29] audit: type=1400 audit(3922548191.766:916): avc: denied { open } for pid=14181 comm="syz.1.2354" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 577.454268][T14197] kAFS: unable to lookup cell '(,c¾ûL' [ 577.491468][ T29] audit: type=1400 audit(3922548192.827:917): avc: denied { bind } for pid=14194 comm="syz.5.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 577.590358][ T29] audit: type=1400 audit(3922548192.827:918): avc: denied { name_bind } for pid=14194 comm="syz.5.2365" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 577.681233][ T29] audit: type=1400 audit(3922548192.827:919): avc: denied { node_bind } for pid=14194 comm="syz.5.2365" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 577.719340][T14199] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.727435][T14199] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.798474][T14199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.812415][T14199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.502099][ T6354] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.519063][ T6354] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.666302][ T6354] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.696819][ T6354] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.772185][ T6354] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.410068][ T6354] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.455700][ T5817] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 580.460193][ T6346] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.466715][ T5817] Bluetooth: hci3: Injecting HCI hardware error event [ 580.491590][ T5130] Bluetooth: hci3: hardware error 0x00 [ 580.542428][ T6346] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.630664][ T29] audit: type=1400 audit(3922548195.968:920): avc: denied { read } for pid=14224 comm="syz.0.2371" lport=35501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 580.740562][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2373'. [ 581.012684][T14238] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 581.022051][T14238] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 581.035745][T14238] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 581.069604][ T29] audit: type=1400 audit(3922548196.378:921): avc: denied { firmware_load } for pid=14235 comm="syz.5.2376" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 581.224187][ T29] audit: type=1400 audit(3922548196.559:922): avc: denied { mount } for pid=14235 comm="syz.5.2376" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 582.041260][ T29] audit: type=1400 audit(3922548197.359:923): avc: denied { execute } for pid=14246 comm="syz.2.2379" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=42729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 582.205747][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2382'. [ 582.658908][ T5130] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 584.988266][ T5130] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 584.988433][ T5130] Bluetooth: hci4: connection err: -111 [ 587.391562][ T29] audit: type=1400 audit(3922548202.251:924): avc: denied { map } for pid=14278 comm="syz.3.2388" path="socket:[42837]" dev="sockfs" ino=42837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 587.536525][ T29] audit: type=1400 audit(3922548202.251:925): avc: denied { read accept } for pid=14278 comm="syz.3.2388" path="socket:[42837]" dev="sockfs" ino=42837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 589.778026][ T29] audit: type=1400 audit(3922548205.123:926): avc: denied { mounton } for pid=14298 comm="syz.3.2392" path="/446/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 589.803431][T14300] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 590.837753][ T29] audit: type=1400 audit(3922548206.053:927): avc: denied { read } for pid=14305 comm="syz.1.2394" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 590.955670][ T29] audit: type=1400 audit(3922548206.063:928): avc: denied { open } for pid=14305 comm="syz.1.2394" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 591.094854][ T29] audit: type=1400 audit(3922548206.083:929): avc: denied { ioctl } for pid=14305 comm="syz.1.2394" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 591.127712][T14304] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 591.142493][T14304] overlayfs: failed to look up (tracing) for ino (-66) [ 591.234642][ T29] audit: type=1400 audit(3922548206.564:930): avc: denied { accept } for pid=14311 comm="syz.0.