last executing test programs: 3m58.698467028s ago: executing program 0 (id=945): bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m57.931812083s ago: executing program 0 (id=947): socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m53.796076653s ago: executing program 0 (id=957): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x1) close(r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_xfrm(r4, 0x0, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x15}, 0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffffe, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m51.574051689s ago: executing program 0 (id=963): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x4, 0xfeb, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x10001, 0x7fff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r2 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r0, 0x2003, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000230000009500000000000000b5f2de90c90b2a3ac2bf6a618dd56e6966dd6c669795099bd02bff4d1a1b83dfc990e957dcb7f3289b489316466007d0df2b99a5f8a91147996dada8c4da571f3d4cf2039214cb53f1011cd7222a88538e5c47f19d9bffa484f427"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03316844268cb89614f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000180)) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000002480)={&(0x7f0000002440)=[{0x4, 0x2800, 0xfe, &(0x7f00000059c0)="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"}], 0x1}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x5, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44090) read$midi(0xffffffffffffffff, &(0x7f0000003e00)=""/75, 0x4b) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 3m47.755826827s ago: executing program 0 (id=973): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000003c0), 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r2, 0x59967000) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$TCXONC(r0, 0x540a, 0x1) 3m46.263991697s ago: executing program 0 (id=976): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setrlimit(0xe, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f00001859c0)={0x0, &(0x7f0000185780)}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) wait4(r3, 0x0, 0x80000000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r2, 0x10, 0x100000000, 0x80000000) 3m30.550640156s ago: executing program 32 (id=976): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setrlimit(0xe, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f00001859c0)={0x0, &(0x7f0000185780)}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) wait4(r3, 0x0, 0x80000000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r2, 0x10, 0x100000000, 0x80000000) 21.738891053s ago: executing program 4 (id=1402): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095", @ANYRESHEX=0x0, @ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r0, 0x2}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_io_uring_setup(0x6af2, &(0x7f0000000300)={0x0, 0x1fe7, 0x20, 0x2, 0x390}, 0x0, &(0x7f0000000040)) socket$rxrpc(0x21, 0x2, 0xa) socket$unix(0x1, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0xffffffff, "fa02c8098000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0x40103e05, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) unshare(0x44000280) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) 20.012074262s ago: executing program 4 (id=1406): r0 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 16.648716159s ago: executing program 4 (id=1413): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="af20fa7744c1a131e9102002fc2653ccf42949d56a39b3b63f648a68d746c5643947b61f1f238ea6d7a2dcbaf3ccd42b80fb89af1a44d78f426c7662bb6ea4bd17a2507df9f5948bfdcb87874c532485c5dbce7b71035880aa963c270156be0d5f2306564584158f08a74e88a72bb9e67c", @ANYRESOCT=r1, @ANYRES8=r2], 0x6c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYBLOB="7415924c0a6630587615af9ec109b9ac197981ec63e0c6d60a78b8a939e9fb4b98b9b6d2b534ff7a663b875435139b7748067e212fb1604679d7323e5cf01ff5c814ed8d", @ANYRESDEC=r2, @ANYRES32=r6, @ANYBLOB], 0x48) migrate_pages(r3, 0x9, &(0x7f00000007c0)=0x23fffffffffe, &(0x7f0000000bc0)=0x27e04072) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x204000, 0x110) 15.157468675s ago: executing program 1 (id=1415): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x23, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.012277263s ago: executing program 3 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fsopen(0x0, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(0x0, 0x442281, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x84) unlink(&(0x7f0000000000)='./file0\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 13.967005922s ago: executing program 3 (id=1417): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000001c0)={0xa, @raw_data="03091f682f97de8bf5de030965f3875767f6ee1404a33062ef3b061315c1e8c446b6b654ff4030c94e863998744c7ea75f41f156a5b848a438d260cc5d3fe6e8d5c8a7db0606db4622d5a25539914d0044688f2c8b135fd24379c4030e0865b28051ae97cd50558df9576ea4ccf3ba99d7107c326ce69d970fb8de907062fe6a8bbc6e95ac17de68efdd0a073fdebc2c632da243bf9362276110a73e4691993f66c89bdfd9497cb6ffa3e4da02a996b925a0833793956236772e5b735381397be1872481d8bf763a"}) 13.837730305s ago: executing program 2 (id=1419): getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) 12.010596573s ago: executing program 1 (id=1421): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000002c80)) prlimit64(0x0, 0xa, 0x0, &(0x7f0000002c40)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000001440)=ANY=[@ANYBLOB="02c93010000c00050018880800f3ff01"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x891, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 11.817960111s ago: executing program 3 (id=1423): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r7}, 0x20) recvmmsg(r7, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) 10.271623341s ago: executing program 3 (id=1424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) r7 = io_uring_setup(0x4575, 0x0) r8 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3edc, 0x2, 0x1, 0x2fa, 0x0, r7}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r8, 0x1e, &(0x7f0000000000)={r8}, 0x1) 8.660391994s ago: executing program 1 (id=1425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x150, 0x150, 0x0, 0x90a, 0x358, 0x238, 0x238, 0x358, 0x238, 0xf, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xffffff00], 'wlan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x89, 0x4, 0x6, 0x3c}, 0x500, 0x208, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @mcast2, @remote, @mcast2, @private2, @dev, @loopback, @mcast2, @private0, @dev, @rand_addr=' \x01\x00', @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private2, @dev]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xffffff80, 0xff000000, 0xffffffff, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'wg2\x00', {0xff}, {0xff}, 0x29, 0xff, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$packet(0x11, 0x2, 0x300) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000080)=0x80000003) dup2(r8, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeec) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listen(r5, 0x8) 7.381996399s ago: executing program 3 (id=1427): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002200)=@generic={0x0}, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) r8 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r8, 0x0, 0x8, 0x0, 0x1) 7.32768596s ago: executing program 1 (id=1428): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001002bbd70004fdbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r4 = syz_pidfd_open(0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000e, 0x1010, r4, 0x3ee80000) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(0x0, 0x0, 0x0) write$vhost_msg(r6, &(0x7f0000000480)={0x1, {0x0, 0x0, &(0x7f0000000400)=""/102, 0x3, 0x1}}, 0x48) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) 7.14011245s ago: executing program 2 (id=1429): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x5a, 0x0, 0x0) r1 = getpid() prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='{l{&%[\xe1\x00') pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x4, 0x82) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x41e) pipe2$9p(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7c}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0xe, 0x5d, &(0x7f00000003c0)="41fbdd612747cf6e1ae9049131f0777c7f2951406a375546f5f1f1fdff75882c036f6e289a29b162a35edd1a8c3d73f7f76981df34f676222705d90aa2e74d2f001eb28e79dc35dde545d85f405c1d87e75ab5935101cf6d4db35bfb393dbcc9a43c5931dc5760651a45e24e2af6529596a4fe20254cf0fc97e27a9ac29f9ad709609736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x68) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x600400) unshare(0x8000000) r5 = semget$private(0x0, 0x4000, 0x555) semtimedop(r5, &(0x7f00000002c0)=[{0x0, 0x3, 0x1000}, {0x4, 0x6, 0x800}, {0x2, 0x97a, 0x1000}], 0x3, 0x0) unshare(0x2c040000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc}) 7.073120828s ago: executing program 4 (id=1430): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r1 = syz_io_uring_setup(0x57a0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r7, 0x0, 0xf69}, 0x18) sendmsg$netlink(r6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x10, 0x1d, 0x100, &(0x7f00000000c0)="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"}) 6.08847059s ago: executing program 2 (id=1431): syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r4 = userfaultfd(0x801) socket(0x10, 0x3, 0x0) setresuid(0xee01, 0xee00, 0x0) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 5.678330584s ago: executing program 4 (id=1432): socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0x2020) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) syz_open_dev$dri(0x0, 0x1ff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) listen(0xffffffffffffffff, 0x2) socket(0x2b, 0x80801, 0x1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="35000000138000ffffffe100000000040000ef"], 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32], 0x44}}, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0xf3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x2}}}, 0x84) 5.647396433s ago: executing program 5 (id=1433): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000400)) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000040)={r2, 0x2, 0x2f4e, 0x200, 0x6, [], [0x0, 0x9, 0x7, 0x4], [0x1, 0x3, 0x2, 0x6], [0x4, 0x7, 0x7, 0xd8]}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r0, 0x100000000) 4.285783187s ago: executing program 5 (id=1434): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0x101}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0xfffffffffffffffe}}, './file0\x00'}) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) 4.038304503s ago: executing program 1 (id=1435): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 3.015903579s ago: executing program 2 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) write(r5, &(0x7f0000000000)="3b000000010006", 0x7) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0xa8a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r6) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x1c4fb}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) 2.958012518s ago: executing program 5 (id=1437): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0x2}, {0x5}}}, 0x24}}, 0x44004) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000300)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.current\x00', 0xf000, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = io_uring_setup(0x115d, &(0x7f0000000440)={0x0, 0xdd3a, 0x80, 0x3, 0x117, 0x0, r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xd, 0x4) 2.939269714s ago: executing program 4 (id=1438): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e010203010902"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 1.558332604s ago: executing program 2 (id=1439): getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.53503478s ago: executing program 5 (id=1440): socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0x2020) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) syz_open_dev$dri(0x0, 0x1ff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) listen(0xffffffffffffffff, 0x2) socket(0x2b, 0x80801, 0x1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="35000000138000ffffffe100000000040000ef"], 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32], 0x44}}, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0xf3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x2}}}, 0x84) 1.240977452s ago: executing program 5 (id=1441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) syz_io_uring_setup(0x1458, 0x0, &(0x7f0000000100)=0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x189042, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x6], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e5, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x9, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) 305.838423ms ago: executing program 3 (id=1442): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x3e}]}}}], 0x18}}], 0x1, 0x4004000) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 173.876845ms ago: executing program 5 (id=1443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getresgid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_WEIGHT={0x8, 0xf, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 14.870762ms ago: executing program 1 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xd0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x10100, 0x0, 0xfffffffc}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000680)=""/65, 0x41}], 0x5, 0x401, 0x6c19) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) 0s ago: executing program 2 (id=1445): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7bd}}, './file0\x00'}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregs(0xc, r6, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r7, 0x0, 0x201f00) kernel console output (not intermixed with test programs): " path="/" dev="configfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.695380][ T30] audit: type=1400 audit(1753015106.920:677): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 331.047556][ T30] audit: type=1400 audit(1753015109.280:678): avc: denied { setopt } for pid=8316 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.739126][ T8325] sit1: entered allmulticast mode [ 331.997767][ T8324] tmpfs: Bad value for 'mpol' [ 332.010888][ T30] audit: type=1400 audit(1753015110.240:679): avc: denied { mounton } for pid=8321 comm="syz.0.521" path="/syzcgroup/unified/syz0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 332.034503][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.213981][ T30] audit: type=1400 audit(1753015110.450:680): avc: denied { ioctl } for pid=8327 comm="syz.2.522" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 332.466534][ T8333] comedi comedi2: adq12b: a I/O base address must be specified [ 332.545851][ T30] audit: type=1326 audit(1753015110.720:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8332 comm="syz.4.523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2a1f8e9a9 code=0x0 [ 332.575800][ T30] audit: type=1400 audit(1753015110.770:682): avc: denied { setopt } for pid=8332 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 333.183081][ T30] audit: type=1400 audit(1753015110.770:683): avc: denied { ioctl } for pid=8332 comm="syz.4.523" path="socket:[14765]" dev="sockfs" ino=14765 