last executing test programs: 10.728905682s ago: executing program 1 (id=776): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 10.381806931s ago: executing program 1 (id=778): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0)}}, 0x40) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket(0x80000000000000a, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.601386939s ago: executing program 3 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) 9.522078819s ago: executing program 3 (id=782): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_pidfd_open(r2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.514731232s ago: executing program 1 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x800) 7.960859022s ago: executing program 1 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.712040313s ago: executing program 3 (id=789): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000040)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) 6.557647784s ago: executing program 4 (id=791): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 6.325462361s ago: executing program 1 (id=792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, 0x0, 0x0) 6.321788324s ago: executing program 0 (id=794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xaa, &(0x7f0000000140)=""/170, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0xc00) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6.247872332s ago: executing program 4 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.129386611s ago: executing program 2 (id=796): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000380)="194a5c1e130667b3c4cabcdaa6d7def77c80591b1d24", 0x16, 0x20040004, 0x0, 0x0) 6.094495444s ago: executing program 4 (id=797): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) 6.040328913s ago: executing program 1 (id=798): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) syz_io_uring_setup(0x1143, &(0x7f00000000c0)={0x0, 0x8d2d8, 0x0, 0xfffffdff, 0x3c}, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000e) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r9 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r9, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 5.010712733s ago: executing program 2 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x800) 3.693904012s ago: executing program 4 (id=800): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e050d3b20"], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) 2.573506171s ago: executing program 0 (id=801): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 2.48700573s ago: executing program 4 (id=802): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x8000) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="11000000140025000307f4f9002304000a", 0x11) r6 = eventfd(0x162) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r2, 0x7, 0x6, r4}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r6, 0x7, 0x1, r4}) prctl$PR_SET_FP_MODE(0x2d, 0x3) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000100)={[{@name={'name', 0x3d, 'user_.'}}, {@name={'name', 0x3d, 'user_.'}}, {@cpuset_v2_mode}]}) 2.351843551s ago: executing program 3 (id=803): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 2.324282756s ago: executing program 2 (id=804): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000104010800000000000000000700000005000100010000000a00020000000100020000008e3b550902069c082f23e0f5ae123924c0741baba6392f918ab572402fa6e314e7d48e92a7afbf6d4f07ba812984bb91297ebb8b80229579ff0c6cc0a56971ff057651d72aef59c2e9a169cfd3b97493cf4c"], 0x28}, 0x1, 0x0, 0x0, 0x20004014}, 0x44110) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0xa0, 0x0, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff, 0xffffff00, 'veth1_virt_wifi\x00', 'veth0\x00', {}, {}, 0x6c, 0x6, 0x29}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x5}, {0x4, 0x2, 0xb}, 0x9, 0x40}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'veth0\x00', 'vcan0\x00', {0xff}, {}, 0xff, 0xe3221a0685953982, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x3, 0x10, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20004010}, 0x30044884) socket$igmp6(0xa, 0x3, 0x2) 2.217095503s ago: executing program 0 (id=805): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1.803153717s ago: executing program 0 (id=806): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x40000000100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) 849.663828ms ago: executing program 2 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) mq_timedreceive(r1, &(0x7f0000000000)=""/96, 0x60, 0x8000000000000000, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x40000000100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x200, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000280)) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) sendmsg$NL80211_CMD_DEL_PMKSA(r0, 0x0, 0x40000) 567.900033ms ago: executing program 3 (id=808): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, 0x0, 0x0) 439.266801ms ago: executing program 0 (id=809): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="82", 0x1}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000380)="194a5c1e130667b3c4cabcdaa6d7def77c80591b1d24", 0x16, 0x20040004, 0x0, 0x0) 357.880661ms ago: executing program 2 (id=810): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) 288.873353ms ago: executing program 3 (id=811): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="ff27070200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) 285.403762ms ago: executing program 0 (id=812): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000040)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) 12.640431ms ago: executing program 2 (id=813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 4 (id=814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 66.062317][ T30] audit: type=1400 audit(1765891628.320:62): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.085747][ T30] audit: type=1400 audit(1765891628.340:63): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.088665][ T5798] cgroup: Unknown subsys name 'net' [ 66.115864][ T30] audit: type=1400 audit(1765891628.370:64): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.273350][ T5798] cgroup: Unknown subsys name 'cpuset' [ 66.282190][ T5798] cgroup: Unknown subsys name 'rlimit' [ 66.384459][ T30] audit: type=1400 audit(1765891628.640:65): avc: denied { setattr } for pid=5798 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.425787][ T30] audit: type=1400 audit(1765891628.640:66): avc: denied { create } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.449161][ T30] audit: type=1400 audit(1765891628.640:67): avc: denied { write } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.470474][ T30] audit: type=1400 audit(1765891628.640:68): avc: denied { read } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.491894][ T30] audit: type=1400 audit(1765891628.660:69): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 66.516750][ T30] audit: type=1400 audit(1765891628.660:70): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.541616][ T5800] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.551098][ T30] audit: type=1400 audit(1765891628.810:71): avc: denied { relabelto } for pid=5800 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.517317][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.548441][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.556921][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.563809][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.565141][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.572107][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.579156][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.586119][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.593065][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.607407][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.615378][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.629829][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.639747][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.647562][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.658727][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.666651][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.674722][ T5136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.682239][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.683309][ T5136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.697263][ T5136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.697354][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.713261][ T5136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.713424][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.721109][ T5136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.735399][ T5136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.744569][ T5136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.192844][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 70.335191][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 70.392523][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 70.464558][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 70.488564][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.496873][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.504310][ T5816] bridge_slave_0: entered allmulticast mode [ 70.511857][ T5816] bridge_slave_0: entered promiscuous mode [ 70.541403][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.548694][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.556019][ T5816] bridge_slave_1: entered allmulticast mode [ 70.562972][ T5816] bridge_slave_1: entered promiscuous mode [ 70.621061][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 70.652355][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.659493][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.666992][ T5809] bridge_slave_0: entered allmulticast mode [ 70.673856][ T5809] bridge_slave_0: entered promiscuous mode [ 70.696758][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.709723][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.717328][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.724547][ T5809] bridge_slave_1: entered allmulticast mode [ 70.731723][ T5809] bridge_slave_1: entered promiscuous mode [ 70.744788][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.751983][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.759347][ T5818] bridge_slave_0: entered allmulticast mode [ 70.766417][ T5818] bridge_slave_0: entered promiscuous mode [ 70.775170][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.804954][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.812250][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.819447][ T5818] bridge_slave_1: entered allmulticast mode [ 70.826367][ T5818] bridge_slave_1: entered promiscuous mode [ 70.888521][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.911618][ T5816] team0: Port device team_slave_0 added [ 70.917312][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.924842][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.932122][ T5808] bridge_slave_0: entered allmulticast mode [ 70.938860][ T5808] bridge_slave_0: entered promiscuous mode [ 70.947259][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.962643][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.973197][ T5816] team0: Port device team_slave_1 added [ 70.979052][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.986565][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.993840][ T5808] bridge_slave_1: entered allmulticast mode [ 71.000782][ T5808] bridge_slave_1: entered promiscuous mode [ 71.025890][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.088091][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.095917][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.122076][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.143915][ T5809] team0: Port device team_slave_0 added [ 71.149635][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.156936][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.164105][ T5820] bridge_slave_0: entered allmulticast mode [ 71.171138][ T5820] bridge_slave_0: entered promiscuous mode [ 71.191602][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.198544][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.224546][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.235257][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.237745][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.250980][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.254562][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.267685][ T5809] team0: Port device team_slave_1 added [ 71.273580][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.281291][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.288438][ T5820] bridge_slave_1: entered allmulticast mode [ 71.295459][ T5820] bridge_slave_1: entered promiscuous mode [ 71.303318][ T5818] team0: Port device team_slave_0 added [ 71.337824][ T5818] team0: Port device team_slave_1 added [ 71.382937][ T5808] team0: Port device team_slave_0 added [ 71.389093][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.396821][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.422960][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.435943][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.463409][ T5808] team0: Port device team_slave_1 added [ 71.469573][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.476636][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.502536][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.514991][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.524648][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.531625][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.557547][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.600450][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.607508][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.633445][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.648940][ T5816] hsr_slave_0: entered promiscuous mode [ 71.655521][ T5816] hsr_slave_1: entered promiscuous mode [ 71.681605][ T5814] Bluetooth: hci1: command tx timeout [ 71.681607][ T5136] Bluetooth: hci0: command tx timeout [ 71.697746][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.704839][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.731257][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.743316][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.751205][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.777418][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.789772][ T5820] team0: Port device team_slave_0 added [ 71.798365][ T5820] team0: Port device team_slave_1 added [ 71.851253][ T5814] Bluetooth: hci2: command tx timeout [ 71.851292][ T5811] Bluetooth: hci3: command tx timeout [ 71.856866][ T5136] Bluetooth: hci4: command tx timeout [ 71.888051][ T5809] hsr_slave_0: entered promiscuous mode [ 71.894322][ T5809] hsr_slave_1: entered promiscuous mode [ 71.900186][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 71.906187][ T5809] Cannot create hsr debugfs directory [ 71.937650][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.944987][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.971281][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.987575][ T5818] hsr_slave_0: entered promiscuous mode [ 71.993934][ T5818] hsr_slave_1: entered promiscuous mode [ 71.999831][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 72.005628][ T5818] Cannot create hsr debugfs directory [ 72.024297][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.031538][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.058037][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.073188][ T5808] hsr_slave_0: entered promiscuous mode [ 72.079331][ T5808] hsr_slave_1: entered promiscuous mode [ 72.085520][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 72.091416][ T5808] Cannot create hsr debugfs directory [ 72.252129][ T5820] hsr_slave_0: entered promiscuous mode [ 72.258404][ T5820] hsr_slave_1: entered promiscuous mode [ 72.264685][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 72.270403][ T5820] Cannot create hsr debugfs directory [ 72.548192][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.564693][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.585632][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.608102][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.670025][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.684450][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.701937][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.720351][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.789921][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.805819][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.822512][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.840043][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.912550][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.925645][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.938473][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.954077][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.962207][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.032221][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.064967][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.077253][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.088029][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.106639][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.119032][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.126277][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.161766][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.168839][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.195965][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.258827][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.276540][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.283654][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.314704][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.321804][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.363059][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.379460][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 73.379476][ T30] audit: type=1400 audit(1765891635.630:84): avc: denied { sys_module } for pid=5816 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.402831][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.502751][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.513841][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.524194][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.545492][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.552597][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.567891][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.575021][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.599220][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.606397][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.622702][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.629883][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.660397][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.684387][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.732233][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.739350][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.761886][ T5136] Bluetooth: hci0: command tx timeout [ 73.761889][ T5811] Bluetooth: hci1: command tx timeout [ 73.783608][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.790740][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.894286][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.922349][ T5136] Bluetooth: hci4: command tx timeout [ 73.922365][ T5811] Bluetooth: hci2: command tx timeout [ 73.922375][ T5814] Bluetooth: hci3: command tx timeout [ 73.964503][ T5816] veth0_vlan: entered promiscuous mode [ 74.017642][ T5816] veth1_vlan: entered promiscuous mode [ 74.136565][ T5816] veth0_macvtap: entered promiscuous mode [ 74.167105][ T5816] veth1_macvtap: entered promiscuous mode [ 74.209304][ T5808] veth0_vlan: entered promiscuous mode [ 74.224754][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.247253][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.268334][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.285662][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.301894][ T5808] veth1_vlan: entered promiscuous mode [ 74.337490][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.350440][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.359963][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.379848][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.477113][ T5808] veth0_macvtap: entered promiscuous mode [ 74.490394][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.501472][ T5809] veth0_vlan: entered promiscuous mode [ 74.524167][ T5808] veth1_macvtap: entered promiscuous mode [ 74.543332][ T5809] veth1_vlan: entered promiscuous mode [ 74.604149][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.616083][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.616340][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.629129][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.678985][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.689872][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.707917][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.717202][ T1013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.738979][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.747335][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.769484][ T30] audit: type=1400 audit(1765891637.020:85): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.l7qAv7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.795946][ T30] audit: type=1400 audit(1765891637.020:86): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.806172][ T5818] veth0_vlan: entered promiscuous mode [ 74.824220][ T30] audit: type=1400 audit(1765891637.030:87): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.l7qAv7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.851321][ T30] audit: type=1400 audit(1765891637.040:88): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.877727][ T5809] veth0_macvtap: entered promiscuous mode [ 74.892025][ T30] audit: type=1400 audit(1765891637.040:89): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.l7qAv7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.918886][ T30] audit: type=1400 audit(1765891637.040:90): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.l7qAv7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.950257][ T5809] veth1_macvtap: entered promiscuous mode [ 74.964107][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.967787][ T5820] veth0_vlan: entered promiscuous mode [ 74.989546][ T30] audit: type=1400 audit(1765891637.080:91): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.009681][ T30] audit: type=1400 audit(1765891637.110:92): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.037024][ T30] audit: type=1400 audit(1765891637.110:93): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="gadgetfs" ino=7674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.048298][ T5818] veth1_vlan: entered promiscuous mode [ 75.122893][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.137291][ T5820] veth1_vlan: entered promiscuous mode [ 75.144958][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.177728][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.218732][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.230554][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.245560][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.267497][ T3452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.276854][ T5820] veth0_macvtap: entered promiscuous mode [ 75.294934][ T3452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.303880][ T3452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.315713][ T3452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.336827][ T5818] veth0_macvtap: entered promiscuous mode [ 75.351820][ T5820] veth1_macvtap: entered promiscuous mode [ 75.402694][ T5818] veth1_macvtap: entered promiscuous mode [ 75.529176][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.550922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.592713][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.734147][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.674419][ T5136] Bluetooth: hci1: command tx timeout [ 76.674528][ T5811] Bluetooth: hci0: command tx timeout [ 76.685314][ T5811] Bluetooth: hci2: command tx timeout [ 76.690747][ T5811] Bluetooth: hci4: command tx timeout [ 76.696136][ T5811] Bluetooth: hci3: command tx timeout [ 76.701884][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.270367][ T5938] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.286131][ T5938] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 77.341463][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.388828][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.547954][ T3491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.556914][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.584064][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.593194][ T3491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622067][ T3491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.780230][ T3491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.789888][ T3491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.803590][ T3491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.825076][ T3491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.734495][ T5136] Bluetooth: hci3: command tx timeout [ 78.739912][ T5136] Bluetooth: hci4: command tx timeout [ 78.746632][ T5814] Bluetooth: hci1: command tx timeout [ 78.752086][ T5136] Bluetooth: hci2: command tx timeout [ 78.757468][ T5136] Bluetooth: hci0: command tx timeout [ 78.795037][ T3491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.977362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.985939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.286158][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 79.286174][ T30] audit: type=1400 audit(1765891641.540:125): avc: denied { read write } for pid=5949 comm="syz.1.9" name="mouse0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.526577][ T30] audit: type=1400 audit(1765891641.580:126): avc: denied { open } for pid=5949 comm="syz.1.9" path="/dev/input/mouse0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 79.569392][ T30] audit: type=1400 audit(1765891641.590:127): avc: denied { create } for pid=5949 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.545085][ T30] audit: type=1400 audit(1765891641.590:128): avc: denied { bind } for pid=5949 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.566484][ T30] audit: type=1400 audit(1765891641.590:129): avc: denied { setopt } for pid=5949 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.717872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.726415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.820751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.828961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.127574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.136282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.538562][ T9] cfg80211: failed to load regulatory.db [ 81.546432][ T30] audit: type=1400 audit(1765891641.590:130): avc: denied { prog_run } for pid=5949 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.572558][ T30] audit: type=1400 audit(1765891641.810:131): avc: denied { read } for pid=5948 comm="syz.2.3" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 81.946855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.958548][ T30] audit: type=1400 audit(1765891641.810:132): avc: denied { open } for pid=5948 comm="syz.2.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.437637][ T30] audit: type=1400 audit(1765891644.690:133): avc: denied { name_bind } for pid=5963 comm="syz.1.11" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.463411][ T30] audit: type=1400 audit(1765891644.720:134): avc: denied { node_bind } for pid=5963 comm="syz.1.11" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.746719][ T5969] netlink: 'syz.0.12': attribute type 2 has an invalid length. [ 83.207440][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.227268][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.446032][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.455221][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.084510][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.092650][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.118245][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.134092][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.485152][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 84.485166][ T30] audit: type=1400 audit(1765891646.740:142): avc: denied { create } for pid=5985 comm="syz.1.15" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.183232][ T30] audit: type=1400 audit(1765891647.390:143): avc: denied { ioctl } for pid=5985 comm="syz.1.15" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9398 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.921459][ T5998] siw: device registration error -23 [ 88.582851][ T6018] netlink: 'syz.3.20': attribute type 2 has an invalid length. [ 89.388122][ T6019] netlink: 'syz.2.19': attribute type 2 has an invalid length. [ 89.581443][ T6019] overlayfs: failed to resolve './file0': -2 [ 91.240560][ T6040] siw: device registration error -23 [ 92.913749][ T6054] siw: device registration error -23 [ 95.487032][ T6068] 9pnet_virtio: no channels available for device syz [ 96.640864][ T6069] overlayfs: overlapping lowerdir path [ 96.690827][ T6070] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 96.699937][ T6070] overlayfs: overlapping lowerdir path [ 97.866832][ T30] audit: type=1400 audit(1765891660.120:144): avc: denied { mount } for pid=6077 comm="syz.0.31" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 97.900285][ T6078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.921193][ T6078] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 98.442824][ T6087] netlink: 'syz.3.32': attribute type 2 has an invalid length. [ 99.534545][ T30] audit: type=1400 audit(1765891661.790:145): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.614743][ T6088] netlink: 'syz.1.33': attribute type 2 has an invalid length. [ 100.270257][ T6101] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 100.281914][ T6101] overlayfs: failed to resolve './file0': -2 [ 102.390865][ T6107] netlink: 'syz.4.37': attribute type 2 has an invalid length. [ 102.841838][ T6105] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 102.852012][ T6105] overlayfs: missing 'lowerdir' [ 103.221364][ T30] audit: type=1400 audit(1765891665.460:146): avc: denied { mounton } for pid=6108 comm="syz.1.38" path="/10/file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.965237][ T30] audit: type=1400 audit(1765891665.950:147): avc: denied { create } for pid=6108 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.212770][ T30] audit: type=1400 audit(1765891666.290:148): avc: denied { create } for pid=6108 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.723681][ T6125] ======================================================= [ 104.723681][ T6125] WARNING: The mand mount option has been deprecated and [ 104.723681][ T6125] and is ignored by this kernel. Remove the mand [ 104.723681][ T6125] option from the mount to silence this warning. [ 104.723681][ T6125] ======================================================= [ 104.771734][ T30] audit: type=1400 audit(1765891667.020:149): avc: denied { mount } for pid=6121 comm="syz.4.41" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 105.863452][ T30] audit: type=1326 audit(1765891667.140:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.4.