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 591.823477][T14305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.286522][ T29] audit: type=1400 audit(3922548208.615:931): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 593.518596][ T29] audit: type=1400 audit(3922548208.865:932): avc: denied { name_connect } for pid=14340 comm="syz.3.2403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 594.300191][ T29] audit: type=1400 audit(3922548209.645:933): avc: denied { read write } for pid=14346 comm="syz.5.2404" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 594.493677][ T29] audit: type=1400 audit(3922548209.675:934): avc: denied { open } for pid=14346 comm="syz.5.2404" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 594.642155][ T29] audit: type=1400 audit(3922548209.785:935): avc: denied { write } for pid=14346 comm="syz.5.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 594.772182][ T29] audit: type=1400 audit(3922548209.885:936): avc: denied { listen } for pid=14346 comm="syz.5.2404" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 597.262235][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 597.281576][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 597.301547][T14374] netlink: 'syz.2.2410': attribute type 11 has an invalid length. [ 597.326787][T14374] netlink: 'syz.2.2410': attribute type 13 has an invalid length. [ 597.349565][T14375] bridge0: entered allmulticast mode [ 597.385936][T14378] CIFS mount error: No usable UNC path provided in device string! [ 597.385936][T14378] [ 597.392132][T14377] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2412'. [ 597.431586][T14378] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 597.462701][T14374] bridge_slave_1: left allmulticast mode [ 597.469321][T14374] bridge_slave_1: left promiscuous mode [ 597.498522][T14374] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.553231][T14374] bridge_slave_0: left allmulticast mode [ 597.559525][T14374] bridge_slave_0: left promiscuous mode [ 597.576250][T14374] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.083305][ T29] audit: type=1326 audit(3922548213.437:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.150041][ T29] audit: type=1326 audit(3922548213.437:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.255297][ T29] audit: type=1326 audit(3922548213.457:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.331844][ T29] audit: type=1326 audit(3922548213.457:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.551130][ T29] audit: type=1326 audit(3922548213.457:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.647165][ T29] audit: type=1326 audit(3922548213.467:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.751019][ T29] audit: type=1326 audit(3922548213.467:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.820815][ T29] audit: type=1326 audit(3922548213.467:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.876479][ T29] audit: type=1326 audit(3922548213.477:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.917643][ T29] audit: type=1326 audit(3922548213.477:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.951092][ T29] audit: type=1326 audit(3922548213.477:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 598.999388][ T29] audit: type=1326 audit(3922548213.477:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 599.050824][ T29] audit: type=1326 audit(3922548213.477:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14382 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d4d9c819 code=0x7ffc0000 [ 600.534437][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2422'. [ 602.143097][T14440] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2426'. [ 602.182697][T14444] syzkaller0: entered promiscuous mode [ 602.280334][T14444] syzkaller0: entered allmulticast mode [ 603.561137][T14459] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2431'. [ 605.514738][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 605.514757][ T29] audit: type=1326 audit(3922548220.340:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.1.2433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c0d59c819 code=0x0 [ 605.847793][T14474] No such timeout policy "syz0" [ 607.577207][ T29] audit: type=1400 audit(3922548222.912:959): avc: denied { mount } for pid=14485 comm="syz.3.2440" name="/" dev="rpc_pipefs" ino=44194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 608.253660][ T29] audit: type=1400 audit(3922548223.282:960): avc: denied { read } for pid=14488 comm="syz.2.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.786423][ T29] audit: type=1400 audit(3922548223.412:961): avc: denied { bind } for pid=14494 comm="syz.0.