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 333.408173][ T30] audit: type=1400 audit(1753015111.060:684): avc: denied { mount } for pid=8337 comm="syz.3.524" name="/" dev="rpc_pipefs" ino=14771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 333.657118][ T30] audit: type=1400 audit(1753015111.080:685): avc: denied { mounton } for pid=8337 comm="syz.3.524" path="/98/file0" dev="rpc_pipefs" ino=14771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 333.829447][ T30] audit: type=1400 audit(1753015111.220:686): avc: denied { mount } for pid=8337 comm="syz.3.524" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 333.853358][ T30] audit: type=1400 audit(1753015111.820:687): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 333.873925][ T30] audit: type=1400 audit(1753015112.090:688): avc: denied { connect } for pid=8343 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 333.977589][ T2150] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 337.095720][ T2150] usb 3-1: device descriptor read/all, error -71 [ 338.190812][ T8380] veth1_macvtap: left promiscuous mode [ 338.196378][ T8380] macsec0: entered promiscuous mode [ 338.201726][ T8380] macsec0: entered allmulticast mode [ 338.375969][ T8382] veth1_macvtap: entered promiscuous mode [ 338.381800][ T8382] veth1_macvtap: entered allmulticast mode [ 338.387878][ T8382] macsec0: left promiscuous mode [ 338.392982][ T8382] macsec0: left allmulticast mode [ 338.398141][ T8382] veth1_macvtap: left allmulticast mode [ 339.027328][ T30] audit: type=1400 audit(1753015117.250:689): avc: denied { bind } for pid=8376 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.059048][ T30] audit: type=1400 audit(1753015117.900:690): avc: denied { mount } for pid=8388 comm="syz.0.536" name="/" dev="hugetlbfs" ino=14959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 340.711789][ T30] audit: type=1400 audit(1753015118.650:691): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 342.334535][ T30] audit: type=1400 audit(1753015120.570:692): avc: denied { map } for pid=8409 comm="syz.4.541" path="socket:[14980]" dev="sockfs" ino=14980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.442036][ T30] audit: type=1400 audit(1753015120.570:693): avc: denied { read accept } for pid=8409 comm="syz.4.541" path="socket:[14980]" dev="sockfs" ino=14980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.699328][ T8420] libceph: resolve '4..' (ret=-3): failed [ 344.027184][ T5941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 344.237208][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 344.294246][ T5941] usb 3-1: config 0 has no interfaces? [ 344.404012][ T5941] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 344.419608][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 344.435516][ T5941] usb 3-1: Product: syz [ 344.444031][ T5941] usb 3-1: Manufacturer: syz [ 344.453659][ T5941] usb 3-1: SerialNumber: syz [ 344.466520][ T5941] usb 3-1: config 0 descriptor?? [ 347.308143][ T5941] usb 3-1: USB disconnect, device number 5 [ 347.598342][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.553'. [ 347.607491][ T30] audit: type=1400 audit(1753015125.820:694): avc: denied { map } for pid=8462 comm="syz.1.553" path="socket:[15133]" dev="sockfs" ino=15133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 348.730646][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 348.757156][ T8478] bridge_slave_1: left allmulticast mode [ 348.762935][ T8478] bridge_slave_1: left promiscuous mode [ 348.768592][ T30] audit: type=1400 audit(1753015126.970:695): avc: denied { write } for pid=8475 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 348.797398][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.820983][ T30] audit: type=1400 audit(1753015127.040:696): avc: denied { getopt } for pid=8474 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.863036][ T8478] bridge_slave_0: left allmulticast mode [ 348.880460][ T8478] bridge_slave_0: left promiscuous mode [ 348.903010][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.292360][ T8479] macsec1: entered promiscuous mode [ 349.308845][ T8479] macsec1: entered allmulticast mode [ 351.171297][ T30] audit: type=1400 audit(1753015128.980:697): avc: denied { mounton } for pid=8497 comm="syz.2.560" path="/120/file0" dev="tmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 351.434714][ T30] audit: type=1400 audit(1753015129.650:698): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 352.478402][ T8521] comedi comedi0: ni_at_a2150: I/O port conflict (0xf2,28) [ 353.092856][ T8525] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 353.122245][ T30] audit: type=1400 audit(1753015131.360:699): avc: denied { append } for pid=8526 comm="syz.1.566" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.287303][ T30] audit: type=1400 audit(1753015131.360:700): avc: denied { setopt } for pid=8526 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 353.352315][ T8530] netlink: 'syz.1.566': attribute type 4 has an invalid length. [ 353.360232][ T8530] netlink: 17 bytes leftover after parsing attributes in process `syz.1.566'. [ 354.450721][ T8504] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.621787][ T8504] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.641864][ T8504] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.652316][ T8504] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.662888][ T30] audit: type=1400 audit(1753015132.890:701): avc: denied { listen } for pid=8534 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.716941][ T30] audit: type=1400 audit(1753015132.890:702): avc: denied { ioctl } for pid=8534 comm="syz.4.567" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 354.828924][ T8525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.888405][ T8529] vlan2: entered allmulticast mode [ 354.893553][ T8529] veth1: entered allmulticast mode [ 354.905319][ T8529] bond1: (slave vlan2): making interface the new active one [ 354.916104][ T8529] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 356.396004][ T8560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.433914][ T30] audit: type=1400 audit(1753015134.670:703): avc: denied { execute } for pid=8557 comm="syz.2.572" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 356.457232][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.066003][ T8569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.324926][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.367901][ T5953] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 358.688835][ T5953] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 358.722769][ T5953] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 358.732704][ T5953] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 358.745204][ T5953] usb 3-1: config 0 has no interface number 0 [ 358.758234][ T5953] usb 3-1: config 0 has no interface number 1 [ 358.764493][ T5953] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 358.893353][ T8592] QAT: failed to copy from user cfg_data. [ 359.234572][ T5953] usb 3-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.263957][ T5953] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 359.356406][ T5953] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 359.367558][ T5953] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 359.379494][ T5953] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 359.391392][ T5953] usb 3-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 360.061142][ T5847] Bluetooth: hci5: command 0xfc11 tx timeout [ 360.067564][ T5838] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 360.112341][ T30] audit: type=1400 audit(1753015138.345:704): avc: denied { read } for pid=8598 comm="syz.3.580" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 360.141869][ T30] audit: type=1400 audit(1753015138.345:705): avc: denied { open } for pid=8598 comm="syz.3.580" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 360.299174][ T5953] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 360.310174][ T5953] usb 3-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 360.478808][ T30] audit: type=1400 audit(1753015138.635:706): avc: denied { create } for pid=8600 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 360.681839][ T5953] usb 3-1: config 0 interface 66 has no altsetting 0 [ 360.693052][ T5953] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 360.702344][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.710404][ T5953] usb 3-1: Product: syz [ 360.714585][ T5953] usb 3-1: Manufacturer: syz [ 360.719287][ T5953] usb 3-1: SerialNumber: syz [ 360.743582][ T5953] usb 3-1: config 0 descriptor?? [ 360.762443][ T30] audit: type=1326 audit(1753015139.005:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2778e9a9 code=0x7ffc0000 [ 360.818813][ T5953] ljca 3-1:0.84: bulk endpoints not found [ 360.929294][ T5953] ljca 3-1:0.66: probe with driver ljca failed with error -71 [ 361.060450][ T30] audit: type=1326 audit(1753015139.035:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7efd2778e9a9 code=0x7ffc0000 [ 361.259017][ T8611] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 361.266753][ T8611] netlink: 224 bytes leftover after parsing attributes in process `syz.1.582'. [ 361.448862][ T30] audit: type=1326 audit(1753015139.035:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2778e9a9 code=0x7ffc0000 [ 361.451215][ T5953] usb 3-1: USB disconnect, device number 6 [ 361.617229][ T30] audit: type=1326 audit(1753015139.035:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7efd2778e9a9 code=0x7ffc0000 [ 362.119377][ T30] audit: type=1326 audit(1753015139.035:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2778e9a9 code=0x7ffc0000 [ 362.359888][ T30] audit: type=1326 audit(1753015139.035:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd2778e9a9 code=0x7ffc0000 [ 362.625054][ T30] audit: type=1326 audit(1753015139.035:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2778e9a9 code=0x7ffc0000 [ 364.291946][ T8644] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 366.384459][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 366.384490][ T30] audit: type=1400 audit(1753015144.545:757): avc: denied { read } for pid=8647 comm="syz.4.592" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 366.646761][ T30] audit: type=1400 audit(1753015144.545:758): avc: denied { open } for pid=8647 comm="syz.4.592" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 366.842760][ T8667] sit1: entered allmulticast mode [ 367.246350][ T30] audit: type=1400 audit(1753015145.485:759): avc: denied { getopt } for pid=8647 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 369.732955][ T8695] sit1: entered allmulticast mode [ 370.098291][ T8701] mac80211_hwsim hwsim8 : renamed from wlan0 [ 372.372707][ T30] audit: type=1400 audit(1753015150.185:760): avc: denied { write } for pid=8709 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.409890][ T30] audit: type=1400 audit(1753015150.185:761): avc: denied { read } for pid=8709 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 373.312323][ T30] audit: type=1400 audit(1753015151.555:762): avc: denied { connect } for pid=8721 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 373.709714][ T30] audit: type=1400 audit(1753015151.955:763): avc: denied { accept } for pid=8721 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 375.370311][ T30] audit: type=1400 audit(1753015153.615:764): avc: denied { getopt } for pid=8721 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 378.318684][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.325041][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.335672][ T30] audit: type=1400 audit(1753015156.505:765): avc: denied { bind } for pid=8768 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.657607][ T30] audit: type=1400 audit(1753015156.505:766): avc: denied { listen } for pid=8768 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.678062][ T30] audit: type=1400 audit(1753015156.515:767): avc: denied { connect } for pid=8768 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.698356][ T30] audit: type=1400 audit(1753015156.525:768): avc: denied { accept } for pid=8768 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.733276][ T30] audit: type=1400 audit(1753015156.535:769): avc: denied { create } for pid=8768 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 378.898758][ T8777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.187364][ T30] audit: type=1400 audit(1753015156.545:770): avc: denied { read } for pid=8768 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 379.213555][ T30] audit: type=1400 audit(1753015156.555:771): avc: denied { read } for pid=8768 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.618956][ T8783] sit1: entered allmulticast mode [ 380.329156][ T30] audit: type=1400 audit(1753015158.565:772): avc: denied { firmware_load } for pid=8784 comm="syz.2.619" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 380.647416][ T30] audit: type=1400 audit(1753015158.785:773): avc: denied { mount } for pid=8784 comm="syz.2.619" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 380.863383][ T8790] syz.2.619 (8790) used greatest stack depth: 17768 bytes left [ 380.933913][ T30] audit: type=1400 audit(1753015159.175:774): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 381.221302][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.623'. [ 382.918187][ T8817] SELinux: failed to load policy [ 385.628232][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 385.628251][ T30] audit: type=1400 audit(1753015163.625:776): avc: denied { append } for pid=8829 comm="syz.4.630" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 386.216946][ T8840] netlink: 272 bytes leftover after parsing attributes in process `syz.2.631'. [ 387.073816][ T8846] ceph: No mds server is up or the cluster is laggy [ 387.080754][ T2150] libceph: connect (1)[c::]:6789 error -101 [ 387.157316][ T30] audit: type=1400 audit(1753015165.345:777): avc: denied { bind } for pid=8823 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 387.217618][ T2150] libceph: mon0 (1)[c::]:6789 connect error [ 387.619819][ T8860] xt_TPROXY: Can be used only with -p tcp or -p udp [ 387.892335][ T30] audit: type=1400 audit(1753015166.135:778): avc: denied { write } for pid=8852 comm="syz.4.