last executing test programs: 32.359367597s ago: executing program 1 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f000002000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 25.234006084s ago: executing program 1 (id=484): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) msync(&(0x7f0000bc9000/0x2000)=nil, 0x2000, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) listen(0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 18.256415021s ago: executing program 0 (id=497): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x66}, 0x28) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048885}, 0x2004c0c4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "b8155244614427c8", "6120cc39c039a8222816358a7d0637f0dd5d60d0d3ec50524456c96e4db1b2f7", "75223cec", "ae1b8a64b7c9bf3c"}, 0x38) 18.048793012s ago: executing program 1 (id=498): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(r1, 0x0, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 16.937236537s ago: executing program 0 (id=500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x10, 0x5, 0x4, 0x5, 0x7}, 0x14) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80, 0x1) poll(0x0, 0x0, 0x76) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r6, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15.951763334s ago: executing program 0 (id=501): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x7, 0x0, 0x0, 0x70402, 0xffffffffffffffff, 0xfffffeff, '\x00', 0x0, r4, 0x5, 0x2, 0x2}, 0x50) 15.412058841s ago: executing program 4 (id=502): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 15.390149866s ago: executing program 3 (id=503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f00002ba000/0x3000)=nil) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='file0\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0x12) symlink(&(0x7f0000000000), &(0x7f0000000100)='my_configfs\x00') statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, 0x200, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc_tr={0x11, {@llc={0x0, 0x0, '\f', "7260eed0b78eb121a8bf7e633f2a977cb73265eda19bd06f7e1f33c244ff487ac71012948d4e89150d2778fca3f22eebc83c08d74d03bfdd2c59f3932320be82ba"}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101005, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) 15.332790941s ago: executing program 2 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x100e, @loopback}, 0x10) 14.682730371s ago: executing program 1 (id=505): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 13.279450462s ago: executing program 2 (id=506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf250300000005002d000000000005003800000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253e21883bb202ddc9fbf4cf8fb8f80f5ae14836c5c9aeec5a0311947e4c39b9daed06a823c1444dcacd40174e60566bac015", 0xca) socket$kcm(0x2, 0x7, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) 13.253788638s ago: executing program 4 (id=507): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = open(0x0, 0x109cc2, 0x5c) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 12.224534005s ago: executing program 4 (id=508): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndctrl(0x0, 0x458, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) write$binfmt_misc(r0, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 12.13562348s ago: executing program 1 (id=509): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000040)=0x46c, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 9.357241339s ago: executing program 1 (id=510): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setopts(0x4200, r3, 0x0, 0x1) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0x4212, r3, 0x58, &(0x7f0000000080)) 9.302525421s ago: executing program 4 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 7.150205136s ago: executing program 0 (id=512): socket$kcm(0x10, 0x400000002, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmsg$inet(0xffffffffffffffff, 0x0, 0x140060c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) 6.795542571s ago: executing program 4 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xf00}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) r4 = accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x88, r2, 0x300, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5001}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x62}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5002}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000004f000100000002000000a5d7f034"], 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r4, r3, 0x5, 0x0, 0x0, 0x4b, 0x9, 0x1e8d, 0x5, 0x8, 0x0, 0x68f2ad21, 'syz1\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5006}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) 4.850147124s ago: executing program 0 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = socket$inet6(0xa, 0x3, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f000002000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00172233f60ad0b992422bc1ccddeeff13596dbe"}}]}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 4.807505222s ago: executing program 3 (id=515): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(r1, 0x0, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b17cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1c66142e7c1caceb88de7d6e8a5c08ce052bb461f060bd6327072cc7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 4.718680989s ago: executing program 2 (id=516): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x100, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x14, 0x0, r0}}], 0x1, 0x0, 0x0) 3.744711049s ago: executing program 3 (id=517): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b17cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1c66142e7c1caceb88de7d6e8a5c08ce052bb461f060bd6327072cc7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 3.719741555s ago: executing program 2 (id=518): syz_ublk_setup_io_uring(0x7878, &(0x7f0000000140)={0x0, 0x5d17, 0x0, 0x0, 0x26f}, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) syz_open_dev$vim2m(0x0, 0x47b, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 3.04089314s ago: executing program 3 (id=519): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 2.969556902s ago: executing program 2 (id=520): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x2a6}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x1000000, 0x10}}}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0x8) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x40000, 0x0, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) 2.670583766s ago: executing program 3 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(0xffffffffffffffff, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2.127016603s ago: executing program 4 (id=522): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) close(0x3) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xdb) syz_emit_ethernet(0x10ee, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.402140197s ago: executing program 2 (id=523): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x6, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e24,afid=0x0000000080000001,access=client,debug=0x000']) dup3(r1, r0, 0x0) 1.3411521s ago: executing program 3 (id=524): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000000c0)={0x8, 0xe, 0x200, 0x8, 0x400}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x80) syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) userfaultfd(0x801) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=525): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000040)=0xe4d9891e9f9983eb, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) kernel console output (not intermixed with test programs): devsim2 [ 85.211340][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.214704][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.248363][ T5612] Bluetooth: hci0: command tx timeout [ 85.306367][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.312855][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.314847][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.321397][ T5612] Bluetooth: hci4: command tx timeout [ 85.321892][ T5612] Bluetooth: hci3: command tx timeout [ 85.345867][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.372314][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.394361][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.398461][ T5612] Bluetooth: hci1: command tx timeout [ 85.398578][ T5609] Bluetooth: hci2: command tx timeout [ 85.399326][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.405695][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.433410][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.527939][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.571702][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.571888][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.574754][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.589410][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.610440][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.610575][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.643150][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.645798][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.646931][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.664032][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.692800][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.695123][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.794539][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.799303][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.806655][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.814762][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.827081][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.845563][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.858401][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.859324][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.863275][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.937695][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.964724][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.964801][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.029705][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.029853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.067655][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 