last executing test programs: 15.654463964s ago: executing program 4 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0)) r3 = timerfd_create(0x8, 0x80000) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r3, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004000c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x70, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0xb, 0x1, 'TIPCv2\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0xd, 0x1, '}\xa7-^/&-/\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0xb9}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x17, 0x1, './binderfs/binder0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000880) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c220000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 13.939604999s ago: executing program 4 (id=356): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) unlink(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001800)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000b002abd7000000000000500000008000300"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) 12.848088601s ago: executing program 2 (id=358): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000), 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) clock_adjtime(0x0, &(0x7f0000000100)={0x0, 0x20000000000006a, 0x55cd, 0x8000000000000001, 0x400, 0x5, 0xd, 0xb446, 0x2, 0xffffffffffffffff, 0x100000000f423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0xff, 0x4, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0xc84}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) 12.767678019s ago: executing program 4 (id=359): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) 11.686393602s ago: executing program 2 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x11, 0x0, r6}) syz_usb_connect(0x2, 0x913, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r9, 0x0, 0x0) 11.528935604s ago: executing program 4 (id=363): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000024c0)=[{{&(0x7f00000021c0)=@sco={0x1f, @none}, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/138}], 0x0, &(0x7f0000002480)=""/22}, 0x6}], 0x1010e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0x6, 0x8000000000000101, 0xfffffffffffffffc, 0x3, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4000002e, 0x0, @thr={0x0, 0x0}}) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[@ANYBLOB="12010200000000000000a8a440000102030109021b0001018140950904006d01070101050905ee827937c33d089e0b117141386b8d1a0102ff030d090d08a894ed3097a625910d73e9c2f09081ad74e46a073be233222d"], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="997562b200"], 0x2, [{0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x2024}}, {0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="0e03c422d81f7246c072ffa16f48"]}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f00000059c0)=[{{&(0x7f0000001880)={0xa, 0x4e24, 0x6b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}, 0x1c, 0x0}}], 0x1, 0x40000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bda02e48d73b90f1f00000008000300", @ANYRES32=r4, @ANYBLOB="08006b00f0000000"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x840) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000400)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0b26c78afaea3096d9061a2df0c1", 0x10003, 0x1000000000001, 0x400000001000000, 0xffffffffffffffff, 0x1000, 0xc, 0x4, 0x8, [0x3, 0x2, 0x4, 0x96a]}) connect$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="fffffffeffffffffffffffff86dd6000fd6400082f0000000000000000000000000000000000ff02000000000000000000000000000100006558000890789621bf9bee11c922563b22478fbb7e5f9e124f389d2d227c08ad8d244fc9274fb68fbc2693a768164856c6bc092cfe07fa6196a2858a34904b7947cae2a2fad3dff34c9ba871ceef58f458ad1f21418e748ec1b36f077bad5e47cf9bac46f9907fb18391cfa30708d8718de84fd12e55742fa5ebe874cc653b12"], 0x0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r8, &(0x7f00000010c0)=""/4096, 0x1000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r9, 0xc0045878) 10.029275982s ago: executing program 3 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket(0x2b, 0x80801, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) connect$inet(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRESOCT=r2, @ANYRESHEX=r4, @ANYBLOB='\x00'/28, @ANYRES32=r0], 0x50) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) getpgrp(0xffffffffffffffff) 9.978416063s ago: executing program 0 (id=367): socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) io_uring_enter(r5, 0x5291, 0x0, 0x0, 0x0, 0x0) 8.558899843s ago: executing program 0 (id=368): r0 = getpid() setpriority(0x2, r0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000048b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe) ioctl$sock_TIOCOUTQ(r4, 0x5411, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x480d02, 0x0) write$sequencer(r5, &(0x7f00000001c0)=[@raw={0xc, 0x2, "edc839543536"}], 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001fc0)={0x2020}, 0x2020) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=[@uexit={0x0, 0x18, 0x10001}, @code={0x1, 0x60, {"c4e22daae548b800980000000000000f23d00f21f835300000070f23f842c12f120fc72ab92a030000b862250000ba000000000f3066b8ab008ec86643d9faccb8010000000f01d966b8ee000f00d8"}}, @cpuid={0x2, 0x18, {0xdf7, 0x3}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x9, 0x1000}}, @cpuid={0x2, 0x18, {0x2}}, @cpuid={0x2, 0x18, {0x50000, 0x4}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x64, {"64366fb9a7030000b8f7ffffffbaffffff7f0f3066b813000f00d036f344ded0430fc774e60067656765f30fc77200663666440f38805b4b66b846008ec066baf80cb8661d5680ef66bafc0cb00fee0f005b00"}}, @uexit={0x0, 0x18}, @code={0x1, 0x46, {"66b8fd000f00d866b861000f00d0410f01cff20f07f2400f38f07000c443cd42ebb299420f01cf8fa9b094b500000000c4e2e94502"}}, @cpuid={0x2, 0x18, {0x4, 0xdc}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x10001}, @cpuid={0x2, 0x18, {0x6, 0xff}}, @code={0x1, 0x56, {"8f09609a82dfb5bf1a0f01c4450f788f008000006736460f2280440f20c0350c000000440f22c03e410fc77248c4a1c0563066b80b010f00d00fc79daa6f0000470f017205"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x5, 0x45d}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @code={0x1, 0x62, {"66b83d018ed0c744240002000000c7442402ee000000ff1c24b9800000c00f3235004000000f30410f070f0766baf80cb8122ce885ef66bafc0c66ed430f009f4236ffff40abc4435902d412470fc5f64a"}}, @cpuid={0x2, 0x18, {0xa, 0x1}}, @cpuid={0x2, 0x18, {0x8, 0x1}}, @uexit={0x0, 0x18, 0x6}], 0x3a2}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000140)={0x1f, 0x7fd, @none}, 0xe) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000280)={0x1, 0x3}, 0x2) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r9, 0x0, 0x13, 0x0, &(0x7f0000000c00)=0xffffffaa) 8.55845191s ago: executing program 3 (id=369): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x1c12c0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x109942, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r4, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) socket$igmp6(0xa, 0x3, 0x2) r5 = syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0xff09) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) syz_open_procfs(r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) recvmmsg(r7, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r7, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02160000"], 0x10}}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 8.353949899s ago: executing program 2 (id=371): fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$sysctl(r1, &(0x7f0000000300)='3\x00', 0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000084002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x1, 0x5, 0x9, 0x8, 0xe, "837d7efefe3a0fe297c3bbce37165879ad489b", 0x8, 0x11}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00'], 0x64}}, 0x0) socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@can_newroute={0x44, 0x18, 0x1, 0x70bd2a, 0x5, {0x1d, 0x1, 0x7}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "f5430b103460afde"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "72682b14f653e1a8"}, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20008030) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x2}, 0xe) 7.538941657s ago: executing program 1 (id=372): r0 = gettid() r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/ipc\x00') add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14}, 0xf1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x933, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001000000008"]) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000406010100000000000000000700000a0500010007000000050001000700000005000100070000000900020073797a3100000000aef8d4bcef6a81804eb155aa6a6172e0cfd2a8ce0954a3d7a95a015dea8cadb342523c95aba01db1971f5cb23bd35cc7ec0cff484d4d8c73ce258dce3913d81be29ce1968339f80d3ba9d391ffaa8d95a4d150390eef8320c2e05886b1a50137d59f8d212a08fadac6c9fab2f454900bf532b235d160401d9a93d624ffe1032d5c29772ac40899ffafadba33ce9974a52cfe909fee7ed79405e086d98cd290dd48c70b"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r6 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) fsmount(r6, 0x1, 0x9) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x0, 0x0, 0xfffe, 0x0}) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) 7.506953112s ago: executing program 3 (id=373): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) 7.360392423s ago: executing program 0 (id=374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) cachestat(0xffffffffffffffff, &(0x7f0000000100)={0x86de, 0x4}, &(0x7f0000000500), 0x0) prctl$PR_SET_NAME(0xf, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000020c0)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x1, 0x0, 0x1, [@nested={0x4, 0xbd}, @nested={0x10, 0xfe, 0x0, 0x1, [@nested={0x4, 0x147}, @typed={0x8, 0x1, 0x0, 0x0, @uid}]}]}]}, 0x28}], 0x1}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, 0x0, 0x3ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040), 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r5}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 7.334161238s ago: executing program 2 (id=375): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x8) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000380)={0x8, 0x2, 0x3}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) r5 = io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x5d50, 0x0, 0x0, 0x3c1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000002180)=r8) close_range(r5, 0xffffffffffffffff, 0x0) 6.37603593s ago: executing program 0 (id=376): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x8) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000380)={0x8, 0x2, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x5d50, 0x0, 0x0, 0x3c1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000002180)=r3) 6.252629772s ago: executing program 1 (id=377): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000004000), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x8}) sendto$l2tp(r2, &(0x7f0000000040)="bce1f52738779a17005a8489", 0xc, 0x44000, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) 6.140902s ago: executing program 4 (id=378): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002dc0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x8}, 0x8, 0x10004, 0x9b, 0x8000, r0, 0x0, 0x8}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000000c0)="510003000000", 0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0x8000, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd7000000300", @ANYRES32, @ANYBLOB="08000b000300000008000200ac"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.06620501s ago: executing program 1 (id=379): socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) io_uring_enter(r5, 0x5291, 0x0, 0x0, 0x0, 0x0) 5.080104389s ago: executing program 4 (id=380): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x8080) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fsopen(&(0x7f0000000000)='bfs\x00', 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 4.910601136s ago: executing program 1 (id=381): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000800600000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101a00, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000279000/0x2000)=nil, 0x2000, 0x0, 0x28011, r2, 0xfd5ec000) ftruncate(0xffffffffffffffff, 0x3) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x80000000, 0x6, '9P2000'}, 0x13) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 4.86570069s ago: executing program 2 (id=382): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$kcm(0x21, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0xb4, 0x30, 0x100, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x2c, 0x18, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x70, 0x19, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x1ff, 0x20000000, 0x2b}}]}, {0x23, 