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 388.597515][ T8866] usb usb8: usbfs: process 8866 (syz.1.637) did not claim interface 0 before use [ 389.449223][ T30] audit: type=1400 audit(1753015167.685:779): avc: denied { read append } for pid=8867 comm="syz.4.639" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 389.564908][ T30] audit: type=1400 audit(1753015167.685:780): avc: denied { open } for pid=8867 comm="syz.4.639" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 389.588475][ T30] audit: type=1400 audit(1753015167.685:781): avc: denied { map } for pid=8867 comm="syz.4.639" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 389.614034][ T30] audit: type=1400 audit(1753015167.685:782): avc: denied { execute } for pid=8867 comm="syz.4.639" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 389.643163][ T30] audit: type=1400 audit(1753015167.735:783): avc: denied { write } for pid=8867 comm="syz.4.639" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 389.749935][ T30] audit: type=1400 audit(1753015167.735:784): avc: denied { connect } for pid=8867 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 389.767229][ T2150] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 389.770121][ T30] audit: type=1400 audit(1753015167.745:785): avc: denied { watch } for pid=8868 comm="syz.2.640" path="/138/file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 389.947229][ T2150] usb 3-1: Using ep0 maxpacket: 16 [ 389.953716][ T2150] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 389.967208][ T2150] usb 3-1: config 0 has no interface number 0 [ 389.973597][ T2150] usb 3-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 390.006660][ T2150] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 390.016359][ T2150] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 390.025276][ T2150] usb 3-1: Product: syz [ 390.042752][ T2150] usb 3-1: Manufacturer: syz [ 390.190341][ T2150] usb 3-1: SerialNumber: syz [ 390.281031][ T2150] usb 3-1: config 0 descriptor?? [ 390.286746][ T8873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 390.522832][ T2150] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 390.611950][ T2150] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 390.700987][ T2150] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 390.770563][ T2150] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 390.783906][ T2150] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 390.795968][ T2150] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 390.887234][ T2150] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 390.898459][ T2150] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 390.908639][ T2150] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 390.919544][ T2150] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 390.948463][ T2150] usb 3-1: USB disconnect, device number 7 [ 391.019788][ T8891] sit1: entered allmulticast mode [ 391.244371][ T2150] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 391.707592][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 391.707622][ T30] audit: type=1400 audit(1753015169.875:787): avc: denied { setopt } for pid=8893 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 392.034075][ T2150] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 392.107630][ T2150] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 392.147786][ T2150] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 392.435074][ T2150] keyspan 3-1:0.107: device disconnected [ 392.486346][ T8911] overlayfs: failed to resolve './file1': -2 [ 393.407426][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 396.559458][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 396.825280][ T30] audit: type=1400 audit(1753015174.923:788): avc: denied { block_suspend } for pid=8945 comm="syz.4.654" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 397.543529][ T30] audit: type=1400 audit(1753015175.783:789): avc: denied { read write } for pid=8951 comm="syz.4.656" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 397.697746][ T30] audit: type=1400 audit(1753015175.783:790): avc: denied { open } for pid=8951 comm="syz.4.656" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.881418][ T30] audit: type=1400 audit(1753015175.783:791): avc: denied { ioctl } for pid=8951 comm="syz.4.656" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 399.327295][ T2150] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 399.488212][ T2150] usb 1-1: Using ep0 maxpacket: 8 [ 399.501132][ T2150] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 399.538371][ T2150] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 399.567818][ T2150] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 399.735694][ T2150] usb 1-1: Product: syz [ 399.761847][ T2150] usb 1-1: Manufacturer: syz [ 400.288145][ T2150] usb 1-1: SerialNumber: syz [ 400.723343][ T2150] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 400.734804][ T2150] visor 1-1:1.0: probe with driver visor failed with error -110 [ 401.462682][ T30] audit: type=1400 audit(1753015179.683:792): avc: denied { setopt } for pid=8974 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 401.618025][ T5900] usb 1-1: USB disconnect, device number 4 [ 403.035430][ T8998] xt_policy: output policy not valid in PREROUTING and INPUT [ 403.360614][ T9000] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.381787][ T30] audit: type=1400 audit(1753015181.623:793): avc: denied { ioctl } for pid=8999 comm="syz.1.667" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 403.387367][ T9000] syz.1.667 (9000) used obsolete PPPIOCDETACH ioctl [ 403.512848][ T30] audit: type=1400 audit(1753015181.663:794): avc: denied { listen } for pid=8999 comm="syz.1.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 403.958114][ T30] audit: type=1400 audit(1753015182.193:795): avc: denied { write } for pid=9013 comm="syz.3.671" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 406.342753][ T30] audit: type=1400 audit(1753015184.583:796): avc: denied { name_bind } for pid=9025 comm="syz.0.675" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 406.670958][ T9035] netlink: del zone limit has 4 unknown bytes [ 408.383737][ T9046] 9pnet_virtio: no channels available for device syz [ 408.417346][ T30] audit: type=1400 audit(1753015186.613:797): avc: denied { ioctl } for pid=9039 comm="syz.1.678" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 408.442236][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.726330][ T30] audit: type=1400 audit(1753015186.963:798): avc: denied { create } for pid=9052 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 410.942600][ T9084] ceph: No mds server is up or the cluster is laggy [ 410.950925][ T2150] libceph: connect (1)[c::]:6789 error -101 [ 410.957021][ T2150] libceph: mon0 (1)[c::]:6789 connect error [ 411.147727][ T30] audit: type=1400 audit(1753015189.393:799): avc: denied { ioctl } for pid=9078 comm="syz.1.688" path="socket:[18017]" dev="sockfs" ino=18017 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 411.373935][ T30] audit: type=1400 audit(1753015189.613:800): avc: denied { listen } for pid=9091 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 411.414940][ T30] audit: type=1400 audit(1753015189.613:801): avc: denied { ioctl } for pid=9091 comm="syz.3.691" path="socket:[17370]" dev="sockfs" ino=17370 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 411.439359][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.510554][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 411.519756][ T9087] netlink: 'syz.1.688': attribute type 5 has an invalid length. [ 411.528055][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'. [ 411.545608][ T9087] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 411.554565][ T9087] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 411.563419][ T9087] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 411.572157][ T9087] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 411.581062][ T9087] geneve2: entered promiscuous mode [ 411.586347][ T9087] geneve2: entered allmulticast mode [ 412.214971][ T30] audit: type=1400 audit(1753015189.613:802): avc: denied { bind } for pid=9078 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 412.955031][ T30] audit: type=1400 audit(1753015191.193:803): avc: denied { kexec_image_load } for pid=9102 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 413.771579][ T9118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.696'. [ 414.140735][ T9122] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 415.139473][ T9127] Lens A: ================= START STATUS ================= [ 415.147227][ T9127] Lens A: Focus, Absolute: 0 [ 415.153034][ T9127] Lens A: ================== END STATUS ================== [ 415.247228][ T30] audit: type=1400 audit(1753015193.413:804): avc: denied { accept } for pid=9124 comm="syz.0.698" lport=34946 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 416.810048][ T5941] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 416.833828][ T30] audit: type=1400 audit(1753015194.663:805): avc: denied { getopt } for pid=9134 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.170058][ T5941] usb 3-1: config 1 interface 0 has no altsetting 0 [ 417.260654][ T5941] usb 3-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.40 [ 417.273885][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.283076][ T5941] usb 3-1: Product: syz [ 417.290967][ T5941] usb 3-1: Manufacturer: ఇ [ 417.302127][ T5941] usb 3-1: SerialNumber: syz [ 420.635204][ T9158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.370123][ T5941] usbhid 3-1:1.0: can't add hid device: -71 [ 421.419662][ T5941] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 421.441068][ T5941] usb 3-1: USB disconnect, device number 8 [ 422.957900][ T30] audit: type=1400 audit(1753015201.123:806): avc: denied { getopt } for pid=9179 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 423.120084][ T9186] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 424.344180][ T9196] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 425.586826][ T30] audit: type=1400 audit(1753015203.823:807): avc: denied { getopt } for pid=9205 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 425.783937][ T30] audit: type=1400 audit(1753015203.853:808): avc: denied { setopt } for pid=9205 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 425.941903][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'. [ 426.863583][ T9225] sit1: entered allmulticast mode [ 428.108008][ T9235] fuse: Bad value for 'fd' [ 429.195304][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.495929][ T9249] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 432.160178][ T9273] sit1: entered allmulticast mode [ 432.386543][ T9277] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 433.062839][ T9291] sit1: entered allmulticast mode [ 433.068664][ T9291] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 433.079303][ T9291] bond0: (slave sit1): Error -95 calling set_mac_address [ 433.481897][ T9292] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 433.492924][ T9292] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 433.503514][ T30] audit: type=1400 audit(1753015211.733:809): avc: denied { firmware_load } for pid=9287 comm="syz.1.733" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 434.469116][ T9306] netlink: 96 bytes leftover after parsing attributes in process `syz.4.736'. [ 434.492785][ T30] audit: type=1400 audit(1753015212.713:810): avc: denied { getattr } for pid=9297 comm="syz.4.736" path="cgroup:[4026533180]" dev="nsfs" ino=4026533180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 434.920251][ T9313] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 435.921623][ T9315] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 436.419130][ T30] audit: type=1400 audit(1753015214.493:811): avc: denied { connect } for pid=9317 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 437.032855][ T30] audit: type=1400 audit(1753015215.273:812): avc: denied { ioctl } for pid=9322 comm="syz.0.742" path="socket:[18773]" dev="sockfs" ino=18773 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 438.409862][ T9335] sctp: [Deprecated]: syz.4.745 (pid 9335) Use of int in max_burst socket option. [ 438.409862][ T9335] Use struct sctp_assoc_value instead [ 439.692578][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.897241][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.194492][ T9361] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 441.273336][ T9366] sit1: entered allmulticast mode [ 443.733694][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 443.770539][ T9391] delete_channel: no stack [ 443.956228][ T9397] netlink: 'syz.4.754': attribute type 29 has an invalid length. [ 443.972434][ T9397] netlink: 'syz.4.754': attribute type 29 has an invalid length. [ 444.804993][ T9406] pim6reg: entered allmulticast mode [ 444.818600][ T9406] pim6reg: left allmulticast mode [ 445.486503][ T30] audit: type=1400 audit(1753015223.713:813): avc: denied { bind } for pid=9407 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 446.960745][ T9426] sit1: entered allmulticast mode [ 446.966177][ T9426] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 446.976539][ T9426] bond0: (slave sit1): Error -95 calling set_mac_address [ 447.454781][ T9429] can0: slcan on ptm0. [ 447.877083][ T30] audit: type=1400 audit(1753015226.023:814): avc: denied { read } for pid=5499 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 447.939098][ T30] audit: type=1400 audit(1753015226.173:815): avc: denied { checkpoint_restore } for pid=9427 comm="syz.4.763" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 448.887155][ T30] audit: type=1400 audit(1753015226.213:816): avc: denied { search } for pid=5499 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.908549][ T30] audit: type=1400 audit(1753015226.213:817): avc: denied { search } for pid=5499 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.932766][ T9439] sit1: entered allmulticast mode [ 448.938604][ T9439] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 448.948889][ T9439] bond0: (slave sit1): Error -95 calling set_mac_address [ 448.956334][ T30] audit: type=1400 audit(1753015226.213:818): avc: denied { search } for pid=5499 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.977992][ T30] audit: type=1400 audit(1753015226.213:819): avc: denied { read } for pid=5499 comm="dhcpcd" name="n102" dev="tmpfs" ino=4277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.999661][ T30] audit: type=1400 audit(1753015226.213:820): avc: denied { open } for pid=5499 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.035580][ T30] audit: type=1400 audit(1753015226.213:821): avc: denied { getattr } for pid=5499 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.078595][ T9441] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 449.108162][ T9427] can0 (unregistered): slcan off ptm0. [ 450.937928][ T30] audit: type=1400 audit(1753015229.153:822): avc: denied { read open } for pid=9462 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.867139][ T30] audit: type=1400 audit(1753015229.153:823): avc: denied { getattr } for pid=9462 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.157204][ T30] audit: type=1400 audit(1753015231.093:824): avc: denied { getopt } for pid=9472 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 453.547081][ T30] audit: type=1400 audit(1753015231.753:825): avc: denied { add_name } for pid=9457 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.777102][ T30] audit: type=1400 audit(1753015231.753:826): avc: denied { create } for pid=9457 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 454.410240][ T30] audit: type=1400 audit(1753015231.753:827): avc: denied { write } for pid=9457 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 454.455318][ T30] audit: type=1400 audit(1753015231.753:828): avc: denied { append } for pid=9457 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 454.758295][ T30] audit: type=1400 audit(1753015232.983:829): avc: denied { remove_name } for pid=9491 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.843442][ T30] audit: type=1400 audit(1753015232.983:830): avc: denied { unlink } for pid=9491 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 456.672829][ T9527] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 457.137282][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 457.175086][ T9530] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.184079][ T9530] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.192824][ T9530] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.201526][ T9530] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.642941][ T9530] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.652317][ T9530] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.661581][ T9530] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.670849][ T9530] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.771057][ T9543] netlink: 204 bytes leftover after parsing attributes in process `syz.4.783'. [ 457.804953][ T9543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9543 comm=syz.4.783 [ 458.415913][ T9551] Error: Driver 'c6xdigio' is already registered, aborting... [ 458.829495][ T30] audit: type=1400 audit(1753015237.003:831): avc: denied { create } for pid=9550 comm="syz.4.785" name="#1d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.091353][ T30] audit: type=1400 audit(1753015237.003:832): avc: denied { link } for pid=9550 comm="syz.4.785" name="#1d" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.115802][ T30] audit: type=1400 audit(1753015237.003:833): avc: denied { rename } for pid=9550 comm="syz.4.785" name="#1e" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.649989][ T9568] tipc: Started in network mode [ 459.654915][ T9568] tipc: Node identity ac14140f, cluster identity 4711 [ 459.663094][ T9568] tipc: New replicast peer: 255.255.255.255 [ 459.669664][ T9568] tipc: Enabled bearer , priority 10 [ 459.679152][ T9568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.603036][ T30] audit: type=1400 audit(1753015238.843:834): avc: denied { accept } for pid=9572 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 461.143547][ T5941] tipc: Node number set to 2886997007 [ 461.539382][ T30] audit: type=1400 audit(1753015239.743:835): avc: denied { ioctl } for pid=9559 comm="syz.4.790" path="socket:[19053]" dev="sockfs" ino=19053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 462.738296][ T9603] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 465.497127][ T2150] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 466.206482][ T2150] usb 4-1: Using ep0 maxpacket: 8 [ 466.689534][ T2150] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 466.701686][ T2150] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 466.717868][ T2150] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.729690][ T2150] usb 4-1: config 0 has no interface number 0 [ 466.747586][ T2150] usb 4-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.779455][ T2150] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 466.811414][ T2150] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 466.869148][ T2150] usb 4-1: Product: syz [ 466.902897][ T2150] usb 4-1: Manufacturer: syz [ 466.936507][ T2150] usb 4-1: config 0 descriptor?? [ 468.484584][ T9654] pim6reg: entered allmulticast mode [ 468.497610][ T9653] pim6reg: left allmulticast mode [ 469.323187][ T9666] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 470.208306][ T5900] usb 4-1: USB disconnect, device number 8 [ 471.889003][ T9694] fuse: Bad value for 'fd' [ 472.854845][ T9707] syz_tun: entered allmulticast mode [ 475.018921][ T9722] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 475.148726][ T9725] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 475.449808][ T9731] sp0: Synchronizing with TNC [ 475.617531][ T30] audit: type=1400 audit(1753015253.853:836): avc: denied { setattr } for pid=9726 comm="syz.0.827" name="RDS" dev="sockfs" ino=19454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 475.790803][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.829'. [ 478.418377][ T9763] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 479.111860][ T9772] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 479.128019][ T9772] batman_adv: batadv0: Adding interface: gretap1 [ 479.134405][ T9772] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.160011][ T9772] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 480.674667][ T9787] sit1: entered allmulticast mode [ 481.002101][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 481.033247][ T9790] ceph: No mds server is up or the cluster is laggy [ 481.448040][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 481.887720][ T30] audit: type=1400 audit(1753015260.023:837): avc: denied { ioctl } for pid=9796 comm="syz.0.842" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 482.112135][ T30] audit: type=1400 audit(1753015260.313:838): avc: denied { ioctl } for pid=9802 comm="syz.4.845" path="socket:[21522]" dev="sockfs" ino=21522 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 482.297926][ T9809] ALSA: seq fatal error: cannot create timer (-22) [ 482.305305][ T30] audit: type=1400 audit(1753015260.473:839): avc: denied { ioctl } for pid=9804 comm="syz.1.844" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 482.335377][ T9803] netlink: 72 bytes leftover after parsing attributes in process `syz.4.845'. [ 482.344298][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 482.353374][ T9803] netlink: 'syz.4.845': attribute type 2 has an invalid length. [ 482.954321][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 483.740474][ T9825] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 484.070355][ T9828] sit1: entered allmulticast mode [ 484.996833][ T9840] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 485.643312][ T9843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.874523][ T9856] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 485.954921][ T9856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.974496][ T9856] team0: Port device bond0 added [ 486.227695][ T9855] input: syz0 as /devices/virtual/input/input9 [ 486.651259][ T30] audit: type=1400 audit(1753015264.893:840): avc: denied { read } for pid=5189 comm="acpid" name="event4" dev="devtmpfs" ino=2910 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.673823][ T30] audit: type=1400 audit(1753015264.893:841): avc: denied { open } for pid=5189 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2910 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.697151][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.703282][ T30] audit: type=1400 audit(1753015264.893:842): avc: denied { ioctl } for pid=5189 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2910 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.728131][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.148275][ T9871] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 487.605572][ T1206] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 487.669308][ T9874] xt_TPROXY: Can be used only with -p tcp or -p udp [ 488.417820][ T9866] Unsupported ieee802154 address type: 0 [ 488.481426][ T1206] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 488.520938][ T1206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 488.734360][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 489.135035][ T9884] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 489.164867][ T1206] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.178800][ T1206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 489.197360][ T1206] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 489.639603][ T30] audit: type=1400 audit(1753015267.883:843): avc: denied { ioctl } for pid=9887 comm="syz.0.864" path="socket:[20747]" dev="sockfs" ino=20747 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 489.664184][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.907903][ T1206] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 491.921912][ T1206] usb 4-1: can't read configurations, error -71 [ 496.441263][ T9942] XFS (nullb0): Invalid superblock magic number [ 496.989089][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.873'. [ 500.507159][ T30] audit: type=1400 audit(1753015278.743:844): avc: denied { getopt } for pid=9978 comm="syz.4.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.276894][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.421954][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.048533][ T30] audit: type=1400 audit(1753015279.643:845): avc: denied { recv } for pid=9989 comm="syz.2.885" saddr=10.128.0.169 src=30006 daddr=10.128.1.12 dest=51454 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 502.202858][T10002] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 503.005350][T10008] geneve2: entered promiscuous mode [ 503.010751][T10008] geneve2: entered allmulticast mode [ 506.113288][T10029] bridge0: port 3(dummy0) entered disabled state [ 506.119905][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.127236][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.989476][T10046] [U] v3f"S/4:XTzWtlW= [ 506.996422][T10046] [U] J"e:" [ 507.542585][T10049] syz.0.897 (10049): drop_caches: 2 [ 507.549485][T10049] syz.0.897 (10049): drop_caches: 2 [ 508.208437][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.217011][ T30] audit: type=1400 audit(1753015285.743:846): avc: denied { remount } for pid=10047 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 508.258284][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.594278][T10029] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.071803][T10029] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.212992][T10029] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.223055][T10029] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.713864][ T30] audit: type=1400 audit(1753015287.953:847): avc: denied { name_bind } for pid=10055 comm="syz.3.899" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 509.810319][T10029] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 509.823480][T10029] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 509.832524][T10029] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 509.842061][T10029] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 509.851121][T10029] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 509.865245][T10033] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 510.281303][T10072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 510.292469][T10072] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 510.699672][ T30] audit: type=1400 audit(1753015288.523:848): avc: denied { mounton } for pid=10065 comm="syz.4.902" path="/191/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 510.786859][T10075] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 511.751189][ T30] audit: type=1400 audit(1753015289.203:849): avc: denied { shutdown } for pid=10076 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 512.061852][ T30] audit: type=1400 audit(1753015290.303:850): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 513.631934][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 515.049716][T10115] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 515.114868][T10117] sit1: entered allmulticast mode [ 515.120420][T10117] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 515.130856][T10117] bond0: (slave sit1): Error -95 calling set_mac_address [ 515.681825][T10128] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 516.434406][T10123] tipc: Enabling of bearer rejected, already enabled [ 517.443794][T10139] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 517.646912][T10144] netlink: 92 bytes leftover after parsing attributes in process `syz.0.918'. [ 517.778411][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 517.908071][T10147] netlink: 44 bytes leftover after parsing attributes in process `syz.0.918'. [ 518.117262][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 520.318854][ T30] audit: type=1400 audit(1753015298.553:851): avc: denied { connect } for pid=10166 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 520.867897][ T30] audit: type=1400 audit(1753015298.623:852): avc: denied { read } for pid=10166 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 521.236652][T10184] sit1: entered allmulticast mode [ 521.242206][T10184] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 521.252564][T10184] bond0: (slave sit1): Error -95 calling set_mac_address [ 522.946307][T10204] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 523.027228][ T30] audit: type=1400 audit(1753015301.223:853): avc: denied { ioctl } for pid=10190 comm="syz.3.927" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 524.865506][T10226] sp0: Synchronizing with TNC [ 525.258660][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 525.269422][T10220] delete_channel: no stack [ 525.546724][T10242] ubi31: attaching mtd0 [ 525.561190][T10242] ubi31: scanning is finished [ 525.565944][T10242] ubi31: empty MTD device detected [ 525.967116][T10242] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 525.974697][T10242] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 525.982023][T10242] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 525.989068][T10242] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 525.996504][T10242] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 526.003370][T10242] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 526.011433][T10242] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2123527846 [ 526.021503][T10242] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 526.032581][T10246] ubi31: background thread "ubi_bgt31d" started, PID 10246 [ 526.175786][T10243] pim6reg: entered allmulticast mode [ 526.188587][T10243] pim6reg: left allmulticast mode [ 526.753712][ T30] audit: type=1400 audit(1753015304.963:854): avc: denied { accept } for pid=10248 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 526.755684][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 526.936147][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 528.600897][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 529.037335][ T30] audit: type=1400 audit(1753015307.273:855): avc: denied { mount } for pid=10272 comm="syz.4.946" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 530.303233][ T2150] IPVS: starting estimator thread 0... [ 530.382769][ T30] audit: type=1400 audit(1753015308.593:856): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 530.595330][T10288] IPVS: using max 44 ests per chain, 105600 per kthread [ 531.247025][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 531.480506][T10299] delete_channel: no stack [ 531.864834][T10309] ubi: mtd0 is already attached to ubi31 [ 532.965946][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.956'. [ 533.230986][ T30] audit: type=1400 audit(1753015311.473:857): avc: denied { map } for pid=10320 comm="syz.4.958" path="socket:[22392]" dev="sockfs" ino=22392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 533.282022][ T5953] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 533.289531][T10323] sp0: Synchronizing with TNC [ 533.484281][ T30] audit: type=1400 audit(1753015311.473:858): avc: denied { read accept } for pid=10320 comm="syz.4.958" path="socket:[22392]" dev="sockfs" ino=22392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 534.267468][ T5953] usb 4-1: device descriptor read/all, error -71 [ 535.057165][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 535.300040][ T30] audit: type=1400 audit(1753015313.543:859): avc: denied { create } for pid=10341 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 535.707033][ T30] audit: type=1400 audit(1753015313.893:860): avc: denied { listen } for pid=10345 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 535.775186][T10347] macsec0: entered promiscuous mode [ 535.782035][T10347] macsec0: entered allmulticast mode [ 536.595615][T10347] veth1_macvtap: entered allmulticast mode [ 536.672009][ T30] audit: type=1400 audit(1753015313.893:861): avc: denied { accept } for pid=10345 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 536.709180][ T30] audit: type=1400 audit(1753015313.943:862): avc: denied { append } for pid=10345 comm="syz.3.964" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 536.753991][ T30] audit: type=1400 audit(1753015314.993:863): avc: denied { append } for pid=10351 comm="syz.0.963" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 536.759972][T10352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.563412][ T2150] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 537.636018][T10331] [U]  [ 537.673948][T10366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.687981][T10366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.718405][T10366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.733084][T10366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.744281][T10366] batman_adv: batadv0: Removing interface: gretap1 [ 537.964330][ T2150] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 538.060463][ T2150] usb 1-1: config 0 has no interface number 0 [ 538.079192][ T2150] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 538.196149][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.289149][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 538.324592][T10375] delete_channel: no stack [ 538.533902][ T2150] usb 1-1: Product: syz [ 538.544028][ T2150] usb 1-1: Manufacturer: syz [ 538.584522][ T2150] usb 1-1: SerialNumber: syz [ 538.601855][T10369] block nbd3: shutting down sockets [ 538.631749][ T2150] usb 1-1: config 0 descriptor?? [ 538.895158][T10381] qrtr: Invalid version 0 [ 538.904581][T10381] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[10381] [ 539.252719][ T2150] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 539.293558][ T2150] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 539.302481][ T2150] dib0700: firmware download failed at 7 with -22 [ 539.334156][ T2150] usb 1-1: USB disconnect, device number 5 [ 539.349527][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.972'. [ 539.379832][T10384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.389874][T10384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.406030][T10384] batman_adv: batadv0: Removing interface: ipvlan2 [ 539.674021][ T30] audit: type=1400 audit(1753015317.843:864): avc: denied { map } for pid=10385 comm="syz.0.973" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 539.710554][ T30] audit: type=1400 audit(1753015317.843:865): avc: denied { execute } for pid=10385 comm="syz.0.973" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 540.052594][T10394] syz.4.975 (10394): drop_caches: 2 [ 540.063460][T10394] syz.4.975 (10394): drop_caches: 2 [ 540.692229][ T30] audit: type=1400 audit(1753015317.843:866): avc: denied { mounton } for pid=10385 comm="syz.0.973" path="/187/file1/file0" dev="autofs" ino=23603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 540.715614][ T30] audit: type=1400 audit(1753015318.353:867): avc: denied { remount } for pid=10390 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 540.888438][T10384] bond0: (slave batadv0): Releasing backup interface [ 542.599561][T10412] binder: 10408:10412 ioctl 4018620d 0 returned -22 [ 543.281321][T10409] binder: 10408:10409 ioctl c018620c 0 returned -14 [ 543.340181][ T30] audit: type=1400 audit(1753015321.573:868): avc: denied { read } for pid=10419 comm="syz.2.982" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 543.415953][ T30] audit: type=1400 audit(1753015321.573:869): avc: denied { open } for pid=10419 comm="syz.2.982" path="/204/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 543.968200][ T30] audit: type=1400 audit(1753015322.193:870): avc: denied { write } for pid=10428 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 545.687564][T10436] nvme_fabrics: missing parameter 'transport=%s' [ 545.694204][T10436] nvme_fabrics: missing parameter 'nqn=%s' [ 545.804274][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 545.937988][T10442] delete_channel: no stack [ 546.021818][T10433] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 546.189426][T10444] syz.3.988 (10444): drop_caches: 2 [ 546.196623][T10444] syz.3.988 (10444): drop_caches: 2 [ 546.775174][T10453] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 547.121263][ T30] audit: type=1400 audit(1753015325.323:871): avc: denied { ioctl } for pid=10451 comm="syz.3.991" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 547.263128][T10461] netlink: 56 bytes leftover after parsing attributes in process `syz.4.992'. [ 549.242826][T10478] netlink: 'syz.4.997': attribute type 13 has an invalid length. [ 550.172173][ T30] audit: type=1400 audit(1753015327.643:872): avc: denied { bind } for pid=10477 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 550.526885][ T5838] Bluetooth: hci1: unexpected cc 0x0402 length: 4 > 1 [ 550.533818][ T5838] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 551.417060][ T5941] IPVS: starting estimator thread 0... [ 551.974900][T10497] IPVS: using max 40 ests per chain, 96000 per kthread [ 554.654668][T10525] IPVS: Error connecting to the multicast addr [ 555.383694][T10535] syz.3.1009 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 555.725419][T10545] input: syz1 as /devices/virtual/input/input12 [ 556.206176][T10548] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 557.189138][T10561] Invalid source name [ 557.193207][T10561] UBIFS error (pid: 10561): cannot open "./file0", error -22 [ 557.590745][ T30] audit: type=1400 audit(1753015335.437:873): avc: denied { mounton } for pid=10554 comm="syz.1.1014" path="/205/file0" dev="tmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 559.062696][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 559.073979][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 560.037335][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 560.113472][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 560.127607][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 560.226710][ T30] audit: type=1400 audit(1753015338.407:874): avc: denied { mounton } for pid=10568 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 560.249762][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 561.247626][ T30] audit: type=1400 audit(1753015338.517:875): avc: denied { bind } for pid=10583 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 561.357896][T10587] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 561.894553][ T30] audit: type=1400 audit(1753015340.137:876): avc: denied { write } for pid=10591 comm="syz.3.1021" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 562.297333][ T5847] Bluetooth: hci5: command tx timeout [ 562.676607][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.688165][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.735883][T10624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'. [ 564.242695][T10568] chnl_net:caif_netlink_parms(): no params data found [ 564.327338][ T5838] Bluetooth: hci5: command tx timeout [ 565.496346][T10631] block nbd1: shutting down sockets [ 565.608336][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.619656][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.675543][T10568] bridge_slave_0: entered allmulticast mode [ 565.914372][T10568] bridge_slave_0: entered promiscuous mode [ 565.963078][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.993665][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.145852][ T30] audit: type=1326 audit(1753015344.277:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a1f8e9a9 code=0x7ffc0000 [ 566.171295][T10568] bridge_slave_1: entered allmulticast mode [ 566.214035][T10568] bridge_slave_1: entered promiscuous mode [ 566.384350][ T30] audit: type=1326 audit(1753015344.277:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a1f8e9a9 code=0x7ffc0000 [ 566.419634][ T30] audit: type=1326 audit(1753015344.287:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2a1f8e9a9 code=0x7ffc0000 [ 566.456239][ T30] audit: type=1326 audit(1753015344.287:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a1f8e9a9 code=0x7ffc0000 [ 566.483396][ T5838] Bluetooth: hci5: command tx timeout [ 566.555667][ T30] audit: type=1326 audit(1753015344.287:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a1f8e9a9 code=0x7ffc0000 [ 566.784338][T10568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.882305][T10568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.968880][ T30] audit: type=1326 audit(1753015344.287:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ff2a1f8e9a9 code=0x7ffc0000 [ 567.086558][ T30] audit: type=1326 audit(1753015344.287:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a1f8e9a9 code=0x7ffc0000 [ 567.160811][ T30] audit: type=1326 audit(1753015344.287:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10638 comm="syz.4.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a1f8e9a9 code=0x7ffc0000 [ 567.765112][T10668] openvswitch: netlink: Flow key attr not present in new flow. [ 567.874061][T10668] __vm_enough_memory: pid: 10668, comm: syz.3.1033, bytes: 21200561451008 not enough memory for the allocation [ 568.185317][T10568] team0: Port device team_slave_0 added [ 568.198524][T10568] team0: Port device team_slave_1 added [ 568.789357][ T5838] Bluetooth: hci5: command tx timeout [ 569.161887][ T5953] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 569.178032][ T30] audit: type=1400 audit(1753015347.347:885): avc: denied { ioctl } for pid=10672 comm="syz.1.1035" path="socket:[24222]" dev="sockfs" ino=24222 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 569.347882][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 569.458189][ T5953] usb 4-1: config 0 interface 0 has no altsetting 0 [ 570.499890][ T5953] usb 4-1: string descriptor 0 read error: -71 [ 570.538615][ T5953] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 570.551422][T10684] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 570.569788][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.607726][T10568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.615891][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.671625][ T5953] usb 4-1: config 0 descriptor?? [ 570.725819][T10568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.852152][ T30] audit: type=1400 audit(1753015349.047:886): avc: denied { mounton } for pid=10688 comm="syz.3.1038" path="/proc/810/task" dev="proc" ino=24239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 570.998687][ T5953] usb 4-1: can't set config #0, error -71 [ 571.012052][T10568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.045305][ T5953] usb 4-1: USB disconnect, device number 13 [ 571.073236][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.117431][T10568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.398269][T10703] hub 6-0:1.0: USB hub found [ 571.407393][T10703] hub 6-0:1.0: 1 port detected [ 571.837537][T10705] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 571.844191][T10705] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 571.851962][T10705] vhci_hcd vhci_hcd.0: Device attached [ 572.162505][ T5941] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 572.281219][T10706] vhci_hcd: connection closed [ 572.283282][ T48] vhci_hcd: stop threads [ 572.386799][ T48] vhci_hcd: release socket [ 572.443478][ T48] vhci_hcd: disconnect device [ 572.817918][ T5941] usb 41-1: enqueue for inactive port 0 [ 572.897043][ T5941] vhci_hcd: vhci_device speed not set [ 573.623436][T10720] ceph: No mds server is up or the cluster is laggy [ 573.632226][ T5900] libceph: connect (1)[c::]:6789 error -22 [ 573.639438][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 573.960983][ T30] audit: type=1400 audit(1753015352.207:887): avc: denied { write } for pid=10729 comm="syz.1.1044" path="socket:[24283]" dev="sockfs" ino=24283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 574.014503][ T30] audit: type=1400 audit(1753015352.227:888): avc: denied { audit_write } for pid=10729 comm="syz.1.1044" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 574.667110][ T30] audit: type=1400 audit(1753015352.897:889): avc: denied { append } for pid=10734 comm="syz.1.1045" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 575.165979][ T12] bond0 (unregistering): Released all slaves [ 575.397162][ T12] bond1 (unregistering): Released all slaves [ 575.583350][ T12] bond2 (unregistering): Released all slaves [ 575.611123][ T12] bond3 (unregistering): (slave bond4): Releasing backup interface [ 575.648220][ T12] bond3 (unregistering): Released all slaves [ 575.722964][ T30] audit: type=1400 audit(1753015353.967:890): avc: denied { accept } for pid=10741 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 575.791238][ T12] bond4 (unregistering): Released all slaves [ 575.948881][ T30] audit: type=1400 audit(1753015354.177:891): avc: denied { listen } for pid=10741 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 575.968477][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.113118][ T12] bond5 (unregistering): Released all slaves [ 576.810294][T10749] sit1: entered allmulticast mode [ 576.824316][ T12] tipc: Disabling bearer [ 576.841410][ T12] tipc: Left network mode [ 577.328322][T10568] hsr_slave_0: entered promiscuous mode [ 577.374828][T10568] hsr_slave_1: entered promiscuous mode [ 577.534075][T10759] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 578.264576][ T12] hsr_slave_0: left promiscuous mode [ 578.275347][ T12] hsr_slave_1: left promiscuous mode [ 578.312547][ T12] pimreg3 (unregistering): left allmulticast mode [ 578.609969][ T30] audit: type=1400 audit(1753015356.797:892): avc: denied { bind } for pid=10775 comm="syz.1.