86.067674][ T31] audit: type=1400 audit(1789675856.101:153): avc: denied { sys_module } for pid=5602 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.121536][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.247840][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.265723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.265825][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.269659][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.269749][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.385332][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.422713][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.503628][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.507873][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.531385][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.531477][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.544964][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.545056][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.564863][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.564991][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.613096][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.613211][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.050531][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.290928][ T5602] veth0_vlan: entered promiscuous mode [ 87.321309][ T5612] Bluetooth: hci0: command tx timeout [ 87.345140][ T5602] veth1_vlan: entered promiscuous mode [ 87.399236][ T5612] Bluetooth: hci4: command tx timeout [ 87.399320][ T5609] Bluetooth: hci3: command tx timeout [ 87.479180][ T5612] Bluetooth: hci1: command tx timeout [ 87.479741][ T5609] Bluetooth: hci2: command tx timeout [ 87.497554][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.639143][ T5602] veth0_macvtap: entered promiscuous mode [ 87.705355][ T5602] veth1_macvtap: entered promiscuous mode [ 87.867343][ T5604] veth0_vlan: entered promiscuous mode [ 87.886949][ T5604] veth1_vlan: entered promiscuous mode [ 87.903135][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.918785][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.981609][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.214658][ T5604] veth0_macvtap: entered promiscuous mode [ 88.232027][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.270608][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.270800][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.270840][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.272711][ T5604] veth1_macvtap: entered promiscuous mode [ 88.307593][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.327309][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.454299][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.465464][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.465499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.521454][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.607455][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.607480][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.642998][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.643749][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.714333][ T31] audit: type=1400 audit(1789675858.751:154): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.QFVp2W/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 88.716316][ T31] audit: type=1400 audit(1789675858.751:155): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.732461][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.732511][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.732997][ T31] audit: type=1400 audit(1789675858.751:156): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.QFVp2W/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.733047][ T31] audit: type=1400 audit(1789675858.761:157): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.767618][ T31] audit: type=1400 audit(1789675858.781:158): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.QFVp2W/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 88.767679][ T31] audit: type=1400 audit(1789675858.801:159): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.QFVp2W/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 88.767733][ T31] audit: type=1400 audit(1789675858.801:160): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.815846][ T31] audit: type=1400 audit(1789675858.861:161): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 88.831752][ T31] audit: type=1400 audit(1789675858.871:162): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="gadgetfs" ino=8283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.848207][ T5600] veth0_vlan: entered promiscuous mode [ 88.963382][ T5601] veth0_vlan: entered promiscuous mode [ 88.987761][ T5603] veth0_vlan: entered promiscuous mode [ 89.054738][ T5600] veth1_vlan: entered promiscuous mode [ 89.072698][ T5601] veth1_vlan: entered promiscuous mode [ 89.130121][ T5602] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.137294][ T5603] veth1_vlan: entered promiscuous mode [ 89.212726][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.212748][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.351641][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.351664][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.379828][ T5601] veth0_macvtap: entered promiscuous mode [ 89.385860][ T5600] veth0_macvtap: entered promiscuous mode [ 89.399451][ T5609] Bluetooth: hci0: command tx timeout [ 89.433410][ T5600] veth1_macvtap: entered promiscuous mode [ 89.445571][ T5601] veth1_macvtap: entered promiscuous mode [ 89.462547][ T5603] veth0_macvtap: entered promiscuous mode [ 89.478830][ T5612] Bluetooth: hci4: command tx timeout [ 89.478877][ T5609] Bluetooth: hci3: command tx timeout [ 89.483226][ T5603] veth1_macvtap: entered promiscuous mode [ 89.530068][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.559085][ T5612] Bluetooth: hci1: command tx timeout [ 89.559134][ T5609] Bluetooth: hci2: command tx timeout [ 89.591546][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.624473][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.645752][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.667210][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.684298][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.800759][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 89.836979][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 89.904184][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.000201][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.001355][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.362835][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.363309][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.402289][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.402739][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.402838][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.402940][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.403063][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.534843][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.650185][ T10] usb 2-1: config 0 descriptor?? [ 92.244621][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 92.244643][ T31] audit: type=1400 audit(1789675861.251:187): avc: denied { read } for pid=5804 comm="syz.0.6" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.244688][ T31] audit: type=1400 audit(1789675861.251:188): avc: denied { open } for pid=5804 comm="syz.0.6" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.292038][ T45] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.350404][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.467512][ T2234] cfg80211: failed to load regulatory.db [ 92.498783][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.498837][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549062][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 92.549177][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 92.610884][ T10] usb 2-1: USB disconnect, device number 2 [ 92.681428][ T31] audit: type=1400 audit(1789675862.721:189): avc: denied { create } for pid=5811 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.765096][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.765121][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.819085][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.819112][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.951590][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.951612][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.374267][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.374291][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.664749][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.664771][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.935645][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.935668][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.092773][ T5821] Zero length message leads to an empty skb [ 94.095284][ T31] audit: type=1400 audit(1789675864.131:190): avc: denied { create } for pid=5818 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.385574][ T31] audit: type=1400 audit(1789675864.421:191): avc: denied { read } for pid=5818 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.263846][ T31] audit: type=1400 audit(1789675866.291:192): avc: denied { create } for pid=5826 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.268825][ T31] audit: type=1400 audit(1789675866.311:193): avc: denied { setopt } for pid=5826 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.285535][ T31] audit: type=1400 audit(1789675866.321:194): avc: denied { ioctl } for pid=5829 comm="syz.2.3" path="socket:[8958]" dev="sockfs" ino=8958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.320693][ T31] audit: type=1400 audit(1789675866.361:195): avc: denied { read } for pid=5834 comm="syz.0.10" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.321086][ T31] audit: type=1400 audit(1789675866.361:196): avc: denied { open } for pid=5834 comm="syz.0.10" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.871542][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 97.871556][ T31] audit: type=1400 audit(1789675867.911:198): avc: denied { append } for pid=5840 comm="syz.4.12" name="comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.610202][ T31] audit: type=1400 audit(1789675868.651:199): avc: denied { read write } for pid=5843 comm="syz.4.14" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.610811][ T31] audit: type=1400 audit(1789675868.651:200): avc: denied { open } for pid=5843 comm="syz.4.14" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.860251][ T31] audit: type=1400 audit(1789675868.901:201): avc: denied { create } for pid=5844 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.860463][ T31] audit: type=1400 audit(1789675868.901:202): avc: denied { setopt } for pid=5844 comm="syz.2.13" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.298173][ T31] audit: type=1400 audit(1789675869.331:203): avc: denied { mount } for pid=5843 comm="syz.4.14" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.251209][ T31] audit: type=1400 audit(1789675870.291:204): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 103.744677][ T31] audit: type=1400 audit(1789675873.751:205): avc: denied { mmap_zero } for pid=5854 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 103.807165][ T31] audit: type=1400 audit(1789675873.841:206): avc: denied { create } for pid=5854 comm="syz.2.15" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.183150][ T31] audit: type=1400 audit(1789675873.881:207): avc: denied { map } for pid=5854 comm="syz.2.