last executing test programs: 13.184802295s ago: executing program 1 (id=714): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0xfb, 0x0, 0x223d}, 0xc) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000008c0)) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x80, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x5}}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r9, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11.393228464s ago: executing program 1 (id=716): io_uring_setup(0x5a3c, &(0x7f0000000100)={0x0, 0xfffffffd, 0x40, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xffffffffff7ffffb, 0x213f8603, 0x63, 0x8, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x5, 0x100000000], 0x3000, 0x280384}) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.283481332s ago: executing program 3 (id=717): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000580)="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", 0x179}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r4, r3, 0x26, 0x0, @void}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$l2tp(0x2, 0x2, 0x73) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x1) chdir(&(0x7f0000000000)='./bus\x00') 10.346248729s ago: executing program 1 (id=718): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858", 0x92}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5e466cc8a3089dfc1bc1a9a4293295a2a1a106df2fb4f2480163cbb97fab5e5c51b9fb1ff8ad292f054790e", 0xae}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653ea5d7bf9f0c681ab60972ee1", 0x80}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfeec722721", 0x4d}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x8) r5 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x12e, [0x200000000480, 0x0, 0x0, 0x2000000004b0, 0x2000000004e0], 0x84000000, 0x0, 0x0}, 0x1a6) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x3, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x800005}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) syz_emit_vhci(&(0x7f00000039c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7f, 0x0, 0x401}}}, 0x7) setuid(0xee01) membarrier(0x10, 0x0) 10.34588451s ago: executing program 2 (id=719): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') readv(r0, &(0x7f0000001440), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYBLOB="08001f00"], 0x48}}, 0x440088c4) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 9.415499608s ago: executing program 0 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) munlockall() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48}) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/234, 0xea}, 0x275a}], 0x1, 0x60010000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00001a00000d000008001fde65ef0a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 9.314760635s ago: executing program 1 (id=722): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0506020000000000000000000007140000001100010000000000000000000000000abf08bfba86d940a23b5f8f0800b5c2522473ad089eb3d4040fc86fa5760f8692707c6259e5e1fa5dceca1730e4de7a2786974036740b1deb991601c408dcc2e639f6cb8cedec0dfc688e28b5cbbe662b3e3a36de87224299b6955337562eb68ac0a8c3a022aa45fb3d9a50ac3e88e0ece968fba6f0c908b78c856a05e43bbedc523138c6cdaa615d04187794605d52"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32000000001400000011"], 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0x1000) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) 9.269478608s ago: executing program 3 (id=723): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x74, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_LINK={0x8, 0x3, 0xff}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 8.390659005s ago: executing program 3 (id=725): io_uring_setup(0x5a3c, &(0x7f0000000100)={0x0, 0xfffffffd, 0x40, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xffffffffff7ffffb, 0x213f8603, 0x63, 0x8, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x5, 0x100000000], 0x3000, 0x280384}) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.080128959s ago: executing program 2 (id=727): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000580)="c3c74e21610f6ea79a59011f050ff06d97eaf246a010d9438b4ac0db72c9036e7bd319f06ec5e2e9c6de04b8c05f747baca816ce176a67529bc4e239b91740f15f31aa2e4cee7174ea19e4bfb8cbeca44c71faa6466532470a61ae684ea4c7ef1dcc9d9304126a6ec5a78549bdd98023593adb8557c456929d01e3487edbade6646c52f4d52678373536380159c4fd9cc21a0f859ab83b25e7b41fda76ac03380dd5a410a71a665a32f9566dcfb4bbc742ca561d9d118f33961a5a36cb1710fa48e2b18ed3496eb0f9082894afe138761e714c795a86e8717e7d7e164cab35412579396bee175ec6286b10134095271a781902134fb3544114c8aef4f16299d347d7c9a3f78e24544e04e4de7da3f6feb88b7a358892a92a7727aba84a7b420000000000000000000000000080a63118c7a204b20fc5ec6a8c2f24206859bb29b01e7625789fc355a0235829ad230e272c48181858fe05474e0eb5ac152d22b46fb76fe557230bc117d572c12efb99a893be7c195b4fb30df1", 0x179}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r4, r3, 0x26, 0x0, @void}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$l2tp(0x2, 0x2, 0x73) close_range(r5, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x1) chdir(&(0x7f0000000000)='./bus\x00') 7.760635265s ago: executing program 2 (id=729): r0 = syz_clone3(&(0x7f00000000c0)={0x100002400, &(0x7f0000000240), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), 0x6, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x1000000) r2 = fsopen(&(0x7f0000000280)='omfs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1400200bce) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='co@\xdc\xcd\xf8H)\xb8\x16uz\x15\f\xa2ce', &(0x7f0000000340)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae1\xa2$A\xdb\xd7\xbe\x8f\xf9r?O\xec\xe2G\xb9YY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fp\xdc\x8b\t\x00Bl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd1\xcd5g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00\xe9\x00\x00', 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x4, "563e359cde7ccdca47d10000dc0000000000000000800a00000000007310717d", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, 0x0) setpriority(0x2, r0, 0x3) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x60000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 7.330270416s ago: executing program 0 (id=731): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000580)="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", 0x179}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r4, r3, 0x26, 0x0, @void}, 0x10) socket$l2tp(0x2, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x1) chdir(&(0x7f0000000000)='./bus\x00') 7.17617209s ago: executing program 3 (id=732): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[], 0xff2e) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r6 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000640)={0x1}, 0x0) landlock_restrict_self(r6, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000140)={0x7, 0x100000, 0x6, 0x2, 0x0, 0x4}) syz_open_pts(r4, 0x40) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r0}) 5.998337151s ago: executing program 0 (id=733): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858", 0x92}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5e466cc8a3089dfc1bc1a9a4293295a2a1a106df2fb4f2480163cbb97fab5e5c51b9fb1ff8ad292f054790e", 0xae}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653ea5d7bf9f0c681ab60972ee1", 0x80}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfeec722721", 0x4d}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x8) r5 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x12e, [0x200000000480, 0x0, 0x0, 0x2000000004b0, 0x2000000004e0], 0x84000000, 0x0, 0x0}, 0x1a6) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x3, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x800005}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) syz_emit_vhci(&(0x7f00000039c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7f, 0x0, 0x401}}}, 0x7) setuid(0xee01) membarrier(0x10, 0x0) 5.99808983s ago: executing program 1 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) munlockall() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48}) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/234, 0xea}, 0x275a}], 0x1, 0x60010000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00001a00000d000008001fde65ef0a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 5.997829827s ago: executing program 2 (id=735): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20}, {0x2, 0x4e20, @loopback}, {0x2, 0x2, @empty}, 0x248, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x0, 0x3, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xc) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x3c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x3f, 0x0, 0x40810}, 0x20000000) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x84) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008812}, 0x800) 5.740819658s ago: executing program 3 (id=736): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, r4) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004814, 0x0, 0x0) r5 = io_uring_setup(0xfc6, &(0x7f0000000180)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x7f, 0xd, 0x10064, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x8}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x1, 0x8, 0x40154, r7, 0x3ff, '\x00', r8, r9, 0x4, 0x5, 0x0, 0x6}, 0x50) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x0, 0x0, &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x3}) 5.337489987s ago: executing program 2 (id=737): fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) 4.296688399s ago: executing program 3 (id=738): fsopen(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3e, 0x0, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r5, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x80}}, 0x0) 4.264705222s ago: executing program 0 (id=739): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x2e, 0x9, 0x70bda7, 0x0, {0x4}, [@typed={0x48, 0x18, 0x0, 0x0, @binary="4fbb52fa25a3b6668c2659071fb4df57bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d16d5317b512fd6c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) openat$cgroup_type(r6, &(0x7f0000000340), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 2.655264039s ago: executing program 0 (id=740): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000580)="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", 0x179}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r4, r3, 0x26, 0x0, @void}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$l2tp(0x2, 0x2, 0x73) close_range(r5, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x1) chdir(&(0x7f0000000000)='./bus\x00') 2.602124604s ago: executing program 4 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) munlockall() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48}) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/234, 0xea}, 0x275a}], 0x1, 0x60010000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00001a00000d000008001fde65ef0a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 2.097805914s ago: executing program 4 (id=742): io_uring_setup(0x5a3c, &(0x7f0000000100)={0x0, 0xfffffffd, 0x40, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xffffffffff7ffffb, 0x213f8603, 0x63, 0x8, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x5, 0x100000000], 0x3000, 0x280384}) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.017931s ago: executing program 4 (id=743): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f0000001080)={0x5a7ccc6daee55235, r0}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f00000010c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, 0x0, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r5, 0x0, 0x0) 1.900216785s ago: executing program 0 (id=744): syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$sndpcmc(0x0, 0x1, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x84, &(0x7f0000000040)={[{@grpquota_inode_hardlimit}]}) 1.89092898s ago: executing program 2 (id=745): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000580)="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", 0x179}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r4, r3, 0x26, 0x0, @void}, 0x10) socket$l2tp(0x2, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x1) chdir(&(0x7f0000000000)='./bus\x00') 1.11562938s ago: executing program 4 (id=746): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x10) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000500) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040044) r7 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) kexec_load(0x7c1, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x9, 0x8}], 0x80000) 1.054509696s ago: executing program 4 (id=747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000900)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\xd8\xf2\xe6\"K1Y\xb5%2\xcb\xf5!\x8c\xd5I\xa3~w\b\x1ao\xbd\xa43z\xd5\xbe\x14\x05\x9b\x05\xf8\r?