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 578.901736][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 579.071124][T10788] block nbd2: shutting down sockets [ 579.523294][T10790] vxfs: WRONG superblock magic 00000000 at 1 [ 579.531346][T10790] vxfs: WRONG superblock magic 00000000 at 8 [ 579.537613][T10790] vxfs: can't find superblock. [ 579.589548][T10786] ceph: No mds server is up or the cluster is laggy [ 579.596414][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 579.610969][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 580.547583][T10794] sp0: Synchronizing with TNC [ 581.095481][ T30] audit: type=1400 audit(1753015359.337:893): avc: denied { bind } for pid=10802 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 581.199941][T10801] 8021q: VLANs not supported on ipvlan1 [ 581.689580][T10803] delete_channel: no stack [ 581.836429][T10812] vlan0: entered promiscuous mode [ 581.842090][T10812] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 582.065201][T10812] vlan0: entered allmulticast mode [ 582.080969][T10812] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 582.117007][ T5941] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 582.192974][ T12] IPVS: stop unused estimator thread 0... [ 582.294574][T10825] sit1: entered allmulticast mode [ 582.419104][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 582.434265][ T5941] usb 3-1: config 0 has no interfaces? [ 582.440086][T10568] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 582.445536][ T5941] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 582.460853][T10568] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 582.469354][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.480781][T10568] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 582.485519][ T5941] usb 3-1: config 0 descriptor?? [ 582.506868][T10568] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 583.185676][ T5953] usb 3-1: USB disconnect, device number 9 [ 583.214502][T10800] [U]  [ 583.274332][T10568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.323722][T10568] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.340834][ T4853] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.348030][ T4853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.385358][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.392569][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.645157][T10865] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 585.804909][T10884] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:0 [ 586.109637][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.574056][T10888] binder: 10882:10888 ioctl 4018620d 0 returned -22 [ 586.809505][T10888] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1069'. [ 586.819739][T10888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.055719][T10568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.059196][ T30] audit: type=1400 audit(1753015365.857:894): avc: denied { read } for pid=10889 comm="syz.2.1071" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 588.133740][ T30] audit: type=1400 audit(1753015365.857:895): avc: denied { open } for pid=10889 comm="syz.2.1071" path="/225/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 588.317277][T10885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1069'. [ 588.651718][T10911] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 588.670134][ T30] audit: type=1400 audit(1753015366.867:896): avc: denied { watch watch_reads } for pid=10904 comm="syz.3.1074" path="pipe:[3836]" dev="pipefs" ino=3836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 589.709605][T10568] veth0_vlan: entered promiscuous mode [ 589.721216][T10568] veth1_vlan: entered promiscuous mode [ 589.774316][ T30] audit: type=1400 audit(1753015368.017:897): avc: denied { listen } for pid=10926 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 590.027124][ T30] audit: type=1400 audit(1753015368.197:898): avc: denied { write } for pid=10926 comm="syz.3.1077" name="mouse0" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 590.064841][T10928] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 590.188584][T10928] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 590.204504][T10568] veth0_macvtap: entered promiscuous mode [ 590.234943][T10568] veth1_macvtap: entered promiscuous mode [ 590.251015][T10935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.313113][T10568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.356460][T10568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.384181][T10568] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.398965][T10568] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.423308][T10568] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.444201][T10568] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.731674][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.762993][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.821913][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.836810][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.873300][ T30] audit: type=1400 audit(1753015369.117:899): avc: denied { mounton } for pid=10568 comm="syz-executor" path="/root/syzkaller.Ftut4g/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 590.941005][ T30] audit: type=1400 audit(1753015369.177:900): avc: denied { mounton } for pid=10568 comm="syz-executor" path="/root/syzkaller.Ftut4g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 591.014322][ T30] audit: type=1400 audit(1753015369.217:901): avc: denied { mounton } for pid=10568 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 591.134931][ T30] audit: type=1400 audit(1753015369.217:902): avc: denied { mount } for pid=10568 comm="syz-executor" name="/" dev="gadgetfs" ino=6821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 591.193309][ T30] audit: type=1400 audit(1753015369.217:903): avc: denied { mount } for pid=10568 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 593.194025][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 593.194041][ T30] audit: type=1400 audit(1753015371.437:905): avc: denied { set_context_mgr } for pid=10978 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 593.305413][T10979] bridge1: entered promiscuous mode [ 593.485225][T10965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.561639][ T30] audit: type=1400 audit(1753015371.727:906): avc: denied { read } for pid=10962 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 593.977081][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 594.317221][ T1206] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 594.531874][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 594.588713][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 594.645190][ T1206] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 594.655535][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.664520][ T1206] usb 6-1: Product: syz [ 594.671318][ T1206] usb 6-1: Manufacturer: syz [ 594.675900][ T1206] usb 6-1: SerialNumber: syz [ 594.687741][ T1206] usb 6-1: config 0 descriptor?? [ 594.741542][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.807566][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.831599][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 594.846234][ T1206] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 594.949286][ T1206] usb 6-1: USB disconnect, device number 2 [ 594.987864][ T36] usb 6-1: Failed to submit usb control message: -71 [ 594.994991][ T36] usb 6-1: unable to send the bmi data to the device: -71 [ 594.997702][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.028163][ T36] usb 6-1: unable to get target info from device [ 595.038446][ T36] usb 6-1: could not get target info (-71) [ 595.044319][ T36] usb 6-1: could not probe fw (-71) [ 595.089662][ T24] usb 3-1: config 0 descriptor?? [ 595.602455][T11015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11015 comm=syz.3.1089 [ 596.440111][ T24] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 596.458084][ T30] audit: type=1400 audit(1753015374.707:907): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 596.523939][ T24] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 596.685437][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.699644][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.941771][T11027] bridge_slave_0: left allmulticast mode [ 596.948203][T11027] bridge_slave_0: left promiscuous mode [ 597.347988][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.385373][ T24] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device [ 597.393039][ T24] arvo 0003:1E7D:30D4.0004: couldn't install keyboard [ 597.602021][T11032] netlink: 'syz.5.1092': attribute type 10 has an invalid length. [ 598.095820][ T24] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -71 [ 598.170063][T11027] bridge_slave_1: left allmulticast mode [ 598.175883][T11027] bridge_slave_1: left promiscuous mode [ 598.192220][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.220603][ T24] usb 3-1: USB disconnect, device number 10 [ 598.279028][T11027] bond0: (slave bond_slave_0): Releasing backup interface [ 598.321796][T11027] bond0: (slave bond_slave_1): Releasing backup interface [ 598.427183][T11027] team0: Port device team_slave_0 removed [ 598.529581][T11027] team0: Port device team_slave_1 removed [ 598.572902][T11027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.632095][T11027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.651314][T11027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.667843][T11027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.675154][ T5900] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 598.700934][T11051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1095'. [ 598.930717][T11032] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 598.946983][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 598.959947][ T5900] usb 6-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 599.002239][ T5900] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 599.021392][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.039437][ T5900] usb 6-1: Product: syz [ 599.049829][ T5900] usb 6-1: Manufacturer: syz [ 599.061802][ T5900] usb 6-1: SerialNumber: syz [ 599.089101][ T5900] usb 6-1: config 0 descriptor?? [ 599.278818][T11051] : entered promiscuous mode [ 599.445560][ T30] audit: type=1400 audit(1753015377.687:908): avc: denied { read } for pid=11061 comm="syz.4.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 600.736742][ T5831] usb 6-1: USB disconnect, device number 3 [ 601.487096][T11081] ksmbd: Unknown IPC event: 3, ignore. [ 601.581914][T11081] usb usb8: usbfs: process 11081 (syz.1.1110) did not claim interface 0 before use [ 604.780109][T11108] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 604.939920][ T30] audit: type=1400 audit(1753015383.187:909): avc: denied { accept } for pid=11113 comm="syz.2.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 605.681848][ T5953] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 606.484386][ T5953] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.536220][ T5953] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 606.647227][ T5953] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.697234][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.518407][ T30] audit: type=1400 audit(1753015387.257:910): avc: denied { setopt } for pid=11150 comm="syz.4.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 609.768571][ T30] audit: type=1400 audit(1753015388.017:911): avc: denied { write } for pid=11160 comm="syz.4.1116" name="file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 609.800053][T11161] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 610.249402][ T30] audit: type=1400 audit(1753015388.037:912): avc: denied { open } for pid=11160 comm="syz.4.1116" path="/243/file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 610.278148][ T30] audit: type=1400 audit(1753015388.337:913): avc: denied { ioctl } for pid=11160 comm="syz.4.1116" path="/243/file0" dev="tmpfs" ino=1345 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 610.383854][T11167] loop6: detected capacity change from 0 to 7 [ 610.527232][T11167] Dev loop6: unable to read RDB block 7 [ 610.533056][T11167] loop6: AHDI p1 p2 p3 [ 610.537518][T11167] loop6: partition table partially beyond EOD, truncated [ 610.545235][T11167] loop6: p1 start 1601398130 is beyond EOD, truncated [ 610.552077][T11167] loop6: p2 start 1702059890 is beyond EOD, truncated [ 611.461301][ T5953] usb 6-1: can't set config #27, error -71 [ 611.509772][ T5953] usb 6-1: USB disconnect, device number 4 [ 612.478852][T11190] ubi: mtd0 is already attached to ubi31 [ 613.123875][T11176] tipc: Resetting bearer [ 614.127961][T11211] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 614.162355][T11211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.295301][T11230] hub 6-0:1.0: USB hub found [ 616.303112][T11230] hub 6-0:1.0: 1 port detected [ 617.983537][T11247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.249475][ T1206] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 618.837031][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 619.079057][T11260] program syz.1.1133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.738635][T11253] pim6reg: entered allmulticast mode [ 619.860315][T11254] pim6reg: left allmulticast mode [ 620.527323][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 620.618706][T11269] sp0: Synchronizing with TNC [ 620.826819][ T1206] usb 6-1: device descriptor read/all, error -71 [ 621.926049][T11292] ubi: mtd0 is already attached to ubi31 [ 624.197539][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.203990][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.669024][T11312] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 625.921928][ T5847] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 627.424216][T11349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1150'. [ 630.067764][ T5847] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 630.076505][ T5847] Bluetooth: hci2: Injecting HCI hardware error event [ 630.085512][ T5847] Bluetooth: hci2: hardware error 0x00 [ 630.236236][T11386] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1155'. [ 630.359690][T11394] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 630.367569][T11394] netlink: 'syz.1.1157': attribute type 2 has an invalid length. [ 631.177270][ T30] audit: type=1400 audit(1753015921.602:914): avc: denied { write } for pid=11390 comm="syz.1.1157" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 631.637014][ T30] audit: type=1400 audit(1753015922.792:915): avc: denied { accept } for pid=11397 comm="syz.5.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 631.822020][T11406] x_tables: duplicate underflow at hook 1 [ 632.177015][ T5847] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 633.348160][T11425] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 633.974762][T11441] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 635.429814][T11465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.774512][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 638.070008][T11504] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 638.601354][T11518] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 639.299160][ T30] audit: type=1400 audit(1753015930.522:916): avc: denied { mount } for pid=11524 comm="syz.4.1178" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 639.447806][ T30] audit: type=1400 audit(1753015930.682:917): avc: denied { search } for pid=11524 comm="syz.4.1178" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 639.541352][ T30] audit: type=1400 audit(1753015930.712:918): avc: denied { append } for pid=11524 comm="syz.4.1178" name="event3" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 640.103622][ T30] audit: type=1400 audit(1753015931.312:919): avc: denied { listen } for pid=11539 comm="syz.5.