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.183214][ T31] audit: type=1400 audit(1789675873.881:208): avc: denied { read write } for pid=5854 comm="syz.2.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.183262][ T31] audit: type=1400 audit(1789675873.891:209): avc: denied { map } for pid=5854 comm="syz.2.15" path="socket:[7922]" dev="sockfs" ino=7922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 106.115169][ T31] audit: type=1400 audit(1789675875.361:210): avc: denied { bind } for pid=5867 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.115222][ T31] audit: type=1400 audit(1789675875.371:211): avc: denied { name_bind } for pid=5867 comm="syz.2.20" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 106.115261][ T31] audit: type=1400 audit(1789675875.371:212): avc: denied { node_bind } for pid=5867 comm="syz.2.20" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 106.115291][ T31] audit: type=1400 audit(1789675875.401:213): avc: denied { write } for pid=5867 comm="syz.2.20" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.115322][ T31] audit: type=1400 audit(1789675875.411:214): avc: denied { connect } for pid=5867 comm="syz.2.20" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.401905][ T5875] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 107.401940][ T5875] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 107.457490][ T5875] netlink: 104 bytes leftover after parsing attributes in process `syz.0.21'. [ 108.895485][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 108.895506][ T31] audit: type=1400 audit(1789675878.931:230): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 109.039884][ T31] audit: type=1400 audit(1789675879.081:231): avc: denied { ioctl } for pid=5886 comm="syz.4.18" path="socket:[9041]" dev="sockfs" ino=9041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.558318][ T31] audit: type=1400 audit(1789675882.401:232): avc: denied { create } for pid=5893 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.558398][ T31] audit: type=1400 audit(1789675882.411:233): avc: denied { ioctl } for pid=5893 comm="syz.4.27" path="socket:[9053]" dev="sockfs" ino=9053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.558439][ T31] audit: type=1400 audit(1789675882.411:234): avc: denied { setopt } for pid=5893 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.558480][ T31] audit: type=1400 audit(1789675882.411:235): avc: denied { write } for pid=5893 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.141985][ T5890] Process accounting resumed [ 113.555134][ T5909] ======================================================= [ 113.555134][ T5909] WARNING: The mand mount option has been deprecated and [ 113.555134][ T5909] and is ignored by this kernel. Remove the mand [ 113.555134][ T5909] option from the mount to silence this warning. [ 113.555134][ T5909] ======================================================= [ 114.165179][ T31] audit: type=1400 audit(1789675884.201:236): avc: denied { create } for pid=5903 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.184954][ T31] audit: type=1400 audit(1789675884.221:237): avc: denied { create } for pid=5903 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.202032][ T31] audit: type=1400 audit(1789675884.241:238): avc: denied { read } for pid=5903 comm="syz.4.29" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.204672][ T31] audit: type=1400 audit(1789675884.241:239): avc: denied { open } for pid=5903 comm="syz.4.29" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.231225][ T31] audit: type=1400 audit(1789675884.271:240): avc: denied { ioctl } for pid=5903 comm="syz.4.29" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.231380][ T5910] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 114.285587][ T31] audit: type=1400 audit(1789675884.321:241): avc: denied { append } for pid=5911 comm="syz.3.30" name="sg0" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.432270][ T31] audit: type=1400 audit(1789675884.471:242): avc: denied { open } for pid=5911 comm="syz.3.30" path="/dev/sg0" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.392531][ T3283] IPVS: starting estimator thread 0... [ 115.842675][ T31] audit: type=1400 audit(1789675885.851:243): avc: denied { create } for pid=5911 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.935668][ T5916] IPVS: using max 31 ests per chain, 74400 per kthread [ 116.320501][ T31] audit: type=1400 audit(1789675886.361:244): avc: denied { ioctl } for pid=5918 comm="syz.1.32" path="/dev/input/event2" dev="devtmpfs" ino=916 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.499121][ T31] audit: type=1400 audit(1789675886.541:245): avc: denied { name_bind } for pid=5917 comm="syz.0.31" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 120.640302][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 120.640315][ T31] audit: type=1400 audit(1789675890.681:249): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 121.258802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 122.297097][ T31] audit: type=1400 audit(1789675892.331:250): avc: denied { read } for pid=5949 comm="syz.0.36" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.297495][ T31] audit: type=1400 audit(1789675892.331:251): avc: denied { open } for pid=5949 comm="syz.0.36" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.374901][ T31] audit: type=1400 audit(1789675892.411:252): avc: denied { ioctl } for pid=5949 comm="syz.0.36" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.503181][ T31] audit: type=1400 audit(1789675892.521:253): avc: denied { mount } for pid=5948 comm="syz.1.38" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 122.560938][ T31] audit: type=1400 audit(1789675892.531:254): avc: denied { mount } for pid=5948 comm="syz.1.38" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 122.561145][ T31] audit: type=1800 audit(1789675892.551:255): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.38" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 123.087237][ T31] audit: type=1400 audit(1789675893.121:256): avc: denied { write } for pid=5952 comm="syz.2.39" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.269549][ T31] audit: type=1400 audit(1789675893.301:257): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 123.309355][ T31] audit: type=1400 audit(1789675893.351:258): avc: denied { ioctl } for pid=5952 comm="syz.2.39" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9122 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.045221][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 126.045246][ T31] audit: type=1400 audit(1789675896.081:262): avc: denied { connect } for pid=5978 comm="syz.2.44" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.094930][ T31] audit: type=1400 audit(1789675896.131:263): avc: denied { write } for pid=5978 comm="syz.2.44" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.418101][ T31] audit: type=1400 audit(1789675898.451:264): avc: denied { read } for pid=5981 comm="syz.3.40" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.706132][ T31] audit: type=1400 audit(1789675898.461:265): avc: denied { open } for pid=5981 comm="syz.3.40" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.012940][ T5990] futex_wake_op: syz.3.46 tries to shift op by -1; fix this program [ 129.020955][ T5990] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 130.743782][ T31] audit: type=1400 audit(1789675900.791:266): avc: denied { mount } for pid=5999 comm="syz.3.49" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 131.088420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 131.991313][ T31] audit: type=1400 audit(1789675901.381:267): avc: denied { bind } for pid=6001 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.035295][ T31] audit: type=1400 audit(1789675902.081:268): avc: denied { create } for pid=5999 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.060463][ T31] audit: type=1400 audit(1789675902.081:269): avc: denied { write } for pid=5999 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.238536][ T31] audit: type=1400 audit(1789675902.261:270): avc: denied { create } for pid=5999 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.986979][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.987093][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.995418][ T31] audit: type=1400 audit(1789675903.261:271): avc: denied { ioctl } for pid=6006 comm="syz.4.52" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.041884][ T31] audit: type=1400 audit(1789675904.081:272): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 134.343891][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 134.343909][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 134.788105][ T31] audit: type=1400 audit(1789675904.791:273): avc: denied { create } for pid=6021 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.788382][ T31] audit: type=1400 audit(1789675904.791:274): avc: denied { bind } for pid=6021 