\x9f\xc6\x0e\xd8\xd3\xc4*\xbc\xf0\x1a\xd1Ob*\x8a\xbf\x92@\xb1\x9fq\xd5\x84\x12\xe2\xad5\x03\xec\xb0@\x7f\x9f}\x17\x87\v\xf0\x99\xf7\xc5\x82C\x14\xd3\x05\xba\xd6F-\x06\xfa\x81\x1a\x1eW', 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002abd7000fccbdf2509000000050007000000000008000100010000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33e7053562eafcabf38cf3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, 0x0, 0x40) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x4e22, 0x61410b5c, @empty, 0xa3}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xf}}], 0x18}}], 0x2, 0x0) 1.03278196s ago: executing program 1 (id=748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 0s ago: executing program 4 (id=749): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) unshare(0x800) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f00000001c0), &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, &(0x7f0000000440)=ANY=[@ANYRES8=r3], 0xa) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) pwrite64(r1, &(0x7f0000000500)="e06fc7fedb04072e476e843a8ef5bddc8ca66958fee60dae9e034b979e98cc50f5212e1f984608b3be34f4da88d6a899045af89c6409acc7cc0d59439995000e228d107ede6be71d0047fdb5c1b283eb9811d43f5e2bbd41ca4bd44648f30e137133a4df77f1ddfb63bb3b5bb30520b15cd0cb838e74da2bb8bac835e7ea280331415d33", 0x84, 0x10000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x56}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000802}, 0x48000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000008500000011000000950000000000000005072e27b6dc07d9"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): input input5: unable to receive magic message: -110 [ 123.161079][ T5163] input input5: unable to receive magic message: -32 [ 123.341363][ T29] audit: type=1400 audit(1776173260.868:340): avc: denied { open } for pid=6542 comm="syz.3.95" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 123.548650][ T6549] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 123.556483][ T6549] netlink: 96 bytes leftover after parsing attributes in process `syz.3.95'. [ 123.565285][ T6549] netlink: 658 bytes leftover after parsing attributes in process `syz.3.95'. [ 123.575249][ T6549] netlink: 1 bytes leftover after parsing attributes in process `syz.3.95'. [ 123.838739][ T29] audit: type=1400 audit(1776173260.878:341): avc: denied { ioctl } for pid=6542 comm="syz.3.95" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 123.983539][ T6077] input input5: unable to receive magic message: -32 [ 124.017015][ T29] audit: type=1400 audit(1776173261.678:342): avc: denied { write } for pid=6547 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 124.163254][ T6544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.829748][ T29] audit: type=1400 audit(1776173261.858:343): avc: denied { read } for pid=6547 comm="syz.0.96" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.102898][ T6544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.130527][ T29] audit: type=1400 audit(1776173261.858:344): avc: denied { open } for pid=6547 comm="syz.0.96" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.234823][ T29] audit: type=1400 audit(1776173261.878:345): avc: denied { ioctl } for pid=6547 comm="syz.0.96" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.323545][ T6105] usb 5-1: USB disconnect, device number 2 [ 125.323673][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.349901][ T29] audit: type=1400 audit(1776173261.888:346): avc: denied { getopt } for pid=6547 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.666963][ T29] audit: type=1400 audit(1776173263.048:347): avc: denied { create } for pid=6565 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 125.781888][ T29] audit: type=1400 audit(1776173263.318:348): avc: denied { mounton } for pid=6565 comm="syz.1.99" path="/4/file1" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.990781][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.028474][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.183472][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.194266][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.194327][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.291494][ T6592] netlink: 88 bytes leftover after parsing attributes in process `syz.4.102'. [ 127.300536][ T6592] netlink: 100 bytes leftover after parsing attributes in process `syz.4.102'. [ 127.542573][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.102'. [ 127.652876][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.834520][ T29] audit: type=1326 audit(1776173265.438:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 127.947792][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 127.975270][ T29] audit: type=1326 audit(1776173265.438:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 128.131426][ T29] audit: type=1326 audit(1776173265.438:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 128.495611][ T6608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6608 comm=syz.2.105 [ 129.200123][ T6619] overlayfs: missing 'lowerdir' [ 129.217964][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 129.217989][ T29] audit: type=1400 audit(1776173266.888:386): avc: denied { mount } for pid=6615 comm="syz.1.107" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 129.530712][ T29] audit: type=1400 audit(1776173266.888:387): avc: denied { mounton } for pid=6615 comm="syz.1.107" path="/6/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 129.865275][ T29] audit: type=1400 audit(1776173267.568:388): avc: denied { unmount } for pid=6058 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 130.023615][ T29] audit: type=1400 audit(1776173267.708:389): avc: denied { unmount } for pid=6058 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 130.775293][ T29] audit: type=1400 audit(1776173268.428:390): avc: denied { append } for pid=6635 comm="syz.0.108" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 131.175087][ T6645] netlink: 'syz.2.111': attribute type 12 has an invalid length. [ 131.313788][ T6645] Cannot find add_set index 0 as target [ 131.791639][ T6659] syz.1.113 (6659): /proc/6652/oom_adj is deprecated, please use /proc/6652/oom_score_adj instead. [ 131.822029][ T6656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.112'. [ 132.250158][ T29] audit: type=1400 audit(1776173269.668:391): avc: denied { getopt } for pid=6652 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.931777][ T29] audit: type=1400 audit(1776173270.638:392): avc: denied { create } for pid=6670 comm="syz.4.117" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.585527][ T6673] fuse: Bad value for 'fd' [ 133.664999][ T29] audit: type=1400 audit(1776173270.718:393): avc: denied { create } for pid=6671 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.690090][ T29] audit: type=1400 audit(1776173271.288:394): avc: denied { mounton } for pid=6670 comm="syz.4.117" path="/24/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.921356][ T29] audit: type=1400 audit(1776173271.298:395): avc: denied { read write } for pid=6670 comm="syz.4.117" name="file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.370089][ T29] audit: type=1400 audit(1776173271.298:396): avc: denied { open } for pid=6670 comm="syz.4.117" path="/24/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.393224][ T6687] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.571968][ T6687] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.621207][ T29] audit: type=1400 audit(1776173271.298:397): avc: denied { ioctl } for pid=6670 comm="syz.4.117" path="/24/file0" dev="tmpfs" ino=141 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.035882][ T29] audit: type=1400 audit(1776173271.428:398): avc: denied { create } for pid=6679 comm="syz.4.120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.077311][ T29] audit: type=1400 audit(1776173271.428:399): avc: denied { write } for pid=6679 comm="syz.4.120" name="file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.117101][ T6687] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.133282][ T29] audit: type=1400 audit(1776173271.428:400): avc: denied { open } for pid=6679 comm="syz.4.120" path="/25/file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.213663][ T6687] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.239774][ T29] audit: type=1400 audit(1776173271.788:401): avc: denied { create } for pid=6682 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.397339][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.494748][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.517328][ T29] audit: type=1400 audit(1776173272.138:402): avc: denied { unlink } for pid=5804 comm="syz-executor" name="file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.540755][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.660834][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.673516][ T29] audit: type=1400 audit(1776173272.388:403): avc: denied { getopt } for pid=6690 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.767473][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 136.860896][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 137.641275][ T6725] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 137.661115][ T6725] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 137.691276][ T5860] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.963180][ T6729] sp0: Synchronizing with TNC [ 139.743791][ T5860] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 139.756645][ T5860] usb 3-1: config 0 has no interface number 0 [ 139.764120][ T5860] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 139.773280][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.794137][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.794838][ T5860] usb 3-1: config 0 descriptor?? [ 139.878451][ T5860] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 140.090525][ T5860] usb 3-1: USB disconnect, device number 4 [ 140.096821][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 140.320983][ T29] audit: type=1400 audit(1776173278.008:404): avc: denied { ioctl } for pid=6733 comm="syz.3.130" path="socket:[13349]" dev="sockfs" ino=13349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.427072][ T6741] misc userio: Invalid payload size [ 140.433164][ T6741] misc userio: No port type given on /dev/userio [ 140.440022][ T6741] misc userio: Invalid payload size [ 140.876167][ T29] audit: type=1400 audit(1776173278.018:405): avc: denied { write } for pid=6733 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.896449][ T29] audit: type=1400 audit(1776173278.128:406): avc: denied { remount } for pid=6736 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.988189][ T29] audit: type=1400 audit(1776173278.688:407): avc: denied { write } for pid=6733 comm="syz.3.130" path="socket:[12404]" dev="sockfs" ino=12404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 141.312942][ T29] audit: type=1400 audit(1776173278.978:408): avc: denied { name_connect } for pid=6742 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 142.596769][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.605073][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.891502][ T5889] usb 1-1: device descriptor read/all, error -71 [ 143.163377][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 143.291103][ T29] audit: type=1400 audit(1776173280.958:409): avc: denied { create } for pid=6756 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.499532][ T29] audit: type=1400 audit(1776173280.968:410): avc: denied { getopt } for pid=6756 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.833765][ T6766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.156697][ T6749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.194443][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 144.210139][ T6749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.244941][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 144.346489][ T51] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.543939][ T51] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.780681][ T29] audit: type=1326 audit(1776173282.478:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.3.140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd80899c819 code=0x0 [ 144.811919][ T51] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.821823][ T51] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.046534][ T6788] netem: incorrect ge model size [ 145.051773][ T6788] netem: change failed [ 146.771306][ T6798] gfs2: path_lookup on ceph returned error -2 [ 148.030027][ T29] audit: type=1400 audit(1776173285.518:412): avc: denied { ioctl } for pid=6795 comm="syz.0.144" path="socket:[12603]" dev="sockfs" ino=12603 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 149.270467][ T29] audit: type=1400 audit(1776173286.048:413): avc: denied { bind } for pid=6795 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 149.414121][ T29] audit: type=1400 audit(1776173286.708:414): avc: denied { setopt } for pid=6795 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.599323][ T29] audit: type=1400 audit(1776173287.388:415): avc: denied { ioctl } for pid=6804 comm="syz.4.146" path="socket:[13495]" dev="sockfs" ino=13495 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.117801][ T6806] nbd0: detected capacity change from 0 to 63 [ 151.146459][ T6815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6815 comm=syz.4.148 [ 151.483868][ T6821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.682736][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 151.778144][ T6831] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 152.105965][ T29] audit: type=1400 audit(1776173289.478:416): avc: denied { mount } for pid=6823 comm="syz.0.151" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 152.237809][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 152.649745][ T29] audit: type=1400 audit(1776173290.348:417): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 152.714123][ T29] audit: type=1400 audit(1776173290.418:418): avc: denied { name_bind } for pid=6841 comm="syz.0.153" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 154.644793][ T29] audit: type=1400 audit(1776173292.038:419): avc: denied { read } for pid=6840 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.687989][ T49] block nbd0: Receive control failed (result -104) [ 154.881942][ T6842] netlink: 'syz.3.154': attribute type 23 has an invalid length. [ 154.934489][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'. [ 155.702862][ T6874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6874 comm=syz.4.162 [ 155.810785][ T6875] netlink: 'syz.0.160': attribute type 13 has an invalid length. [ 156.601119][ T29] audit: type=1400 audit(1776173293.738:420): avc: denied { watch } for pid=6876 comm="syz.2.163" path="/36/file1" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.810165][ T29] audit: type=1400 audit(1776173293.738:421): avc: denied { watch_sb watch_reads } for pid=6876 comm="syz.2.163" path="/36/file1" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.090575][ T6885] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 157.561159][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 158.173411][ T6893] random: crng reseeded on system resumption [ 158.456530][ T6893] Restarting kernel threads ... [ 158.462368][ T6893] Done restarting kernel threads. [ 158.710912][ T29] audit: type=1400 audit(1776173295.878:422): avc: denied { write } for pid=6888 comm="syz.3.166" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.938760][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 159.011082][ T29] audit: type=1400 audit(1776173296.158:423): avc: denied { ioctl } for pid=6888 comm="syz.3.166" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.040492][ T29] audit: type=1400 audit(1776173296.188:424): avc: denied { kexec_image_load } for pid=6888 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 159.708772][ T29] audit: type=1400 audit(1776173296.948:425): avc: denied { mount } for pid=6897 comm="syz.4.168" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 160.304365][ T29] audit: type=1400 audit(1776173297.958:426): avc: denied { shutdown } for pid=6912 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.639130][ T6919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.310524][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 161.800083][ T6934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.807458][ T6934] IPv6: NLM_F_CREATE should be set when creating new route [ 161.814698][ T6934] IPv6: NLM_F_CREATE should be set when creating new route [ 161.821891][ T6934] IPv6: NLM_F_CREATE should be set when creating new route [ 162.253048][ T29] audit: type=1400 audit(1776173299.588:427): avc: denied { mount } for pid=6931 comm="syz.3.175" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.278658][ T6934] fuse: Invalid rootmode [ 162.283267][ T29] audit: type=1400 audit(1776173299.598:428): avc: denied { remount } for pid=6931 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.601069][ T29] audit: type=1400 audit(1776173300.298:429): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 162.697840][ T6944] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 163.430855][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.806274][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 163.851771][ T5882] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 163.906657][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.001782][ T29] audit: type=1400 audit(1776173301.608:430): avc: denied { create } for pid=6959 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 164.060702][ T5882] usb 4-1: config 0 has no interface number 0 [ 164.156635][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 164.779831][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 164.831063][ T6963] : entered promiscuous mode [ 165.015264][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 165.030866][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.051833][ T5882] usb 4-1: Product: syz [ 165.056001][ T5882] usb 4-1: Manufacturer: syz [ 165.061945][ T5882] usb 4-1: SerialNumber: syz [ 165.172160][ T5882] usb 4-1: config 0 descriptor?? [ 165.191998][ T5882] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 165.199344][ T5882] uvcvideo 4-1:0.105: No valid video chain found. [ 165.368411][ T29] audit: type=1400 audit(1776173303.048:431): avc: denied { create } for pid=6966 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.434958][ T6970] 9p: Bad value for 'rfdno' [ 166.373583][ T29] audit: type=1400 audit(1776173304.078:432): avc: denied { connect } for pid=6973 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.807478][ T29] audit: type=1400 audit(1776173305.508:433): avc: denied { read write } for pid=6978 comm="syz.1.187" name="sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 167.809872][ T6981] program syz.1.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.842748][ T6981] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 167.931359][ T29] audit: type=1400 audit(1776173305.508:434): avc: denied { open } for pid=6978 comm="syz.1.187" path="/dev/sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 167.956942][ T29] audit: type=1326 audit(1776173305.508:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 168.084368][ T5881] usb 4-1: USB disconnect, device number 3 [ 168.201026][ T29] audit: type=1326 audit(1776173305.508:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 168.291587][ T29] audit: type=1400 audit(1776173305.508:437): avc: denied { ioctl } for pid=6978 comm="syz.1.187" path="/dev/sg0" dev="devtmpfs" ino=806 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.338593][ T29] audit: type=1326 audit(1776173305.558:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 168.362787][ T29] audit: type=1326 audit(1776173305.558:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 168.433789][ T29] audit: type=1326 audit(1776173305.558:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6976 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 168.536111][ T7003] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 169.068087][ T7015] binder: 7009:7015 unknown command 1472 [ 169.073880][ T7015] binder: 7009:7015 ioctl c0306201 200000000080 returned -22 [ 170.611427][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 170.916176][ T7028] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.226009][ T7028] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.325717][ T7028] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.347052][ T7034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.390916][ T7028] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.440522][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 171.450286][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 171.529823][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.667901][ T548] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.683663][ T548] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.699041][ T548] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.356807][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 172.356823][ T29] audit: type=1400 audit(1776173310.008:442): avc: denied { accept } for pid=7041 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 172.612369][ T7058] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 173.110356][ T29] audit: type=1400 audit(1776173310.328:443): avc: denied { relabelto } for pid=7054 comm="syz.4.200" name="44" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 173.226352][ T29] audit: type=1400 audit(1776173310.328:444): avc: denied { associate } for pid=7054 comm="syz.4.200" name="44" dev="tmpfs" ino=244 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 173.430821][ T29] audit: type=1400 audit(1776173311.008:445): avc: denied { remove_name } for pid=5804 comm="syz-executor" name="binderfs" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 173.460958][ T29] audit: type=1400 audit(1776173311.008:446): avc: denied { rmdir } for pid=5804 comm="syz-executor" name="44" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 174.593101][ T29] audit: type=1400 audit(1776173311.488:447): avc: denied { create } for pid=7060 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 175.046098][ T7080] 9p: Bad value for 'rfdno' [ 175.355466][ T29] audit: type=1400 audit(1776173313.058:448): avc: denied { append } for pid=7083 comm="syz.3.206" name="sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.593765][ T7091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.730462][ T7090] mmap: syz.3.206 (7090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.897142][ T7098] mkiss: ax0: crc mode is auto. [ 176.738715][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 177.512559][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 178.267488][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 178.373231][ T7108] : entered promiscuous mode [ 179.355094][ T7147] libceph: resolve '0..' (ret=-3): failed [ 179.981573][ T7147] netlink: 'syz.0.213': attribute type 11 has an invalid length. [ 180.025925][ T29] audit: type=1400 audit(1776173317.678:449): avc: denied { ioctl } for pid=7134 comm="syz.0.213" path="socket:[14209]" dev="sockfs" ino=14209 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.421759][ T7167] misc userio: Invalid payload size [ 181.427252][ T7167] misc userio: No port type given on /dev/userio [ 181.433818][ T7167] misc userio: Invalid payload size [ 181.633893][ T5143] block nbd0: Possible stuck request ffff888027d68000: control (read@0,1024B). Runtime 30 seconds [ 181.645853][ T5143] block nbd0: Possible stuck request ffff888027d68200: control (read@1024,1024B). Runtime 30 seconds [ 181.656741][ T5143] block nbd0: Possible stuck request ffff888027d68400: control (read@2048,1024B). Runtime 30 seconds [ 181.667629][ T5143] block nbd0: Possible stuck request ffff888027d68600: control (read@3072,1024B). Runtime 30 seconds [ 181.912715][ T7174] overlayfs: failed to resolve './file0': -2 [ 183.462315][ T7182] input: syz0 as /devices/virtual/input/input6 [ 183.474269][ T29] audit: type=1400 audit(1776173321.148:450): avc: denied { write } for pid=7178 comm="syz.0.221" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.630706][ T29] audit: type=1400 audit(1776173321.258:451): avc: denied { read } for pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=2813 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.656318][ T29] audit: type=1400 audit(1776173321.258:452): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2813 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.682827][ T29] audit: type=1400 audit(1776173321.258:453): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2813 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.760139][ T7185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.784854][ T29] audit: type=1400 audit(1776173322.488:454): avc: denied { create } for pid=7186 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.833980][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 184.835398][ T29] audit: type=1400 audit(1776173322.528:455): avc: denied { ioctl } for pid=7184 comm="syz.0.222" path="socket:[14638]" dev="sockfs" ino=14638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.934434][ T29] audit: type=1400 audit(1776173322.538:456): avc: denied { bind } for pid=7184 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.060223][ T29] audit: type=1400 audit(1776173322.538:457): avc: denied { setopt } for pid=7184 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.083259][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054bba400: rx timeout, send abort [ 185.174628][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 185.241753][ T29] audit: type=1400 audit(1776173322.538:458): avc: denied { write } for pid=7184 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.341547][ T29] audit: type=1326 audit(1776173322.618:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7186 comm="syz.4.224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52379c819 code=0x0 [ 186.176438][ T29] audit: type=1400 audit(1776173322.838:460): avc: denied { read } for pid=7188 comm="syz.3.225" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 186.247040][ T29] audit: type=1400 audit(1776173322.838:461): avc: denied { open } for pid=7188 comm="syz.3.225" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 186.916822][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 187.274656][ T29] audit: type=1400 audit(1776173324.978:462): avc: denied { append } for pid=7216 comm="syz.3.229" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.310542][ T7218] comedi comedi2: pcm3724: I/O port conflict (0x8,16) [ 187.337191][ T29] audit: type=1400 audit(1776173325.028:463): avc: denied { wake_alarm } for pid=7219 comm="syz.1.231" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.574235][ T5860] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.730677][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 188.048143][ T5860] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 188.068540][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 188.082802][ T5860] usb 3-1: Product: syz [ 188.087055][ T5860] usb 3-1: SerialNumber: syz [ 188.161328][ T5860] usb 3-1: config 0 descriptor?? [ 188.222480][ T5860] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 188.231136][ T5860] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 188.244740][ T5860] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 188.267661][ T7221] input: syz1 as /devices/virtual/input/input7 [ 188.278798][ T5860] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 188.295696][ T7227] 9p: Could not find request transport: unyô‰Tß‚¾ 4¶-¾¦}x [ 188.530726][ T1204] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 188.635424][ T29] audit: type=1400 audit(1776173326.288:464): avc: denied { write } for pid=7215 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.675534][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.683689][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.691025][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.699549][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.730654][ T1204] usb 2-1: Using ep0 maxpacket: 16 [ 188.763743][ T1204] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 188.790197][ T1204] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.810409][ T1204] usb 2-1: config 0 has no interface number 0 [ 188.908340][ T1204] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 188.929512][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.951667][ T1204] usb 2-1: Product: syz [ 188.962228][ T1204] usb 2-1: Manufacturer: syz [ 188.966815][ T1204] usb 2-1: SerialNumber: syz [ 189.007126][ T1204] usb 2-1: config 0 descriptor?? [ 189.041998][ T1204] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 189.051215][ T1204] uvcvideo 2-1:0.105: No valid video chain found. [ 189.303244][ T7243] mkiss: ax0: crc mode is auto. [ 192.304727][ T1204] usb 3-1: USB disconnect, device number 5 [ 192.682859][ T29] audit: type=1400 audit(1776173330.378:465): avc: denied { write } for pid=7253 comm="syz.2.238" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 192.683008][ T29] audit: type=1400 audit(1776173330.388:466): avc: denied { ioctl } for pid=7253 comm="syz.2.238" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.184886][ T7259] NILFS (nullb0): couldn't find nilfs on the device [ 193.186281][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 193.554393][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.694373][ T46] usb 2-1: USB disconnect, device number 2 [ 194.314911][ T29] audit: type=1400 audit(1776173332.018:467): avc: denied { write } for pid=7250 comm="syz.3.236" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.450820][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 196.058399][ T7287] netlink: 'syz.2.242': attribute type 23 has an invalid length. [ 196.101044][ T7293] netlink: 64 bytes leftover after parsing attributes in process `syz.1.244'. [ 196.218391][ T7270] team0: Port device team_slave_0 removed [ 197.096217][ T29] audit: type=1400 audit(1776173334.798:468): avc: denied { ioctl } for pid=7299 comm="syz.1.247" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 197.097986][ T7300] kAFS: unable to lookup cell 'Þ({^ú@' [ 197.842384][ T29] audit: type=1400 audit(1776173335.548:469): avc: denied { write } for pid=7306 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.224608][ T7328] misc userio: Invalid payload size [ 199.230442][ T7328] misc userio: No port type given on /dev/userio [ 199.238128][ T7328] misc userio: Invalid payload size [ 199.894271][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 200.330829][ T7335] syz_tun: entered allmulticast mode [ 202.187552][ T7332] syz_tun: left allmulticast mode [ 202.240822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 202.504172][ T29] audit: type=1326 audit(1776173340.208:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 202.527726][ T29] audit: type=1326 audit(1776173340.208:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 202.824984][ T29] audit: type=1326 audit(1776173340.208:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 202.848792][ T29] audit: type=1326 audit(1776173340.208:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 203.149290][ T29] audit: type=1326 audit(1776173340.208:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 203.173017][ T29] audit: type=1326 audit(1776173340.228:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 203.196935][ T29] audit: type=1326 audit(1776173340.228:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 203.340230][ T29] audit: type=1326 audit(1776173340.228:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 203.448899][ T29] audit: type=1326 audit(1776173340.258:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7355 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 203.537124][ T29] audit: type=1400 audit(1776173341.178:479): avc: denied { append } for pid=7365 comm="syz.1.272" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 203.855875][ T7373] netlink: 80 bytes leftover after parsing attributes in process `syz.1.272'. [ 204.944730][ T29] audit: type=1400 audit(1776173341.968:480): avc: denied { setopt } for pid=7375 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.990713][ T10] IPVS: starting estimator thread 0... [ 205.532144][ T7369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.600036][ T7381] IPVS: using max 75 ests per chain, 180000 per kthread [ 205.691878][ T29] audit: type=1400 audit(1776173343.388:481): avc: denied { mount } for pid=7382 comm="syz.4.266" name="/" dev="autofs" ino=15808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 206.205283][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 206.397995][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 206.522166][ T7399] misc userio: Invalid payload size [ 206.528061][ T7399] misc userio: No port type given on /dev/userio [ 206.535153][ T7399] misc userio: Invalid payload size [ 207.168360][ T29] audit: type=1400 audit(1776173344.858:482): avc: denied { accept } for pid=7400 comm="syz.4.268" lport=41955 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.724052][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 208.007557][ T29] audit: type=1400 audit(1776173344.858:483): avc: denied { read } for pid=7400 comm="syz.4.268" lport=41955 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 208.489008][ T7421] ip6t_REJECT: ECHOREPLY is not supported [ 209.121619][ T7425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.391912][ T7424] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 210.094748][ T7436] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.276'. [ 211.872734][ T5143] block nbd0: Possible stuck request ffff888027d68000: control (read@0,1024B). Runtime 60 seconds [ 211.883876][ T5143] block nbd0: Possible stuck request ffff888027d68200: control (read@1024,1024B). Runtime 60 seconds [ 211.896375][ T5143] block nbd0: Possible stuck request ffff888027d68400: control (read@2048,1024B). Runtime 60 seconds [ 211.908017][ T5143] block nbd0: Possible stuck request ffff888027d68600: control (read@3072,1024B). Runtime 60 seconds [ 213.028399][ T7447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.207672][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 213.705478][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 213.853157][ T7461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.218041][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 214.232814][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 214.403248][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.447887][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.852711][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 215.880850][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 215.986326][ T7485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7485 comm=syz.2.285 [ 216.846515][ T7493] overlayfs: failed to resolve './file0': -2 [ 218.802272][ T7515] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 218.816925][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 218.816936][ T29] audit: type=1400 audit(1776173356.508:494): avc: denied { mounton } for pid=7496 comm="syz.2.288" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 218.873743][ T7516] @ÿ: renamed from veth0_vlan (while UP) [ 218.920432][ T7517] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 219.580175][ T7524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.799977][ T7525] 9p: Bad value for 'rfdno' [ 220.222684][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 220.276822][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 220.364426][ T29] audit: type=1400 audit(1776173358.068:495): avc: denied { watch watch_reads } for pid=7530 comm="syz.4.295" path="/66" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 221.526732][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.298'. [ 221.609876][ T7543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7543 comm=syz.4.298 [ 222.751487][ T29] audit: type=1400 audit(1776173360.448:496): avc: denied { create } for pid=7556 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.470332][ T29] audit: type=1400 audit(1776173360.448:497): avc: denied { getopt } for pid=7556 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.151317][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.303'. [ 224.520867][ T7574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7574 comm=syz.1.303 [ 224.648288][ T29] audit: type=1326 audit(1776173362.268:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 224.796029][ T29] audit: type=1326 audit(1776173362.268:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 224.909358][ T7581] Cannot find del_set index 2 as target [ 225.509526][ T29] audit: type=1326 audit(1776173362.268:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 225.533038][ T29] audit: type=1326 audit(1776173362.268:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 225.556814][ T29] audit: type=1326 audit(1776173362.268:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 225.801109][ T29] audit: type=1326 audit(1776173362.268:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd52375d04e code=0x7ffc0000 [ 225.986862][ T29] audit: type=1326 audit(1776173362.268:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 226.352802][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.309'. [ 226.389751][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 226.398935][ T29] audit: type=1326 audit(1776173362.268:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 226.450807][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 226.450832][ T29] audit: type=1326 audit(1776173362.268:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 226.509768][ T7598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7598 comm=syz.0.309 [ 226.524858][ T29] audit: type=1326 audit(1776173362.268:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 227.046012][ T7604] misc userio: Invalid payload size [ 227.089626][ T7604] misc userio: No port type given on /dev/userio [ 227.096192][ T7604] misc userio: Invalid payload size [ 227.173989][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 227.180112][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 227.252016][ T7593] ceph: No mds server is up or the cluster is laggy [ 227.903051][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 227.909113][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 229.410898][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.621962][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 229.647066][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.658608][ T46] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 229.667901][ T46] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 229.680162][ T46] usb 1-1: Product: syz [ 229.684476][ T46] usb 1-1: SerialNumber: syz [ 229.691445][ T46] usb 1-1: config 0 descriptor?? [ 230.830360][ T7656] comedi comedi0: Minor 3 could not be opened [ 231.266415][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'. [ 231.276176][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 231.276189][ T29] audit: type=1400 audit(1776173368.978:536): avc: denied { module_request } for pid=7661 comm="syz.4.324" kmod="rtnl-link-ve" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 231.324631][ T7664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7664 comm=syz.4.324 [ 232.254256][ T46] usb 1-1: USB disconnect, device number 5 [ 232.704136][ T29] audit: type=1400 audit(1776173370.398:537): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 232.875797][ T7682] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 232.893971][ T7682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.909490][ T7682] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 232.940788][ T7682] loop5: detected capacity change from 0 to 7 [ 233.349991][ T7682] Dev loop5: unable to read RDB block 7 [ 233.355976][ T7682] loop5: AHDI p1 [ 233.359607][ T7682] loop5: partition table partially beyond EOD, truncated [ 233.394536][ T29] audit: type=1400 audit(1776173370.628:538): avc: denied { append } for pid=7677 comm="syz.1.327" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.430000][ T29] audit: type=1400 audit(1776173371.028:539): avc: denied { read write } for pid=7668 comm="syz.0.325" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 233.535730][ T29] audit: type=1400 audit(1776173371.028:540): avc: denied { open } for pid=7668 comm="syz.0.325" path="/66/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 235.762489][ T7711] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 236.258159][ T7716] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 236.265589][ T7716] overlayfs: failed to set xattr on upper [ 236.271366][ T7716] overlayfs: ...falling back to redirect_dir=nofollow. [ 236.278238][ T7716] overlayfs: ...falling back to index=off. [ 236.284107][ T7716] overlayfs: ...falling back to uuid=null. [ 236.326292][ T7717] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 236.538936][ T29] audit: type=1400 audit(1776173373.868:541): avc: denied { mount } for pid=7712 comm="syz.4.336" name="/" dev="ramfs" ino=17599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 236.717941][ T7722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.849484][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.335'. [ 236.962342][ T29] audit: type=1400 audit(1776173373.948:542): avc: denied { mounton } for pid=7712 comm="syz.4.336" path="/file0" dev="ramfs" ino=17600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 237.202307][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 237.244371][ T29] audit: type=1326 audit(1776173374.708:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 237.275005][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'. [ 237.448577][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 237.486986][ T29] audit: type=1326 audit(1776173374.708:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 237.511761][ T7738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7738 comm=syz.0.339 [ 237.664087][ T29] audit: type=1326 audit(1776173374.708:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 237.851244][ T29] audit: type=1326 audit(1776173374.708:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 238.170737][ T29] audit: type=1326 audit(1776173374.708:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 238.195351][ T29] audit: type=1326 audit(1776173374.708:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 238.523060][ T29] audit: type=1326 audit(1776173374.708:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 238.550858][ T29] audit: type=1326 audit(1776173374.708:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 238.728525][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 238.801895][ T7754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.020902][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 239.031128][ T7754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.134721][ T7754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.146911][ T7762] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.344'. [ 239.180670][ T5889] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 239.717602][ T7754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.879118][ T5889] usb 4-1: not running at top speed; connect to a high speed hub [ 239.892192][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.921405][ T5889] usb 4-1: config 0 has no interfaces? [ 240.041861][ T5889] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 4.20 [ 240.051044][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.079337][ T5889] usb 4-1: Product: syz [ 240.094931][ T127] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.120981][ T5889] usb 4-1: Manufacturer: syz [ 240.131457][ T5889] usb 4-1: SerialNumber: syz [ 240.157014][ T127] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.291468][ T5889] usb 4-1: config 0 descriptor?? [ 240.817353][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.841663][ T46] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 240.867392][ T127] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.035765][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.044448][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 241.056273][ T46] usb 1-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 241.073640][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.082075][ T46] usb 1-1: Product: syz [ 241.086292][ T46] usb 1-1: Manufacturer: syz [ 241.092338][ T46] usb 1-1: SerialNumber: syz [ 242.094241][ T5889] usb 4-1: USB disconnect, device number 4 [ 242.400178][ T7805] 9pnet_virtio: no channels available for device syz [ 243.325018][ T5143] block nbd0: Possible stuck request ffff888027d68000: control (read@0,1024B). Runtime 90 seconds [ 243.336459][ T5143] block nbd0: Possible stuck request ffff888027d68200: control (read@1024,1024B). Runtime 90 seconds [ 243.347570][ T5143] block nbd0: Possible stuck request ffff888027d68400: control (read@2048,1024B). Runtime 90 seconds [ 243.358555][ T5143] block nbd0: Possible stuck request ffff888027d68600: control (read@3072,1024B). Runtime 90 seconds [ 243.693986][ T46] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 243.719604][ T46] usb 1-1: MIDIStreaming interface descriptor not found [ 243.962279][ T7812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 244.096221][ T7812] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 244.106956][ T7812] overlayfs: failed to look up (tracing) for ino (-66) [ 244.235482][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 244.235514][ T29] audit: type=1400 audit(1776173381.638:608): avc: denied { setopt } for pid=7807 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 245.173101][ T29] audit: type=1400 audit(1776173381.658:609): avc: denied { mounton } for pid=7807 comm="syz.3.353" path="/69/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 245.214782][ T46] usb 1-1: USB disconnect, device number 6 [ 245.321671][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 245.417699][ T6193] udevd[6193]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.566771][ T7826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.774186][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 245.785038][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 247.943795][ T29] audit: type=1400 audit(1776173385.528:610): avc: denied { ioctl } for pid=7862 comm="syz.3.361" path="socket:[17235]" dev="sockfs" ino=17235 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.501023][ T29] audit: type=1400 audit(1776173385.808:611): avc: denied { setopt } for pid=7867 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 249.613987][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.873633][ T7890] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 249.982053][ T29] audit: type=1400 audit(1776173387.668:612): avc: denied { create } for pid=7883 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 250.084177][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.091476][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.083820][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.368'. [ 251.341241][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 251.423301][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 251.454094][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'. [ 251.530607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 251.735403][ T7910] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 251.781137][ T7910] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 251.887121][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 253.601169][ T7926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.732605][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 253.748268][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 254.515741][ T7937] dns_resolver: Unsupported content type (152) [ 255.251061][ T49] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 255.251177][ T49] Bluetooth: hci4: Malformed LE Event: 0x0d [ 255.419985][ T7951] mkiss: ax0: crc mode is auto. [ 255.441951][ T29] audit: type=1400 audit(1776173393.138:613): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 256.860431][ T7966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.308500][ T7972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.645557][ T29] audit: type=1400 audit(1776173395.028:614): avc: denied { name_bind } for pid=7968 comm="syz.3.383" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 257.727479][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 257.765550][ T5860] IPVS: starting estimator thread 0... [ 257.775554][ T7973] IPVS: sed: FWM 3 0x00000003 - no destination available [ 257.800157][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 257.870937][ T7975] IPVS: using max 74 ests per chain, 177600 per kthread [ 258.389729][ T7991] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 261.526203][ T8019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.928398][ T8019] syz.0.405 (8019): drop_caches: 2 [ 262.703861][ T29] audit: type=1400 audit(1776173400.408:615): avc: denied { shutdown } for pid=8023 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 262.990454][ T8036] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.398'. [ 263.435540][ T7999] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 263.717385][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 263.734063][ T8033] : entered promiscuous mode [ 265.190187][ T5860] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.315202][ T8061] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 266.605162][ T8072] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 266.820611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 266.857680][ T8068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.301664][ T8068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.628236][ T8094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.756063][ T8068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.940442][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 268.987852][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 269.047631][ T8068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.800378][ T7685] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.846513][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.876295][ T7685] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.032153][ T7685] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.588641][ T8151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.549831][ T8155] misc userio: Invalid payload size [ 273.555147][ T8155] misc userio: No port type given on /dev/userio [ 273.561559][ T8155] misc userio: Invalid payload size [ 273.795831][ T5143] block nbd0: Possible stuck request ffff888027d68000: control (read@0,1024B). Runtime 120 seconds [ 273.820774][ T5143] block nbd0: Possible stuck request ffff888027d68200: control (read@1024,1024B). Runtime 120 seconds [ 273.831866][ T5143] block nbd0: Possible stuck request ffff888027d68400: control (read@2048,1024B). Runtime 120 seconds [ 273.841980][ T8161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8161 comm=syz.3.429 [ 273.842848][ T5143] block nbd0: Possible stuck request ffff888027d68600: control (read@3072,1024B). Runtime 120 seconds [ 273.934375][ T8134] [U]  [ 274.225937][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 274.380906][ T29] audit: type=1400 audit(1776173412.058:616): avc: denied { getopt } for pid=8166 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.232287][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 275.803316][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 276.064059][ T8174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.425811][ T8174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.577421][ T8204] netlink: 44 bytes leftover after parsing attributes in process `syz.4.439'. [ 276.796141][ T8205] xt_connbytes: Forcing CT accounting to be enabled [ 276.805463][ T8205] set match dimension is over the limit! [ 277.080166][ T29] audit: type=1400 audit(1776173414.408:617): avc: denied { ioctl } for pid=8199 comm="syz.3.438" path="/89/file0" dev="tmpfs" ino=515 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 277.121848][ T29] audit: type=1400 audit(1776173414.488:618): avc: denied { ioctl } for pid=8199 comm="syz.3.438" path="socket:[19728]" dev="sockfs" ino=19728 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 277.163947][ T29] audit: type=1400 audit(1776173414.488:619): avc: denied { write } for pid=8199 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 277.360004][ T8174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.382646][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.441'. [ 277.506132][ T8209] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8209 comm=syz.0.441 [ 277.591415][ T8215] overlayfs: missing 'lowerdir' [ 278.691098][ T29] audit: type=1400 audit(1776173416.348:620): avc: denied { ioctl } for pid=8219 comm="syz.2.444" path="socket:[19021]" dev="sockfs" ino=19021 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.130534][ T8174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.548239][ T8236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.843092][ T46] libceph: connect (1)[c::]:6789 error -101 [ 279.868206][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 279.929870][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.938423][ T29] audit: type=1400 audit(1776173417.638:621): avc: denied { accept } for pid=8238 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.963713][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.979587][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.005761][ T8234] ceph: No mds server is up or the cluster is laggy [ 280.023954][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.119712][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.446'. [ 282.404098][ T8273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.788128][ T8271] ceph: No mds server is up or the cluster is laggy [ 282.799213][ T46] libceph: connect (1)[c::]:6789 error -101 [ 282.805443][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 282.929104][ T8278] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 283.029459][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 283.038684][ T8278] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.457'. [ 283.146845][ T8283] Cannot find del_set index 4 as target [ 283.176105][ T8283] overlayfs: failed to clone lowerpath [ 283.187033][ T29] audit: type=1400 audit(1776173420.868:622): avc: denied { mount } for pid=8275 comm="syz.2.456" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 283.251799][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.456'. [ 283.802273][ T8287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.815663][ T8287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.902426][ T8282] netlink: 'syz.0.455': attribute type 30 has an invalid length. [ 283.959162][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 284.326918][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.662291][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 284.695102][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 285.039572][ T8292] ceph: No mds server is up or the cluster is laggy [ 285.348756][ T46] libceph: connect (1)[c::]:6789 error -101 [ 285.368642][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 286.329540][ T8316] overlayfs: failed to clone upperpath [ 286.347032][ T8316] netlink: 'syz.4.466': attribute type 39 has an invalid length. [ 286.678077][ T29] audit: type=1400 audit(1776173424.308:623): avc: denied { read } for pid=8317 comm="syz.3.468" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 286.743361][ T29] audit: type=1400 audit(1776173424.308:624): avc: denied { open } for pid=8317 comm="syz.3.468" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 287.833923][ T29] audit: type=1400 audit(1776173425.538:625): avc: denied { getopt } for pid=8330 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.436009][ T8344] misc userio: Invalid payload size [ 288.441398][ T8344] misc userio: No port type given on /dev/userio [ 288.447874][ T8344] misc userio: Invalid payload size [ 288.501091][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 289.209046][ T8353] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 289.272172][ T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 289.331078][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.341527][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.361232][ T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 289.370267][ T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 289.390632][ T24] usb 4-1: Manufacturer: syz [ 289.397481][ T24] usb 4-1: config 0 descriptor?? [ 289.478061][ T24] igorplugusb 4-1:0.0: incorrect number of endpoints [ 289.531150][ T5881] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 289.828712][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.841182][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.000920][ T5881] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 290.009284][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.020045][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.037391][ T5881] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 290.052082][ T5881] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 290.060073][ T5881] usb 1-1: Manufacturer: syz [ 290.147819][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.157875][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.175094][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.185122][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.471999][ T5881] usb 1-1: config 0 descriptor?? [ 290.479598][ T5881] igorplugusb 1-1:0.0: incorrect number of endpoints [ 290.859251][ T8381] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.485'. [ 290.870948][ T8380] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.485'. [ 290.990403][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.199386][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.525270][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.535968][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.920368][ T792] usb 4-1: USB disconnect, device number 5 [ 292.496354][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 292.776987][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 292.937308][ T792] usb 1-1: USB disconnect, device number 9 [ 293.868006][ T8441] misc userio: Invalid payload size [ 293.874024][ T8441] misc userio: No port type given on /dev/userio [ 293.881144][ T8441] misc userio: Invalid payload size [ 293.900757][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 294.877536][ T8459] batadv_slave_0: entered promiscuous mode [ 295.361232][ T8451] batadv_slave_0: left promiscuous mode [ 295.426716][ T29] audit: type=1400 audit(1776173432.598:626): avc: denied { create } for pid=8451 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 295.509347][ T29] audit: type=1400 audit(1776173432.598:627): avc: denied { ioctl } for pid=8451 comm="syz.4.494" path="socket:[20273]" dev="sockfs" ino=20273 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 295.511088][ T8461] netlink: 'syz.1.490': attribute type 2 has an invalid length. [ 295.646963][ T29] audit: type=1400 audit(1776173432.608:628): avc: denied { bind } for pid=8451 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 295.740002][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.496'. [ 295.768643][ T8461] !: entered promiscuous mode [ 295.851708][ T8471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.936829][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 296.027751][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 296.105787][ T8477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8477 comm=syz.4.496 [ 296.170642][ T29] audit: type=1400 audit(1776173432.608:629): avc: denied { write } for pid=8451 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 296.380093][ T8452] netlink: 'syz.1.490': attribute type 2 has an invalid length. [ 297.245331][ T8493] netlink: 'syz.1.501': attribute type 13 has an invalid length. [ 297.383968][ T8493] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 297.406484][ T8493] netlink: 280 bytes leftover after parsing attributes in process `syz.1.501'. [ 298.296760][ T8508] misc userio: Invalid payload size [ 298.302274][ T8508] misc userio: No port type given on /dev/userio [ 298.308833][ T8508] misc userio: Invalid payload size [ 301.344732][ T8541] openvswitch: netlink: IP tunnel TTL not specified. [ 301.565737][ T8544] misc userio: Invalid payload size [ 301.571756][ T8544] misc userio: No port type given on /dev/userio [ 301.578839][ T8544] misc userio: Invalid payload size [ 302.037094][ T29] audit: type=1400 audit(1776173439.738:630): avc: denied { connect } for pid=8539 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.731246][ T29] audit: type=1400 audit(1776173440.068:631): avc: denied { mount } for pid=8548 comm="syz.4.517" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 302.759035][ T29] audit: type=1400 audit(1776173440.078:632): avc: denied { search } for pid=8548 comm="syz.4.517" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.892885][ T29] audit: type=1400 audit(1776173440.078:633): avc: denied { search } for pid=8548 comm="syz.4.517" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.920135][ T29] audit: type=1400 audit(1776173440.078:634): avc: denied { read open } for pid=8548 comm="syz.4.517" path="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.418681][ T29] audit: type=1400 audit(1776173440.088:635): avc: denied { search } for pid=8548 comm="syz.4.517" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.530008][ T29] audit: type=1400 audit(1776173440.098:636): avc: denied { search } for pid=8548 comm="syz.4.517" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.831150][ T5143] block nbd0: Possible stuck request ffff888027d68000: control (read@0,1024B). Runtime 150 seconds [ 303.841997][ T5143] block nbd0: Possible stuck request ffff888027d68200: control (read@1024,1024B). Runtime 150 seconds [ 303.870743][ T5143] block nbd0: Possible stuck request ffff888027d68400: control (read@2048,1024B). Runtime 150 seconds [ 303.890905][ T5143] block nbd0: Possible stuck request ffff888027d68600: control (read@3072,1024B). Runtime 150 seconds [ 304.707531][ T8583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.134774][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 305.161868][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 306.255487][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.528'. [ 306.278503][ T8604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8604 comm=syz.2.528 [ 306.844940][ T8611] 9pnet_virtio: no channels available for device syz [ 307.714691][ T8611] syz.1.531 (8611) used greatest stack depth: 19272 bytes left [ 307.724136][ T29] audit: type=1400 audit(1776173444.668:637): avc: denied { firmware_load } for pid=8607 comm="syz.1.531" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 308.693345][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 310.293847][ T29] audit: type=1400 audit(1776173447.678:638): avc: denied { connect } for pid=8629 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 311.377596][ T8646] Invalid source name [ 311.585158][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.636948][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.033039][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 312.363248][ T8653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8653 comm=syz.1.540 [ 312.490626][ T8665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.770158][ T29] audit: type=1400 audit(1776173450.458:639): avc: denied { getopt } for pid=8651 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 313.070098][ T8677] overlayfs: failed to resolve './file0': -2 [ 314.008702][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 315.142389][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.549'. [ 316.511636][ T46] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 316.801666][ T8701] overlayfs: failed to resolve './file2': -2 [ 316.807778][ T29] audit: type=1400 audit(1776173454.498:640): avc: denied { mount } for pid=8700 comm="syz.4.552" name="/" dev="hugetlbfs" ino=20892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 316.851136][ T29] audit: type=1400 audit(1776173454.508:641): avc: denied { mounton } for pid=8700 comm="syz.4.552" path="/file0" dev="hugetlbfs" ino=20893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 317.190245][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.041840][ T8707] syz.3.553 (8707): drop_caches: 2 [ 318.448118][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.456892][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.596101][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 318.719464][ T8714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8714 comm=syz.4.554 [ 319.912426][ T29] audit: type=1400 audit(1776173457.448:642): avc: denied { write } for pid=8715 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 320.034247][ T8717] vlan2: entered promiscuous mode [ 320.039325][ T8717] bridge0: entered promiscuous mode [ 320.256442][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.295921][ T46] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 320.337021][ T46] usb 1-1: can't read configurations, error -71 [ 320.338504][ T8726] netlink: 'syz.1.557': attribute type 4 has an invalid length. [ 320.380697][ T8726] netlink: 17 bytes leftover after parsing attributes in process `syz.1.557'. [ 322.555266][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.564'. [ 322.582615][ T8750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8750 comm=syz.3.564 [ 323.090663][ T8751] dummy0: entered allmulticast mode [ 323.148672][ T29] audit: type=1400 audit(1776173460.848:643): avc: denied { write } for pid=8754 comm="syz.0.565" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 323.316094][ T8747] dummy0: left allmulticast mode [ 323.362504][ T29] audit: type=1400 audit(1776173460.948:644): avc: denied { ioctl } for pid=8754 comm="syz.0.565" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 325.897412][ T5889] Process accounting resumed [ 328.384045][ T8807] overlayfs: failed to clone upperpath [ 328.494733][ T8809] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 328.513895][ T8809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.577'. [ 329.704053][ T8800] fuse: Bad value for 'fd' [ 330.136932][ T29] audit: type=1400 audit(1776173467.768:645): avc: denied { read } for pid=8817 comm="syz.1.581" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 331.336757][ T29] audit: type=1400 audit(1776173467.768:646): avc: denied { open } for pid=8817 comm="syz.1.581" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 331.503254][ T29] audit: type=1400 audit(1776173467.778:647): avc: denied { ioctl } for pid=8817 comm="syz.1.581" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 331.656892][ T8835] pimreg: entered allmulticast mode [ 332.681810][ T29] audit: type=1400 audit(1776173470.378:648): avc: denied { set_context_mgr } for pid=8836 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 332.742143][ T29] audit: type=1400 audit(1776173470.408:649): avc: denied { append } for pid=8838 comm="syz.3.586" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 332.876385][ T29] audit: type=1400 audit(1776173470.578:650): avc: denied { write } for pid=8836 comm="syz.0.585" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 332.900368][ T8837] comedi comedi0: Minor 3 could not be opened [ 333.473033][ T8854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.589'. [ 333.989329][ T7903] block nbd0: Possible stuck request ffff888027d68000: control (read@0,1024B). Runtime 180 seconds [ 334.000102][ T7903] block nbd0: Possible stuck request ffff888027d68200: control (read@1024,1024B). Runtime 180 seconds [ 334.011316][ T7903] block nbd0: Possible stuck request ffff888027d68400: control (read@2048,1024B). Runtime 180 seconds [ 334.022482][ T7903] block nbd0: Possible stuck request ffff888027d68600: control (read@3072,1024B). Runtime 180 seconds [ 335.101499][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.594'. [ 335.247340][ T8872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8872 comm=syz.1.594 [ 335.518922][ T5889] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 336.827937][ T5889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 336.861988][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.890801][ T5889] usb 4-1: Product: syz [ 336.898542][ T5889] usb 4-1: Manufacturer: syz [ 337.180608][ T5889] usb 4-1: SerialNumber: syz [ 337.195594][ T5889] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 337.234658][ T6105] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 337.638303][ T29] audit: type=1400 audit(1776173475.338:651): avc: denied { write } for pid=8886 comm="syz.4.599" lport=35515 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 337.890589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 338.202901][ T8895] netlink: 'syz.1.598': attribute type 39 has an invalid length. [ 338.243959][ T29] audit: type=1400 audit(1776173475.898:652): avc: denied { link } for pid=8888 comm="syz.1.598" name="#f" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 338.290773][ T29] audit: type=1400 audit(1776173475.898:653): avc: denied { rename } for pid=8888 comm="syz.1.598" name="#10" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 338.353593][ T6105] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 338.364470][ T6105] ath9k_htc: Failed to initialize the device [ 338.554943][ T6105] usb 4-1: ath9k_htc: USB layer deinitialized [ 338.586142][ T5889] usb 4-1: USB disconnect, device number 6 [ 338.780727][ T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 339.360640][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 339.371839][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.380264][ T46] usb 1-1: config 5 has an invalid interface number: 18 but max is 0 [ 339.388687][ T46] usb 1-1: config 5 has no interface number 0 [ 339.395298][ T46] usb 1-1: config 5 interface 18 has no altsetting 0 [ 339.403999][ T46] usb 1-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 339.413118][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.421191][ T46] usb 1-1: Product: syz [ 339.425348][ T46] usb 1-1: Manufacturer: syz [ 339.433034][ T46] usb 1-1: SerialNumber: syz [ 339.691734][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.709692][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.802309][ T29] audit: type=1800 audit(1776173477.508:654): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.593" name="/" dev="fuse" ino=4 res=0 errno=0 [ 340.405440][ T8918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 340.675535][ T8923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8923 comm=syz.1.605 [ 341.621993][ T46] usb 1-1: Could not find all expected endpoints [ 341.643625][ T46] usb 1-1: USB disconnect, device number 12 [ 342.592306][ T792] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 342.924191][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 342.951717][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 342.980666][ T792] usb 2-1: not running at top speed; connect to a high speed hub [ 343.007652][ T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.028827][ T792] usb 2-1: config 0 has no interfaces? [ 343.057509][ T792] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 4.20 [ 343.179901][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.204928][ T792] usb 2-1: Product: syz [ 343.220262][ T792] usb 2-1: Manufacturer: syz [ 343.235183][ T792] usb 2-1: SerialNumber: syz [ 343.240838][ T8952] fuse: Unknown parameter '0x0000000000000006' [ 343.254538][ T792] usb 2-1: config 0 descriptor?? [ 343.319623][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 343.328913][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 343.441361][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 343.867640][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 344.108584][ T8970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8970 comm=syz.3.617 [ 344.744692][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 345.209376][ T5889] usb 2-1: USB disconnect, device number 6 [ 346.200675][ T8988] sp0: Synchronizing with TNC [ 346.348528][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.620'. [ 346.529266][ T29] audit: type=1326 audit(1776173484.218:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 346.833043][ T29] audit: type=1326 audit(1776173484.218:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 346.909182][ T29] audit: type=1326 audit(1776173484.218:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 346.999774][ T8987] [U] è [ 347.026867][ T29] audit: type=1326 audit(1776173484.218:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 347.175079][ T29] audit: type=1326 audit(1776173484.218:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd80895d04e code=0x7ffc0000 [ 347.181751][ T9013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.566140][ T29] audit: type=1326 audit(1776173484.218:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 347.661585][ T29] audit: type=1326 audit(1776173484.218:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 347.733343][ T29] audit: type=1326 audit(1776173484.218:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 347.827759][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 347.842884][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 347.890402][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 347.925668][ T29] audit: type=1326 audit(1776173484.218:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 348.067579][ T29] audit: type=1326 audit(1776173484.218:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd80899c819 code=0x7ffc0000 [ 348.157482][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 