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 640.593471][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 644.152686][T11597] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 645.467854][T11611] ALSA: mixer_oss: invalid OSS volume 'VOLU' [ 646.777006][ T30] audit: type=1326 audit(1753015937.862:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11614 comm="syz.1.1193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd2778e9a9 code=0x0 [ 648.829915][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1194'. [ 648.839686][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1194'. [ 648.849794][T11642] netlink: 'syz.1.1194': attribute type 4 has an invalid length. [ 649.090666][T11639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1196'. [ 649.099788][T11639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1196'. [ 649.113809][T11638] ubi: mtd0 is already attached to ubi31 [ 649.132808][T11643] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1194'. [ 649.588335][T11651] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 649.777960][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1197'. [ 650.675090][T11662] input: syz0 as /devices/virtual/input/input15 [ 653.053797][T11672] sp0: Synchronizing with TNC [ 653.150105][T11681] Device name cannot be null; rc = [-22] [ 654.676632][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 655.031511][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 655.092716][T11688] ceph: No mds server is up or the cluster is laggy [ 655.329130][ T1206] IPVS: starting estimator thread 0... [ 656.297122][T11698] IPVS: using max 41 ests per chain, 98400 per kthread [ 657.487774][T11701] sctp: [Deprecated]: syz.4.1208 (pid 11701) Use of int in max_burst socket option deprecated. [ 657.487774][T11701] Use struct sctp_assoc_value instead [ 657.576655][T11728] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 657.900857][T11731] syz.5.1211: attempt to access beyond end of device [ 657.900857][T11731] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 657.914599][T11731] EXT4-fs (loop5): unable to read superblock [ 659.007886][T11737] dlm: no local IP address has been set [ 659.027398][T11737] dlm: cannot start dlm midcomms -107 [ 659.118566][T11742] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 659.956693][T11735] sit1: entered allmulticast mode [ 660.965186][T11768] /dev/nullb0: Can't open blockdev [ 661.557870][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 661.567177][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 661.810117][ T30] audit: type=1400 audit(1753015953.042:921): avc: denied { ioctl } for pid=11758 comm="syz.4.1218" path="socket:[29473]" dev="sockfs" ino=29473 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 662.250966][T11786] netlink: 696 bytes leftover after parsing attributes in process `syz.5.1221'. [ 663.013066][T11792] sp0: Synchronizing with TNC [ 663.537939][T11801] Bluetooth: hci0: Frame reassembly failed (-84) [ 663.546322][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 663.555325][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1226'. [ 663.581259][ T1007] Bluetooth: hci0: Frame reassembly failed (-84) [ 665.618200][T11249] Bluetooth: hci0: command 0x1003 tx timeout [ 665.626206][ T5847] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 666.323027][T11842] random: crng reseeded on system resumption [ 667.080540][T11847] sctp: [Deprecated]: syz.1.1233 (pid 11847) Use of int in max_burst socket option deprecated. [ 667.080540][T11847] Use struct sctp_assoc_value instead [ 667.190569][T11823] sit1: entered allmulticast mode [ 667.202155][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 667.211281][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 667.629682][T11859] sp0: Synchronizing with TNC [ 670.917069][T11895] sp1: Synchronizing with TNC [ 671.288987][T11909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.217934][T11930] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 673.563245][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1242'. [ 674.048597][T11929] delete_channel: no stack [ 674.225304][T11941] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 675.359162][T11951] input: syz1 as /devices/virtual/input/input16 [ 675.686744][T11959] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 675.698280][T11959] ubi: mtd0 is already attached to ubi31 [ 676.829928][T11978] SET target dimension over the limit! [ 677.839227][T11988] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 678.962981][T11998] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 678.969545][T11998] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 679.027617][T12001] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 679.034272][T12001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 679.203893][T12009] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 679.308184][ T5941] vhci_hcd: vhci_device speed not set [ 679.440471][T11998] vhci_hcd vhci_hcd.0: Device attached [ 679.451032][T12010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 679.589830][T12001] vhci_hcd vhci_hcd.0: Device attached [ 680.509345][ T5941] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 680.839939][T11998] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 680.846588][T11998] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 680.855544][T12019] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1262'. [ 681.387403][T11998] vhci_hcd vhci_hcd.0: Device attached [ 681.399404][T12001] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 681.406061][T12001] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 681.426832][T12001] vhci_hcd vhci_hcd.0: Device attached [ 681.482924][T11998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 681.501773][T12010] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(18) [ 681.508428][T12010] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 681.520830][T11998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 681.591339][T12010] vhci_hcd vhci_hcd.0: Device attached [ 681.603544][T11998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.315367][T11998] vhci_hcd vhci_hcd.0: port 0 already used [ 682.522887][T12036] vhci_hcd: connection closed [ 682.523117][T12023] vhci_hcd: connection closed [ 682.529086][ T1169] vhci_hcd: stop threads [ 682.547040][T11999] vhci_hcd: connection reset by peer [ 682.552470][T12002] vhci_hcd: connection closed [ 682.560240][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 682.606252][T12024] vhci_hcd: connection closed [ 682.625702][ T1169] vhci_hcd: release socket [ 682.639128][ T1169] vhci_hcd: disconnect device [ 682.651484][ T1169] vhci_hcd: stop threads [ 683.092239][ T1169] vhci_hcd: release socket [ 683.096825][ T1169] vhci_hcd: disconnect device [ 683.113221][ T1169] vhci_hcd: stop threads [ 683.119481][ T1169] vhci_hcd: release socket [ 683.127195][ T1169] vhci_hcd: disconnect device [ 683.140685][ T1169] vhci_hcd: stop threads [ 683.155317][ T1169] vhci_hcd: release socket [ 683.162211][ T1169] vhci_hcd: disconnect device [ 683.544038][ T1169] vhci_hcd: stop threads [ 683.605749][ T1169] vhci_hcd: release socket [ 683.630192][ T1169] vhci_hcd: disconnect device [ 684.209832][T12068] sit1: entered allmulticast mode [ 684.276091][ T30] audit: type=1400 audit(1753015975.504:922): avc: denied { watch } for pid=12064 comm="syz.2.1272" path="/265/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 685.112458][T12088] sp0: Synchronizing with TNC [ 685.991281][ T5941] vhci_hcd: vhci_device speed not set [ 686.539888][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.546191][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.835317][T12111] SELinux: policydb string A+S does not match my string SE Linux [ 687.843511][T12111] SELinux: failed to load policy [ 687.873439][T12110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.493227][ T5900] usb usb42-port1: attempt power cycle [ 689.653216][ T30] audit: type=1400 audit(1753015980.864:923): avc: denied { create } for pid=12130 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 689.910984][T12135] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 689.922955][T12135] evm: overlay not supported [ 690.221280][ T30] audit: type=1400 audit(1753015981.164:924): avc: denied { relabelto } for pid=12130 comm="syz.1.1284" name="/" dev="overlay" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 690.252382][ T30] audit: type=1400 audit(1753015981.174:925): avc: denied { associate } for pid=12130 comm="syz.1.1284" name="file1" dev="tmpfs" ino=1493 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 690.373909][ T5900] usb usb42-port1: unable to enumerate USB device [ 690.646319][ T30] audit: type=1400 audit(1753015981.754:926): avc: denied { rmdir } for pid=5832 comm="syz-executor" name="file1" dev="tmpfs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 690.807809][ T30] audit: type=1400 audit(1753015981.964:927): avc: denied { getopt } for pid=12136 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 693.583013][T12158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.831245][T12180] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 694.842404][T12180] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 695.948479][T12195] sp0: Synchronizing with TNC [ 696.957939][T12207] 9pnet_virtio: no channels available for device syz [ 697.561969][T12209] sp1: Synchronizing with TNC [ 698.738914][T12224] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 699.743221][T12239] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1303'. [ 699.820079][ T30] audit: type=1400 audit(1753015990.984:928): avc: denied { write } for pid=12230 comm="syz.1.1303" path="socket:[30124]" dev="sockfs" ino=30124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 699.832147][T12239] syz.1.1303: attempt to access beyond end of device [ 699.832147][T12239] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 699.844304][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.887443][T12239] syz.1.1303: attempt to access beyond end of device [ 699.887443][T12239] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 699.915271][T12239] Mount JFS Failure: -5 [ 700.640679][T12251] pim6reg: entered allmulticast mode [ 700.655904][T12251] pim6reg: left allmulticast mode [ 700.746809][T12256] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 702.643594][T12272] Device name cannot be null; rc = [-22] [ 703.719635][T12277] dummy0 speed is unknown, defaulting to 1000 [ 703.823332][T12277] dummy0 speed is unknown, defaulting to 1000 [ 703.851583][T12283] sp0: Synchronizing with TNC [ 703.851635][T12277] dummy0 speed is unknown, defaulting to 1000 [ 704.449413][T12277] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 704.460181][ T30] audit: type=1400 audit(1753015995.688:929): avc: denied { associate } for pid=12275 comm="syz.5.1311" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 704.474733][T12277] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 705.299150][T12277] dummy0 speed is unknown, defaulting to 1000 [ 705.342395][T12277] dummy0 speed is unknown, defaulting to 1000 [ 705.555128][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1315'. [ 705.678511][T12277] dummy0 speed is unknown, defaulting to 1000 [ 705.685286][T12277] dummy0 speed is unknown, defaulting to 1000 [ 705.732663][T12277] dummy0 speed is unknown, defaulting to 1000 [ 707.297156][T12314] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 707.515002][T12314] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 708.157717][T12314] autofs: Unknown parameter 'Fա3돝' [ 708.887591][T12336] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1323'. [ 709.929667][ T1206] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 710.689265][ T1206] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 710.700859][ T1206] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 710.711851][ T1206] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 710.721176][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.736197][T12338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 710.752732][ T1206] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 713.526553][ T5900] usb 4-1: USB disconnect, device number 14 [ 713.672516][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1330'. [ 715.217015][ T5900] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 715.310939][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 715.320165][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 715.357479][ T5900] usb 4-1: device descriptor read/64, error -71 [ 716.186364][ T5900] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 716.368010][ T5900] usb 4-1: device descriptor read/64, error -71 [ 716.507731][ T5900] usb usb4-port1: attempt power cycle [ 716.946788][ T5838] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 717.558000][ T30] audit: type=1400 audit(1753016264.416:930): avc: denied { bind } for pid=12416 comm="syz.4.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 718.244069][T12431] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 718.326930][ T2150] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 718.662062][ T2150] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 718.673176][ T2150] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 719.742723][ T2150] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 719.752096][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.768923][T12424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 719.803648][ T2150] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 720.212149][T12441] sit1: entered allmulticast mode [ 722.725560][ T5941] usb 3-1: USB disconnect, device number 11 [ 722.791375][T12460] Cannot find del_set index 3 as target [ 723.175803][ T30] audit: type=1400 audit(1753016526.018:931): avc: denied { read } for pid=12454 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 723.523497][T12466] Device name cannot be null; rc = [-22] [ 723.541271][ T30] audit: type=1400 audit(1753016526.758:932): avc: denied { mounton } for pid=12461 comm="syz.1.1354" path="/" dev="ramfs" ino=31653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 727.023899][T12486] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 727.692724][T12499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.943357][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 729.057405][T12520] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 729.070931][T12520] Error validating options; rc = [-22] [ 729.641112][T12525] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1367'. [ 729.779754][T12527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.760201][T12545] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 731.956631][T12541] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 731.968956][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 732.121203][T12550] sp0: Synchronizing with TNC [ 733.586512][T12562] smc: net device bond0 applied user defined pnetid SYZ0 [ 733.852556][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 733.872891][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1378'. [ 734.618818][T12575] tipc: Started in network mode [ 734.623821][T12575] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 734.631856][T12575] tipc: Enabled bearer , priority 10 [ 734.653834][T12575] lo speed is unknown, defaulting to 1000 [ 734.659941][T12575] lo speed is unknown, defaulting to 1000 [ 734.669813][T12575] lo speed is unknown, defaulting to 1000 [ 734.735542][T12575] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 734.875996][T12575] lo speed is unknown, defaulting to 1000 [ 734.891272][T12575] lo speed is unknown, defaulting to 1000 [ 734.907739][T12575] lo speed is unknown, defaulting to 1000 [ 734.922395][T12575] lo speed is unknown, defaulting to 1000 [ 734.945337][T12575] lo speed is unknown, defaulting to 1000 [ 735.648287][ T5900] tipc: Node number set to 10005162 [ 735.973814][T12584] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 737.082848][T12596] macsec0: entered promiscuous mode [ 737.089185][T12596] macsec0: entered allmulticast mode [ 737.094554][T12596] veth1_macvtap: entered allmulticast mode [ 737.408273][ T5838] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 740.276941][T12622] macsec0: entered promiscuous mode [ 740.385330][T12622] macsec0: entered allmulticast mode [ 740.449734][T12623] veth1_macvtap: entered allmulticast mode [ 740.455764][T12623] macsec0: left promiscuous mode [ 740.460911][T12623] macsec0: left allmulticast mode [ 740.465936][T12623] veth1_macvtap: left allmulticast mode [ 740.880142][ T1206] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 741.086895][ T1206] usb 3-1: Using ep0 maxpacket: 8 [ 741.096633][ T1206] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 741.107319][ T1206] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 741.558673][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.578800][ T1206] usb 3-1: Product: syz [ 741.583025][ T1206] usb 3-1: Manufacturer: syz [ 741.587660][ T1206] usb 3-1: SerialNumber: syz [ 741.720011][ T1206] usb 3-1: config 0 descriptor?? [ 741.756158][ T1206] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 741.907424][ T1206] usb 3-1: setting power