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.788529][ T31] audit: type=1400 audit(1789675904.801:275): avc: denied { connect } for pid=6021 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.788670][ T31] audit: type=1400 audit(1789675904.801:276): avc: denied { accept } for pid=6021 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.109603][ T6022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.142228][ T45] IPVS: starting estimator thread 0... [ 135.300270][ T6032] IPVS: using max 59 ests per chain, 141600 per kthread [ 135.327673][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.338987][ T6019] bond1: (slave bond0): making interface the new active one [ 135.357336][ T6019] bond1: (slave bond0): Enslaving as an active interface with an up link [ 137.355975][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 137.355995][ T31] audit: type=1400 audit(1789675907.381:278): avc: denied { create } for pid=6054 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.468221][ T31] audit: type=1400 audit(1789675907.741:279): avc: denied { kexec_image_load } for pid=6054 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 138.468275][ T31] audit: type=1400 audit(1789675908.141:280): avc: denied { create } for pid=6056 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.738129][ T31] audit: type=1400 audit(1789675908.771:281): avc: denied { write } for pid=6041 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.744414][ T31] audit: type=1400 audit(1789675908.781:282): avc: denied { read } for pid=6041 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.910742][ T31] audit: type=1400 audit(1789675908.951:283): avc: denied { mount } for pid=6064 comm="syz.0.63" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 138.924626][ T31] audit: type=1400 audit(1789675908.961:284): avc: denied { search } for pid=6064 comm="syz.0.63" name="/" dev="configfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.924683][ T31] audit: type=1400 audit(1789675908.961:285): avc: denied { search } for pid=6064 comm="syz.0.63" name="nvmet" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.924726][ T31] audit: type=1400 audit(1789675908.961:286): avc: denied { search } for pid=6064 comm="syz.0.63" name="subsystems" dev="configfs" ino=3098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.991223][ T31] audit: type=1400 audit(1789675909.031:287): avc: denied { listen } for pid=6052 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.035782][ T6053] netlink: 'syz.3.60': attribute type 2 has an invalid length. [ 139.114438][ T6069] jffs2: notice: (6069) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.062738][ T6084] process 'syz.4.65' launched './file0' with NULL argv: empty string added [ 141.328022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.738297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 142.414905][ T6068] nvme nvme0: failed to connect socket: -512 [ 143.874113][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 143.874135][ T31] audit: type=1400 audit(1789675913.911:323): avc: denied { write } for pid=6085 comm="syz.2.67" name="ports" dev="configfs" ino=3099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.965537][ T31] audit: type=1400 audit(1789675913.911:324): avc: denied { remove_name } for pid=6085 comm="syz.2.67" name="1" dev="configfs" ino=9467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.965709][ T31] audit: type=1400 audit(1789675913.971:325): avc: denied { rmdir } for pid=6085 comm="syz.2.67" name="1" dev="configfs" ino=9467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.028033][ T31] audit: type=1400 audit(1789675914.061:326): avc: denied { map_create } for pid=6093 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.028088][ T31] audit: type=1400 audit(1789675914.061:327): avc: denied { map_read map_write } for pid=6093 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.462807][ T31] audit: type=1400 audit(1789675914.271:328): avc: denied { prog_load } for pid=6093 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.463210][ T31] audit: type=1400 audit(1789675914.361:329): avc: denied { prog_run } for pid=6093 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 145.177673][ T31] audit: type=1400 audit(1789675915.221:330): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 145.281449][ T6099] futex_wake_op: syz.0.72 tries to shift op by 144; fix this program [ 145.300648][ T31] audit: type=1400 audit(1789675915.331:331): avc: denied { read write } for pid=6097 comm="syz.4.71" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.300720][ T31] audit: type=1400 audit(1789675915.331:332): avc: denied { open } for pid=6097 comm="syz.4.71" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.459032][ T6100] loop8: detected capacity change from 0 to 16384 [ 147.000842][ T6103] Dev loop8: unable to read RDB block 8 [ 147.000982][ T6103] loop8: unable to read partition table [ 147.001181][ T6103] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 147.416166][ T6112] xt_cgroup: invalid path, errno=-2 [ 147.635790][ T6112] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 149.640560][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 149.640622][ T31] audit: type=1400 audit(1789675919.681:344): avc: denied { read write } for pid=6124 comm="syz.4.78" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.727290][ T31] audit: type=1400 audit(1789675919.761:345): avc: denied { open } for pid=6124 comm="syz.4.78" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.947499][ T31] audit: type=1400 audit(1789675919.981:346): avc: denied { ioctl } for pid=6124 comm="syz.4.78" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 151.846391][ T31] audit: type=1400 audit(1789675921.801:347): avc: denied { write } for pid=6132 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 152.342273][ T31] audit: type=1400 audit(1789675922.381:348): avc: denied { mount } for pid=6134 comm="syz.2.79" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 152.548966][ T31] audit: type=1400 audit(1789675922.591:349): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 155.604060][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 158.141229][ T31] audit: type=1326 audit(1789675928.121:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.141424][ T31] audit: type=1326 audit(1789675928.121:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.141577][ T31] audit: type=1326 audit(1789675928.121:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.141716][ T31] audit: type=1326 audit(1789675928.121:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.141857][ T31] audit: type=1326 audit(1789675928.121:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.141996][ T31] audit: type=1326 audit(1789675928.131:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.142144][ T31] audit: type=1326 audit(1789675928.131:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.142283][ T31] audit: type=1326 audit(1789675928.131:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.142417][ T31] audit: type=1326 audit(1789675928.131:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 158.142555][ T31] audit: type=1326 audit(1789675928.131:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.1.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7d59e159 code=0x7ffc0000 [ 159.138934][ T6158] nvme nvme0: failed to connect socket: -111 [ 159.442005][ T60] IPVS: starting estimator thread 0... [ 159.538120][ T6180] IPVS: using max 32 ests per chain, 76800 per kthread [ 163.693957][ T31] kauditd_printk_skb: 291 callbacks suppressed [ 163.693998][ T31] audit: type=1400 audit(1789675933.681:651): avc: denied { write } for pid=6196 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.159280][ T31] audit: type=1400 audit(1789675934.201:652): avc: denied { write } for pid=6193 comm="syz.3.92" name="protocols" dev="proc" ino=4026533318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 164.182484][ T6199] xt_policy: too many policy elements [ 164.364203][ T6212] FAULT_INJECTION: forcing a failure. [ 164.364203][ T6212] name failslab, interval 1, probability 0, space 0, times 1 [ 164.364359][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT(full) [ 164.364387][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 164.364407][ T6212] Call Trace: [ 164.364415][ T6212] [ 164.364425][ T6212] dump_stack_lvl+0x100/0x190 [ 164.364474][ T6212] should_fail_ex.cold+0x5/0xa [ 164.364506][ T6212] should_failslab+0xc2/0x120 [ 164.364535][ T6212] __kmalloc_cache_noprof+0x91/0x6d0 [ 164.364573][ T6212] ? ceph_get_tree+0x188/0x1fd0 [ 164.364611][ T6212] ceph_get_tree+0x188/0x1fd0 [ 164.364643][ T6212] ? bpf_lsm_capable+0x9/0x10 [ 164.364676][ T6212] ? security_capable+0x80/0x260 [ 164.364713][ T6212] vfs_get_tree+0x92/0x320 [ 164.364747][ T6212] vfs_cmd_create+0xd7/0x2a0 [ 164.364771][ T6212] __do_sys_fsconfig+0x55a/0xcb0 [ 164.364796][ T6212] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 164.364835][ T6212] do_syscall_64+0x123/0x790 [ 164.364870][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.364893][ T6212] RIP: 0033:0x7fcb7d59e159 [ 164.364916][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.364938][ T6212] RSP: 002b:00007fcb7e47a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 164.364968][ T6212] RAX: ffffffffffffffda RBX: 00007fcb7d826090 RCX: 00007fcb7d59e159 [ 164.364984][ T6212] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 164.364998][ T6212] RBP: 00007fcb7d63506b R08: 0000000000000000 R09: 0000000000000000 [ 164.365014][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.365033][ T6212] R13: 00007fcb7d826128 R14: 00007fcb7d826090 R15: 00007fffc0eda108 [ 164.365065][ T6212] [ 165.389916][ T31] audit: type=1400 audit(1789675935.431:653): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 166.556891][ T31] audit: type=1400 audit(1789675935.991:654): avc: denied { read write } for pid=6214 comm="syz.3.97" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 166.556945][ T31] audit: type=1400 audit(1789675935.991:655): avc: denied { open } for pid=6214 comm="syz.3.97" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 166.819148][ T31] audit: type=1400 audit(1789675936.861:656): avc: denied { ioctl } for pid=6218 comm="syz.1.98" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.189399][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.530770][ T31] audit: type=1400 audit(1789675937.561:657): avc: denied { mounton } for pid=6222 comm="syz.4.100" path="/20/file0" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.043178][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.046645][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.046690][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.046727][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.071286][ T6219] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.129879][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.897985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 170.276248][ T25] usb 2-1: USB disconnect, device number 3 [ 170.596870][ T6242] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET) [ 171.794719][ T31] audit: type=1400 audit(1789675941.831:658): avc: denied { create } for pid=6248 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.618399][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.478637][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 176.198654][ T31] audit: type=1400 audit(1789675946.241:659): avc: denied { ioctl } for pid=6276 comm="syz.4.103" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.201123][ T31] audit: type=1400 audit(1789675946.241:660): avc: denied { set_context_mgr } for pid=6276 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.277702][ T31] audit: type=1400 audit(1789675946.311:661): avc: denied { write } for pid=6276 comm="syz.4.103" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.304418][ T31] audit: type=1400 audit(1789675946.321:662): avc: denied { map } for pid=6276 comm="syz.4.103" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.307598][ T31] audit: type=1400 audit(1789675946.341:663): avc: denied { call } for pid=6276 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.422819][ T31] audit: type=1400 audit(1789675946.451:664): avc: denied { ioctl } for pid=6278 comm="syz.3.113" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.039024][ T31] audit: type=1400 audit(1789675947.071:665): avc: denied { read } for pid=6285 comm="syz.2.115" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 177.040939][ T31] audit: type=1400 audit(1789675947.081:666): avc: denied { open } for pid=6285 comm="syz.2.115" path="/23/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 177.049864][ T31] audit: type=1400 audit(1789675947.091:667): avc: denied { ioctl } for pid=6285 comm="syz.2.115" path="/23/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 178.506106][ T6295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.607770][ T6277] syz.4.103 (6277): drop_caches: 2 [ 178.939136][ T31] audit: type=1400 audit(1789675948.971:668): avc: denied { load_policy } for pid=6298 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 179.027720][ T6301] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 179.028332][ T6301] SELinux: failed to load policy [ 181.211288][ T6312] netlink: 48 bytes leftover after parsing attributes in process `syz.1.120'. [ 183.108181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 183.344548][ T31] audit: type=1400 audit(1789675952.721:669): avc: denied { create } for pid=6316 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.344610][ T31] audit: type=1400 audit(1789675952.731:670): avc: denied { connect } for pid=6316 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.131757][ T31] audit: type=1400 audit(1789675954.121:671): avc: denied { ioctl } for pid=6319 comm="syz.2.123" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 185.733200][ T31] audit: type=1400 audit(1789675955.771:672): avc: denied { bind } for pid=6333 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.735803][ T31] audit: type=1400 audit(1789675955.771:673): avc: denied { write } for pid=6333 comm="syz.1.127" path="socket:[10997]" dev="sockfs" ino=10997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.007341][ T31] audit: type=1400 audit(1789675956.031:674): avc: denied { create } for pid=6335 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 186.045341][ T31] audit: type=1400 audit(1789675956.051:675): avc: denied { write } for pid=6335 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 186.471054][ T31] audit: type=1400 audit(1789675956.511:676): avc: denied { ioctl } for pid=6335 comm="syz.3.126" path="socket:[9790]" dev="sockfs" ino=9790 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.756698][ T6347] kvm [6346]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x8c30 [ 187.756796][ T6347] kvm [6346]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x7400 [ 187.773885][ T6347] kvm [6346]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xc700 [ 187.776116][ T6347] kvm [6346]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xbf02 [ 188.955248][ T31] audit: type=1400 audit(1789675958.991:677): avc: denied { bind } for pid=6362 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.016779][ T31] audit: type=1400 audit(1789675959.051:678): avc: denied { getopt } for pid=6362 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.022284][ T6363] sctp: [Deprecated]: syz.4.125 (pid 6363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.022284][ T6363] Use struct sctp_sack_info instead [ 189.592867][ T31] audit: type=1400 audit(1789675959.641:679): avc: denied { write } for pid=6362 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.987759][ T6365] SELinux: failed to load policy [ 190.267769][ T6379] Need at least one configuration in g1. [ 190.269887][ T6379] udc dummy_udc.0: failed to start g1: -22 [ 190.269969][ T6379] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 190.281620][ T6379] UDC core: g1: couldn't find an available UDC or it's busy [ 190.348131][ T31] audit: type=1400 audit(1789675960.271:680): avc: denied { write } for pid=6375 comm="syz.1.135" name="usb_gadget" dev="configfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.528081][ T6394] : renamed from bond_slave_0 (while UP) [ 192.123781][ T31] audit: type=1400 audit(1789675961.811:681): avc: denied { unlink } for pid=6390 comm="syz.2.140" name="#1" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.123836][ T31] audit: type=1800 audit(1789675961.921:682): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.140" name="file0" dev="overlay" ino=191 res=0 errno=0 [ 192.513489][ T5712] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 192.739888][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 192.768531][ T5712] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 192.845827][ T5712] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 192.845855][ T5712] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 192.845889][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.209575][ T31] audit: type=1400 audit(1789675964.251:683): avc: denied { create } for pid=6412 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 194.843094][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.843157][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.010706][ T31] audit: type=1400 audit(1789675966.051:684): avc: denied { create } for pid=6423 comm="syz.0.146" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.042865][ T6424] tipc: Started in network mode [ 196.042897][ T6424] tipc: Node identity 7f000001, cluster identity 4711 [ 196.378345][ T31] audit: type=1400 audit(1789675966.091:685): avc: denied { block_suspend } for pid=6412 comm="syz.4.144" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.842736][ T31] audit: type=1400 audit(1789675966.881:686): avc: denied { ioctl } for pid=6412 comm="syz.4.144" path="socket:[11301]" dev="sockfs" ino=11301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.845015][ T6424] tipc: Enabled bearer , priority 10 [ 196.856262][ T6434] tipc: Disabling bearer [ 196.946295][ T6435] NILFS (nullb0): couldn't find nilfs on the device [ 197.418768][ T31] audit: type=1400 audit(1789675967.451:687): avc: denied { create } for pid=6423 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.510872][ T10] usb 4-1: USB disconnect, device number 2 [ 197.527418][ T31] audit: type=1400 audit(1789675967.561:688): avc: denied { mounton } for pid=6423 comm="syz.0.146" path="/30/file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 197.593928][ T31] audit: type=1400 audit(1789675967.621:689): avc: denied { connect } for pid=6423 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.625688][ T6434] Invalid source name [ 197.625716][ T6434] UBIFS error (pid: 6434): cannot open "./file0", error -22 [ 197.864093][ T6440] xt_policy: too many policy elements [ 199.460926][ T6453] : renamed from bond_slave_0 (while UP) [ 199.583497][ T31] audit: type=1400 audit(1789675969.611:690): avc: denied { ioctl } for pid=6445 comm="syz.0.150" path="socket:[11361]" dev="sockfs" ino=11361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.653360][ T31] audit: type=1400 audit(1789675969.691:691): avc: denied { create } for pid=6445 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.866252][ T31] audit: type=1400 audit(1789675969.901:692): avc: denied { wake_alarm } for pid=6450 comm="syz.2.153" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.094022][ T6469] netlink: Conntrack attr has 8 unknown bytes [ 201.094331][ T6469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.289450][ T31] audit: type=1400 audit(1789675970.333:693): avc: denied { connect } for pid=6476 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.372532][ T31] audit: type=1400 audit(1789675970.413:694): avc: denied { read } for pid=6476 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.534767][ T6477] input: syz0 as /devices/virtual/input/input5 [ 203.818335][ T6487] netlink: 'syz.3.151': attribute type 29 has an invalid length. [ 205.155217][ T31] audit: type=1400 audit(1789675971.553:695): avc: denied { bind } for pid=6491 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.303578][ T6486] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 205.306687][ T6497] tmpfs: Bad value for 'mpol' [ 205.630409][ T6501] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 207.189600][ T5619] Bluetooth: hci4: command 0x0406 tx timeout [ 207.189706][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 207.189733][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 207.189759][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 207.189795][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 207.623352][ T6509] xt_policy: too many policy elements [ 207.735841][ T6506] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 207.995295][ T6514] xt_policy: too many policy elements [ 208.217653][ T31] audit: type=1400 audit(1789675975.253:696): avc: denied { read write } for pid=6517 comm="syz.1.169" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 208.217714][ T31] audit: type=1400 audit(1789675975.253:697): avc: denied { open } for pid=6517 comm="syz.1.169" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 208.708695][ T6525] 0x000000000000-0x000000020000 : "" [ 209.220132][ T6525] ftl_cs: FTL header not found. [ 211.610842][ T6536] xt_policy: too many policy elements [ 211.784795][ T6547] : renamed from bond_slave_0 (while UP) [ 211.966037][ T6550] syzkaller0: entered promiscuous mode [ 211.966055][ T6550] syzkaller0: entered allmulticast mode [ 212.042183][ T6550] tipc: Started in network mode [ 212.042216][ T6550] tipc: Node identity fae94e9d95c1, cluster identity 4711 [ 212.042516][ T6550] tipc: Enabled bearer , priority 0 [ 212.173733][ T6550] tipc: Resetting bearer [ 212.242070][ T6546] tipc: Resetting bearer [ 212.442162][ T6546] tipc: Disabling bearer [ 213.046681][ T31] audit: type=1400 audit(1789675979.603:698): avc: denied { cmd } for pid=6558 comm="syz.1.178" path="socket:[12507]" dev="sockfs" ino=12507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 215.056892][ T31] audit: type=1400 audit(1789675981.253:699): avc: denied { write } for pid=6564 comm="syz.3.179" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 215.056951][ T31] audit: type=1400 audit(1789675981.263:700): avc: denied { map } for pid=6564 comm="syz.3.179" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 216.241674][ T31] audit: type=1400 audit(1789675982.573:701): avc: denied { write } for pid=6574 comm="syz.0.182" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 216.449661][ T6580] overlayfs: failed to resolve './file2': -2 [ 216.818198][ T5712] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 217.065365][ T5712] usb 5-1: Using ep0 maxpacket: 16 [ 217.089722][ T5712] usb 5-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 217.135820][ T5712] usb 5-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.135896][ T5712] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 217.325822][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.337611][ T5712] usb 5-1: Product: syz [ 217.338323][ T5712] usb 5-1: Manufacturer: syz [ 217.344444][ T5712] usb 5-1: SerialNumber: syz [ 218.312288][ T6580] ceph: No mds server is up or the cluster is laggy [ 218.670591][ T5608] libceph: connect (1)[c::]:6789 error -101 [ 218.762710][ T5608] libceph: mon0 (1)[c::]:6789 connect error [ 220.078598][ T6591] netlink: 48 bytes leftover after parsing attributes in process `syz.2.186'. [ 220.687976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 220.808237][ T5712] usb 5-1: USB disconnect, device number 2 [ 220.811485][ T6586] xt_policy: too many policy elements [ 220.852957][ T31] audit: type=1400 audit(1789675987.893:702): avc: denied { read write } for pid=6585 comm="syz.1.187" name="video6" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 220.853262][ T31] audit: type=1400 audit(1789675987.893:703): avc: denied { open } for pid=6585 comm="syz.1.187" path="/dev/video6" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 221.502245][ T31] audit: type=1400 audit(1789675988.543:704): avc: denied { ioctl } for pid=6604 comm="syz.2.190" path="/dev/video8" dev="devtmpfs" ino=947 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 221.563133][ T31] audit: type=1400 audit(1789675988.603:705): avc: denied { write } for pid=6606 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 222.168288][ T6610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.183'. [ 225.808449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 226.728600][ T31] audit: type=1400 audit(1789675993.773:706): avc: denied { bind } for pid=6629 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.574241][ T6642] ubi0: attaching mtd0 [ 229.600245][ T6642] ubi0: scanning is finished [ 229.600701][ T6642] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 230.900668][ T6642] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 231.542256][ T6646] ubi0: attaching mtd0 [ 231.552931][ T6646] ubi0: scanning is finished [ 231.553123][ T6646] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 232.355028][ T31] audit: type=1400 audit(1789675999.393:707): avc: denied { read } for pid=6648 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 232.363203][ T6646] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 232.388457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 233.430532][ T6655] xt_policy: too many policy elements [ 236.047972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 236.104418][ T31] audit: type=1400 audit(1789676002.343:708): avc: denied { audit_write } for pid=6667 comm="syz.0.207" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 236.369966][ T6669] xt_policy: too many policy elements [ 237.894338][ T6685] kvm [6684]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x3000 [ 237.899945][ T6685] kvm [6684]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x3000 [ 238.130330][ T31] audit: type=1400 audit(1789676005.173:709): avc: denied { getopt } for pid=6695 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.565433][ T6720] jffs2: notice: (6720) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 244.882311][ T31] audit: type=1400 audit(1789676011.523:710): avc: denied { mount } for pid=6728 comm="syz.2.219" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 244.884225][ T31] audit: type=1400 audit(1789676011.923:711): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 245.120013][ T6727] kvm [6725]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x3000 [ 245.121329][ T6727] kvm [6725]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x3000 [ 245.358222][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 246.659761][ T10] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 246.660846][ T10] usb 5-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 246.662219][ T10] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 246.662246][ T10] usb 5-1: Manufacturer: syz [ 246.662263][ T10] usb 5-1: SerialNumber: syz [ 246.792302][ T31] audit: type=1400 audit(1789676013.833:712): avc: denied { write } for pid=6742 comm="syz.0.224" name="ports" dev="configfs" ino=3099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.825100][ T31] audit: type=1400 audit(1789676013.863:713): avc: denied { write } for pid=6742 comm="syz.0.224" name="subsystems" dev="configfs" ino=11925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.825479][ T31] audit: type=1400 audit(1789676013.863:714): avc: denied { write } for pid=6742 comm="syz.0.224" name="subsystems" dev="configfs" ino=11925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.826001][ T6743] nvmet_tcp: malformed ip/port passed: :4420 [ 247.004125][ T10] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 247.019277][ T10] usb 5-1: USB disconnect, device number 3 [ 247.029451][ T6744] nvme nvme0: failed to connect socket: -111 [ 247.163762][ T31] audit: type=1400 audit(1789676014.203:715): avc: denied { unmount } for pid=6746 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 249.193129][ T31] audit: type=1400 audit(1789676016.233:716): avc: denied { mount } for pid=6753 comm="syz.3.226" name="/" dev="ramfs" ino=11950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 249.351585][ T31] audit: type=1400 audit(1789676016.393:717): avc: denied { read write } for pid=6759 comm="syz.0.227" name="mouse0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 249.351899][ T31] audit: type=1400 audit(1789676016.393:718): avc: denied { open } for pid=6759 comm="syz.0.227" path="/dev/input/mouse0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 249.427445][ T31] audit: type=1400 audit(1789676016.463:719): avc: denied { map } for pid=6759 comm="syz.0.227" path="pipe:[13000]" dev="pipefs" ino=13000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 251.879405][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 251.879426][ T31] audit: type=1400 audit(1789676018.833:724): avc: denied { bind } for pid=6771 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 252.668118][ T6796] zero sized request [ 253.082260][ T31] audit: type=1800 audit(1789676019.593:725): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.233" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 253.084234][ T31] audit: type=1400 audit(1789676019.703:726): avc: denied { read write } for pid=6790 comm="syz.0.234" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 253.084405][ T31] audit: type=1400 audit(1789676019.703:727): avc: denied { open } for pid=6790 comm="syz.0.234" path="/50/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 253.084540][ T31] audit: type=1400 audit(1789676019.703:728): avc: denied { ioctl } for pid=6790 comm="syz.0.234" path="/50/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 253.467299][ T6787] xt_policy: too many policy elements [ 253.761604][ T6805] netlink: 'syz.4.235': attribute type 5 has an invalid length. [ 253.767663][ T31] audit: type=1400 audit(1789676020.803:729): avc: denied { sqpoll } for pid=6798 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 254.346444][ T6808] xt_policy: too many policy elements [ 254.784832][ T31] audit: type=1400 audit(1789676021.823:730): avc: denied { mount } for pid=6817 comm="syz.1.239" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 255.719969][ T31] audit: type=1400 audit(1789676022.763:731): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 256.969578][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.969637][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.531732][ T6852] Need at least one configuration in g1. [ 259.532316][ T6852] udc dummy_udc.0: failed to start g1: -22 [ 259.532346][ T6852] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 259.535499][ T6852] UDC core: g1: couldn't find an available UDC or it's busy [ 259.557290][ T31] audit: type=1400 audit(1789676026.313:732): avc: denied { name_bind } for pid=6841 comm="syz.3.244" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 259.557636][ T31] audit: type=1400 audit(1789676026.313:733): avc: denied { node_bind } for pid=6841 