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.279111][T14522] lo speed is unknown, defaulting to 1000 [ 612.084762][ T29] audit: type=1400 audit(3922548227.414:962): avc: denied { create } for pid=14513 comm="syz.0.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 612.108334][T14522] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.460109][ T29] audit: type=1400 audit(3922548227.424:963): avc: denied { connect } for pid=14513 comm="syz.0.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 613.524689][ T29] audit: type=1400 audit(3922548228.805:964): avc: denied { bind } for pid=14515 comm="syz.3.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 613.797245][ T29] audit: type=1400 audit(3922548229.045:965): avc: denied { ioctl } for pid=14542 comm="syz.1.2454" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 614.584993][T13465] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 614.833380][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cc36000: rx timeout, send abort [ 614.852788][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cc36000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 615.222742][ T29] audit: type=1400 audit(3922548230.045:966): avc: denied { ioctl } for pid=14566 comm="syz.0.2458" path="socket:[43842]" dev="sockfs" ino=43842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 615.258087][ T29] audit: type=1400 audit(3922548230.616:967): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 615.434955][ T29] audit: type=1400 audit(3922548230.616:968): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.463503][T13465] usb 6-1: Using ep0 maxpacket: 16 [ 615.490798][T13465] usb 6-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 615.512492][ T29] audit: type=1400 audit(3922548230.616:969): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.522511][T13465] usb 6-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 615.575643][ T29] audit: type=1400 audit(3922548230.616:970): avc: denied { add_name } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.599418][ T29] audit: type=1400 audit(3922548230.616:971): avc: denied { create } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 615.636239][T13465] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 615.662624][T13465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.671410][T13465] usb 6-1: Product: syz [ 615.692288][T13465] usb 6-1: Manufacturer: syz [ 615.697356][T13465] usb 6-1: SerialNumber: syz [ 616.444101][T13465] usb 6-1: USB disconnect, device number 7 [ 616.631941][ T7475] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 616.803697][ T7475] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.815242][ T7475] usb 4-1: config 0 has no interfaces? [ 616.821318][ T7475] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 616.844593][ T7475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.878869][ T7475] usb 4-1: config 0 descriptor?? [ 617.113334][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 617.113350][ T29] audit: type=1400 audit(3922548232.477:978): avc: denied { open } for pid=14599 comm="syz.1.2468" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 617.385737][T14609] netlink: 'syz.3.2465': attribute type 10 has an invalid length. [ 617.394896][T14609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2465'. [ 617.407489][T14609] bridge0: port 3(dummy0) entered blocking state [ 617.416331][T14609] bridge0: port 3(dummy0) entered disabled state [ 617.427671][T14609] dummy0: entered allmulticast mode [ 617.457348][T14609] dummy0: entered promiscuous mode [ 617.472599][T14609] bridge0: port 3(dummy0) entered blocking state [ 617.479857][T14609] bridge0: port 3(dummy0) entered forwarding state [ 617.552610][ T29] audit: type=1400 audit(3922548232.527:979): avc: denied { ioctl } for pid=14599 comm="syz.1.2468" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 617.630461][ T29] audit: type=1400 audit(3922548232.737:980): avc: denied { listen } for pid=14589 comm="syz.3.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 617.682663][T13465] usb 4-1: USB disconnect, device number 28 [ 620.419692][T14639] syzkaller0: entered promiscuous mode [ 620.451475][T14639] syzkaller0: entered allmulticast mode [ 620.844436][T14643] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2477'. [ 621.551782][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2478'. [ 621.581735][T14650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2478'. [ 622.422008][ T29] audit: type=1400 audit(3922548237.769:981): avc: denied { write } for pid=14659 comm="syz.3.