0x6, "ff946eacfee2d520c3f6f487fb8864be623c00"/31}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5d4c29221000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000140000240012800b00010065727370616e00001400028005001600020000000600030030000000"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x4001c00) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r6 = fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) close(r6) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[0x0, 0x0, &(0x7f0000000100)='security.', 0x0, 0x0, 0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.657398287s ago: executing program 3 (id=383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x100000001, 0x4) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) shmdt(r7) 3.252416825s ago: executing program 0 (id=384): syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = semget$private(0x0, 0x1, 0x81) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETVAL(r0, 0x1, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c0002800500010014000280080001000000000008000200ac14140008000540000000000900010073797a310000000000000000"], 0x58}}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7) keyctl$revoke(0x3, r3) read$watch_queue(r4, &(0x7f0000000300)=""/62, 0x3e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 2.428581268s ago: executing program 3 (id=385): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, 0x6, 0x2e58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=r4, @ANYRES8=r5, @ANYRES64=r1], 0x1c}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0xff09) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r8 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="6e87ca31cc915bb854000000000000", @ANYRES16=r10, @ANYBLOB="010025bd7000ffdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000d00000008000b00f2ffffff06001600000000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000000)=0x9, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r11}, 0x38) 1.334538974s ago: executing program 1 (id=386): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8c}}, './file0\x00'}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = dup3(r1, r0, 0x0) recvmmsg(r8, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x10000002}, 0x18) 1.316972461s ago: executing program 0 (id=387): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030303030"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}, r9}}, 0x30) dup3(r6, r5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1.283643324s ago: executing program 2 (id=388): openat$binderfs(0xffffffffffffff9c, &(0x7f0000002480)='./binderfs/binder0\x00', 0x800, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001b400)={0x11, 0x20000000000000f3, &(0x7f0000019580)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x3a, &(0x7f0000000280)=""/58, 0x41100, 0x5d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000001b6c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x45833af92e4b39ff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x1, &(0x7f0000019540)={0x20, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18bda15c85613a37043"}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) eventfd2(0x65c, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 435.181µs ago: executing program 1 (id=389): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x3, 0x1, 0x4}, 0x38) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x8, 0xfffeffff, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x68, 0x0, 0x7, 0x2b, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x44, 0xdd, 0x3, 0x8, [{@remote, 0x7}, {@private=0xa010102}, {@multicast2, 0x9}, {@multicast1, 0x5}, {@remote, 0x2}, {@multicast1, 0x6}, {@multicast2, 0x5}, {@multicast1, 0x2c7}]}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@local, r3}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x2, 0x0, 0xf6}) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000000)=0x637) read$FUSE(r6, &(0x7f0000004480)={0x2020}, 0x2020) fchown(r6, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sendmsg$kcm(r0, 0x0, 0x480c4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) 0s ago: executing program 3 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}}}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) time(0xfffffffffffffffc) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(r4, 0xb) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRESDEC]) r7 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r7, 0x0, 0x0, 0x47ec, &(0x7f0000e68000)={0x2, 0x4e03, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. [ 58.805165][ T30] audit: type=1400 audit(1751654108.772:62): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.808531][ T5814] cgroup: Unknown subsys name 'net' [ 58.827935][ T30] audit: type=1400 audit(1751654108.772:63): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.857889][ T30] audit: type=1400 audit(1751654108.832:64): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.003189][ T5814] cgroup: Unknown subsys name 'cpuset' [ 59.011139][ T5814] cgroup: Unknown subsys name 'rlimit' [ 59.176437][ T30] audit: type=1400 audit(1751654109.142:65): avc: denied { setattr } for pid=5814 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.208559][ T30] audit: type=1400 audit(1751654109.142:66): avc: denied { create } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.241122][ T30] audit: type=1400 audit(1751654109.142:67): avc: denied { write } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.261672][ T30] audit: type=1400 audit(1751654109.142:68): avc: denied { read } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.266454][ T5816] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.282191][ T30] audit: type=1400 audit(1751654109.152:69): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.315920][ T30] audit: type=1400 audit(1751654109.152:70): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.339334][ T30] audit: type=1400 audit(1751654109.192:71): avc: denied { read } for pid=5496 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.214739][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.224568][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.238271][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.246117][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.254042][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.264293][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.292405][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.300173][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.308228][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.315771][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.324547][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.332348][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.340295][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.348071][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.355876][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.356036][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.363502][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.372249][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.385013][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.397603][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.407698][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.417867][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.419465][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.434989][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.443102][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.454788][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.838583][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 62.896480][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 62.974441][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 63.021487][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 63.032325][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.039457][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.047032][ T5824] bridge_slave_0: entered allmulticast mode [ 63.053901][ T5824] bridge_slave_0: entered promiscuous mode [ 63.092388][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.099473][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.106698][ T5824] bridge_slave_1: entered allmulticast mode [ 63.113367][ T5824] bridge_slave_1: entered promiscuous mode [ 63.199286][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 63.209396][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.216699][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.224166][ T5827] bridge_slave_0: entered allmulticast mode [ 63.230974][ T5827] bridge_slave_0: entered promiscuous mode [ 63.243772][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.259497][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.266673][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.274589][ T5827] bridge_slave_1: entered allmulticast mode [ 63.281320][ T5827] bridge_slave_1: entered promiscuous mode [ 63.296237][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.367620][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.375052][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.382794][ T5831] bridge_slave_0: entered allmulticast mode [ 63.389415][ T5831] bridge_slave_0: entered promiscuous mode [ 63.413253][ T5824] team0: Port device team_slave_0 added [ 63.419225][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.426641][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.434300][ T5833] bridge_slave_0: entered allmulticast mode [ 63.441151][ T5833] bridge_slave_0: entered promiscuous mode [ 63.455801][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.463032][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.470112][ T5831] bridge_slave_1: entered allmulticast mode [ 63.477436][ T5831] bridge_slave_1: entered promiscuous mode [ 63.485510][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.495972][ T5824] team0: Port device team_slave_1 added [ 63.503320][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.512831][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.519907][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.527099][ T5833] bridge_slave_1: entered allmulticast mode [ 63.534341][ T5833] bridge_slave_1: entered promiscuous mode [ 63.607588][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.619495][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.638467][ T5827] team0: Port device team_slave_0 added [ 63.646299][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.670261][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.677589][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.703550][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.716295][ T5827] team0: Port device team_slave_1 added [ 63.723803][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.742119][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.749200][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.756572][ T5828] bridge_slave_0: entered allmulticast mode [ 63.763826][ T5828] bridge_slave_0: entered promiscuous mode [ 63.771670][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.778762][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.785944][ T5828] bridge_slave_1: entered allmulticast mode [ 63.792730][ T5828] bridge_slave_1: entered promiscuous mode [ 63.810681][ T5831] team0: Port device team_slave_0 added [ 63.816910][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.824578][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.850528][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.877242][ T5833] team0: Port device team_slave_0 added [ 63.896851][ T5831] team0: Port device team_slave_1 added [ 63.924277][ T5833] team0: Port device team_slave_1 added [ 63.930466][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.937774][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.963861][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.007069][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.014931][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.041334][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.054008][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.068163][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.075171][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.101114][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.113476][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.120418][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.146356][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.163541][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.170575][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.196506][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.209276][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.244595][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.251677][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.277610][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.302501][ T5828] team0: Port device team_slave_0 added [ 64.309717][ T5828] team0: Port device team_slave_1 added [ 64.328795][ T5824] hsr_slave_0: entered promiscuous mode [ 64.336230][ T5824] hsr_slave_1: entered promiscuous mode [ 64.387183][ T5827] hsr_slave_0: entered promiscuous mode [ 64.393414][ T5827] hsr_slave_1: entered promiscuous mode [ 64.399894][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.408106][ T5827] Cannot create hsr debugfs directory [ 64.421848][ T5830] Bluetooth: hci1: command tx timeout [ 64.424759][ T5831] hsr_slave_0: entered promiscuous mode [ 64.427514][ T5835] Bluetooth: hci0: command tx timeout [ 64.434772][ T5831] hsr_slave_1: entered promiscuous mode [ 64.444349][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.452089][ T5831] Cannot create hsr debugfs directory [ 64.469490][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.476681][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.501079][ T5830] Bluetooth: hci3: command tx timeout [ 64.502917][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.508268][ T50] Bluetooth: hci4: command tx timeout [ 64.520255][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.524370][ T5835] Bluetooth: hci2: command tx timeout [ 64.531214][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.562685][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.623595][ T5833] hsr_slave_0: entered promiscuous mode [ 64.629564][ T5833] hsr_slave_1: entered promiscuous mode [ 64.636220][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.643792][ T5833] Cannot create hsr debugfs directory [ 64.734975][ T5828] hsr_slave_0: entered promiscuous mode [ 64.742375][ T5828] hsr_slave_1: entered promiscuous mode [ 64.748249][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.755893][ T5828] Cannot create hsr debugfs directory [ 65.017106][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.027485][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.037986][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.054843][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.097209][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.108051][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.122354][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.132292][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.194593][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.209811][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.219416][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.230179][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.334976][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.348934][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.363481][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.372825][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.383543][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.418483][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.444002][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.485389][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.492558][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.512718][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.519550][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.530280][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.545896][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.552982][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.573868][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.585313][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.597105][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.604241][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.629372][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.649571][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.656718][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.684573][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.722748][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.729810][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.758130][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.765230][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.817306][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.857480][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.857495][ T30] audit: type=1400 audit(1751654115.822:86): avc: denied { sys_module } for pid=5824 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.869178][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.933671][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.012183][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.074122][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.081308][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.108502][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.115667][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.138174][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.190211][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.208768][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.220901][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.257586][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.271250][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.286341][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.332749][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.339883][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.391736][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.398875][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.430165][ T5831] veth0_vlan: entered promiscuous mode [ 66.464233][ T5824] veth0_vlan: entered promiscuous mode [ 66.485306][ T5831] veth1_vlan: entered promiscuous mode [ 66.493824][ T5827] veth0_vlan: entered promiscuous mode [ 66.501414][ T50] Bluetooth: hci0: command tx timeout [ 66.506837][ T50] Bluetooth: hci1: command tx timeout [ 66.525676][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.545012][ T5824] veth1_vlan: entered promiscuous mode [ 66.566091][ T5827] veth1_vlan: entered promiscuous mode [ 66.581787][ T50] Bluetooth: hci4: command tx timeout [ 66.587203][ T50] Bluetooth: hci2: command tx timeout [ 66.593829][ T5835] Bluetooth: hci3: command tx timeout [ 66.623599][ T5831] veth0_macvtap: entered promiscuous mode [ 66.654304][ T5831] veth1_macvtap: entered promiscuous mode [ 66.673721][ T5824] veth0_macvtap: entered promiscuous mode [ 66.702297][ T5824] veth1_macvtap: entered promiscuous mode [ 66.711638][ T5833] veth0_vlan: entered promiscuous mode [ 66.729118][ T5827] veth0_macvtap: entered promiscuous mode [ 66.738808][ T5827] veth1_macvtap: entered promiscuous mode [ 66.764385][ T5833] veth1_vlan: entered promiscuous mode [ 66.774450][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.792245][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.812353][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.823141][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.835576][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.846358][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.862743][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.874630][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.884814][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.894555][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.903641][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.917342][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.926389][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.935290][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.944002][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.971451][ T5833] veth0_macvtap: entered promiscuous mode [ 66.996238][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.005166][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.014722][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.023507][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.036114][ T5833] veth1_macvtap: entered promiscuous mode [ 67.139364][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.171696][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.179584][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.209283][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.254347][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.266282][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.277607][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.286439][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.299387][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.308469][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.323845][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.333682][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.341777][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.349612][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.375543][ T30] audit: type=1400 audit(1751654117.342:87): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.WhyoCf/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.401632][ T30] audit: type=1400 audit(1751654117.362:88): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.428678][ T30] audit: type=1400 audit(1751654117.362:89): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.WhyoCf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.455095][ T30] audit: type=1400 audit(1751654117.362:90): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.479087][ T30] audit: type=1400 audit(1751654117.392:91): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.WhyoCf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.480422][ T5828] veth0_vlan: entered promiscuous mode [ 67.508627][ T30] audit: type=1400 audit(1751654117.392:92): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.WhyoCf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.539429][ T30] audit: type=1400 audit(1751654117.392:93): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.550015][ T5828] veth1_vlan: entered promiscuous mode [ 67.566711][ T30] audit: type=1400 audit(1751654117.422:94): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.594966][ T30] audit: type=1400 audit(1751654117.422:95): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="gadgetfs" ino=6432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.629422][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.644261][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.644279][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.646707][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.668508][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.789196][ T5828] veth0_macvtap: entered promiscuous mode [ 67.922905][ T5828] veth1_macvtap: entered promiscuous mode [ 67.996457][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.010672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.036627][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.217047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.319441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.421869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.442357][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.481288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.552883][ T5950] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 68.560466][ T5950] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 68.568045][ T5950] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.626654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.653430][ T50] Bluetooth: hci1: command tx timeout [ 68.658882][ T50] Bluetooth: hci0: command tx timeout [ 68.664617][ T50] Bluetooth: hci2: command tx timeout [ 68.671223][ T50] Bluetooth: hci3: command tx timeout [ 68.676617][ T50] Bluetooth: hci4: command tx timeout [ 68.933868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.933897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.064895][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.075460][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.086525][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.096639][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.106218][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.116343][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.531984][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.544880][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.555538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.617586][ T5952] : entered promiscuous mode [ 69.731138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.534458][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.014347][ T5830] Bluetooth: hci4: command tx timeout [ 71.048537][ T5830] Bluetooth: hci3: command tx timeout [ 71.050593][ T50] Bluetooth: hci2: command tx timeout [ 71.056318][ T5830] Bluetooth: hci0: command tx timeout [ 71.059299][ T50] Bluetooth: hci1: command tx timeout [ 71.068099][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 