348.201485][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 348.614440][ T9039] erofs (device nullb0): cannot find valid erofs superblock [ 348.627119][ T9039] ptrace attach of "./syz-executor exec"[5808] was attempted by ""[9039] [ 348.880882][ T6105] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 349.142267][ T6105] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.160588][ T6105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.164562][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 349.179775][ T6105] usb 1-1: config 0 descriptor?? [ 349.219661][ T6105] cp210x 1-1:0.0: cp210x converter detected [ 349.228642][ T9043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9043 comm=syz.1.641 [ 349.480575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 349.633713][ T9053] overlayfs: failed to clone upperpath [ 350.536388][ T9060] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 350.587675][ T9065] overlayfs: failed to clone lowerpath [ 350.679241][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 351.000563][ C0] hrtimer: interrupt took 19702 ns [ 351.361318][ T6105] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 351.521623][ T6105] cp210x 1-1:0.0: querying part number failed [ 352.150932][ T6105] usb 1-1: cp210x converter now attached to ttyUSB0 [ 352.162840][ T6105] usb 1-1: USB disconnect, device number 13 [ 352.172056][ T6105] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 352.187379][ T6105] cp210x 1-1:0.0: device disconnected [ 353.968398][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 353.968418][ T29] audit: type=1326 audit(1776173491.368:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 354.057798][ T29] audit: type=1326 audit(1776173491.378:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 354.660594][ T9103] kvm: user requested TSC rate below hardware speed [ 354.696486][ T29] audit: type=1400 audit(1776173492.378:689): avc: denied { getopt } for pid=9097 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 354.825707][ T9082] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 355.006381][ T5889] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 355.067820][ T9096] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.163890][ T9096] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.400722][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 355.401509][ T29] audit: type=1326 audit(1776173493.068:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 355.465397][ T9096] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.559741][ T29] audit: type=1326 audit(1776173493.068:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 355.633082][ T5889] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 355.721883][ T9096] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.753412][ T29] audit: type=1326 audit(1776173493.068:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 355.793233][ T29] audit: type=1326 audit(1776173493.068:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 355.801684][ T5889] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.048549][ T3511] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.069395][ T3511] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.093824][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 356.431330][ T5889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.440407][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.490704][ T3511] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.498954][ T29] audit: type=1326 audit(1776173493.068:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 356.522343][ T3511] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.530959][ T29] audit: type=1326 audit(1776173493.068:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 356.650250][ T9120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.399875][ T9122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9122 comm=syz.2.649 [ 357.525119][ T5889] usbtmc 2-1:16.0: bulk endpoints not found [ 357.625869][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 357.640152][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 357.754368][ T29] audit: type=1326 audit(1776173493.068:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 357.975273][ T9132] loop5: detected capacity change from 0 to 7 [ 358.025443][ T9132] Dev loop5: unable to read RDB block 7 [ 358.031217][ T9132] loop5: AHDI p1 [ 358.034945][ T9132] loop5: partition table partially beyond EOD, truncated [ 358.048018][ T9133] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 358.055881][ T9133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.651'. [ 358.065452][ T9133] batadv0: entered promiscuous mode [ 358.071020][ T9133] batadv0: entered allmulticast mode [ 358.078703][ T9133] bridge0: port 3(batadv0) entered blocking state [ 358.085703][ T9133] bridge0: port 3(batadv0) entered disabled state [ 358.108512][ T9133] bridge0: port 3(batadv0) entered blocking state [ 358.115055][ T9133] bridge0: port 3(batadv0) entered forwarding state [ 358.474518][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 358.483945][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 358.579780][ T5889] usb 2-1: USB disconnect, device number 7 [ 358.850123][ T9139] overlayfs: failed to resolve './file0': -2 [ 359.079953][ T9144] zonefs (nullb0) ERROR: Not a zoned block device [ 359.453417][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 359.453434][ T29] audit: type=1326 audit(1776173496.798:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87899c819 code=0x7ffc0000 [ 359.529303][ T29] audit: type=1326 audit(1776173496.798:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe87899c819 code=0x7ffc0000 [ 360.231092][ T29] audit: type=1326 audit(1776173496.798:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87899c819 code=0x7ffc0000 [ 360.307630][ T29] audit: type=1326 audit(1776173496.798:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87899c819 code=0x7ffc0000 [ 360.470994][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 360.836315][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.103252][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.125716][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.143927][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 361.155122][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.306427][ T24] usb 1-1: Product: syz [ 361.331005][ T24] usb 1-1: Manufacturer: syz [ 361.420790][ T29] audit: type=1400 audit(1776173499.098:723): avc: denied { setopt } for pid=9170 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.953379][ T24] usb 1-1: SerialNumber: syz [ 361.987458][ T24] usb 1-1: config 0 descriptor?? [ 362.005250][ T24] uvcvideo 1-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 362.136059][ T24] uvcvideo 1-1:0.0: No valid video chain found. [ 362.770073][ T9159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9159 comm=syz.0.657 [ 363.105209][ T5889] IPVS: starting estimator thread 0... [ 363.417599][ T9187] IPVS: using max 76 ests per chain, 182400 per kthread [ 363.468495][ T10] usb 1-1: USB disconnect, device number 14 [ 363.666012][ T29] audit: type=1400 audit(1776173501.358:724): avc: denied { write } for pid=9194 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 364.175831][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 364.645141][ T7903] block nbd0: Possible stuck request ffff888027d68000: control (read@0,1024B). Runtime 210 seconds [ 364.660657][ T7903] block nbd0: Possible stuck request ffff888027d68200: control (read@1024,1024B). Runtime 210 seconds [ 364.674950][ T7903] block nbd0: Possible stuck request ffff888027d68400: control (read@2048,1024B). Runtime 210 seconds [ 364.686406][ T7903] block nbd0: Possible stuck request ffff888027d68600: control (read@3072,1024B). Runtime 210 seconds [ 364.906375][ T9207] overlayfs: failed to resolve './file0': -2 [ 365.251931][ T29] audit: type=1326 audit(1776173502.938:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9208 comm="syz.4.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 365.517617][ T29] audit: type=1326 audit(1776173502.948:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9208 comm="syz.4.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 365.566852][ T9219] siw: device registration error -23 [ 366.369363][ T29] audit: type=1400 audit(1776173504.048:727): avc: denied { accept } for pid=9211 comm="syz.0.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.972314][ T9227] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 366.998403][ T29] audit: type=1326 audit(1776173504.688:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 367.287109][ T29] audit: type=1326 audit(1776173504.688:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 367.311236][ T29] audit: type=1326 audit(1776173504.688:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 367.339821][ T29] audit: type=1326 audit(1776173504.688:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 367.692581][ T9232] hfs: can't find a HFS filesystem on dev nullb0 [ 367.992447][ T29] audit: type=1326 audit(1776173504.688:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 368.030242][ T29] audit: type=1326 audit(1776173504.698:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 368.286124][ T29] audit: type=1326 audit(1776173504.698:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52379c819 code=0x7ffc0000 [ 368.737014][ T9257] netlink: 35 bytes leftover after parsing attributes in process `syz.4.673'. [ 369.082121][ T9272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'. [ 370.207893][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'. [ 370.518335][ T9293] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9293 comm=syz.0.679 [ 370.518884][ T9277] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.342460][ T9308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.651602][ T9297] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 372.669632][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 373.149504][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.155868][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.211283][ T9277] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.233791][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 373.568943][ T9315] pimreg: entered allmulticast mode [ 375.022925][ T9277] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.617310][ T9346] smb3: Unknown parameter 'opcxÏ' [ 377.662300][ T9346] veth1_virt_wifi: entered promiscuous mode [ 378.201174][ T9347] veth1_virt_wifi: left promiscuous mode [ 378.446431][ T9277] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.729897][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 378.729938][ T29] audit: type=1400 audit(1776173516.428:763): avc: denied { getopt } for pid=9348 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 379.313333][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.385414][ T9367] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 379.761729][ T29] audit: type=1326 audit(1776173517.098:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 379.793265][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.817452][ T9366] netlink: 'syz.3.691': attribute type 39 has an invalid length. [ 379.842187][ T29] audit: type=1326 audit(1776173517.098:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 379.905803][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.915473][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.932187][ T29] audit: type=1326 audit(1776173517.098:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 380.090645][ T29] audit: type=1326 audit(1776173517.098:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 380.142716][ T29] audit: type=1326 audit(1776173517.098:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 380.270621][ T29] audit: type=1326 audit(1776173517.108:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 380.303878][ T29] audit: type=1326 audit(1776173517.108:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 380.557445][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 380.809692][ T29] audit: type=1326 audit(1776173517.108:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 380.857727][ T29] audit: type=1326 audit(1776173517.108:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f279c819 code=0x7ffc0000 [ 380.902376][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 380.915773][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 380.937179][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 380.963283][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 380.972460][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.990595][ T24] usb 2-1: Product: syz [ 380.995678][ T24] usb 2-1: Manufacturer: syz [ 381.013625][ T24] usb 2-1: SerialNumber: syz [ 381.038157][ T24] usb 2-1: selecting invalid altsetting 1 [ 381.051329][ T24] usb 2-1: unit 6 not found! [ 381.067364][ T9383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9383 comm=syz.2.697 [ 381.284718][ T9374] netlink: 52719 bytes leftover after parsing attributes in process `syz.1.695'. [ 382.073615][ T9393] openvswitch: netlink: IPv4 tunnel dst address is zero [ 382.363149][ T24] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 382.436020][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 382.596186][ T24] usb 2-1: selecting invalid altsetting 1 [ 382.606778][ T24] usb 2-1: unit 6 not found! [ 382.612686][ T24] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 382.621368][ T24] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 383.137191][ T24] usb 2-1: selecting invalid altsetting 1 [ 383.146098][ T24] usb 2-1: unit 6 not found! [ 383.155307][ T24] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 383.196470][ T24] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 383.212256][ T24] usb 2-1: USB disconnect, device number 8 [ 383.238262][ T7827] udevd[7827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.267842][ T9402] tmpfs: Bad value for 'mpol' [ 383.483216][ T9411] openvswitch: netlink: Flow actions attr not present in new flow. [ 385.053078][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 385.235879][ T9431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9431 comm=syz.0.708 [ 385.254670][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 385.265979][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 385.479943][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 385.539125][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 385.556397][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.570669][ T24] usb 2-1: Product: syz [ 385.604974][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 385.617808][ T24] usb 2-1: Manufacturer: syz [ 385.622977][ T24] usb 2-1: SerialNumber: syz [ 385.650764][ T24] usb 2-1: config 0 descriptor?? [ 385.777943][ T9440] netlink: 'syz.2.709': attribute type 10 has an invalid length. [ 385.794488][ T9440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.809466][ T9440] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 385.854531][ T9440] netlink: 'syz.2.709': attribute type 10 has an invalid length. [ 385.862303][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.709'. [ 386.049418][ T9440] batadv0: entered promiscuous mode [ 386.054741][ T9440] batadv0: entered allmulticast mode [ 386.271658][ T9440] bond0: (slave batadv0): Releasing backup interface [ 386.291071][ T9440] bridge0: port 3(batadv0) entered blocking state [ 386.297544][ T9440] bridge0: port 3(batadv0) entered disabled state [ 386.572139][ T8404] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 386.581726][ T8404] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 387.301335][ T9452] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 387.311803][ T9452] netlink: 'syz.4.711': attribute type 2 has an invalid length. [ 387.319523][ T9452] netlink: 132 bytes leftover after parsing attributes in process `syz.4.711'. [ 387.340564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 387.630060][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 387.870263][ T9459] pim6reg: entered allmulticast mode [ 388.007566][ T24] usb 2-1: USB disconnect, device number 9 [ 389.375849][ T9465] blktrace: Concurrent blktraces are not allowed on loop6 [ 390.824001][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 390.824015][ T29] audit: type=1400 audit(1776173528.528:786): avc: denied { ioctl } for pid=9476 comm="syz.2.719" path="socket:[24809]" dev="sockfs" ino=24809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 390.887571][ T9487] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 390.925117][ T5807] Bluetooth: hci4: unexpected event for opcode 0x0401 [ 391.279287][ T29] audit: type=1326 audit(1776173528.598:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 391.366732][ T29] audit: type=1326 audit(1776173528.598:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 391.431390][ T29] audit: type=1326 audit(1776173528.608:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 391.480237][ T29] audit: type=1326 audit(1776173528.608:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 391.585963][ T29] audit: type=1326 audit(1776173528.608:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 391.632881][ T29] audit: type=1326 audit(1776173528.608:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 391.677792][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 391.760996][ T29] audit: type=1400 audit(1776173528.608:793): avc: denied { write } for pid=9481 comm="syz.1.718" path="socket:[24806]" dev="sockfs" ino=24806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 391.874747][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 391.892528][ T9501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.900600][ T9502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9502 comm=syz.3.723 [ 391.929873][ T29] audit: type=1326 audit(1776173528.608:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 392.354928][ T29] audit: type=1326 audit(1776173528.608:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9481 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaab59c819 code=0x7ffc0000 [ 392.506691][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 392.521816][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 394.714215][ T7903] block nbd0: Possible stuck request ffff888027d68000: control (read@0,1024B). Runtime 240 seconds [ 394.726226][ T7903] block nbd0: Possible stuck request ffff888027d68200: control (read@1024,1024B). Runtime 240 seconds [ 394.739380][ T7903] block nbd0: Possible stuck request ffff888027d68400: control (read@2048,1024B). Runtime 240 seconds [ 394.753266][ T7903] block nbd0: Possible stuck request ffff888027d68600: control (read@3072,1024B). Runtime 240 seconds [ 394.952098][ T5807] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 394.961918][ T5807] Bluetooth: hci4: Injecting HCI hardware error event [ 394.969765][ T5807] Bluetooth: hci4: hardware error 0x00 [ 395.131609][ T9546] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 396.596906][ T9550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.602831][ T5807] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 397.685358][ T9567] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 398.121569][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 398.121583][ T29] audit: type=1400 audit(1776173535.398:835): avc: denied { map } for pid=9560 comm="syz.0.739" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 398.156318][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 398.291622][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 398.345096][ T29] audit: type=1400 audit(1776173535.408:836): avc: denied { execute } for pid=9560 comm="syz.0.739" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 398.664772][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 398.674158][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 400.921428][ T9605] overlayfs: failed to resolve './file0': -2 [ 401.115775][ T9607] siw: device registration error -23 [ 401.123115][ T9607] smc: removing ib device syz2 [ 401.591714][ T9607] ------------[ cut here ]------------ [ 401.597183][ T9607] !xa_empty(&pool->xa) [ 401.597190][ T9607] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.4.749/9607 [ 401.612458][ T9607] Modules linked in: [ 401.616514][ T9607] CPU: 1 UID: 0 PID: 9607 Comm: syz.4.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.627280][ T9607] Tainted: [L]=SOFTLOCKUP [ 401.631605][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 401.641654][ T9607] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 401.647502][ T9607] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 26 8f 4d f9 5b e9 00 5d da 02 e8 1b 8f 4d f9 90 <0f> 0b 90 e8 12 8f 4d f9 5b c3 cc cc cc cc e8 67 26 ba f9 eb d0 0f [ 401.667129][ T9607] RSP: 0018:ffffc900065c71a0 EFLAGS: 00010246 [ 401.673183][ T9607] RAX: 0000000000080000 RBX: ffff8880352cd3b8 RCX: ffffc9000d051000 [ 401.681178][ T9607] RDX: 0000000000080000 RSI: ffffffff88bb2fa5 RDI: ffff8880352cd438 [ 401.689124][ T9607] RBP: ffffffff88b99230 R08: 0000000000000005 R09: 0000000000000001 [ 401.697209][ T9607] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880352cc6b0 [ 401.705212][ T9607] R13: ffff8880352cbfe0 R14: ffff8880352cbfe0 R15: ffff8880352cd118 [ 401.713186][ T9607] FS: 00007fd5247006c0(0000) GS:ffff88812442b000(0000) knlGS:0000000000000000 [ 401.722128][ T9607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.728703][ T9607] CR2: 00002000000015c0 CR3: 000000005cb88000 CR4: 00000000003526f0 [ 401.736675][ T9607] Call Trace: [ 401.739938][ T9607] [ 401.742871][ T9607] rxe_dealloc+0x25/0xc0 [ 401.747089][ T9607] ib_dealloc_device+0x49/0x230 [ 401.752201][ T9607] __ib_unregister_device+0x396/0x480 [ 401.757588][ T9607] ib_unregister_device_and_put+0x5a/0x80 [ 401.763371][ T9607] nldev_dellink+0x226/0x320 [ 401.767964][ T9607] ? __pfx_nldev_dellink+0x10/0x10 [ 401.773166][ T9607] ? rcu_is_watching+0x12/0xc0 [ 401.777934][ T9607] ? cap_capable+0x107/0x460 [ 401.782537][ T9607] ? bpf_lsm_capable+0x9/0x10 [ 401.787189][ T9607] ? security_capable+0x80/0x260 [ 401.792132][ T9607] ? ns_capable+0xd2/0xf0 [ 401.796438][ T9607] ? __pfx_nldev_dellink+0x10/0x10 [ 401.801547][ T9607] rdma_nl_rcv_msg+0x38a/0x6e0 [ 401.806288][ T9607] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 401.811561][ T9607] ? __lock_acquire+0x4a5/0x2630 [ 401.816472][ T9607] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 401.822885][ T9607] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 401.829802][ T9607] ? netlink_deliver_tap+0x1ae/0xcc0 [ 401.835089][ T9607] netlink_unicast+0x5aa/0x870 [ 401.839832][ T9607] ? __pfx_netlink_unicast+0x10/0x10 [ 401.845124][ T9607] netlink_sendmsg+0x8b0/0xda0 [ 401.849875][ T9607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.855155][ T9607] ? __might_fault+0x10/0x140 [ 401.859812][ T9607] ____sys_sendmsg+0x9e1/0xb70 [ 401.864568][ T9607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.869838][ T9607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.875113][ T9607] ? __pfx_futex_wake_mark+0x10/0x10 [ 401.880373][ T9607] ___sys_sendmsg+0x190/0x1e0 [ 401.885055][ T9607] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.890241][ T9607] __sys_sendmsg+0x170/0x220 [ 401.894830][ T9607] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.899918][ T9607] ? __x64_sys_futex+0x34f/0x4d0 [ 401.904864][ T9607] do_syscall_64+0x10b/0xf80 [ 401.909432][ T9607] ? clear_bhb_loop+0x40/0x90 [ 401.914401][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.920279][ T9607] RIP: 0033:0x7fd52379c819 [ 401.924702][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.944309][ T9607] RSP: 002b:00007fd524700028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.952720][ T9607] RAX: ffffffffffffffda RBX: 00007fd523a15fa0 RCX: 00007fd52379c819 [ 401.960693][ T9607] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 401.968637][ T9607] RBP: 00007fd523832c91 R08: 0000000000000000 R09: 0000000000000000 [ 401.976597][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.984557][ T9607] R13: 00007fd523a16038 R14: 00007fd523a15fa0 R15: 00007ffc94dbaa18 [ 401.992546][ T9607] [ 401.995540][ T9607] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 402.002795][ T9607] CPU: 1 UID: 0 PID: 9607 Comm: syz.4.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.013524][ T9607] Tainted: [L]=SOFTLOCKUP [ 402.017817][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.027842][ T9607] Call Trace: [ 402.031095][ T9607] [ 402.033999][ T9607] dump_stack_lvl+0x100/0x190 [ 402.038656][ T9607] vpanic+0x552/0x970 [ 402.042619][ T9607] ? __pfx_vpanic+0x10/0x10 [ 402.047097][ T9607] panic+0xd1/0xe0 [ 402.050789][ T9607] ? __pfx_panic+0x10/0x10 [ 402.055184][ T9607] check_panic_on_warn.cold+0x19/0x34 [ 402.060527][ T9607] ? rxe_pool_cleanup+0x46/0x60 [ 402.065359][ T9607] __warn.cold+0x191/0x348 [ 402.069746][ T9607] __report_bug+0x296/0x3d0 [ 402.074226][ T9607] ? rxe_pool_cleanup+0x46/0x60 [ 402.079048][ T9607] ? __pfx___report_bug+0x10/0x10 [ 402.084045][ T9607] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 402.089827][ T9607] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 402.095614][ T9607] ? __flush_workqueue+0x426/0x1200 [ 402.100784][ T9607] ? __mutex_unlock_slowpath+0x15c/0x790 [ 402.106397][ T9607] ? rxe_pool_cleanup+0x46/0x60 [ 402.111227][ T9607] report_bug+0xb2/0x220 [ 402.115450][ T9607] ? rxe_pool_cleanup+0x46/0x60 [ 402.120274][ T9607] handle_bug+0x16a/0x2a0 [ 402.124575][ T9607] exc_invalid_op+0x17/0x50 [ 402.129050][ T9607] asm_exc_invalid_op+0x1a/0x20 [ 402.133871][ T9607] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 402.139304][ T9607] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 26 8f 4d f9 5b e9 00 5d da 02 e8 1b 8f 4d f9 90 <0f> 0b 90 e8 12 8f 4d f9 5b c3 cc cc cc cc e8 67 26 ba f9 eb d0 0f [ 402.158890][ T9607] RSP: 0018:ffffc900065c71a0 EFLAGS: 00010246 [ 402.164936][ T9607] RAX: 0000000000080000 RBX: ffff8880352cd3b8 RCX: ffffc9000d051000 [ 402.172881][ T9607] RDX: 0000000000080000 RSI: ffffffff88bb2fa5 RDI: ffff8880352cd438 [ 402.180837][ T9607] RBP: ffffffff88b99230 R08: 0000000000000005 R09: 0000000000000001 [ 402.188780][ T9607] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880352cc6b0 [ 402.196728][ T9607] R13: ffff8880352cbfe0 R14: ffff8880352cbfe0 R15: ffff8880352cd118 [ 402.204689][ T9607] ? __pfx_rxe_dealloc+0x10/0x10 [ 402.209606][ T9607] ? rxe_pool_cleanup+0x45/0x60 [ 402.214432][ T9607] rxe_dealloc+0x25/0xc0 [ 402.218649][ T9607] ib_dealloc_device+0x49/0x230 [ 402.223487][ T9607] __ib_unregister_device+0x396/0x480 [ 402.228838][ T9607] ib_unregister_device_and_put+0x5a/0x80 [ 402.234533][ T9607] nldev_dellink+0x226/0x320 [ 402.239100][ T9607] ? __pfx_nldev_dellink+0x10/0x10 [ 402.244213][ T9607] ? rcu_is_watching+0x12/0xc0 [ 402.248954][ T9607] ? cap_capable+0x107/0x460 [ 402.253532][ T9607] ? bpf_lsm_capable+0x9/0x10 [ 402.258185][ T9607] ? security_capable+0x80/0x260 [ 402.263100][ T9607] ? ns_capable+0xd2/0xf0 [ 402.267400][ T9607] ? __pfx_nldev_dellink+0x10/0x10 [ 402.272484][ T9607] rdma_nl_rcv_msg+0x38a/0x6e0 [ 402.277222][ T9607] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 402.282482][ T9607] ? __lock_acquire+0x4a5/0x2630 [ 402.287394][ T9607] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 402.293781][ T9607] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 402.300694][ T9607] ? netlink_deliver_tap+0x1ae/0xcc0 [ 402.305957][ T9607] netlink_unicast+0x5aa/0x870 [ 402.310702][ T9607] ? __pfx_netlink_unicast+0x10/0x10 [ 402.315967][ T9607] netlink_sendmsg+0x8b0/0xda0 [ 402.320712][ T9607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.325972][ T9607] ? __might_fault+0x10/0x140 [ 402.330629][ T9607] ____sys_sendmsg+0x9e1/0xb70 [ 402.335375][ T9607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.340637][ T9607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.345895][ T9607] ? __pfx_futex_wake_mark+0x10/0x10 [ 402.351156][ T9607] ___sys_sendmsg+0x190/0x1e0 [ 402.355820][ T9607] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.361005][ T9607] __sys_sendmsg+0x170/0x220 [ 402.365569][ T9607] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.370662][ T9607] ? __x64_sys_futex+0x34f/0x4d0 [ 402.375585][ T9607] do_syscall_64+0x10b/0xf80 [ 402.380152][ T9607] ? clear_bhb_loop+0x40/0x90 [ 402.384815][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.390679][ T9607] RIP: 0033:0x7fd52379c819 [ 402.395075][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.414660][ T9607] RSP: 002b:00007fd524700028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.423045][ T9607] RAX: ffffffffffffffda RBX: 00007fd523a15fa0 RCX: 00007fd52379c819 [ 402.430996][ T9607] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 402.438938][ T9607] RBP: 00007fd523832c91 R08: 0000000000000000 R09: 0000000000000000 [ 402.446880][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.454821][ T9607] R13: 00007fd523a16038 R14: 00007fd523a15fa0 R15: 00007ffc94dbaa18 [ 402.462768][ T9607] [ 402.466037][ T9607] Kernel Offset: disabled [ 402.470348][ T9607] Rebooting in 86400 seconds..