ON [ 741.922456][ T30] audit: type=1400 audit(1753016545.162:933): avc: denied { wake_alarm } for pid=12626 comm="syz.3.1394" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 741.947314][T12634] capability: warning: `syz.3.1394' uses deprecated v2 capabilities in a way that may be insecure [ 741.964795][ T1206] dvb-usb: bulk message failed: -22 (2/0) [ 741.996397][ T1206] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 742.016018][ T30] audit: type=1400 audit(1753016545.202:934): avc: denied { audit_read } for pid=12611 comm="syz.2.1390" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 742.047393][ T1206] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 742.049174][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.176302][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.207028][ T1206] usb 3-1: media controller created [ 742.812243][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 742.831027][ T1206] usb 3-1: selecting invalid altsetting 6 [ 742.837273][ T1206] usb 3-1: digital interface selection failed (-22) [ 742.843878][ T1206] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 742.855129][ T1206] usb 3-1: setting power OFF [ 742.993512][ T1206] dvb-usb: bulk message failed: -22 (2/0) [ 742.995298][T12620] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 743.015230][ T1206] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 743.025331][ T1206] (NULL device *): no alternate interface [ 743.131918][T12620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1390'. [ 743.239507][ T1206] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 743.298317][T12652] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 743.298317][T12652] The task syz.5.1408 (12652) triggered the difference, watch for misbehavior. [ 744.561831][T12620] geneve0: entered promiscuous mode [ 744.613936][T12620] geneve0: entered allmulticast mode [ 744.663973][T12620] team0: Port device geneve0 added [ 744.806050][ T1206] usb 3-1: USB disconnect, device number 12 [ 744.906176][ T30] audit: type=1400 audit(1753016548.142:935): avc: denied { unmount } for pid=12656 comm="syz.5.1400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 745.411286][T12665] dummy0 speed is unknown, defaulting to 1000 [ 745.428894][T12665] lo speed is unknown, defaulting to 1000 [ 746.890976][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.897487][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.354355][T12679] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 749.494885][T12697] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 749.506072][T12697] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 750.618114][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 751.839323][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 752.470151][T12722] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 752.927156][T12728] netlink: 'syz.4.1413': attribute type 11 has an invalid length. [ 752.945971][T12728] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1413'. [ 754.492570][T12748] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1420'. [ 755.164937][ T5838] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 755.267344][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 759.092562][ T30] audit: type=1400 audit(1753016561.974:936): avc: denied { listen } for pid=12770 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 759.595744][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'. [ 762.451057][T12807] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 764.220696][T12824] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 764.467132][T12830] netlink: 'syz.4.1438': attribute type 8 has an invalid length. [ 765.092265][T12823] bridge0: port 3(team0) entered disabled state [ 765.099055][T12823] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.106310][T12823] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.226453][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 765.321619][T12823] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.330882][T12823] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.340406][T12823] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.349293][T12823] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.700659][T12847] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 767.181595][T12863] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 767.192779][T12863] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 767.313938][T12865] ================================================================== [ 767.322040][T12865] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 767.330036][T12865] Read of size 8 at addr ffff888076bbe430 by task syz.1.1444/12865 [ 767.337924][T12865] [ 767.340247][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.1.1444 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 767.340273][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 767.340285][T12865] Call Trace: [ 767.340293][T12865] [ 767.340302][T12865] dump_stack_lvl+0x116/0x1f0 [ 767.340337][T12865] print_report+0xcd/0x610 [ 767.340357][T12865] ? __virt_addr_valid+0x81/0x610 [ 767.340380][T12865] ? __phys_addr+0xe8/0x180 [ 767.340404][T12865] ? sysfs_remove_file_ns+0x63/0x70 [ 767.340430][T12865] kasan_report+0xe0/0x110 [ 767.340448][T12865] ? sysfs_remove_file_ns+0x63/0x70 [ 767.340478][T12865] sysfs_remove_file_ns+0x63/0x70 [ 767.340507][T12865] driver_remove_file+0x4a/0x60 [ 767.340528][T12865] bus_remove_driver+0x224/0x2c0 [ 767.340556][T12865] driver_unregister+0x76/0xb0 [ 767.340576][T12865] comedi_device_detach+0x13d/0x9e0 [ 767.340607][T12865] do_devconfig_ioctl+0x46c/0x580 [ 767.340629][T12865] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 767.340657][T12865] ? find_held_lock+0x2b/0x80 [ 767.340683][T12865] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 767.340711][T12865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.340732][T12865] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 767.340756][T12865] ? do_vfs_ioctl+0x523/0x1a60 [ 767.340786][T12865] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 767.340813][T12865] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 767.340833][T12865] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 767.340852][T12865] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 767.340874][T12865] ? hook_file_ioctl_common+0x145/0x410 [ 767.340900][T12865] ? selinux_file_ioctl+0x180/0x270 [ 767.340916][T12865] ? selinux_file_ioctl+0xb4/0x270 [ 767.340937][T12865] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 767.340961][T12865] __x64_sys_ioctl+0x18e/0x210 [ 767.340986][T12865] do_syscall_64+0xcd/0x4c0 [ 767.341004][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.341024][T12865] RIP: 0033:0x7efd2778e9a9 [ 767.341038][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.341056][T12865] RSP: 002b:00007efd28582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.341074][T12865] RAX: ffffffffffffffda RBX: 00007efd279b6160 RCX: 00007efd2778e9a9 [ 767.341087][T12865] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000b [ 767.341098][T12865] RBP: 00007efd27810d69 R08: 0000000000000000 R09: 0000000000000000 [ 767.341108][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.341119][T12865] R13: 0000000000000000 R14: 00007efd279b6160 R15: 00007ffc06c21908 [ 767.341137][T12865] [ 767.341144][T12865] [ 767.603257][T12865] Allocated by task 12598: [ 767.607655][T12865] kasan_save_stack+0x33/0x60 [ 767.612329][T12865] kasan_save_track+0x14/0x30 [ 767.616998][T12865] __kasan_kmalloc+0xaa/0xb0 [ 767.621581][T12865] __kmalloc_noprof+0x223/0x510 [ 767.626425][T12865] security_inode_init_security+0x13f/0x390 [ 767.632306][T12865] shmem_symlink+0x135/0x9f0 [ 767.636891][T12865] vfs_symlink+0x400/0x680 [ 767.641298][T12865] do_symlinkat+0x261/0x310 [ 767.645798][T12865] __x64_sys_symlinkat+0x93/0xc0 [ 767.650720][T12865] do_syscall_64+0xcd/0x4c0 [ 767.655210][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.661088][T12865] [ 767.663396][T12865] Freed by task 12598: [ 767.667443][T12865] kasan_save_stack+0x33/0x60 [ 767.672110][T12865] kasan_save_track+0x14/0x30 [ 767.676781][T12865] kasan_save_free_info+0x3b/0x60 [ 767.681799][T12865] __kasan_slab_free+0x51/0x70 [ 767.686558][T12865] kfree+0x2b4/0x4d0 [ 767.690440][T12865] security_inode_init_security+0x2eb/0x390 [ 767.696323][T12865] shmem_symlink+0x135/0x9f0 [ 767.700924][T12865] vfs_symlink+0x400/0x680 [ 767.705329][T12865] do_symlinkat+0x261/0x310 [ 767.709816][T12865] __x64_sys_symlinkat+0x93/0xc0 [ 767.714738][T12865] do_syscall_64+0xcd/0x4c0 [ 767.719223][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.725101][T12865] [ 767.727410][T12865] The buggy address belongs to the object at ffff888076bbe400 [ 767.727410][T12865] which belongs to the cache kmalloc-256 of size 256 [ 767.741447][T12865] The buggy address is located 48 bytes inside of [ 767.741447][T12865] freed 256-byte region [ffff888076bbe400, ffff888076bbe500) [ 767.755139][T12865] [ 767.757450][T12865] The buggy address belongs to the physical page: [ 767.763837][T12865] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76bbe [ 767.772576][T12865] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 767.781058][T12865] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 767.788596][T12865] page_type: f5(slab) [ 767.792583][T12865] raw: 00fff00000000040 ffff88801b841b40 ffffea0000969d00 dead000000000004 [ 767.801163][T12865] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 767.809753][T12865] head: 00fff00000000040 ffff88801b841b40 ffffea0000969d00 dead000000000004 [ 767.818409][T12865] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 767.827061][T12865] head: 00fff00000000001 ffffea0001daef81 00000000ffffffff 00000000ffffffff [ 767.835715][T12865] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 767.844370][T12865] page dumped because: kasan: bad access detected [ 767.850776][T12865] page_owner tracks the page as allocated [ 767.856489][T12865] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7892, tgid 7890 (syz.3.425), ts 292328800700, free_ts 177996840032 [ 767.877764][T12865] post_alloc_hook+0x1c0/0x230 [ 767.882523][T12865] get_page_from_freelist+0x1321/0x3890 [ 767.888059][T12865] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 767.893943][T12865] alloc_pages_mpol+0x1fb/0x550 [ 767.898776][T12865] new_slab+0x23b/0x330 [ 767.902918][T12865] ___slab_alloc+0xd9c/0x1940 [ 767.907580][T12865] __slab_alloc.constprop.0+0x56/0xb0 [ 767.912973][T12865] __kmalloc_noprof+0x2f2/0x510 [ 767.917815][T12865] io_cache_alloc_new+0x45/0xf0 [ 767.922647][T12865] __io_prep_rw+0x21d/0x1000 [ 767.927225][T12865] io_prep_rw+0x24/0x220 [ 767.931450][T12865] io_prep_readv+0x20/0xa0 [ 767.935852][T12865] io_submit_sqes+0x835/0x2580 [ 767.940604][T12865] __do_sys_io_uring_enter+0xd6a/0x1630 [ 767.946140][T12865] do_syscall_64+0xcd/0x4c0 [ 767.950625][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.956500][T12865] page last free pid 1007 tgid 1007 stack trace: [ 767.962804][T12865] __free_frozen_pages+0x7fe/0x1180 [ 767.967990][T12865] __folio_put+0x329/0x450 [ 767.972388][T12865] skb_release_data+0x7fb/0x9c0 [ 767.977222][T12865] __kfree_skb+0x4f/0x70 [ 767.981447][T12865] tcp_ack+0x19b2/0x5c90 [ 767.985676][T12865] tcp_rcv_established+0x53d/0x22e0 [ 767.990867][T12865] tcp_v4_do_rcv+0x5ca/0xa90 [ 767.995445][T12865] tcp_v4_rcv+0x3609/0x4650 [ 767.999953][T12865] ip_protocol_deliver_rcu+0xba/0x4c0 [ 768.005306][T12865] ip_local_deliver_finish+0x316/0x570 [ 768.010751][T12865] ip_local_deliver+0x18e/0x1f0 [ 768.015585][T12865] ip_sublist_rcv_finish+0x2c1/0x620 [ 768.020852][T12865] ip_list_rcv_finish+0x552/0x720 [ 768.025858][T12865] ip_list_rcv+0x335/0x450 [ 768.030256][T12865] __netif_receive_skb_list_core+0x752/0x950 [ 768.036227][T12865] netif_receive_skb_list_internal+0x752/0xdb0 [ 768.042372][T12865] [ 768.044678][T12865] Memory state around the buggy address: [ 768.050290][T12865] ffff888076bbe300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 768.058336][T12865] ffff888076bbe380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 768.066378][T12865] >ffff888076bbe400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.074418][T12865] ^ [ 768.080029][T12865] ffff888076bbe480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.088073][T12865] ffff888076bbe500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 768.096115][T12865] ================================================================== [ 768.104212][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.112403][T12865] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 768.119625][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.1.1444 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 768.131722][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 768.141799][T12865] Call Trace: [ 768.145092][T12865] [ 768.148030][T12865] dump_stack_lvl+0x3d/0x1f0 [ 768.152642][T12865] panic+0x71c/0x800 [ 768.156569][T12865] ? __pfx_panic+0x10/0x10 [ 768.161014][T12865] ? mark_held_locks+0x49/0x80 [ 768.165797][T12865] ? preempt_schedule_thunk+0x16/0x30 [ 768.171190][T12865] ? sysfs_remove_file_ns+0x63/0x70 [ 768.176409][T12865] ? preempt_schedule_common+0x44/0xc0 [ 768.181884][T12865] ? sysfs_remove_file_ns+0x63/0x70 [ 768.187070][T12865] check_panic_on_warn+0xab/0xb0 [ 768.191983][T12865] end_report+0x107/0x170 [ 768.196287][T12865] kasan_report+0xee/0x110 [ 768.200680][T12865] ? sysfs_remove_file_ns+0x63/0x70 [ 768.205864][T12865] sysfs_remove_file_ns+0x63/0x70 [ 768.210872][T12865] driver_remove_file+0x4a/0x60 [ 768.215705][T12865] bus_remove_driver+0x224/0x2c0 [ 768.220624][T12865] driver_unregister+0x76/0xb0 [ 768.225363][T12865] comedi_device_detach+0x13d/0x9e0 [ 768.230547][T12865] do_devconfig_ioctl+0x46c/0x580 [ 768.235550][T12865] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 768.241086][T12865] ? find_held_lock+0x2b/0x80 [ 768.245741][T12865] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 768.251184][T12865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 768.257053][T12865] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 768.262836][T12865] ? do_vfs_ioctl+0x523/0x1a60 [ 768.267592][T12865] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 768.272597][T12865] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 768.279075][T12865] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 768.285550][T12865] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 768.292377][T12865] ? hook_file_ioctl_common+0x145/0x410 [ 768.297913][T12865] ? selinux_file_ioctl+0x180/0x270 [ 768.303133][T12865] ? selinux_file_ioctl+0xb4/0x270 [ 768.308229][T12865] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 768.314021][T12865] __x64_sys_ioctl+0x18e/0x210 [ 768.318779][T12865] do_syscall_64+0xcd/0x4c0 [ 768.323262][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.329130][T12865] RIP: 0033:0x7efd2778e9a9 [ 768.333519][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.353104][T12865] RSP: 002b:00007efd28582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.361494][T12865] RAX: ffffffffffffffda RBX: 00007efd279b6160 RCX: 00007efd2778e9a9 [ 768.369442][T12865] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000b [ 768.377400][T12865] RBP: 00007efd27810d69 R08: 0000000000000000 R09: 0000000000000000 [ 768.385358][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.393307][T12865] R13: 0000000000000000 R14: 00007efd279b6160 R15: 00007ffc06c21908 [ 768.401257][T12865] [ 768.404506][T12865] Kernel Offset: disabled [ 768.408824][T12865] Rebooting in 86400 seconds..