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 623.773892][T14679] o2cb: This node has not been configured. [ 623.780900][T14679] o2cb: Cluster check failed. Fix errors before retrying. [ 623.789000][T14679] (syz.2.2485,14679,1):user_dlm_register:674 ERROR: status = -22 [ 623.797537][T14679] (syz.2.2485,14679,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 623.818468][ T29] audit: type=1400 audit(3922548239.130:982): avc: denied { add_name } for pid=14674 comm="syz.2.2485" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 623.862936][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.126655][ T29] audit: type=1400 audit(3922548239.140:983): avc: denied { create } for pid=14674 comm="syz.2.2485" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 624.230248][ T29] audit: type=1400 audit(3922548239.140:984): avc: denied { associate } for pid=14674 comm="syz.2.2485" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 624.573626][T14683] syzkaller0: entered promiscuous mode [ 624.607007][T14683] syzkaller0: entered allmulticast mode [ 625.337150][ T29] audit: type=1400 audit(3922548240.661:985): avc: denied { create } for pid=14691 comm="syz.3.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 628.072493][ T6353] bridge_slave_1: left allmulticast mode [ 628.095939][ T6353] bridge_slave_1: left promiscuous mode [ 628.117244][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 628.130217][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 628.138785][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 628.147307][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 628.155452][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 628.181548][ T29] audit: type=1400 audit(3922548243.552:986): avc: denied { mounton } for pid=14717 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 628.210446][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.261816][ T6353] bridge_slave_0: left allmulticast mode [ 628.283637][ T6353] bridge_slave_0: left promiscuous mode [ 628.315098][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.354667][T14723] overlayfs: missing 'lowerdir' [ 628.430157][T14723] netlink: 'syz.2.2500': attribute type 1 has an invalid length. [ 628.479628][ T29] audit: type=1400 audit(3922548243.852:987): avc: denied { read append } for pid=14725 comm="syz.1.2501" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 628.570313][ T29] audit: type=1400 audit(3922548243.852:988): avc: denied { open } for pid=14725 comm="syz.1.2501" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 628.681846][ T29] audit: type=1400 audit(3922548243.982:989): avc: denied { map } for pid=14725 comm="syz.1.2501" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 628.858165][ T29] audit: type=1400 audit(3922548243.992:990): avc: denied { write } for pid=14725 comm="syz.1.2501" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 629.036511][ T6353] dvmrp8 (unregistering): left allmulticast mode [ 629.232346][ T6353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.324331][ T6353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.392417][ T6353] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 629.461715][ T6353] bond0 (unregistering): Released all slaves [ 629.599836][T14723] 8021q: adding VLAN 0 to HW filter on device bond6 [ 629.744271][T14727] 8021q: adding VLAN 0 to HW filter on device bond6 [ 629.812772][T14727] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 629.871446][T14727] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 630.030219][ T6353] tipc: Left network mode [ 630.208030][T14717] lo speed is unknown, defaulting to 1000 [ 630.215949][T14717] virt_wifi0 speed is unknown, defaulting to 1000 [ 630.255576][ T5817] Bluetooth: hci1: command tx timeout [ 631.374479][T14762] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2505'. [ 632.376655][ T5817] Bluetooth: hci1: command tx timeout [ 632.698134][T14764] kAFS: unable to lookup cell 'Þ({^ú@' [ 633.078580][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 633.273866][ T6353] hsr_slave_0: left promiscuous mode [ 633.306931][ T6353] hsr_slave_1: left promiscuous mode [ 633.322889][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'. [ 633.343709][T14775] netlink: 'syz.1.2507': attribute type 11 has an invalid length. [ 633.354194][ T6353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.365246][T14775] netlink: 'syz.1.2507': attribute type 13 has an invalid length. [ 633.395600][ T6353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.082861][T14791] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 634.413057][ T5817] Bluetooth: hci1: command tx timeout [ 634.443173][ T29] audit: type=1400 audit(3922548249.795:991): avc: denied { bind } for pid=14803 comm="syz.0.