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d8958f749 code=0x0 [ 106.037871][ T30] audit: type=1400 audit(1765891668.240:151): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.167812][ T6140] 9pnet_virtio: no channels available for device syz [ 106.962862][ T6144] overlayfs: overlapping lowerdir path [ 107.045428][ T6145] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 107.053908][ T6145] overlayfs: overlapping lowerdir path [ 107.797545][ T30] audit: type=1400 audit(1765891669.790:152): avc: denied { create } for pid=6139 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.914843][ T6134] process 'syz.2.42' launched './file0' with NULL argv: empty string added [ 107.948007][ T30] audit: type=1400 audit(1765891670.200:153): avc: denied { bind } for pid=6139 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.101056][ T30] audit: type=1400 audit(1765891670.200:154): avc: denied { setopt } for pid=6139 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.120981][ T6153] netlink: 'syz.0.46': attribute type 2 has an invalid length. [ 108.179435][ T30] audit: type=1400 audit(1765891670.200:155): avc: denied { accept } for pid=6139 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.344401][ T30] audit: type=1400 audit(1765891670.320:156): avc: denied { write } for pid=6139 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.430432][ T30] audit: type=1400 audit(1765891670.320:157): avc: denied { read } for pid=6139 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.469512][ T30] audit: type=1400 audit(1765891670.390:158): avc: denied { mount } for pid=6152 comm="syz.0.46" name="/" dev="overlay" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.571710][ T30] audit: type=1400 audit(1765891670.410:159): avc: denied { ioctl } for pid=6139 comm="syz.4.45" path="socket:[10073]" dev="sockfs" ino=10073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.597564][ T30] audit: type=1400 audit(1765891670.570:160): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.319492][ T30] audit: type=1400 audit(1765891671.570:161): avc: denied { write } for pid=6169 comm="syz.0.51" name="fib_triestat" dev="proc" ino=4026533174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.628152][ T6175] fuse: Unknown parameter 'group_id00000000000000000000' [ 110.295629][ T30] audit: type=1400 audit(1765891671.720:162): avc: denied { create } for pid=6173 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.696871][ T6191] 9pnet_virtio: no channels available for device syz [ 111.465122][ T6194] overlayfs: overlapping lowerdir path [ 111.542180][ T6196] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 111.550544][ T6196] overlayfs: overlapping lowerdir path [ 112.739551][ T6209] siw: device registration error -23 [ 114.399715][ T30] audit: type=1400 audit(1765891676.570:163): avc: denied { execute } for pid=6210 comm="syz.0.59" name="file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.816768][ T6224] fuse: Bad value for 'fd' [ 115.748900][ T6232] fuse: Unknown parameter '00000000000000000000' [ 117.251742][ T30] audit: type=1400 audit(1765891679.510:164): avc: denied { create } for pid=6244 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.910270][ T6251] fuse: Unknown parameter 'group_id00000000000000000000' [ 118.041910][ T30] audit: type=1400 audit(1765891680.300:165): avc: denied { allowed } for pid=6244 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.083009][ T30] audit: type=1400 audit(1765891680.320:166): avc: denied { map } for pid=6244 comm="syz.3.69" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.174967][ T6259] usb usb8: usbfs: process 6259 (syz.3.69) did not claim interface 0 before use [ 118.458782][ T30] audit: type=1400 audit(1765891680.320:167): avc: denied { read write } for pid=6244 comm="syz.3.69" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.489004][ T30] audit: type=1400 audit(1765891680.420:168): avc: denied { write } for pid=6244 comm="syz.3.69" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.396671][ T6272] fuse: Bad value for 'fd' [ 119.492498][ T6274] siw: device registration error -23 [ 121.198729][ T6284] fuse: Unknown parameter '00000000000000000000' [ 121.583957][ T30] audit: type=1400 audit(1765891683.790:169): avc: denied { read write } for pid=6278 comm="syz.4.79" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.786230][ T30] audit: type=1400 audit(1765891683.790:170): avc: denied { open } for pid=6278 comm="syz.4.79" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.841342][ T6291] fuse: Bad value for 'fd' [ 122.816782][ T6304] fuse: Bad value for 'group_id' [ 122.821872][ T6304] fuse: Bad value for 'group_id' [ 123.607036][ T6307] syzkaller0: entered promiscuous mode [ 123.612605][ T6307] syzkaller0: entered allmulticast mode [ 123.782604][ T30] audit: type=1400 audit(1765891686.040:171): avc: denied { create } for pid=6306 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.923724][ T30] audit: type=1400 audit(1765891686.040:172): avc: denied { write } for pid=6306 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.415224][ T30] audit: type=1400 audit(1765891686.320:173): avc: denied { write } for pid=6309 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.483695][ T30] audit: type=1400 audit(1765891686.320:174): avc: denied { nlmsg_write } for pid=6309 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.534207][ T30] audit: type=1400 audit(1765891686.370:175): avc: denied { create } for pid=6309 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.128253][ T6328] fuse: Unknown parameter 'user00000000000000000000' [ 125.256962][ T6329] siw: device registration error -23 [ 125.804075][ T6338] siw: device registration error -23 [ 127.305245][ T6343] fuse: Unknown parameter 'group_i00000000000000000000' [ 128.543668][ T30] audit: type=1400 audit(1765891690.510:176): avc: denied { create } for pid=6346 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.758834][ T30] audit: type=1400 audit(1765891690.520:177): avc: denied { connect } for pid=6346 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.799532][ T30] audit: type=1400 audit(1765891690.520:178): avc: denied { write } for pid=6346 comm="syz.0.96" path="socket:[11418]" dev="sockfs" ino=11418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.778324][ T30] audit: type=1400 audit(1765891691.650:179): avc: denied { read } for pid=6366 comm="syz.4.102" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 130.176812][ T30] audit: type=1400 audit(1765891691.650:180): avc: denied { open } for pid=6366 comm="syz.4.102" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 130.510698][ T30] audit: type=1400 audit(1765891691.660:181): avc: denied { ioctl } for pid=6366 comm="syz.4.102" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 131.246777][ T6383] fuse: Unknown parameter 'user00000000000000000000' [ 131.570862][ T6389] siw: device registration error -23 [ 132.853649][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.859925][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.968784][ T30] audit: type=1400 audit(1765891696.180:182): avc: denied { mounton } for pid=6401 comm="syz.2.110" path="/20/bus" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.955190][ T30] audit: type=1400 audit(1765891703.210:183): avc: denied { setopt } for pid=6469 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.063272][ T30] audit: type=1400 audit(1765891703.240:184): avc: denied { getopt } for pid=6469 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.257442][ T30] audit: type=1400 audit(1765891703.390:185): avc: denied { node_bind } for pid=6469 comm="syz.2.125" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 149.301540][ T6539] fuse: Unknown parameter 'group_id00000000000000000000' [ 149.301796][ T6541] fuse: Unknown parameter 'group_i00000000000000000000' [ 150.520310][ T6563] syzkaller0: entered promiscuous mode [ 150.540806][ T6563] syzkaller0: entered allmulticast mode [ 152.624390][ T30] audit: type=1400 audit(1765891714.490:186): avc: denied { append } for pid=6575 comm="syz.1.149" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 153.087294][ T6589] fuse: Unknown parameter 'group_id00000000000000000000' [ 154.361624][ T30] audit: type=1400 audit(1765891716.610:187): avc: denied { write } for pid=6608 comm="syz.4.159" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 156.261270][ T6625] siw: device registration error -23 [ 159.857206][ T30] audit: type=1400 audit(1765891722.110:189): avc: denied { sqpoll } for pid=6645 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.159587][ T6657] siw: device registration error -23 [ 161.057388][ T30] audit: type=1400 audit(1765891722.060:188): avc: denied { write } for pid=6645 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 161.566677][ T30] audit: type=1400 audit(1765891723.820:190): avc: denied { ioctl } for pid=6661 comm="syz.2.171" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 162.980344][ T6678] fuse: Bad value for 'rootmode' [ 164.528838][ T30] audit: type=1400 audit(1765891726.780:191): avc: denied { read } for pid=6695 comm="syz.3.178" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.589700][ T30] audit: type=1400 audit(1765891726.810:192): avc: denied { open } for pid=6695 comm="syz.3.178" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.694190][ T30] audit: type=1400 audit(1765891726.810:193): avc: denied { ioctl } for pid=6695 comm="syz.3.178" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.807486][ T6698] netlink: 400 bytes leftover after parsing attributes in process `syz.0.179'. [ 164.893822][ T30] audit: type=1400 audit(1765891726.810:194): avc: denied { set_context_mgr } for pid=6695 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 164.972168][ T30] audit: type=1400 audit(1765891726.820:195): avc: denied { map } for pid=6695 comm="syz.3.178" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.004390][ T30] audit: type=1400 audit(1765891726.820:196): avc: denied { call } for pid=6695 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 165.039971][ T30] audit: type=1400 audit(1765891727.060:197): avc: denied { write } for pid=6697 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.638823][ T6696] syz.3.178 (6696): drop_caches: 2 [ 168.191255][ T6731] Zero length message leads to an empty skb [ 168.573254][ T6744] siw: device registration error -23 [ 168.605384][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.190'. [ 169.992839][ T6753] vivid-007: disconnect [ 170.003127][ T30] audit: type=1400 audit(1765891732.260:198): avc: denied { create } for pid=6742 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.387587][ T6742] vivid-007: reconnect [ 170.401965][ T30] audit: type=1400 audit(1765891732.280:199): avc: denied { connect } for pid=6742 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.545208][ T30] audit: type=1400 audit(1765891732.280:200): avc: denied { ioctl } for pid=6742 comm="syz.0.192" path="socket:[11188]" dev="sockfs" ino=11188 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.629599][ T30] audit: type=1400 audit(1765891732.410:201): avc: denied { setopt } for pid=6749 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.981835][ T30] audit: type=1400 audit(1765891732.480:202): avc: denied { write } for pid=6749 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.047422][ T30] audit: type=1400 audit(1765891732.480:203): avc: denied { connect } for pid=6749 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.113016][ T30] audit: type=1400 audit(1765891732.490:204): avc: denied { name_connect } for pid=6749 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 171.140829][ T30] audit: type=1400 audit(1765891732.800:205): avc: denied { listen } for pid=6749 comm="syz.1.195" lport=46368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.163628][ T30] audit: type=1400 audit(1765891732.800:206): avc: denied { accept } for pid=6749 comm="syz.1.195" lport=46368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.190849][ T30] audit: type=1400 audit(1765891732.800:207): avc: denied { read write } for pid=6749 comm="syz.1.195" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.935419][ T6797] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 172.944530][ T6797] SELinux: failed to load policy [ 174.903096][ T6814] geneve2: entered promiscuous mode [ 174.908453][ T6814] geneve2: entered allmulticast mode [ 174.916669][ T60] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.332836][ T60] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.384457][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 175.384468][ T30] audit: type=1400 audit(1765891737.640:218): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 175.422529][ T60] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.564268][ T60] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.601191][ T6821] fuse: Bad value for 'fd' [ 177.050142][ T6834] fuse: Bad value for 'rootmode' [ 177.266754][ T6836] 9pnet_virtio: no channels available for device syz [ 177.928441][ T6837] overlayfs: missing 'lowerdir' [ 177.981915][ T6839] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 179.181507][ T6847] binder_alloc: 6846: binder_alloc_buf, no vma [ 179.202566][ T6803] syz.1.208 (6803): drop_caches: 2 [ 179.416809][ T6847] syz.4.220 (6847): drop_caches: 2 [ 180.325778][ T6855] syz.0.222 uses obsolete (PF_INET,SOCK_PACKET) [ 180.911856][ T6864] syz.2.224 (6864): drop_caches: 2 [ 182.783384][ T30] audit: type=1400 audit(1765891744.960:219): avc: denied { firmware_load } for pid=6876 comm="syz.1.229" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 183.597724][ T6879] syz.1.229 (6879) used greatest stack depth: 19688 bytes left [ 183.783111][ T6888] overlayfs: failed to resolve './file0': -2 [ 184.059818][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 185.801319][ T6907] syz.2.239 (6907): drop_caches: 2 [ 187.715053][ T30] audit: type=1400 audit(1765891749.970:220): avc: denied { kexec_image_load } for pid=6919 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 187.736818][ T6922] SELinux: policydb string S does not match my string SE Linux [ 187.770171][ T6924] syz.2.244 (6924): drop_caches: 2 [ 187.795194][ T6922] SELinux: failed to load policy [ 187.902636][ T6933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.043308][ T30] audit: type=1400 audit(1765891750.300:221): avc: denied { write } for pid=6932 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.003998][ T6948] syz.1.254 (6948): drop_caches: 2 [ 189.034598][ T5999] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 189.047763][ T6952] syz.4.257 (6952): drop_caches: 2 [ 189.231903][ T6962] syz.3.261 (6962): drop_caches: 2 [ 189.338509][ T5999] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 189.365899][ T5999] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.372669][ T117] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 189.388404][ T30] audit: type=1400 audit(1765891751.640:222): avc: denied { create } for pid=6967 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 189.392220][ T5999] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.750149][ T117] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 189.803910][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.842346][ T30] audit: type=1400 audit(1765891751.670:223): avc: denied { read } for pid=6967 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 189.879939][ T117] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.886941][ T5999] usb 3-1: Product: syz [ 189.893503][ T5999] usb 3-1: Manufacturer: syz [ 189.909288][ T117] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.923176][ T5999] usb 3-1: SerialNumber: syz [ 189.931395][ T117] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.953898][ T5999] usb 3-1: config 0 descriptor?? [ 189.963105][ T117] usb 1-1: Product: syz [ 189.995783][ T117] usb 1-1: Manufacturer: syz [ 190.000409][ T117] usb 1-1: SerialNumber: syz [ 190.051052][ T117] usb 1-1: config 0 descriptor?? [ 190.134824][ T5999] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 190.169530][ T117] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 190.239540][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.325435][ T30] audit: type=1400 audit(1765891752.580:224): avc: denied { create } for pid=6976 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.354935][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.420674][ T6981] netlink: 'syz.3.266': attribute type 2 has an invalid length. [ 190.775512][ T5996] usb 3-1: USB disconnect, device number 2 [ 190.791020][ T30] audit: type=1400 audit(1765891752.600:225): avc: denied { bind } for pid=6976 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.938808][ T30] audit: type=1400 audit(1765891752.600:226): avc: denied { listen } for pid=6976 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.211903][ T117] usb 1-1: USB disconnect, device number 2 [ 191.227101][ T30] audit: type=1400 audit(1765891752.930:227): avc: denied { accept } for pid=6976 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 191.326345][ T30] audit: type=1400 audit(1765891753.460:228): avc: denied { setopt } for pid=6976 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 191.622327][ T7001] syz.3.275 (7001): drop_caches: 2 [ 191.701405][ T117] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 191.803553][ T792] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 191.932449][ T117] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 191.944413][ T117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.965180][ T117] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.974886][ T117] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 191.982603][ T792] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 192.490842][ T792] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.595004][ T117] usb 2-1: Product: syz [ 192.710443][ T117] usb 2-1: Manufacturer: syz [ 192.722851][ T117] usb 2-1: SerialNumber: syz [ 192.774961][ T117] usb 2-1: config 0 descriptor?? [ 192.805445][ T792] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.965151][ T792] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.995117][ T117] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 193.000653][ T792] usb 3-1: Product: syz [ 193.012812][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.0.283'. [ 193.018550][ T792] usb 3-1: Manufacturer: syz [ 193.042876][ T117] usb 2-1: USB disconnect, device number 2 [ 193.047872][ T792] usb 3-1: SerialNumber: syz [ 193.077188][ T30] audit: type=1400 audit(1765891755.330:229): avc: denied { mounton } for pid=7021 comm="syz.3.284" path="/59/file0" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.086927][ T792] usb 3-1: config 0 descriptor?? [ 193.128064][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.162423][ T30] audit: type=1400 audit(1765891755.360:230): avc: denied { mount } for pid=7021 comm="syz.3.284" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 193.234321][ T792] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 193.588676][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 193.616327][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.661404][ T117] usb 3-1: USB disconnect, device number 3 [ 193.698876][ T30] audit: type=1326 audit(1765891755.950:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7025 comm="syz.0.285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77e658f749 code=0x0 [ 194.086389][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.095840][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.639764][ T7052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.729871][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 195.060677][ T7067] 9pnet_virtio: no channels available for device syz [ 196.389686][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 196.395791][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 196.404165][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 196.405421][ T7076] Bluetooth: hci4: command 0x0406 tx timeout [ 196.410174][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 197.161945][ T7091] fuse: Unknown parameter 'fd0x0000000000000003' [ 197.300756][ T30] audit: type=1400 audit(1765891759.550:232): avc: denied { create } for pid=7093 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.426553][ T30] audit: type=1400 audit(1765891759.560:233): avc: denied { bind } for pid=7093 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.748750][ T7108] netlink: 'syz.2.312': attribute type 2 has an invalid length. [ 198.254227][ T7110] 9pnet_virtio: no channels available for device syz [ 199.298416][ T7117] usb usb8: usbfs: process 7117 (syz.4.313) did not claim interface 0 before use [ 199.771545][ T7135] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 200.325411][ T7149] fuse: Unknown parameter '0x0000000000000003' [ 200.695475][ T7156] netlink: 'syz.1.327': attribute type 2 has an invalid length. [ 201.732870][ T30] audit: type=1400 audit(1765891763.990:234): avc: denied { setopt } for pid=7159 comm="syz.0.329" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.855652][ T7155] 9pnet_virtio: no channels available for device syz [ 203.273373][ T30] audit: type=1400 audit(1765891765.530:235): avc: denied { ioctl } for pid=7179 comm="syz.4.334" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 203.658996][ T7187] fuse: Unknown parameter '0x0000000000000003' [ 204.073533][ T30] audit: type=1400 audit(1765891766.330:236): avc: denied { create } for pid=7197 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 206.897347][ T7225] fuse: Unknown parameter '0x0000000000000003' [ 207.097478][ T7229] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.351'. [ 207.374208][ T30] audit: type=1400 audit(1765891769.610:237): avc: denied { create } for pid=7233 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.903338][ T30] audit: type=1400 audit(1765891770.160:238): avc: denied { write } for pid=7237 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 208.138630][ T30] audit: type=1400 audit(1765891770.380:239): avc: denied { ioctl } for pid=7241 comm="syz.0.356" path="socket:[14479]" dev="sockfs" ino=14479 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.403069][ T7256] fuse: Unknown parameter '0x0000000000000003' [ 209.096507][ T7260] 9pnet_virtio: no channels available for device syz [ 209.119965][ T7260] overlayfs: missing 'lowerdir' [ 209.299708][ T7261] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.069135][ T30] audit: type=1400 audit(1765891772.320:240): avc: denied { ioctl } for pid=7262 comm="syz.0.365" path="socket:[14493]" dev="sockfs" ino=14493 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.069452][ T7263] syzkaller1: entered promiscuous mode [ 210.111428][ T7263] syzkaller1: entered allmulticast mode [ 210.233776][ T7271] fuse: Unknown parameter 'grou00000000000000000000' [ 211.149637][ T7290] fuse: Unknown parameter '0x0000000000000003' [ 211.397448][ T30] audit: type=1400 audit(1765891773.640:241): avc: denied { connect } for pid=7295 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.870280][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 212.627558][ T52] Bluetooth: hci2: unexpected event for opcode 0x2228 [ 213.009497][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 214.341662][ T7333] fuse: Unknown parameter '0x0000000000000003' [ 218.102664][ T7364] capability: warning: `syz.1.397' uses deprecated v2 capabilities in a way that may be insecure [ 218.574557][ T7375] 9pnet_virtio: no channels available for device syz [ 218.619873][ T7375] overlayfs: missing 'lowerdir' [ 218.699634][ T7376] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 221.694826][ T30] audit: type=1326 audit(1765891783.150:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.4.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d8958f749 code=0x0 [ 222.978372][ T7418] fuse: Unknown parameter 'user_i00000000000000000000' [ 224.969808][ T7437] cgroup: name respecified [ 225.055716][ T7435] cgroup: name respecified [ 227.099489][ T7463] cgroup: name respecified [ 228.365757][ T7494] 9pnet_virtio: no channels available for device syz [ 228.389123][ T7494] overlayfs: missing 'lowerdir' [ 228.541375][ T7495] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 228.614844][ T7495] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 228.625554][ T7495] overlayfs: failed to look up (tracing) for ino (-66) [ 230.857807][ T7524] 9pnet_virtio: no channels available for device syz [ 232.129918][ T7525] overlayfs: overlapping lowerdir path [ 232.147334][ T7525] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 232.147509][ T7525] overlayfs: overlapping lowerdir path [ 235.890098][ T30] audit: type=1400 audit(1765891798.140:243): avc: denied { read } for pid=7566 comm="syz.4.457" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 236.072251][ T30] audit: type=1400 audit(1765891798.140:244): avc: denied { open } for pid=7566 comm="syz.4.457" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 236.240819][ T30] audit: type=1400 audit(1765891798.280:245): avc: denied { ioctl } for pid=7566 comm="syz.4.457" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 236.268038][ T30] audit: type=1400 audit(1765891798.300:246): avc: denied { write } for pid=7566 comm="syz.4.457" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 236.522758][ T30] audit: type=1400 audit(1765891798.460:247): avc: denied { override_creds } for pid=7566 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 241.977229][ T7612] cgroup: name respecified [ 242.082356][ T7638] 9pnet_virtio: no channels available for device syz [ 243.542013][ T7639] overlayfs: overlapping lowerdir path [ 243.593138][ T7641] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 243.601632][ T7641] overlayfs: overlapping lowerdir path [ 244.433411][ T7643] 9pnet_virtio: no channels available for device syz [ 244.466520][ T7643] overlayfs: missing 'lowerdir' [ 247.203311][ T7668] 9pnet_virtio: no channels available for device syz [ 247.228150][ T7668] overlayfs: missing 'lowerdir' [ 247.307188][ T7669] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 247.315626][ T7669] overlayfs: overlapping lowerdir path [ 248.677182][ T30] audit: type=1400 audit(1765891810.930:248): avc: denied { create } for pid=7676 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.239852][ T30] audit: type=1400 audit(1765891811.490:249): avc: denied { create } for pid=7676 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 249.292953][ T30] audit: type=1400 audit(1765891811.550:250): avc: denied { ioctl } for pid=7676 comm="syz.0.488" path="socket:[16452]" dev="sockfs" ino=16452 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.749409][ T7692] 9pnet_virtio: no channels available for device syz [ 250.322993][ T7693] 9pnet_virtio: no channels available for device syz [ 250.781058][ T7695] overlayfs: missing 'lowerdir' [ 251.474967][ T7694] overlay: Unknown parameter '/' [ 251.692277][ T7675] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 251.700533][ T7675] overlayfs: overlapping lowerdir path [ 253.722980][ T7708] Process accounting resumed [ 253.828508][ T30] audit: type=1400 audit(1765891815.530:251): avc: denied { create } for pid=7703 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.440812][ T30] audit: type=1400 audit(1765891815.540:252): avc: denied { connect } for pid=7703 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.516868][ T30] audit: type=1400 audit(1765891815.550:253): avc: denied { bind } for pid=7703 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.570762][ T30] audit: type=1400 audit(1765891815.560:254): avc: denied { write } for pid=7703 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.571713][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.578340][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.678120][ T7722] Process accounting resumed [ 256.740704][ T30] audit: type=1326 audit(1765891818.990:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7717 comm="syz.3.501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4a18f749 code=0x0 [ 257.012808][ T7730] 9pnet_virtio: no channels available for device syz [ 257.992473][ T7733] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.011092][ T30] audit: type=1400 audit(1765891821.270:256): avc: denied { read } for pid=7735 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.141118][ T7758] 9pnet_virtio: no channels available for device syz [ 261.179863][ T7758] overlayfs: missing 'lowerdir' [ 261.260802][ T7759] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 261.441528][ T7759] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 261.451771][ T7759] overlayfs: failed to look up (tracing) for ino (-66) [ 262.798167][ T30] audit: type=1400 audit(1765891825.050:257): avc: denied { create } for pid=7768 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.980727][ T5886] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 262.998167][ T30] audit: type=1400 audit(1765891825.250:258): avc: denied { read } for pid=7768 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 263.142322][ T5886] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 263.272204][ T5886] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 263.310820][ T5886] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 263.378929][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.694287][ T5886] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.703984][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.715273][ T5886] usb 2-1: Product: syz [ 263.723456][ T5886] usb 2-1: Manufacturer: syz [ 263.732898][ T5886] usb 2-1: SerialNumber: syz [ 263.763927][ T5886] usb 2-1: config 0 descriptor?? [ 263.775501][ T7767] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 263.794991][ T5886] usb 2-1: selecting invalid altsetting 0 [ 264.100020][ T6340] usb 2-1: USB disconnect, device number 3 [ 264.169414][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.490866][ T7793] 9pnet_virtio: no channels available for device syz [ 264.513676][ T7793] overlayfs: missing 'lowerdir' [ 264.594554][ T7794] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.904984][ T30] audit: type=1400 audit(1765891828.160:259): avc: denied { create } for pid=7799 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 266.023069][ T30] audit: type=1400 audit(1765891828.190:260): avc: denied { sys_admin } for pid=7799 comm="syz.2.523" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 267.001204][ T52] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 267.556097][ T7829] syz.3.533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 269.122220][ T7847] 9pnet_virtio: no channels available for device syz [ 269.983370][ T7848] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 271.026642][ T30] audit: type=1400 audit(1765891833.280:261): avc: denied { bind } for pid=7852 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.049831][ T30] audit: type=1400 audit(1765891833.280:262): avc: denied { name_bind } for pid=7852 comm="syz.0.540" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 271.079113][ T30] audit: type=1400 audit(1765891833.280:263): avc: denied { node_bind } for pid=7852 comm="syz.0.540" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 271.140708][ T30] audit: type=1400 audit(1765891833.280:264): avc: denied { name_connect } for pid=7852 comm="syz.0.540" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 271.177559][ T30] audit: type=1326 audit(1765891833.400:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.3.539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4a18f749 code=0x0 [ 271.467373][ T7863] 9pnet_virtio: no channels available for device syz [ 271.494303][ T7863] overlayfs: missing 'lowerdir' [ 271.574902][ T7864] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 271.583311][ T7864] overlayfs: overlapping lowerdir path [ 272.911359][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 274.951580][ T7879] 9pnet_virtio: no channels available for device syz [ 274.978692][ T7879] overlayfs: missing 'lowerdir' [ 275.059133][ T7880] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 275.067579][ T7880] overlayfs: overlapping lowerdir path [ 276.531939][ T7893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.551'. [ 278.123133][ T7920] 9pnet_virtio: no channels available for device syz [ 279.494953][ T7921] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 