71.068110][ T30] audit: type=1400 audit(1751654120.582:138): avc: denied { ioctl } for pid=5965 comm="syz.2.8" path="socket:[6744]" dev="sockfs" ino=6744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.081216][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.109116][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.122657][ T30] audit: type=1400 audit(1751654120.642:139): avc: denied { read write } for pid=5965 comm="syz.2.8" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.150382][ T30] audit: type=1400 audit(1751654120.642:140): avc: denied { open } for pid=5965 comm="syz.2.8" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.179801][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.197196][ T30] audit: type=1400 audit(1751654121.162:141): avc: denied { ioctl } for pid=5973 comm="syz.3.4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6775 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.341940][ T30] audit: type=1400 audit(1751654121.202:142): avc: denied { name_bind } for pid=5973 comm="syz.3.4" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 71.470582][ T5978] capability: warning: `syz.0.9' uses 32-bit capabilities (legacy support in use) [ 71.680570][ T30] audit: type=1400 audit(1751654121.202:143): avc: denied { node_bind } for pid=5973 comm="syz.3.4" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 71.701558][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.737030][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.851675][ T30] audit: type=1400 audit(1751654121.222:144): avc: denied { create } for pid=5973 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.873413][ T30] audit: type=1400 audit(1751654121.222:145): avc: denied { ioctl } for pid=5973 comm="syz.3.4" path="socket:[6779]" dev="sockfs" ino=6779 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.361665][ T30] audit: type=1400 audit(1751654121.222:146): avc: denied { setopt } for pid=5973 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.380903][ T30] audit: type=1400 audit(1751654121.222:147): avc: denied { write } for pid=5973 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.576675][ T5999] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 74.435661][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 74.832888][ T6013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.842046][ T6013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.206402][ T6028] sp0: Synchronizing with TNC [ 75.916509][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 75.947198][ T6007] Illegal XDP return value 2889259975 on prog (id 7) dev syz_tun, expect packet loss! [ 76.081486][ T880] cfg80211: failed to load regulatory.db [ 76.186562][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 76.186576][ T30] audit: type=1400 audit(1751654126.152:214): avc: denied { create } for pid=6037 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.401734][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.110977][ T30] audit: type=1400 audit(1751654127.062:215): avc: denied { create } for pid=6037 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.260623][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 77.273580][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.003571][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.312334][ T30] audit: type=1400 audit(1751654128.462:216): avc: denied { create } for pid=6037 comm="syz.3.19" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.333900][ T30] audit: type=1400 audit(1751654128.822:217): avc: denied { create } for pid=6042 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.342498][ T6028] [U] è [ 80.359138][ T30] audit: type=1400 audit(1751654128.822:218): avc: denied { write } for pid=6042 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.378387][ T30] audit: type=1400 audit(1751654129.032:219): avc: denied { create } for pid=6042 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.399251][ T30] audit: type=1400 audit(1751654129.042:220): avc: denied { write } for pid=6042 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.423262][ T30] audit: type=1400 audit(1751654129.042:221): avc: denied { nlmsg_write } for pid=6042 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.444119][ T30] audit: type=1400 audit(1751654129.042:222): avc: denied { module_request } for pid=6042 comm="syz.4.20" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.482581][ T9] usb 1-1: string descriptor 0 read error: -71 [ 80.493465][ T30] audit: type=1400 audit(1751654129.122:223): avc: denied { create } for pid=6042 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.506525][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 80.752614][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.921763][ T9] usb 1-1: config 0 descriptor?? [ 80.972972][ T9] usb 1-1: can't set config #0, error -71 [ 81.020323][ T9] usb 1-1: USB disconnect, device number 2 [ 81.569877][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 81.971813][ T6070] overlayfs: failed to resolve './file1': -2 [ 82.179153][ T30] audit: type=1400 audit(1751654131.532:231): avc: denied { allowed } for pid=6060 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.815171][ T30] audit: type=1400 audit(1751654131.532:232): avc: denied { map } for pid=6060 comm="syz.0.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.160330][ T30] audit: type=1400 audit(1751654131.532:233): avc: denied { read write } for pid=6060 comm="syz.0.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.490757][ T30] audit: type=1400 audit(1751654131.742:234): avc: denied { mounton } for pid=6060 comm="syz.0.25" path="/6/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.684365][ T30] audit: type=1400 audit(1751654132.362:235): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.501759][ T30] audit: type=1400 audit(1751654132.442:236): avc: denied { read } for pid=6062 comm="syz.2.26" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 84.869393][ T30] audit: type=1400 audit(1751654132.442:237): avc: denied { open } for pid=6062 comm="syz.2.26" path="pid:[4026532795]" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 84.999034][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 85.033654][ T6089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.129183][ T30] audit: type=1400 audit(1751654132.442:238): avc: denied { ioctl } for pid=6062 comm="syz.2.26" path="pid:[4026532795]" dev="nsfs" ino=4026532795 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.321278][ T30] audit: type=1400 audit(1751654132.452:239): avc: denied { sqpoll } for pid=6062 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.340331][ T30] audit: type=1400 audit(1751654132.992:240): avc: denied { watch } for pid=6055 comm="syz.4.23" path="/2" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.361205][ T6099] ======================================================= [ 86.361205][ T6099] WARNING: The mand mount option has been deprecated and [ 86.361205][ T6099] and is ignored by this kernel. Remove the mand [ 86.361205][ T6099] option from the mount to silence this warning. [ 86.361205][ T6099] ======================================================= [ 86.608843][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 86.608857][ T30] audit: type=1400 audit(1751654136.572:256): avc: denied { ioctl } for pid=6098 comm="syz.3.32" path="socket:[8162]" dev="sockfs" ino=8162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.711906][ T30] audit: type=1400 audit(1751654136.662:257): avc: denied { read } for pid=6096 comm="syz.2.30" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.735636][ T30] audit: type=1400 audit(1751654136.662:258): avc: denied { open } for pid=6096 comm="syz.2.30" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.760254][ T30] audit: type=1400 audit(1751654136.672:259): avc: denied { ioctl } for pid=6096 comm="syz.2.30" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.799940][ T6107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.830078][ T30] audit: type=1400 audit(1751654136.672:260): avc: denied { set_context_mgr } for pid=6096 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.830119][ T30] audit: type=1400 audit(1751654136.672:261): avc: denied { read write } for pid=6096 comm="syz.2.30" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.830157][ T30] audit: type=1400 audit(1751654136.672:262): avc: denied { open } for pid=6096 comm="syz.2.30" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.830196][ T30] audit: type=1400 audit(1751654136.762:263): avc: denied { create } for pid=6106 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.830232][ T30] audit: type=1400 audit(1751654136.782:264): avc: denied { mount } for pid=6096 comm="syz.2.30" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.925164][ T6109] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.340670][ T6112] ceph: No mds server is up or the cluster is laggy [ 88.353530][ T5937] libceph: connect (1)[c::]:6789 error -22 [ 88.416221][ T30] audit: type=1400 audit(1751654137.172:265): avc: denied { create } for pid=6106 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.472471][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 88.617303][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 88.626518][ T6108] bridge_slave_1: left allmulticast mode [ 88.632516][ T6108] bridge_slave_1: left promiscuous mode [ 88.645849][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.761657][ T6108] bridge_slave_0: left allmulticast mode [ 88.768146][ T6108] bridge_slave_0: left promiscuous mode [ 88.775294][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.224699][ T6127] overlay: Unknown parameter 'smackfshat' [ 89.318695][ T6129] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.353090][ T6135] input: syz0 as /devices/virtual/input/input5 [ 90.613525][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.38'. [ 91.023594][ T6145] process 'syz.1.39' launched './file1' with NULL argv: empty string added [ 91.300918][ T6148] overlayfs: failed to resolve './file1': -2 [ 91.671471][ T6145] overlayfs: missing 'lowerdir' [ 92.727140][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 92.727156][ T30] audit: type=1400 audit(1751654142.692:292): avc: denied { create } for pid=6143 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.753410][ T30] audit: type=1400 audit(1751654142.692:293): avc: denied { connect } for pid=6143 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.937149][ T30] audit: type=1400 audit(1751654142.692:294): avc: denied { write } for pid=6143 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.124315][ T30] audit: type=1400 audit(1751654142.692:295): avc: denied { map_read map_write } for pid=6143 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.144817][ T30] audit: type=1400 audit(1751654142.702:296): avc: denied { ioctl } for pid=6143 comm="syz.3.41" path="socket:[8214]" dev="sockfs" ino=8214 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.168969][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.595535][ T30] audit: type=1400 audit(1751654143.112:297): avc: denied { setopt } for pid=6155 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.849222][ T6166] bridge0: port 3(syz_tun) entered blocking state [ 93.855866][ T6166] bridge0: port 3(syz_tun) entered disabled state [ 93.863124][ T6166] syz_tun: entered allmulticast mode [ 93.870065][ T6166] syz_tun: entered promiscuous mode [ 93.875961][ T6166] bridge0: port 3(syz_tun) entered blocking state [ 93.882576][ T6166] bridge0: port 3(syz_tun) entered forwarding state [ 94.652226][ T30] audit: type=1400 audit(1751654143.812:298): avc: denied { mount } for pid=6155 comm="syz.2.43" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.786387][ T30] audit: type=1400 audit(1751654143.812:299): avc: denied { read write } for pid=6155 comm="syz.2.43" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.873058][ T30] audit: type=1400 audit(1751654143.812:300): avc: denied { open } for pid=6155 comm="syz.2.43" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.988231][ T30] audit: type=1400 audit(1751654143.812:301): avc: denied { ioctl } for pid=6155 comm="syz.2.43" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.949177][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 97.949195][ T30] audit: type=1400 audit(1751654147.912:312): avc: denied { read write } for pid=6202 comm="syz.4.53" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.080685][ T30] audit: type=1400 audit(1751654147.912:313): avc: denied { open } for pid=6202 comm="syz.4.53" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.104344][ T30] audit: type=1400 audit(1751654147.922:314): avc: denied { write } for pid=6202 comm="syz.4.53" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.367777][ T30] audit: type=1400 audit(1751654148.702:315): avc: denied { create } for pid=6203 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.588196][ T30] audit: type=1400 audit(1751654148.702:316): avc: denied { connect } for pid=6203 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.900450][ T30] audit: type=1400 audit(1751654148.722:317): avc: denied { write } for pid=6203 comm="syz.1.54" path="socket:[7083]" dev="sockfs" ino=7083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.708194][ T6211] syz_tun: left allmulticast mode [ 102.715703][ T6211] syz_tun: left promiscuous mode [ 102.731766][ T6211] bridge0: port 3(syz_tun) entered disabled state [ 103.192661][ T30] audit: type=1400 audit(1751654152.772:318): avc: denied { relabelto } for pid=6231 comm="syz.0.59" name="14" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 103.240360][ T30] audit: type=1400 audit(1751654152.772:319): avc: denied { associate } for pid=6231 comm="syz.0.59" name="14" dev="tmpfs" ino=92 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 103.278141][ T6238] netlink: 'syz.2.56': attribute type 10 has an invalid length. [ 103.925946][ T6211] bridge_slave_0: left allmulticast mode [ 103.945138][ T30] audit: type=1400 audit(1751654153.912:320): avc: denied { remove_name } for pid=5827 comm="syz-executor" name="file1" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 104.036423][ T6211] bridge_slave_0: left promiscuous mode [ 104.040181][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 104.068916][ T30] audit: type=1400 audit(1751654153.912:321): avc: denied { rmdir } for pid=5827 comm="syz-executor" name="14" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 104.118302][ T6209] syz.1.54 (6209): drop_caches: 2 [ 104.149220][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.165012][ T30] audit: type=1400 audit(1751654154.092:322): avc: denied { create } for pid=6243 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.166273][ T6211] bridge_slave_1: left allmulticast mode [ 104.166293][ T6211] bridge_slave_1: left promiscuous mode [ 104.166440][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.190437][ T6211] bond0: (slave bond_slave_0): Releasing backup interface [ 104.223475][ T6211] bond0: (slave bond_slave_1): Releasing backup interface [ 104.230366][ T6211] team0: Port device team_slave_0 removed [ 104.234786][ T6211] team0: Port device team_slave_1 removed [ 104.235128][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.235150][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.249453][ T6211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.249481][ T6211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.853827][ T6213] team0: Mode changed to "loadbalance" [ 105.467806][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.476215][ T6238] team0: Port device bond0 added [ 105.633380][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 105.700831][ T30] audit: type=1400 audit(1751654155.652:323): avc: denied { map } for pid=6262 comm="syz.4.64" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.701042][ T30] audit: type=1400 audit(1751654155.652:324): avc: denied { execute } for pid=6262 comm="syz.4.64" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.726897][ T6245] team0 (unregistering): Port device bond0 removed [ 105.755883][ T30] audit: type=1400 audit(1751654155.722:325): avc: denied { setopt } for pid=6262 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.758000][ T30] audit: type=1400 audit(1751654155.722:326): avc: denied { write } for pid=6262 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.759573][ T30] audit: type=1400 audit(1751654155.722:327): avc: denied { connect } for pid=6262 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.585984][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 108.586050][ T30] audit: type=1400 audit(1751654158.552:332): avc: denied { firmware_load } for pid=6279 comm="syz.4.68" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 108.651196][ T6244] tty tty21: ldisc open failed (-12), clearing slot 20 [ 108.725193][ T6247] tty tty21: ldisc open failed (-12), clearing slot 20 [ 109.044899][ T30] audit: type=1326 audit(1751654158.692:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89178e929 code=0x7ffc0000 [ 109.083808][ T30] audit: type=1326 audit(1751654158.692:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89178e929 code=0x7ffc0000 [ 109.315034][ T6285] syz.4.68 (6285) used greatest stack depth: 19800 bytes left [ 109.328205][ T30] audit: type=1400 audit(1751654159.262:335): avc: denied { write } for pid=6295 comm="syz.0.72" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 109.396029][ T30] audit: type=1400 audit(1751654159.362:336): avc: denied { append } for pid=6298 comm="syz.4.74" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.664750][ T6303] hub 9-0:1.0: USB hub found [ 109.671186][ T6303] hub 9-0:1.0: 1 port detected [ 110.376790][ T30] audit: type=1400 audit(1751654159.612:337): avc: denied { write } for pid=6298 comm="syz.4.74" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.530952][ T30] audit: type=1400 audit(1751654160.492:338): avc: denied { ioctl } for pid=6295 comm="syz.0.72" path="socket:[8647]" dev="sockfs" ino=8647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.714341][ T30] audit: type=1400 audit(1751654160.542:339): avc: denied { ioctl } for pid=6295 comm="syz.0.72" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 110.905413][ T6308] overlayfs: missing 'lowerdir' [ 111.117501][ T6315] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 111.140622][ T6315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.167990][ T30] audit: type=1400 audit(1751654161.122:340): avc: denied { open } for pid=6307 comm="syz.4.75" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.415253][ T30] audit: type=1400 audit(1751654161.292:341): avc: denied { ioctl } for pid=6311 comm="syz.1.76" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.463074][ T6341] Bluetooth: MGMT ver 1.23 [ 113.564159][ T6341] block device autoloading is deprecated and will be removed. [ 114.027082][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 114.027094][ T30] audit: type=1400 audit(1751654163.422:344): avc: denied { bind } for pid=6328 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.082980][ T30] audit: type=1400 audit(1751654163.432:345): avc: denied { write } for pid=6328 comm="syz.3.79" path="socket:[9459]" dev="sockfs" ino=9459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.311434][ T30] audit: type=1400 audit(1751654164.282:346): avc: denied { wake_alarm } for pid=6349 comm="syz.0.84" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.532584][ T6352] xt_TCPMSS: Only works on TCP SYN packets [ 114.540713][ T6352] overlayfs: missing 'lowerdir' [ 114.548348][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 114.770559][ T30] audit: type=1400 audit(1751654164.732:347): avc: denied { bind } for pid=6349 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.910428][ T6360] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.928963][ T6360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.272092][ T30] audit: type=1400 audit(1751654164.732:348): avc: denied { name_bind } for pid=6349 comm="syz.0.84" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 115.302474][ T30] audit: type=1400 audit(1751654164.732:349): avc: denied { node_bind } for pid=6349 comm="syz.0.84" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 115.323858][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.692280][ T6364] xt_HMARK: proto mask must be zero with L3 mode [ 115.780794][ T54] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.599623][ T30] audit: type=1400 audit(1751654166.562:350): avc: denied { mount } for pid=6370 comm="syz.3.88" name="/" dev="autofs" ino=9511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 116.621755][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.650557][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 116.759415][ T30] audit: type=1400 audit(1751654166.702:351): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 116.779661][ T54] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 116.804219][ T54] usb 1-1: config 0 has no interface number 0 [ 116.820705][ T54] usb 1-1: config 0 interface 2 has no altsetting 0 [ 116.962032][ T30] audit: type=1400 audit(1751654166.932:352): avc: denied { map } for pid=6373 comm="syz.4.89" path="socket:[9521]" dev="sockfs" ino=9521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 116.985746][ T6378] xt_TCPMSS: Only works on TCP SYN packets [ 117.050595][ T54] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 117.150254][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.176120][ T30] audit: type=1400 audit(1751654166.932:353): avc: denied { accept } for pid=6373 comm="syz.4.89" path="socket:[9521]" dev="sockfs" ino=9521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 117.211647][ T54] usb 1-1: Product: syz [ 117.224949][ T54] usb 1-1: Manufacturer: syz [ 117.234401][ T54] usb 1-1: SerialNumber: syz [ 117.247677][ T54] usb 1-1: config 0 descriptor?? [ 117.460801][ T6382] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.527841][ T6383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.065725][ T6391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.090701][ T6391] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 119.170702][ T30] audit: type=1400 audit(1751654169.102:354): avc: denied { read } for pid=6390 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.217856][ T30] audit: type=1400 audit(1751654169.172:355): avc: denied { setopt } for pid=6390 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.541389][ T6399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.749713][ T6391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.757806][ T6391] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 119.789013][ T6391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.807548][ T6391] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 119.843852][ T54] usb 1-1: can't set config #0, error -71 [ 119.853877][ T6391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.879490][ T54] usb 1-1: USB disconnect, device number 3 [ 119.990517][ T6391] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 120.029821][ T6391] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.058371][ T6391] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 120.941545][ T6411] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.965622][ T6411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.332597][ T30] audit: type=1400 audit(1751654171.292:356): avc: denied { create } for pid=6403 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.769983][ T30] audit: type=1400 audit(1751654171.532:357): avc: denied { connect } for pid=6416 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.858075][ T30] audit: type=1400 audit(1751654171.792:358): avc: denied { create } for pid=6416 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.882370][ T30] audit: type=1400 audit(1751654172.772:359): avc: denied { bind } for pid=6416 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.967647][ T30] audit: type=1400 audit(1751654172.782:360): avc: denied { name_bind } for pid=6416 comm="syz.0.99" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 123.030939][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.080688][ T30] audit: type=1400 audit(1751654172.782:361): avc: denied { node_bind } for pid=6416 comm="syz.0.99" saddr=2f23:2f6d:7372:: src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 123.120484][ T30] audit: type=1400 audit(1751654173.012:362): avc: denied { read open } for pid=6432 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.162802][ T880] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 123.193061][ T30] audit: type=1400 audit(1751654173.012:363): avc: denied { getattr } for pid=6432 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.338277][ T6441] overlayfs: missing 'lowerdir' [ 123.374899][ T880] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 123.383895][ T880] usb 1-1: config 0 has no interface number 0 [ 123.506558][ T880] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 123.543070][ T880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.627983][ T880] usb 1-1: config 0 descriptor?? [ 123.668551][ T880] hub 1-1:0.3: bad descriptor, ignoring hub [ 123.708255][ T880] hub 1-1:0.3: probe with driver hub failed with error -5 [ 123.742759][ T880] sierra 1-1:0.3: Sierra USB modem converter detected [ 124.292694][ T880] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 124.316026][ T30] audit: type=1400 audit(1751654174.262:364): avc: denied { add_name } for pid=6430 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.382088][ T880] usb 1-1: USB disconnect, device number 4 [ 124.455156][ T880] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 124.474379][ T30] audit: type=1400 audit(1751654174.262:365): avc: denied { create } for pid=6430 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.498007][ T5894] usb 2-1: device descriptor read/all, error -71 [ 124.523797][ T880] sierra 1-1:0.3: device disconnected [ 124.679543][ T30] audit: type=1400 audit(1751654174.262:366): avc: denied { write } for pid=6430 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2366 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.311753][ T30] audit: type=1400 audit(1751654174.262:367): avc: denied { append } for pid=6430 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2366 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.353715][ T30] audit: type=1400 audit(1751654175.262:368): avc: denied { remove_name } for pid=6461 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2366 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.410301][ T30] audit: type=1400 audit(1751654175.262:369): avc: denied { unlink } for pid=6461 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2366 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.503549][ T6467] netlink: 'syz.1.106': attribute type 2 has an invalid length. [ 125.959227][ T6471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.009903][ T6483] overlayfs: missing 'lowerdir' [ 127.072190][ T6490] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 127.093525][ T6490] Failed to get privilege flags for destination (handle=0x2:0x4) [ 127.406223][ T30] audit: type=1400 audit(1751654177.372:370): avc: denied { read } for pid=6473 comm="syz.0.108" path="socket:[9651]" dev="sockfs" ino=9651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.514628][ T30] audit: type=1400 audit(1751654178.482:371): avc: denied { relabelfrom } for pid=6494 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 129.035838][ T30] audit: type=1400 audit(1751654178.482:372): avc: denied { relabelto } for pid=6494 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 130.119220][ T6526] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 130.176725][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 130.185760][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'. [ 130.221972][ T6526] geneve2: entered promiscuous mode [ 130.227248][ T6526] geneve2: entered allmulticast mode [ 131.203971][ T30] audit: type=1400 audit(1751654181.162:373): avc: denied { write } for pid=6532 comm="syz.1.119" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.287560][ T30] audit: type=1400 audit(1751654181.192:374): avc: denied { read } for pid=6532 comm="syz.1.119" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.788098][ T6544] wg0 speed is unknown, defaulting to 1000 [ 131.803269][ T6544] wg0 speed is unknown, defaulting to 1000 [ 131.818808][ T6544] wg0 speed is unknown, defaulting to 1000 [ 132.013570][ T30] audit: type=1400 audit(1751654181.752:375): avc: denied { write } for pid=6539 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 132.046430][ T6544] infiniband syz2: set active [ 132.051192][ T6544] infiniband syz2: added wg0 [ 132.059936][ T9] wg0 speed is unknown, defaulting to 1000 [ 132.176450][ T6544] RDS/IB: syz2: added [ 132.181023][ T6544] smc: adding ib device syz2 with port count 1 [ 132.187265][ T6544] smc: ib device syz2 port 1 has pnetid [ 132.195358][ T6544] wg0 speed is unknown, defaulting to 1000 [ 132.279476][ T6544] wg0 speed is unknown, defaulting to 1000 [ 132.344643][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.372017][ T6544] wg0 speed is unknown, defaulting to 1000 [ 132.466757][ T6544] wg0 speed is unknown, defaulting to 1000 [ 132.547306][ T6544] wg0 speed is unknown, defaulting to 1000 [ 132.629304][ T9] wg0 speed is unknown, defaulting to 1000 [ 132.659678][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.221636][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 133.227916][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.600070][ T6578] can0: slcan on ttyS3. [ 136.280968][ T6578] can0 (unregistered): slcan off ttyS3. [ 138.577551][ T30] audit: type=1400 audit(1751654187.492:376): avc: denied { read write } for pid=6574 comm="syz.4.126" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 138.861763][ T6603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.664764][ T30] audit: type=1400 audit(1751654187.492:377): avc: denied { open } for pid=6574 comm="syz.4.126" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 140.012742][ T30] audit: type=1400 audit(1751654187.652:378): avc: denied { bind } for pid=6587 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.034739][ T5937] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.230746][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 140.295594][ T30] audit: type=1400 audit(1751654187.672:379): avc: denied { write } for pid=6587 comm="syz.1.128" path="socket:[9009]" dev="sockfs" ino=9009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.340013][ T5937] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 140.410177][ T5937] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 140.447345][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.457406][ T30] audit: type=1400 audit(1751654190.402:380): avc: denied { ioctl } for pid=6610 comm="syz.4.132" path="socket:[10038]" dev="sockfs" ino=10038 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.470801][ T6611] bond0: (slave rose0): Enslaving as an active interface with an up link [ 140.490821][ T5937] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.507999][ T5937] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 141.220679][ T30] audit: type=1400 audit(1751654191.182:381): avc: denied { setopt } for pid=6610 comm="syz.4.132" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.320834][ T6611] netlink: 48 bytes leftover after parsing attributes in process `syz.4.132'. [ 141.584687][ T5937] usb 2-1: string descriptor 0 read error: -71 [ 141.621847][ T5937] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 141.655418][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.666578][ T30] audit: type=1400 audit(1751654191.632:382): avc: denied { write } for pid=6635 comm="syz.0.136" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 141.783237][ T5937] usb 2-1: can't set config #155, error -71 [ 141.820744][ T5937] usb 2-1: USB disconnect, device number 4 [ 141.828459][ T30] audit: type=1400 audit(1751654191.662:383): avc: denied { ioctl } for pid=6635 comm="syz.0.136" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 142.190576][ T5901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.382345][ T5901] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 142.413269][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.513558][ T5901] usb 1-1: Product: syz [ 142.517798][ T5901] usb 1-1: Manufacturer: syz [ 142.523321][ T5901] usb 1-1: SerialNumber: syz [ 142.539690][ T5901] usb 1-1: config 0 descriptor?? [ 142.555588][ T5901] ch341 1-1:0.0: ch341-uart converter detected [ 144.633920][ T5901] usb 1-1: failed to receive control message: -110 [ 144.696618][ T5901] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 144.703165][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.140'. [ 145.058928][ T30] audit: type=1400 audit(1751654194.762:384): avc: denied { watch } for pid=6656 comm="syz.4.140" path="/26" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.094646][ T5901] usb 1-1: USB disconnect, device number 5 [ 145.137615][ T5901] ch341 1-1:0.0: device disconnected [ 145.509745][ T6670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.363787][ T6699] xt_HMARK: proto mask must be zero with L3 mode [ 150.206424][ T30] audit: type=1400 audit(1751654200.172:385): avc: denied { read write } for pid=6736 comm="syz.0.155" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 150.452412][ T6743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 150.790120][ T30] audit: type=1400 audit(1751654200.172:386): avc: denied { open } for pid=6736 comm="syz.0.155" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.080775][ T6766] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 153.209366][ T6766] Failed to get privilege flags for destination (handle=0x2:0x4) [ 153.715281][ T6775] sit1: entered allmulticast mode [ 154.247350][ T30] audit: type=1400 audit(1751654204.212:387): avc: denied { bind } for pid=6777 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.248360][ T6778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6778 comm=syz.2.164 [ 160.739999][ T6836] xt_CT: No such helper "pptp" [ 160.886954][ T6831] xt_CT: No such helper "pptp" [ 162.042907][ T30] audit: type=1400 audit(2000000003.240:388): avc: denied { setopt } for pid=6843 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.677616][ T30] audit: type=1400 audit(2000000004.310:389): avc: denied { create } for pid=6855 comm="syz.2.180" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.410706][ T30] audit: type=1400 audit(2000000004.330:390): avc: denied { map } for pid=6855 comm="syz.2.180" path="socket:[11434]" dev="sockfs" ino=11434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 163.736207][ T6862] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.751613][ T6862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.779992][ T30] audit: type=1400 audit(2000000005.140:391): avc: denied { append } for pid=6867 comm="syz.4.181" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.682520][ T30] audit: type=1400 audit(2000000006.130:392): avc: denied { map } for pid=6870 comm="syz.2.182" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.878650][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 165.525376][ T6900] vxfs: WRONG superblock magic 00000000 at 1 [ 165.533020][ T6900] vxfs: WRONG superblock magic 00000000 at 8 [ 165.539038][ T6900] vxfs: can't find superblock. [ 165.655313][ T6897] ceph: No mds server is up or the cluster is laggy [ 165.663105][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 165.721852][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 166.035619][ T30] audit: type=1400 audit(2000000007.690:393): avc: denied { create } for pid=6904 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 166.560414][ T30] audit: type=1400 audit(2000000007.690:394): avc: denied { setopt } for pid=6904 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 166.567684][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 166.579764][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.894174][ T30] audit: type=1400 audit(2000000007.690:395): avc: denied { name_connect } for pid=6904 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 166.914209][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.354704][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.380962][ T6916] Zero length message leads to an empty skb [ 167.393330][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.709701][ T6919] syz.1.190 (6919): drop_caches: 2 [ 167.845802][ T6919] syz.1.190 (6919): drop_caches: 2 [ 168.082208][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 168.104546][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.211043][ T9] usb 1-1: config 0 descriptor?? [ 168.239510][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 168.265010][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 168.273965][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 168.647112][ T6926] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 168.893375][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 169.148835][ T6930] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.162259][ T6930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.202943][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 169.270029][ T9] usb 1-1: media controller created [ 169.320498][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.367807][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 169.385277][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 169.405050][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 169.488570][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 169.535050][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 169.692116][ T5894] dvb-usb: bulk message failed: -22 (1/0) [ 169.702722][ T5894] dvb-usb: error while querying for an remote control event. [ 170.509525][ T5894] dvb-usb: bulk message failed: -22 (1/0) [ 170.743675][ T5894] dvb-usb: error while querying for an remote control event. [ 171.358357][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 171.372102][ T9] dvb-usb: error while querying for an remote control event. [ 171.676294][ T880] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 171.694366][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 171.719164][ T9] dvb-usb: error while querying for an remote control event. [ 171.765769][ T5937] usb 1-1: USB disconnect, device number 6 [ 171.838516][ T5937] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 171.939984][ T880] usb 3-1: Using ep0 maxpacket: 8 [ 172.681552][ T880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 172.693321][ T880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 172.708037][ T880] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 172.719779][ T880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.738045][ T880] usb 3-1: Product: syz [ 172.748154][ T880] usb 3-1: Manufacturer: syz [ 172.828690][ T880] usb 3-1: SerialNumber: syz [ 172.866895][ T880] usb 3-1: config 0 descriptor?? [ 172.995402][ T880] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 173.005613][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 173.948199][ T880] usb 3-1: USB disconnect, device number 2 [ 174.766819][ T7002] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 174.805603][ T7001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.699134][ T30] audit: type=1400 audit(2000000018.670:396): avc: denied { listen } for pid=7023 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.119630][ T7049] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 179.142376][ T7049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.661615][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 180.067181][ T7060] TCP: TCP_TX_DELAY enabled [ 180.305500][ T7065] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 180.328961][ T7065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.442995][ T30] audit: type=1400 audit(2000000023.031:397): avc: denied { bind } for pid=7071 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.718437][ T30] audit: type=1400 audit(2000000023.031:398): avc: denied { listen } for pid=7071 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.832121][ T30] audit: type=1400 audit(2000000023.031:399): avc: denied { accept } for pid=7071 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.884780][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 182.473169][ T30] audit: type=1400 audit(2000000024.141:400): avc: denied { ioctl } for pid=7098 comm="syz.3.228" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.739236][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 182.748182][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 183.050430][ T30] audit: type=1400 audit(2000000024.381:401): avc: denied { create } for pid=7098 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 183.980557][ T30] audit: type=1400 audit(2000000025.631:402): avc: denied { remove_name } for pid=7110 comm="syz.0.230" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.506554][ T30] audit: type=1400 audit(2000000025.631:403): avc: denied { unlink } for pid=7110 comm="syz.0.230" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 184.571766][ T30] audit: type=1400 audit(2000000025.631:404): avc: denied { create } for pid=7110 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 185.064546][ T7120] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.088160][ T7120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.482534][ T7123] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 185.885782][ T7132] xt_TCPMSS: Only works on TCP SYN packets [ 186.543587][ T30] audit: type=1400 audit(2000000028.171:405): avc: denied { getopt } for pid=7122 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.262348][ T7145] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 187.323567][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 187.332477][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 187.344210][ T7145] geneve2: entered promiscuous mode [ 187.349456][ T7145] geneve2: entered allmulticast mode [ 187.709053][ T5937] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 187.953113][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 188.097774][ T7161] QAT: failed to copy from user cfg_data. [ 188.491623][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 189.401253][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 190.577473][ T30] audit: type=1400 audit(2000000032.231:406): avc: denied { load_policy } for pid=7175 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 190.981887][ T7182] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 191.008418][ T7182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.296496][ T7179] SELinux: failed to load policy [ 192.509757][ T917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 192.719069][ T917] usb 4-1: Using ep0 maxpacket: 16 [ 193.042296][ T917] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 193.116442][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.202023][ T917] usb 4-1: Product: syz [ 193.235257][ T30] audit: type=1800 audit(2000000034.871:407): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.248" name="bus" dev="overlay" ino=315 res=0 errno=0 [ 193.271493][ T917] usb 4-1: Manufacturer: syz [ 193.315889][ T917] usb 4-1: SerialNumber: syz [ 193.690312][ T917] usb 4-1: config 0 descriptor?? [ 193.708835][ T5937] usb 3-1: device descriptor read/all, error -71 [ 193.725191][ T917] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 193.787347][ T917] usb 4-1: No valid video chain found. [ 193.788792][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.808728][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.267744][ T917] usb 4-1: USB disconnect, device number 2 [ 195.294792][ T30] audit: type=1400 audit(2000000036.091:408): avc: denied { remount } for pid=7215 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 195.550337][ T30] audit: type=1400 audit(2000000036.771:409): avc: denied { create } for pid=7216 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.689954][ T30] audit: type=1400 audit(2000000036.781:410): avc: denied { write } for pid=7216 comm="syz.0.252" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.787428][ T7238] netlink: 'syz.1.256': attribute type 21 has an invalid length. [ 195.795384][ T7238] netlink: 128 bytes leftover after parsing attributes in process `syz.1.256'. [ 195.804508][ T7238] netlink: 35 bytes leftover after parsing attributes in process `syz.1.256'. [ 195.953494][ T30] audit: type=1400 audit(2000000037.182:411): avc: denied { bind } for pid=7216 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.364075][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 196.673831][ T30] audit: type=1400 audit(2000000037.182:412): avc: denied { write } for pid=7216 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.726362][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 196.956210][ T7242] batadv_slave_0: entered promiscuous mode [ 197.045379][ T7248] tmpfs: Bad value for 'mpol' [ 198.171737][ T30] audit: type=1400 audit(2000000039.452:413): avc: denied { create } for pid=7247 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.203889][ T30] audit: type=1400 audit(2000000039.452:414): avc: denied { write } for pid=7247 comm="syz.0.259" name="ptype" dev="proc" ino=4026532823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 198.699603][ T7262] sit1: entered allmulticast mode [ 199.860339][ T7273] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 200.594203][ T30] audit: type=1400 audit(2000000042.182:415): avc: denied { setattr } for pid=7266 comm="syz.3.266" name="ptype" dev="proc" ino=4026533235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 201.591728][ T30] audit: type=1400 audit(2000000043.012:416): avc: denied { append } for pid=7283 comm="syz.3.270" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.608107][ T30] audit: type=1400 audit(2000000043.662:417): avc: denied { setopt } for pid=7291 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.638129][ T30] audit: type=1400 audit(2000000045.132:418): avc: denied { mount } for pid=7299 comm="syz.3.275" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 203.773727][ T7311] netlink: 'syz.2.273': attribute type 21 has an invalid length. [ 203.773787][ T7311] netlink: 128 bytes leftover after parsing attributes in process `syz.2.273'. [ 203.774068][ T7311] netlink: 35 bytes leftover after parsing attributes in process `syz.2.273'. [ 204.625683][ T7324] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 205.031669][ T30] audit: type=1400 audit(2000000046.692:419): avc: denied { search } for pid=7299 comm="syz.3.275" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 205.166135][ T30] audit: type=1400 audit(2000000046.692:420): avc: denied { search } for pid=7299 comm="syz.3.275" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 205.404289][ T30] audit: type=1400 audit(2000000046.692:421): avc: denied { search } for pid=7299 comm="syz.3.275" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 205.870920][ T30] audit: type=1400 audit(2000000046.702:422): avc: denied { search } for pid=7299 comm="syz.3.275" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 205.995321][ T30] audit: type=1400 audit(2000000046.702:423): avc: denied { read open } for pid=7299 comm="syz.3.275" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 206.143510][ T7337] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 207.588514][ T7347] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 207.687547][ T7345] overlayfs: missing 'lowerdir' [ 208.561390][ T30] audit: type=1400 audit(2000000050.232:424): avc: denied { create } for pid=7355 comm="syz.0.286" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 208.827941][ T7358] rdma_rxe: rxe_newlink: failed to add lo [ 209.249437][ T30] audit: type=1400 audit(2000000050.252:425): avc: denied { write } for pid=7355 comm="syz.0.286" name="file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 209.281873][ T30] audit: type=1400 audit(2000000050.262:426): avc: denied { open } for pid=7355 comm="syz.0.286" path="/60/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 209.460884][ T30] audit: type=1400 audit(2000000051.112:427): avc: denied { unlink } for pid=5827 comm="syz-executor" name="file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 210.182677][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.191704][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.233970][ T7365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.250223][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.273014][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.310878][ T30] audit: type=1400 audit(2000000051.972:428): avc: denied { ioctl } for pid=7359 comm="syz.4.287" path="socket:[11066]" dev="sockfs" ino=11066 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 210.338993][ T7369] openvswitch: netlink: Flow key attr not present in new flow. [ 210.655906][ T30] audit: type=1326 audit(2000000052.132:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2f8e929 code=0x7ffc0000 [ 211.130981][ T30] audit: type=1326 audit(2000000052.132:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2f8e929 code=0x7ffc0000 [ 211.155968][ T30] audit: type=1326 audit(2000000052.162:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbec2f8e929 code=0x7ffc0000 [ 211.460646][ T7378] can0: slcan on ttyS3. [ 211.848594][ T30] audit: type=1326 audit(2000000052.162:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2f8e929 code=0x7ffc0000 [ 211.873982][ T30] audit: type=1326 audit(2000000052.162:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec2f8e929 code=0x7ffc0000 [ 212.068460][ T7378] can0 (unregistered): slcan off ttyS3. [ 212.272798][ T7384] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 214.074118][ T7394] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 215.163729][ T7409] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 215.651693][ T7413] xt_TCPMSS: Only works on TCP SYN packets [ 217.374185][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 217.374618][ T30] audit: type=1400 audit(2000000059.043:460): avc: denied { name_bind } for pid=7432 comm="syz.1.303" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 217.447526][ T7435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.303'. [ 218.786734][ T7449] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 219.126899][ T7451] lo speed is unknown, defaulting to 1000 [ 219.132935][ T7451] lo speed is unknown, defaulting to 1000 [ 219.142496][ T7451] lo speed is unknown, defaulting to 1000 [ 219.161985][ T7451] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.203545][ T7451] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 219.417524][ T30] audit: type=1400 audit(2000000059.863:461): avc: denied { create } for pid=7445 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 219.420115][ T7451] lo speed is unknown, defaulting to 1000 [ 219.446843][ T7451] lo speed is unknown, defaulting to 1000 [ 219.453923][ T7451] lo speed is unknown, defaulting to 1000 [ 219.462374][ T7451] lo speed is unknown, defaulting to 1000 [ 219.470416][ T7451] lo speed is unknown, defaulting to 1000 [ 219.518223][ T30] audit: type=1400 audit(2000000059.883:462): avc: denied { ioctl } for pid=7445 comm="syz.0.305" path="socket:[12418]" dev="sockfs" ino=12418 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 220.703275][ T30] audit: type=1400 audit(2000000061.043:463): avc: denied { getopt } for pid=7423 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.620674][ T7467] Can't find a SQUASHFS superblock on nullb0 [ 221.667875][ T30] audit: type=1800 audit(2000000063.283:464): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.309" name="SYSV798dd818" dev="tmpfs" ino=0 