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 634.556766][ T29] audit: type=1400 audit(3922548249.795:992): avc: denied { listen } for pid=14803 comm="syz.0.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 634.865484][T14778] bridge0: entered allmulticast mode [ 634.886499][T14785] bridge_slave_1: left allmulticast mode [ 634.916371][T14785] bridge_slave_1: left promiscuous mode [ 634.953800][T14785] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.992150][T14813] /dev/nullb0: Can't lookup blockdev [ 635.017541][T14785] bridge_slave_0: left allmulticast mode [ 635.042072][T14785] bridge_slave_0: left promiscuous mode [ 635.078658][T14785] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.138178][T14815] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 637.074407][ T5817] Bluetooth: hci1: command tx timeout [ 637.137424][T14717] chnl_net:caif_netlink_parms(): no params data found [ 638.271394][ T29] audit: type=1400 audit(3922548253.637:993): avc: denied { getopt } for pid=14833 comm="syz.2.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 639.084172][ T29] audit: type=1400 audit(3922548254.447:994): avc: denied { read } for pid=14842 comm="syz.3.2521" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 639.111937][ T29] audit: type=1400 audit(3922548254.447:995): avc: denied { ioctl } for pid=14842 comm="syz.3.2521" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 639.114100][T14847] input: syz1 as /devices/virtual/input/input22 [ 639.412551][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.488044][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.511132][T14717] bridge_slave_0: entered allmulticast mode [ 639.518485][T14717] bridge_slave_0: entered promiscuous mode [ 639.586680][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.596291][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.653461][T14717] bridge_slave_1: entered allmulticast mode [ 639.666668][T14717] bridge_slave_1: entered promiscuous mode [ 640.245521][ T29] audit: type=1400 audit(3922548255.278:996): avc: denied { read write } for pid=14864 comm="syz.1.2523" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 640.292592][T14717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.326381][ T29] audit: type=1400 audit(3922548255.278:997): avc: denied { open } for pid=14864 comm="syz.1.2523" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 640.359182][T14717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.465088][T14717] team0: Port device team_slave_0 added [ 640.608725][T14717] team0: Port device team_slave_1 added [ 640.698901][T14717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.733925][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.904309][T14717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.525295][T14878] lo speed is unknown, defaulting to 1000 [ 641.534515][T14717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.562552][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.679491][T14717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.799548][T14878] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.967644][ T1087] ------------[ cut here ]------------ [ 642.974064][ T1087] time_after(jiffies, timeout) [ 642.974078][ T1087] WARNING: io_uring/io_uring.c:2342 at io_ring_exit_work+0x42d/0xd15, CPU#1: kworker/u8:7/1087 [ 642.990887][ T1087] Modules linked in: [ 642.995498][ T1087] CPU: 1 UID: 0 PID: 1087 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.007854][ T1087] Tainted: [L]=SOFTLOCKUP [ 643.012700][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 643.023865][ T1087] Workqueue: iou_exit io_ring_exit_work [ 643.030104][ T1087] RIP: 0010:io_ring_exit_work+0x42d/0xd15 [ 643.036407][ T1087] Code: 8e e8 17 2a 40 01 48 8b 05 30 b1 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 9e 96 d3 00 4d 85 ed 79 12 e8 b4 9b d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 a2 9b d3 00 48 8b 74 24 38 [ 643.058124][ T1087] RSP: 0018:ffffc9000525fab0 EFLAGS: 00010293 [ 643.064877][ T1087] RAX: 0000000000000000 RBX: ffff888030e64778 RCX: ffffffff81356162 [ 643.073685][ T1087] RDX: ffff888029908000 RSI: ffffffff8135616c RDI: ffff888029908000 [ 643.082495][ T1087] RBP: ffffc9000525fc38 R08: 0000000000000007 R09: 0000000000000000 [ 643.091289][ T1087] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff888030e64000 [ 643.100092][ T1087] R13: fffffffffffffffc R14: dffffc0000000000 R15: 0000000000000000 [ 643.108904][ T1087] FS: 0000000000000000(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000 [ 643.118772][ T1087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.126008][ T1087] CR2: 00007f3c0d5e9f00 CR3: 0000000034c73000 CR4: 00000000003526f0 [ 643.135081][ T1087] Call Trace: [ 643.138709][ T1087] [ 643.141933][ T1087] ? __pfx_io_ring_exit_work+0x10/0x10 [ 643.147941][ T1087] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 643.154340][ T1087] ? debug_object_deactivate+0x2e4/0x3b0 [ 643.160534][ T1087] ? rcu_is_watching+0x12/0xc0 [ 643.165759][ T1087] process_one_work+0xa23/0x19a0 [ 643.171203][ T1087] ? __pfx_process_one_work+0x10/0x10 [ 643.177082][ T1087] ? __pfx_io_ring_exit_work+0x10/0x10 [ 643.183090][ T1087] worker_thread+0x5ef/0xe50 [ 643.188111][ T1087] ? __pfx_worker_thread+0x10/0x10 [ 643.193739][ T1087] ? kthread+0x13a/0x450 [ 643.198372][ T1087] ? __pfx_worker_thread+0x10/0x10 [ 643.203982][ T1087] kthread+0x370/0x450 [ 643.208427][ T1087] ? __pfx_kthread+0x10/0x10 [ 643.213512][ T1087] ret_from_fork+0x754/0xd80 [ 643.218578][ T1087] ? __pfx_ret_from_fork+0x10/0x10 [ 643.224168][ T1087] ? __switch_to+0x7b4/0x1120 [ 643.229615][ T1087] ? __pfx_kthread+0x10/0x10 [ 643.234658][ T1087] ret_from_fork_asm+0x1a/0x30 [ 643.240253][ T1087] [ 643.243566][ T1087] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 643.251561][ T1087] CPU: 1 UID: 0 PID: 1087 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.263680][ T1087] Tainted: [L]=SOFTLOCKUP [ 643.268425][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 643.279468][ T1087] Workqueue: iou_exit io_ring_exit_work [ 643.285577][ T1087] Call Trace: [ 643.289174][ T1087] [ 643.292385][ T1087] dump_stack_lvl+0x100/0x190 [ 643.297541][ T1087] vpanic+0x552/0x970 [ 643.301911][ T1087] ? __pfx_vpanic+0x10/0x10 [ 643.306874][ T1087] panic+0xd1/0xe0 [ 643.310960][ T1087] ? __pfx_panic+0x10/0x10 [ 643.315828][ T1087] ? check_panic_on_warn+0x1f/0x90 [ 643.321445][ T1087] check_panic_on_warn.cold+0x19/0x34 [ 643.327335][ T1087] ? io_ring_exit_work+0x42d/0xd15 [ 643.332942][ T1087] __warn.cold+0x191/0x348 [ 643.337784][ T1087] __report_bug+0x296/0x3d0 [ 643.342721][ T1087] ? io_ring_exit_work+0x42d/0xd15 [ 643.348334][ T1087] ? __pfx___report_bug+0x10/0x10 [ 643.353842][ T1087] ? lockdep_hardirqs_on+0x78/0x100 [ 643.359545][ T1087] ? irqentry_exit+0x180/0x670 [ 643.364774][ T1087] ? io_ring_exit_work+0x42d/0xd15 [ 643.370383][ T1087] ? io_ring_exit_work+0x42d/0xd15 [ 643.375992][ T1087] report_bug+0xb2/0x220 [ 643.380639][ T1087] ? io_ring_exit_work+0x42d/0xd15 [ 643.386243][ T1087] handle_bug+0x16a/0x2a0 [ 643.390982][ T1087] exc_invalid_op+0x17/0x50 [ 643.395914][ T1087] asm_exc_invalid_op+0x1a/0x20 [ 643.401227][ T1087] RIP: 0010:io_ring_exit_work+0x42d/0xd15 [ 643.407502][ T1087] Code: 8e e8 17 2a 40 01 48 8b 05 30 b1 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 9e 96 d3 00 4d 85 ed 79 12 e8 b4 9b d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 a2 9b d3 00 48 8b 74 24 38 [ 643.429050][ T1087] RSP: 0018:ffffc9000525fab0 EFLAGS: 00010293 [ 643.435698][ T1087] RAX: 0000000000000000 RBX: ffff888030e64778 RCX: ffffffff81356162 [ 643.444440][ T1087] RDX: ffff888029908000 RSI: ffffffff8135616c RDI: ffff888029908000 [ 643.453183][ T1087] RBP: ffffc9000525fc38 R08: 0000000000000007 R09: 0000000000000000 [ 643.461923][ T1087] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff888030e64000 [ 643.470668][ T1087] R13: fffffffffffffffc R14: dffffc0000000000 R15: 0000000000000000 [ 643.479417][ T1087] ? io_ring_exit_work+0x422/0xd15 [ 643.485038][ T1087] ? io_ring_exit_work+0x42c/0xd15 [ 643.490665][ T1087] ? __pfx_io_ring_exit_work+0x10/0x10 [ 643.496660][ T1087] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 643.503033][ T1087] ? debug_object_deactivate+0x2e4/0x3b0 [ 643.509230][ T1087] ? rcu_is_watching+0x12/0xc0 [ 643.514479][ T1087] process_one_work+0xa23/0x19a0 [ 643.519910][ T1087] ? __pfx_process_one_work+0x10/0x10 [ 643.525827][ T1087] ? __pfx_io_ring_exit_work+0x10/0x10 [ 643.531824][ T1087] worker_thread+0x5ef/0xe50 [ 643.536861][ T1087] ? __pfx_worker_thread+0x10/0x10 [ 643.542465][ T1087] ? kthread+0x13a/0x450 [ 643.547110][ T1087] ? __pfx_worker_thread+0x10/0x10 [ 643.552753][ T1087] kthread+0x370/0x450 [ 643.557223][ T1087] ? __pfx_kthread+0x10/0x10 [ 643.562261][ T1087] ret_from_fork+0x754/0xd80 [ 643.567297][ T1087] ? __pfx_ret_from_fork+0x10/0x10 [ 643.572908][ T1087] ? __switch_to+0x7b4/0x1120 [ 643.578044][ T1087] ? __pfx_kthread+0x10/0x10 [ 643.583077][ T1087] ret_from_fork_asm+0x1a/0x30 [ 643.588318][ T1087] [ 643.591906][ T1087] Kernel Offset: disabled [ 643.596636][ T1087] Rebooting in 86400 seconds..