280.730162][ T30] audit: type=1400 audit(1765891842.950:266): avc: denied { mount } for pid=7929 comm="syz.4.560" name="/" dev="configfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 281.686257][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.563'. [ 281.957705][ T7944] 9pnet_virtio: no channels available for device syz [ 282.882800][ T7945] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 285.310845][ T7962] 9pnet_virtio: no channels available for device syz [ 287.611166][ T7964] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 288.863886][ T7961] Process accounting resumed [ 289.280994][ T30] audit: type=1400 audit(1765891851.510:267): avc: denied { create } for pid=7977 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.363585][ T30] audit: type=1400 audit(1765891851.520:268): avc: denied { setopt } for pid=7977 comm="syz.0.571" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.529646][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 291.145378][ T7991] Process accounting resumed [ 291.722979][ T5872] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 291.957632][ T5872] usb 5-1: device descriptor read/64, error -71 [ 292.294851][ T5872] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 292.590927][ T5872] usb 5-1: device descriptor read/64, error -71 [ 292.600257][ T30] audit: type=1400 audit(1765891854.850:269): avc: denied { ioctl } for pid=8009 comm="syz.2.577" path="socket:[18104]" dev="sockfs" ino=18104 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.081848][ T5872] usb usb5-port1: attempt power cycle [ 294.144835][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 294.857489][ T8033] sctp: [Deprecated]: syz.1.584 (pid 8033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.857489][ T8033] Use struct sctp_sack_info instead [ 296.802165][ T8051] sctp: [Deprecated]: syz.3.589 (pid 8051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.802165][ T8051] Use struct sctp_sack_info instead [ 297.018307][ T8058] 9pnet_virtio: no channels available for device syz [ 297.047888][ T8058] overlayfs: missing 'lowerdir' [ 297.127875][ T8059] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 297.311367][ T8059] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 297.321567][ T8059] overlayfs: failed to look up (tracing) for ino (-66) [ 298.973931][ T30] audit: type=1400 audit(1765891860.740:270): avc: denied { name_bind } for pid=8068 comm="syz.3.595" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 299.346164][ T8088] sctp: [Deprecated]: syz.0.597 (pid 8088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.346164][ T8088] Use struct sctp_sack_info instead [ 299.396578][ T8074] cgroup: name respecified [ 299.438514][ T8090] 9pnet_virtio: no channels available for device syz [ 299.895804][ T8091] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.310423][ T30] audit: type=1400 audit(1765891863.560:271): avc: denied { ioctl } for pid=8107 comm="syz.2.602" path="socket:[18263]" dev="sockfs" ino=18263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.790853][ T8125] 9pnet_virtio: no channels available for device syz [ 304.891171][ T8126] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 308.417976][ T30] audit: type=1400 audit(1765891870.110:272): avc: denied { append } for pid=8149 comm="syz.0.615" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 308.480851][ T30] audit: type=1400 audit(1765891870.170:273): avc: denied { connect } for pid=8149 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 308.565380][ T30] audit: type=1400 audit(1765891870.820:274): avc: denied { mount } for pid=8159 comm="syz.0.619" name="/" dev="ramfs" ino=18373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 308.576094][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 309.163096][ T8165] cgroup: name respecified [ 309.802085][ T8174] cgroup: name respecified [ 311.607811][ T8200] 9pnet_virtio: no channels available for device syz [ 311.617652][ T8200] overlayfs: missing 'lowerdir' [ 311.668704][ T8203] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 311.690551][ T8203] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 311.700574][ T8203] overlayfs: failed to look up (tracing) for ino (-66) [ 312.467117][ T30] audit: type=1326 audit(1765891874.720:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.2.622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fa258f749 code=0x0 [ 312.621046][ T8220] sctp: [Deprecated]: syz.3.632 (pid 8220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.621046][ T8220] Use struct sctp_sack_info instead [ 314.933567][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 315.029975][ T8261] 9pnet_virtio: no channels available for device syz [ 316.181524][ T8252] cgroup: name respecified [ 316.286052][ T8262] overlayfs: failed to clone lowerpath [ 316.337082][ T8264] overlayfs: failed to clone lowerpath [ 316.966886][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.973216][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.771883][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 320.849447][ T8303] netlink: 'syz.2.660': attribute type 2 has an invalid length. [ 322.160766][ T5872] usb 4-1: device descriptor read/64, error -71 [ 322.849882][ T8311] fuse: Bad value for 'fd' [ 322.885490][ T30] audit: type=1400 audit(1765891885.130:276): avc: denied { execute } for pid=8309 comm="syz.0.661" name="file0" dev="tmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.966546][ T30] audit: type=1400 audit(1765891885.130:277): avc: denied { setopt } for pid=8309 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 324.161728][ T30] audit: type=1326 audit(1765891886.400:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.1.667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104db8f749 code=0x0 [ 326.784104][ T8347] fuse: Bad value for 'fd' [ 327.081655][ T8353] 9pnet_virtio: no channels available for device syz [ 327.091406][ T8353] overlayfs: missing 'lowerdir' [ 327.142968][ T8358] overlayfs: failed to clone lowerpath [ 328.730313][ T8374] 9pnet_virtio: no channels available for device syz [ 328.740783][ T8374] overlayfs: missing 'lowerdir' [ 328.820403][ T8375] overlayfs: failed to clone lowerpath [ 329.792677][ T30] audit: type=1400 audit(1765891892.050:279): avc: denied { write } for pid=8367 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.353486][ T8389] 9pnet_virtio: no channels available for device syz [ 331.791208][ T8390] overlayfs: failed to clone lowerpath [ 331.842368][ T8391] overlayfs: failed to clone lowerpath [ 332.251394][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 335.950698][ T5959] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 336.145132][ T5959] usb 4-1: device descriptor read/64, error -71 [ 336.910728][ T5959] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 337.043861][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 337.081627][ T5959] usb 4-1: device descriptor read/64, error -71 [ 337.220987][ T5959] usb usb4-port1: attempt power cycle [ 338.841385][ T8450] cgroup: name respecified [ 339.584794][ T8471] 9pnet_virtio: no channels available for device syz [ 340.546330][ T8472] overlayfs: failed to clone lowerpath [ 340.596992][ T8474] overlayfs: failed to clone lowerpath [ 341.520728][ T30] audit: type=1400 audit(1765891903.760:280): avc: denied { write } for pid=8475 comm="syz.4.709" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.346256][ T30] audit: type=1400 audit(1765891907.600:281): avc: denied { write } for pid=8497 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.481425][ T30] audit: type=1400 audit(1765891907.600:282): avc: denied { read } for pid=8497 comm="syz.2.717" lport=18829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 346.944765][ T8507] 9pnet_virtio: no channels available for device syz [ 346.953186][ T8507] overlayfs: missing 'lowerdir' [ 347.003389][ T8507] overlayfs: failed to clone lowerpath [ 348.203975][ T8533] netlink: 'syz.3.724': attribute type 2 has an invalid length. [ 348.213220][ T8533] overlayfs: failed to resolve './file0': -2 [ 351.035266][ T8551] 9pnet_virtio: no channels available for device syz [ 351.044052][ T8551] overlayfs: missing 'lowerdir' [ 351.097622][ T8551] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 351.126146][ T8551] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 351.136172][ T8551] overlayfs: failed to look up (tracing) for ino (-66) [ 351.597734][ T8562] overlayfs: missing 'lowerdir' [ 352.134704][ T30] audit: type=1326 audit(1765891914.390:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.0.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77e658f749 code=0x0 [ 353.735262][ T30] audit: type=1400 audit(1765891915.990:284): avc: denied { read write } for pid=8587 comm="syz.4.738" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 354.396863][ T8584] netlink: 'syz.2.736': attribute type 2 has an invalid length. [ 354.406139][ T8584] overlayfs: failed to resolve './file0': -2 [ 354.717358][ T30] audit: type=1400 audit(1765891916.020:285): avc: denied { open } for pid=8587 comm="syz.4.738" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 354.742107][ T30] audit: type=1400 audit(1765891916.690:286): avc: denied { read } for pid=8585 comm="syz.1.737" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 354.894895][ T30] audit: type=1400 audit(1765891916.690:287): avc: denied { open } for pid=8585 comm="syz.1.737" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 359.160139][ T8624] 9pnet_virtio: no channels available for device syz [ 360.445033][ T8625] overlayfs: failed to clone lowerpath [ 360.542669][ T8627] overlayfs: failed to clone lowerpath [ 361.336259][ T30] audit: type=1400 audit(1765891923.580:288): avc: denied { read write } for pid=8631 comm="syz.3.749" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 361.540677][ T30] audit: type=1400 audit(1765891923.590:289): avc: denied { open } for pid=8631 comm="syz.3.749" path="/151/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 364.871311][ T8669] 9pnet_virtio: no channels available for device syz [ 366.329372][ T8670] overlayfs: failed to clone lowerpath [ 366.380066][ T8673] overlayfs: failed to clone lowerpath [ 366.810912][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 366.917489][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. m2[ 368.344334][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 369.180556][ T30] audit: type=1400 audit(1765891931.430:290): avc: denied { create } for pid=8701 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.260752][ T30] audit: type=1400 audit(1765891931.440:291): avc: denied { ioctl } for pid=8701 comm="syz.2.769" path="socket:[20606]" dev="sockfs" ino=20606 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.352103][ T30] audit: type=1400 audit(1765891931.440:292): avc: denied { connect } for pid=8701 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.415043][ T30] audit: type=1400 audit(1765891931.440:293): avc: denied { write } for pid=8701 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.990101][ T8718] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.775'. [ 370.021028][ T8718] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.775'. [ 370.764010][ T30] audit: type=1326 audit(1765891932.890:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.1.778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104db8f749 code=0x0 [ 373.489055][ T8764] fuse: Bad value for 'fd' [ 374.832754][ T30] audit: type=1400 audit(1765891937.090:295): avc: denied { connect } for pid=8782 comm="syz.2.796" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.313779][ T8787] overlayfs: failed to clone lowerpath [ 376.367099][ T8788] overlayfs: failed to clone lowerpath [ 377.072393][ T8797] 9pnet_virtio: no channels available for device syz [ 377.105386][ T8797] overlayfs: missing 'lowerdir' [ 377.722152][ T52] Bluetooth: hci3: unexpected event for opcode 0x203b [ 378.506154][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.516319][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.789965][ T8816] usb usb8: usbfs: process 8816 (syz.1.798) did not claim interface 0 before use [ 380.409062][ T8826] cgroup: name respecified [ 381.401753][ T8848] 9pnet_virtio: no channels available for device syz [ 381.436267][ T8848] overlayfs: missing 'lowerdir' [ 381.762610][ T8849] overlayfs: failed to clone lowerpath [ 487.220631][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 487.227614][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3423/1:b..l [ 487.235787][ C0] rcu: (detected by 0, t=10502 jiffies, g=20997, q=120 ncpus=2) [ 487.243475][ C0] task:kworker/u8:10 state:R running task stack:24800 pid:3423 tgid:3423 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 487.257653][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 487.263901][ C0] Call Trace: [ 487.267157][ C0] [ 487.270064][ C0] ? __schedule+0x10b9/0x6150 [ 487.274717][ C0] __schedule+0x1139/0x6150 [ 487.279230][ C0] ? __pfx___schedule+0x10/0x10 [ 487.284060][ C0] ? mark_held_locks+0x49/0x80 [ 487.288801][ C0] preempt_schedule_irq+0x51/0x90 [ 487.293798][ C0] irqentry_exit+0x1d8/0x8c0 [ 487.298368][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.304331][ C0] RIP: 0010:unwind_next_frame+0xbf7/0x20a0 [ 487.310113][ C0] Code: 00 0f 85 18 11 00 00 4c 89 e2 4d 89 75 38 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d8 10 00 00 49 8d 7d 58 <49> c7 45 50 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 [ 487.329698][ C0] RSP: 0018:ffffc9000ccd6d88 EFLAGS: 00000246 [ 487.335747][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91c95232 [ 487.343690][ C0] RDX: 1ffff9200199adc9 RSI: 1ffff9200199adc8 RDI: ffffc9000ccd6e50 [ 487.351641][ C0] RBP: ffffc9000ccd6e40 R08: ffffffff91c95236 R09: 000000009fefa27f [ 487.359589][ C0] R10: 0000000000000002 R11: 000000000009c86b R12: ffffc9000ccd6e48 [ 487.367533][ C0] R13: ffffc9000ccd6df8 R14: ffffc9000ccd7738 R15: ffffc9000ccd6e2c [ 487.375488][ C0] ? unwind_next_frame+0xb8f/0x20a0 [ 487.380670][ C0] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 487.386451][ C0] ? __lock_acquire+0x436/0x2890 [ 487.391361][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.397505][ C0] arch_stack_walk+0x94/0x100 [ 487.402176][ C0] ? cfg80211_inform_bss_frame_data+0x26f/0x720 [ 487.408391][ C0] stack_trace_save+0x8e/0xc0 [ 487.413038][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 487.418383][ C0] kasan_save_stack+0x33/0x60 [ 487.423031][ C0] ? kasan_save_stack+0x33/0x60 [ 487.427849][ C0] ? kasan_save_track+0x14/0x30 [ 487.432668][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 487.437400][ C0] ? __kmalloc_noprof+0x33d/0x910 [ 487.442398][ C0] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 487.448783][ C0] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 487.454589][ C0] kasan_save_track+0x14/0x30 [ 487.459246][ C0] __kasan_kmalloc+0xaa/0xb0 [ 487.463809][ C0] __kmalloc_noprof+0x33d/0x910 [ 487.468636][ C0] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 487.475027][ C0] ? cfg80211_inform_single_bss_data+0x542/0x1d30 [ 487.481420][ C0] cfg80211_inform_single_bss_data+0x542/0x1d30 [ 487.487634][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 487.492810][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 487.499467][ C0] ? stack_trace_save+0x8e/0xc0 [ 487.504289][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 487.509633][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 487.515069][ C0] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 487.520847][ C0] cfg80211_inform_bss_data+0x22b/0x3be0 [ 487.526449][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 487.531184][ C0] ? __kmalloc_noprof+0x33d/0x910 [ 487.536182][ C0] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 487.542219][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc85/0x2fc0 [ 487.548436][ C0] ? cfg80211_wiphy_work+0x3fb/0x560 [ 487.553701][ C0] ? kthread+0x3c5/0x780 [ 487.557941][ C0] ? ret_from_fork+0x983/0xb10 [ 487.562680][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 487.567597][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 487.573642][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.579507][ C0] ? _ieee802_11_parse_elems_full+0x695/0x45a0 [ 487.585667][ C0] ? __lock_acquire+0x436/0x2890 [ 487.590582][ C0] ? ieee802_11_parse_elems_full+0x143/0x3780 [ 487.596623][ C0] cfg80211_inform_bss_frame_data+0x26f/0x720 [ 487.602671][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 487.608283][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 487.614413][ C0] ? find_held_lock+0x2b/0x80 [ 487.619064][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x18ed/0x2fc0 [ 487.625370][ C0] ieee80211_ibss_rx_queued_mgmt+0x1927/0x2fc0 [ 487.631511][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 487.638006][ C0] ? kcov_remote_start+0x399/0x680 [ 487.643094][ C0] ieee80211_iface_work+0xe28/0x1350 [ 487.648353][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.653091][ C0] cfg80211_wiphy_work+0x3fb/0x560 [ 487.658188][ C0] process_one_work+0x9ba/0x1b20 [ 487.663107][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 487.668715][ C0] ? __pfx_process_one_work+0x10/0x10 [ 487.674079][ C0] ? assign_work+0x1a0/0x250 [ 487.678646][ C0] worker_thread+0x6c8/0xf10 [ 487.683214][ C0] ? __kthread_parkme+0x19e/0x250 [ 487.688212][ C0] ? __pfx_worker_thread+0x10/0x10 [ 487.693295][ C0] kthread+0x3c5/0x780 [ 487.697340][ C0] ? __pfx_kthread+0x10/0x10 [ 487.701901][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.706634][ C0] ? __pfx_kthread+0x10/0x10 [ 487.711194][ C0] ret_from_fork+0x983/0xb10 [ 487.715760][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 487.720843][ C0] ? __switch_to+0x7af/0x10d0 [ 487.725494][ C0] ? __pfx_kthread+0x10/0x10 [ 487.730058][ C0] ret_from_fork_asm+0x1a/0x30 [ 487.734809][ C0] [ 487.737803][ C0] rcu: rcu_preempt kthread starved for 10546 jiffies! g20997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 487.748961][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 487.758902][ C0] rcu: RCU grace-period kthread stack dump: [ 487.764761][ C0] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 487.778208][ C0] Call Trace: [ 487.781462][ C0] [ 487.784366][ C0] ? __schedule+0x10b9/0x6150 [ 487.789016][ C0] __schedule+0x1139/0x6150 [ 487.793498][ C0] ? __pfx___schedule+0x10/0x10 [ 487.798317][ C0] ? find_held_lock+0x2b/0x80 [ 487.802975][ C0] ? schedule+0x2d7/0x3a0 [ 487.807286][ C0] schedule+0xe7/0x3a0 [ 487.811331][ C0] schedule_timeout+0x123/0x290 [ 487.816152][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 487.821494][ C0] ? __pfx_process_timeout+0x10/0x10 [ 487.826757][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 487.832534][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 487.837967][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 487.842710][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 487.847967][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 487.853150][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 487.858067][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 487.862897][ C0] ? rcu_gp_init+0x10/0x1640 [ 487.867469][ C0] rcu_gp_kthread+0x26d/0x380 [ 487.872132][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 487.877310][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.882044][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 487.887216][ C0] ? __kthread_parkme+0x19e/0x250 [ 487.892227][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 487.897398][ C0] kthread+0x3c5/0x780 [ 487.901439][ C0] ? __pfx_kthread+0x10/0x10 [ 487.906000][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.910731][ C0] ? __pfx_kthread+0x10/0x10 [ 487.915292][ C0] ret_from_fork+0x983/0xb10 [ 487.919854][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 487.924939][ C0] ? __switch_to+0x7af/0x10d0 [ 487.929591][ C0] ? __pfx_kthread+0x10/0x10 [ 487.934154][ C0] ret_from_fork_asm+0x1a/0x30 [ 487.938943][ C0] [ 487.941936][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 487.948234][ C0] Sending NMI from CPU 0 to CPUs 1: [ 487.953428][ C1] NMI backtrace for cpu 1 [ 487.953452][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.953477][ C1] Tainted: [L]=SOFTLOCKUP [ 487.953482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.953492][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 487.953517][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 487.953533][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 487.953547][ C1] RAX: 000000000158cb67 RBX: 0000000000000001 RCX: ffffffff8b7806d9 [ 487.953558][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdb69 RDI: ffffffff8bf2b380 [ 487.953569][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 487.953580][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 487.953591][ C1] R13: ffff88801dac24c0 R14: ffffffff9088afd0 R15: 0000000000000000 [ 487.953602][ C1] FS: 0000000000000000(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 487.953619][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.953630][ C1] CR2: 0000557dcba17be0 CR3: 000000007dd93000 CR4: 00000000003526f0 [ 487.953641][ C1] Call Trace: [ 487.953648][ C1] [ 487.953653][ C1] default_idle+0x13/0x20 [ 487.953676][ C1] default_idle_call+0x6c/0xb0 [ 487.953699][ C1] do_idle+0x38d/0x510 [ 487.953725][ C1] ? __pfx_do_idle+0x10/0x10 [ 487.953754][ C1] cpu_startup_entry+0x4f/0x60 [ 487.953779][ C1] start_secondary+0x21d/0x2d0 [ 487.953797][ C1] ? __pfx_start_secondary+0x10/0x10 [ 487.953817][ C1] common_startup_64+0x13e/0x148 [ 487.953844][ C1]