res=0 errno=0 [ 222.264315][ T7472] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.900727][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 224.277676][ T7484] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 224.847034][ T30] audit: type=1400 audit(2000000066.503:465): avc: denied { sys_module } for pid=7491 comm="syz.3.316" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 224.867938][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.631553][ T7505] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 225.728489][ T30] audit: type=1400 audit(2000000066.553:466): avc: denied { write } for pid=7491 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 226.091411][ T7494] wg0 speed is unknown, defaulting to 1000 [ 226.756112][ T30] audit: type=1400 audit(2000000068.003:467): avc: denied { getopt } for pid=7510 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.174706][ T30] audit: type=1800 audit(2000000068.083:468): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.321" name="bus" dev="overlay" ino=338 res=0 errno=0 [ 227.587234][ T7494] lo speed is unknown, defaulting to 1000 [ 228.468349][ T7536] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 229.094985][ T30] audit: type=1400 audit(2000000070.583:469): avc: denied { append } for pid=7539 comm="syz.3.327" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 229.208107][ T7542] syz.3.327: attempt to access beyond end of device [ 229.208107][ T7542] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 229.235197][ T30] audit: type=1400 audit(2000000070.873:470): avc: denied { mounton } for pid=7539 comm="syz.3.327" path="/66/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.710306][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'. [ 230.634317][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 230.879909][ T7558] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 231.522249][ T7563] mmap: syz.4.333 (7563) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 231.679569][ T30] audit: type=1400 audit(2000000073.354:471): avc: denied { create } for pid=7569 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 233.209676][ T30] audit: type=1400 audit(2000000073.404:472): avc: denied { connect } for pid=7569 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 234.272867][ T7589] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.059023][ T7588] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[7588] [ 237.958394][ T7602] xt_CT: No such helper "pptp" [ 238.107045][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 238.154660][ T30] audit: type=1400 audit(2000000079.814:473): avc: denied { append } for pid=7615 comm="syz.4.346" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 238.556164][ T30] audit: type=1400 audit(2000000080.114:474): avc: denied { create } for pid=7615 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 239.336296][ T30] audit: type=1400 audit(2000000080.164:475): avc: denied { sys_admin } for pid=7615 comm="syz.4.346" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 239.357867][ T30] audit: type=1400 audit(2000000080.294:476): avc: denied { bind } for pid=7615 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.377384][ T30] audit: type=1400 audit(2000000080.294:477): avc: denied { connect } for pid=7615 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.084183][ T30] audit: type=1400 audit(2000000082.734:478): avc: denied { mount } for pid=7637 comm="syz.3.350" name="/" dev="ramfs" ino=13592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 242.323469][ T7652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7652 comm=syz.4.352 [ 243.588070][ T7665] fuse: Bad value for 'fd' [ 244.591432][ T7684] mkiss: ax0: crc mode is auto. [ 246.489134][ T7715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.979656][ T7723] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 249.252120][ T30] audit: type=1400 audit(2000000090.474:479): avc: denied { map } for pid=7729 comm="syz.2.371" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.287902][ T30] audit: type=1400 audit(2000000090.474:480): avc: denied { execute } for pid=7729 comm="syz.2.371" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.391672][ T30] audit: type=1400 audit(2000000090.835:481): avc: denied { connect } for pid=7729 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.431419][ T30] audit: type=1400 audit(2000000090.915:482): avc: denied { setopt } for pid=7731 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.741211][ T7751] program syz.1.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.795545][ T7752] program syz.1.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.859330][ T30] audit: type=1400 audit(2000000091.405:483): avc: denied { read write } for pid=7743 comm="syz.1.372" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.887698][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 249.898560][ T7752] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 249.995531][ T30] audit: type=1400 audit(2000000091.405:484): avc: denied { open } for pid=7743 comm="syz.1.372" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 250.183306][ T30] audit: type=1400 audit(2000000091.465:485): avc: denied { ioctl } for pid=7743 comm="syz.1.372" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 251.184079][ T7774] Bluetooth: MGMT ver 1.23 [ 252.523147][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 252.716699][ T30] audit: type=1400 audit(2000000094.165:486): avc: denied { map } for pid=7784 comm="syz.1.381" path="socket:[12949]" dev="sockfs" ino=12949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 252.953908][ T7792] kernel profiling enabled (shift: 17) [ 253.029232][ T7792] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 253.038011][ T7792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.382'. [ 253.059284][ T7792] bridge0: port 1(dummy0) entered blocking state [ 253.068210][ T7792] bridge0: port 1(dummy0) entered disabled state [ 253.076505][ T7792] dummy0: entered allmulticast mode [ 253.094877][ T7792] dummy0: entered promiscuous mode [ 253.107433][ T7792] bridge0: port 1(dummy0) entered blocking state [ 253.113885][ T7792] bridge0: port 1(dummy0) entered forwarding state [ 253.859286][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 253.871536][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 254.007773][ T30] audit: type=1400 audit(2000000095.605:487): avc: denied { write } for pid=7798 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 255.217100][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.334681][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.733610][ T30] audit: type=1400 audit(2000000097.395:488): avc: denied { read append } for pid=7808 comm="syz.1.386" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 255.758256][ T30] audit: type=1400 audit(2000000097.395:489): avc: denied { open } for pid=7808 comm="syz.1.386" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 255.813515][ T30] audit: type=1400 audit(2000000097.395:490): avc: denied { ioctl } for pid=7808 comm="syz.1.386" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.975068][ T30] audit: type=1400 audit(2000000098.185:491): avc: denied { read } for pid=7808 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.104712][ T7825] syz.3.390 (7825): drop_caches: 2 [ 257.167441][ T7825] syz.3.390 (7825): drop_caches: 2 [ 258.132109][ T7827] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN NOPTI [ 258.144201][ T7827] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 258.153717][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.1.389 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 258.165581][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.175611][ T7827] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 258.182271][ T7827] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 c8 f2 84 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 258.201862][ T7827] RSP: 0018:ffffc9000396f1e8 EFLAGS: 00010206 [ 258.207918][ T7827] RAX: dffffc0000000000 RBX: ffff888029f78000 RCX: ffffc9000d76e000 [ 258.215878][ T7827] RDX: 00000000000a2403 RSI: ffffffff8b372dd8 RDI: 0000000000512018 [ 258.223832][ T7827] RBP: ffff888032038000 R08: 0000000000000005 R09: 0000000000000000 [ 258.231812][ T7827] R10: 0000000080000001 R11: 0000000000000001 R12: ffff8880578e05e8 [ 258.239773][ T7827] R13: ffff888064c12780 R14: 0000000000512000 R15: ffff888029f78560 [ 258.247749][ T7827] FS: 00007fba2a6bb6c0(0000) GS:ffff888124717000(0000) knlGS:0000000000000000 [ 258.256659][ T7827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.263221][ T7827] CR2: 000020000000e000 CR3: 00000000359cf000 CR4: 00000000003526f0 [ 258.271185][ T7827] Call Trace: [ 258.274454][ T7827] [ 258.277373][ T7827] ? netlink_rcv_skb+0x158/0x420 [ 258.282293][ T7827] ? netlink_unicast+0x53a/0x7f0 [ 258.287209][ T7827] ? netlink_sendmsg+0x8d1/0xdd0 [ 258.292131][ T7827] ? ____sys_sendmsg+0xa95/0xc70 [ 258.297044][ T7827] ? ___sys_sendmsg+0x134/0x1d0 [ 258.301876][ T7827] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 258.308188][ T7827] ? find_held_lock+0x2b/0x80 [ 258.312845][ T7827] ? rcu_read_unlock+0x17/0x60 [ 258.317597][ T7827] ? __lock_acquire+0xb8a/0x1c90 [ 258.322523][ T7827] ? lock_acquire+0x179/0x350 [ 258.327172][ T7827] ? smc_diag_dump_proto+0x2ce/0x420 [ 258.332437][ T7827] smc_diag_dump_proto+0x26d/0x420 [ 258.337543][ T7827] smc_diag_dump+0x84/0x90 [ 258.341960][ T7827] netlink_dump+0x51e/0xce0 [ 258.346447][ T7827] ? __pfx_netlink_dump+0x10/0x10 [ 258.351459][ T7827] __netlink_dump_start+0x6d6/0x990 [ 258.356636][ T7827] smc_diag_handler_dump+0x1f9/0x240 [ 258.361908][ T7827] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 258.367706][ T7827] ? __pfx_smc_diag_dump+0x10/0x10 [ 258.372812][ T7827] ? sock_diag_lock_handler+0x10f/0x2e0 [ 258.378345][ T7827] sock_diag_rcv_msg+0x435/0x790 [ 258.383259][ T7827] netlink_rcv_skb+0x158/0x420 [ 258.387998][ T7827] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 258.393432][ T7827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.398705][ T7827] ? netlink_deliver_tap+0x1ae/0xd30 [ 258.403994][ T7827] netlink_unicast+0x53a/0x7f0 [ 258.408753][ T7827] ? __pfx_netlink_unicast+0x10/0x10 [ 258.414026][ T7827] ? __build_skb_around+0x278/0x3b0 [ 258.419204][ T7827] netlink_sendmsg+0x8d1/0xdd0 [ 258.423956][ T7827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.429229][ T7827] ____sys_sendmsg+0xa95/0xc70 [ 258.433968][ T7827] ? copy_msghdr_from_user+0x10a/0x160 [ 258.439405][ T7827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.444675][ T7827] ? __pfx_futex_wake_mark+0x10/0x10 [ 258.449935][ T7827] ___sys_sendmsg+0x134/0x1d0 [ 258.454590][ T7827] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.459764][ T7827] ? __lock_acquire+0x622/0x1c90 [ 258.464698][ T7827] __sys_sendmsg+0x16d/0x220 [ 258.469276][ T7827] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.474372][ T7827] ? __x64_sys_futex+0x1e0/0x4c0 [ 258.479297][ T7827] do_syscall_64+0xcd/0x4c0 [ 258.483798][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.489667][ T7827] RIP: 0033:0x7fba2978e929 [ 258.494059][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.513644][ T7827] RSP: 002b:00007fba2a6bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.522031][ T7827] RAX: ffffffffffffffda RBX: 00007fba299b6080 RCX: 00007fba2978e929 [ 258.529975][ T7827] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005 [ 258.537923][ T7827] RBP: 00007fba29810b39 R08: 0000000000000000 R09: 0000000000000000 [ 258.545868][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.553814][ T7827] R13: 0000000000000000 R14: 00007fba299b6080 R15: 00007ffd62d77798 [ 258.561774][ T7827] [ 258.564769][ T7827] Modules linked in: [ 258.571349][ T7827] ---[ end trace 0000000000000000 ]--- [ 258.578661][ T7827] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 258.585419][ T7827] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 c8 f2 84 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 258.605120][ T7827] RSP: 0018:ffffc9000396f1e8 EFLAGS: 00010206 [ 258.611212][ T7827] RAX: dffffc0000000000 RBX: ffff888029f78000 RCX: ffffc9000d76e000 [ 258.619246][ T7827] RDX: 00000000000a2403 RSI: ffffffff8b372dd8 RDI: 0000000000512018 [ 258.627287][ T7827] RBP: ffff888032038000 R08: 0000000000000005 R09: 0000000000000000 [ 258.635325][ T7827] R10: 0000000080000001 R11: 0000000000000001 R12: ffff8880578e05e8 [ 258.643304][ T7827] R13: ffff888064c12780 R14: 0000000000512000 R15: ffff888029f78560 [ 258.651345][ T7827] FS: 00007fba2a6bb6c0(0000) GS:ffff888124717000(0000) knlGS:0000000000000000 [ 258.660433][ T7827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.667138][ T7827] CR2: 000020000000e000 CR3: 00000000359cf000 CR4: 00000000003526f0 [ 258.676884][ T7827] Kernel panic - not syncing: Fatal exception [ 258.683136][ T7827] Kernel Offset: disabled [ 258.687437][ T7827] Rebooting in 86400 seconds..