comm="syz.3.244" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 260.089130][ T5610] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 260.288737][ T5610] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 260.293920][ T5610] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.293954][ T5610] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.294367][ T5610] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.294772][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.535254][ T5610] usb 5-1: interface 2 not found [ 262.410795][ T31] audit: type=1400 audit(1789676029.423:734): avc: denied { getopt } for pid=6859 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.071212][ T5711] usb 5-1: USB disconnect, device number 4 [ 267.566890][ T31] audit: type=1400 audit(1789676034.603:735): avc: denied { write } for pid=6872 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.595617][ T6873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.254'. [ 267.807708][ T6877] xt_policy: too many policy elements [ 268.807643][ T6885] xt_policy: too many policy elements [ 269.656876][ T6902] 9pnet_fd: p9_fd_create_tcp (6902): problem connecting socket to 127.0.0.1 [ 269.669689][ T31] audit: type=1400 audit(1789676036.693:736): avc: denied { mounton } for pid=6895 comm="syz.1.260" path="/56/file0" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 269.850797][ T6901] Need at least one configuration in g1. [ 269.850938][ T6901] udc dummy_udc.0: failed to start g1: -22 [ 269.850970][ T6901] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 269.851733][ T6901] UDC core: g1: couldn't find an available UDC or it's busy [ 270.468174][ T31] audit: type=1800 audit(1789676037.483:737): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.261" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 271.031669][ T6910] xt_policy: too many policy elements [ 273.462972][ T31] audit: type=1400 audit(1789676040.463:738): avc: denied { accept } for pid=6937 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 273.552030][ T6940] jffs2: notice: (6940) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 273.823891][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 275.071122][ T31] audit: type=1400 audit(1789676042.113:739): avc: denied { create } for pid=6949 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 278.247352][ T6973] batman_adv: batadv0: Adding interface: syzkaller0 [ 278.247370][ T6973] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.247413][ T6973] batman_adv: batadv0: Interface activated: syzkaller0 [ 279.406395][ T31] audit: type=1400 audit(1789676046.443:740): avc: denied { read } for pid=6972 comm="syz.2.278" path="socket:[15006]" dev="sockfs" ino=15006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.667684][ T6972] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 280.234961][ T6972] batman_adv: batadv0: Removing interface: syzkaller0 [ 280.328014][ T5803] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 280.479734][ T5803] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 280.481274][ T5803] usb 2-1: config 255 has an invalid interface number: 235 but max is 2 [ 280.481303][ T5803] usb 2-1: config 255 has an invalid interface number: 97 but max is 2 [ 280.481325][ T5803] usb 2-1: config 255 has an invalid interface number: 227 but max is 2 [ 280.481348][ T5803] usb 2-1: config 255 has no interface number 0 [ 280.481367][ T5803] usb 2-1: config 255 has no interface number 1 [ 280.481386][ T5803] usb 2-1: config 255 has no interface number 2 [ 280.481433][ T5803] usb 2-1: config 255 interface 235 has no altsetting 0 [ 280.481454][ T5803] usb 2-1: config 255 interface 97 has no altsetting 0 [ 280.481474][ T5803] usb 2-1: config 255 interface 227 has no altsetting 0 [ 280.483503][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.483536][ T5803] usb 2-1: Product: syz [ 280.483571][ T5803] usb 2-1: Manufacturer: syz [ 280.483587][ T5803] usb 2-1: SerialNumber: syz [ 280.892899][ T6988] xt_policy: too many policy elements [ 281.735758][ T31] audit: type=1400 audit(1789676048.313:741): avc: denied { read } for pid=6992 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.930270][ T6983] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 281.946296][ T31] audit: type=1400 audit(1789676048.983:742): avc: denied { setopt } for pid=6982 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 281.975999][ T31] audit: type=1400 audit(1789676049.013:743): avc: denied { bind } for pid=6982 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.066392][ T31] audit: type=1400 audit(1789676049.103:744): avc: denied { open } for pid=6982 comm="syz.1.273" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 282.579317][ T5803] rndis_host 2-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 282.622455][ T5803] usb 2-1: USB disconnect, device number 4 [ 282.938051][ T31] audit: type=1400 audit(1789676049.913:745): avc: denied { write } for pid=7007 comm="syz.0.285" name="configs" dev="configfs" ino=9837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.938250][ T31] audit: type=1400 audit(1789676049.923:746): avc: denied { write } for pid=7007 comm="syz.0.285" name="functions" dev="configfs" ino=9836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.938309][ T31] audit: type=1400 audit(1789676049.923:747): avc: denied { write } for pid=7007 comm="syz.0.285" name="c.1" dev="configfs" ino=16293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.938454][ T31] audit: type=1400 audit(1789676049.933:748): avc: denied { write } for pid=7007 comm="syz.0.285" name="c.1" dev="configfs" ino=16293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 283.740024][ T31] audit: type=1400 audit(1789676050.783:749): avc: denied { append } for pid=7036 comm="syz.2.286" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.089938][ T7052] syz.4.291: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 285.090042][ T7052] CPU: 1 UID: 0 PID: 7052 Comm: syz.4.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.090060][ T7052] Tainted: [L]=SOFTLOCKUP [ 285.090065][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 285.090073][ T7052] Call Trace: [ 285.090078][ T7052] [ 285.090083][ T7052] dump_stack_lvl+0x100/0x190 [ 285.090106][ T7052] warn_alloc.cold+0x9e/0xb2 [ 285.090120][ T7052] ? __pfx_warn_alloc+0x10/0x10 [ 285.090138][ T7052] ? __kasan_kmalloc+0xaa/0xb0 [ 285.090154][ T7052] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 285.090173][ T7052] ? xskq_create+0x52/0x290 [ 285.090187][ T7052] ? do_sock_setsockopt+0xf3/0x1d0 [ 285.090204][ T7052] ? do_syscall_64+0x123/0x790 [ 285.090223][ T7052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.090243][ T7052] ? xsk_setsockopt+0x743/0xab0 [ 285.090256][ T7052] __vmalloc_node_range_noprof+0x123b/0x1420 [ 285.090278][ T7052] ? xsk_setsockopt+0x743/0xab0 [ 285.090294][ T7052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.090309][ T7052] ? kasan_save_track+0x14/0x30 [ 285.090322][ T7052] ? __kasan_kmalloc+0xaa/0xb0 [ 285.090420][ T7052] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 285.090524][ T7052] ? xskq_create+0x52/0x290 [ 285.090541][ T7052] ? xsk_setsockopt+0x743/0xab0 [ 285.090582][ T7052] xskq_create+0x18f/0x290 [ 285.090600][ T7052] ? xsk_setsockopt+0x743/0xab0 [ 285.090615][ T7052] xsk_setsockopt+0x743/0xab0 [ 285.090630][ T7052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.090644][ T7052] ? find_held_lock+0x2b/0x80 [ 285.090667][ T7052] ? __fget_files+0x215/0x3d0 [ 285.090685][ T7052] ? selinux_socket_setsockopt+0x6a/0x80 [ 285.090699][ T7052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.090714][ T7052] do_sock_setsockopt+0xf3/0x1d0 [ 285.090732][ T7052] __sys_setsockopt+0x195/0x220 [ 285.090750][ T7052] __x64_sys_setsockopt+0xbd/0x160 [ 285.090764][ T7052] ? do_syscall_64+0xae/0x790 [ 285.090780][ T7052] ? lockdep_hardirqs_on+0x7d/0x110 [ 285.090796][ T7052] do_syscall_64+0x123/0x790 [ 285.090813][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.090825][ T7052] RIP: 0033:0x7f996979e159 [ 285.090836][ T7052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.090851][ T7052] RSP: 002b:00007f996a60c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.090863][ T7052] RAX: ffffffffffffffda RBX: 00007f9969a25fa0 RCX: 00007f996979e159 [ 285.090872][ T7052] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 285.090879][ T7052] RBP: 00007f996983506b R08: 0000000000000004 R09: 0000000000000000 [ 285.090887][ T7052] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.090895][ T7052] R13: 00007f9969a26038 R14: 00007f9969a25fa0 R15: 00007ffda0512c28 [ 285.090912][ T7052] [ 285.311834][ T7052] Mem-Info: [ 285.311852][ T7052] active_anon:25478 inactive_anon:3 isolated_anon:0 [ 285.311852][ T7052] active_file:145 inactive_file:62040 isolated_file:0 [ 285.311852][ T7052] unevictable:0 dirty:688 writeback:0 [ 285.311852][ T7052] slab_reclaimable:12715 slab_unreclaimable:96187 [ 285.311852][ T7052] mapped:33489 shmem:18972 pagetables:1245 [ 285.311852][ T7052] sec_pagetables:0 bounce:0 [ 285.311852][ T7052] kernel_misc_reclaimable:0 [ 285.311852][ T7052] free:1280633 free_pcp:12539 free_cma:0 [ 285.311914][ T7052] Node 0 active_anon:101912kB inactive_anon:12kB active_file:580kB inactive_file:247956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133956kB dirty:2744kB writeback:0kB shmem:75888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12692kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 285.311998][ T7052] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 285.312054][ T7052] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.312118][ T7052] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 285.312162][ T7052] Node 0 DMA32 free:1176760kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:101912kB inactive_anon:12kB active_file:580kB inactive_file:247956kB unevictable:0kB writepending:2744kB zspages:0kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:50156kB local_pcp:43368kB free_cma:0kB [ 285.312230][ T7052] lowmem_reserve[]: 0 0 0 0 0 [ 285.312267][ T7052] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.312328][ T7052] lowmem_reserve[]: 0 0 0 0 0 [ 285.312363][ T7052] Node 1 Normal free:3930412kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.312422][ T7052] lowmem_reserve[]: 0 0 0 0 0 [ 285.312456][ T7052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 285.312632][ T7052] Node 0 DMA32: 7*4kB (ME) 589*8kB (UM) 202*16kB (UE) 167*32kB (U) 60*64kB (UME) 319*128kB (UM) 214*256kB (UME) 100*512kB (M) 33*1024kB (UM) 6*2048kB (UM) 236*4096kB (M) = 1176708kB [ 285.312801][ T7052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.312905][ T7052] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 12*16kB (UM) 4*32kB (UM) 7*64kB (UM) 8*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3930412kB [ 285.313080][ T7052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.313097][ T7052] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.313115][ T7052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.313132][ T7052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.313155][ T7052] 81153 total pagecache pages [ 285.313163][ T7052] 0 pages in swap cache [ 285.313170][ T7052] Free swap = 124996kB [ 285.313178][ T7052] Total swap = 124996kB [ 285.313187][ T7052] 2097051 pages RAM [ 285.313194][ T7052] 0 pages HighMem/MovableOnly [ 285.313201][ T7052] 432785 pages reserved [ 285.313208][ T7052] 0 pages cma reserved [ 285.927575][ T7050] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 286.157169][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 286.157231][ T7059] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 286.179949][ T7058] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 286.315271][ T7058] xt_time: unknown flags 0xc [ 286.410993][ T31] audit: type=1400 audit(1789676053.453:750): avc: denied { accept } for pid=7056 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.340303][ T31] audit: type=1400 audit(1789676054.383:751): avc: denied { bind } for pid=7062 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 287.352126][ T31] audit: type=1400 audit(1789676054.393:752): avc: denied { connect } for pid=7062 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.664522][ T7071] loop0: detected capacity change from 0 to 32768 [ 288.699314][ T7071] loop1: detected capacity change from 0 to 65536 [ 288.729833][ T31] audit: type=1400 audit(1789676055.773:753): avc: denied { write } for pid=7070 comm="syz.1.296" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 288.731575][ T7071] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 288.795300][ T7077] SELinux: Context : is not valid (left unmapped). [ 288.795701][ T31] audit: type=1400 audit(1789676055.833:754): avc: denied { relabelto } for pid=7073 comm="syz.3.298" name="rdma.current" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 288.795933][ T31] audit: type=1400 audit(1789676055.833:755): avc: denied { associate } for pid=7073 comm="syz.3.298" name="rdma.current" dev="tmpfs" ino=296 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 288.873869][ T7081] device-mapper: ioctl: The device has no table. [ 289.024565][ T7074] xt_policy: too many policy elements [ 289.238180][ T5612] Bluetooth: hci4: unexpected event for opcode 0x203d [ 289.770727][ T31] audit: type=1400 audit(1789676056.433:756): avc: denied { create } for pid=7086 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.770809][ T31] audit: type=1400 audit(1789676056.443:757): avc: denied { connect } for pid=7086 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.770858][ T31] audit: type=1400 audit(1789676056.443:758): avc: denied { write } for pid=7086 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.795966][ T5612] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 289.795995][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.796027][ T5612] Tainted: [L]=SOFTLOCKUP [ 289.796036][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 289.796072][ T5612] Workqueue: hci4 hci_rx_work [ 289.796103][ T5612] Call Trace: [ 289.796114][ T5612] [ 289.796123][ T5612] dump_stack_lvl+0x100/0x190 [ 289.796164][ T5612] sysfs_warn_dup.cold+0x1c/0x28 [ 289.796201][ T5612] sysfs_create_dir_ns+0x24b/0x2b0 [ 289.796231][ T5612] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 289.796259][ T5612] ? find_held_lock+0x2b/0x80 [ 289.796298][ T5612] ? kobject_add_internal+0x25f/0x930 [ 289.796322][ T5612] ? kobject_add_internal+0x25f/0x930 [ 289.796349][ T5612] ? do_raw_spin_unlock+0x145/0x1e0 [ 289.796384][ T5612] kobject_add_internal+0x2c8/0x930 [ 289.796415][ T5612] kobject_add+0x16a/0x1e0 [ 289.796437][ T5612] ? __pfx_kobject_add+0x10/0x10 [ 289.796459][ T5612] ? class_to_subsys+0x10f/0x150 [ 289.796501][ T5612] ? kobject_put+0xb9/0x640 [ 289.796520][ T5612] ? _raw_spin_unlock+0x28/0x50 [ 289.796555][ T5612] device_add+0x294/0x1970 [ 289.796585][ T5612] ? __pfx_dev_set_name+0x10/0x10 [ 289.796618][ T5612] ? __pfx_device_add+0x10/0x10 [ 289.796647][ T5612] ? mgmt_send_event_skb+0x2fb/0x460 [ 289.796684][ T5612] hci_conn_add_sysfs+0x1a3/0x260 [ 289.796715][ T5612] le_conn_complete_evt+0x122f/0x2130 [ 289.796748][ T5612] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 289.796773][ T5612] ? hci_event_packet+0x186/0xcd0 [ 289.796807][ T5612] hci_le_conn_complete_evt+0x23c/0x3a0 [ 289.796835][ T5612] ? skb_pull_data+0x15f/0x1e0 [ 289.796873][ T5612] hci_le_meta_evt+0x34a/0x5f0 [ 289.796900][ T5612] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 289.796934][ T5612] hci_event_packet+0x51c/0xcd0 [ 289.796961][ T5612] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 289.796990][ T5612] ? __pfx_hci_event_packet+0x10/0x10 [ 289.797021][ T5612] ? lockdep_hardirqs_on+0x7d/0x110 [ 289.797057][ T5612] hci_rx_work+0x451/0xfc0 [ 289.797087][ T5612] process_one_work+0xac7/0x1b10 [ 289.797133][ T5612] ? __pfx_process_one_work+0x10/0x10 [ 289.797167][ T5612] ? lock_acquire+0x1d1/0x380 [ 289.797198][ T5612] ? __pfx_hci_rx_work+0x10/0x10 [ 289.797232][ T5612] worker_thread+0x5ef/0xe50 [ 289.797276][ T5612] ? kthread+0x13a/0x450 [ 289.797311][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 289.797345][ T5612] kthread+0x373/0x450 [ 289.797376][ T5612] ? __pfx_kthread+0x10/0x10 [ 289.797408][ T5612] ret_from_fork+0x730/0xd60 [ 289.797434][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 289.797461][ T5612] ? __switch_to+0x800/0x10f0 [ 289.797492][ T5612] ? __pfx_kthread+0x10/0x10 [ 289.797525][ T5612] ret_from_fork_asm+0x1a/0x30 [ 289.797563][ T5612] [ 289.800932][ T5612] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 289.800975][ T5612] Bluetooth: hci4: failed to register connection device [ 290.157302][ T31] audit: type=1400 audit(1789676057.113:759): avc: denied { unlink } for pid=5600 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 290.559885][ T7101] Bluetooth: MGMT ver 1.23 [ 291.015934][ T7104] xt_policy: too many policy elements [ 291.263061][ T7115] xt_policy: too many policy elements [ 294.762717][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 294.762751][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.313'. [ 294.762976][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 294.762991][ T31] audit: type=1400 audit(1789676061.803:761): avc: denied { listen } for pid=7130 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.559232][ T7146] evm: overlay not supported [ 295.788152][ T5711] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 295.941515][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 296.041815][ T5711] usb 2-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 296.071874][ T5711] usb 2-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.071970][ T5711] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 296.129912][ T5711] usb 2-1: string descriptor 0 read error: -22 [ 296.130547][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.200045][ T5712] libceph: connect (1)[c::]:6789 error -101 [ 297.200158][ T5712] libceph: mon0 (1)[c::]:6789 connect error [ 297.498690][ T5608] libceph: connect (1)[c::]:6789 error -101 [ 297.560956][ T5608] libceph: mon0 (1)[c::]:6789 connect error [ 298.068357][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 298.068479][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 298.828725][ T7161] syz.4.314 (7161): /proc/7158/oom_adj is deprecated, please use /proc/7158/oom_score_adj instead. [ 298.829758][ T31] audit: type=1400 audit(1789676065.863:762): avc: denied { ioctl } for pid=7158 comm="syz.4.314" path="socket:[15237]" dev="sockfs" ino=15237 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.254349][ T7146] ceph: No mds server is up or the cluster is laggy [ 299.508949][ T50] usb 2-1: USB disconnect, device number 5 [ 299.660771][ T7163] xt_policy: too many policy elements [ 299.751230][ T31] audit: type=1400 audit(1789676066.793:763): avc: denied { setopt } for pid=7169 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.854769][ T31] audit: type=1400 audit(1789676066.893:764): avc: denied { ioctl } for pid=7169 comm="syz.4.321" path="socket:[16707]" dev="sockfs" ino=16707 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.918906][ T7199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.034158][ T7201] ip_tables: iptables: counters copy to user failed while replacing table [ 304.848997][ T5803] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 305.022455][ T7218] xt_policy: too many policy elements [ 305.027310][ T5803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.045199][ T5803] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.045239][ T5803] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 305.045293][ T5803] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 305.045323][ T5803] usb 3-1: config 1 interface 0 has no altsetting 0 [ 305.054723][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.054755][ T5803] usb 3-1: SerialNumber: syz [ 305.071488][ T7206] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.074471][ T5803] hub 3-1:1.0: bad descriptor, ignoring hub [ 305.074498][ T5803] hub 3-1:1.0: probe with driver hub failed with error -5 [ 305.089477][ T5803] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 306.177594][ T5803] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 306.246213][ T5803] usb 3-1: USB disconnect, device number 2 [ 306.544461][ T45] IPVS: starting estimator thread 0... [ 306.628013][ T7225] IPVS: using max 39 ests per chain, 93600 per kthread [ 306.940298][ T31] audit: type=1400 audit(1789676072.972:765): avc: denied { getopt } for pid=7228 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.375523][ T7227] xt_policy: too many policy elements [ 307.540128][ T7245] : renamed from bond_slave_0 (while UP) [ 307.648869][ T5712] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 307.804257][ T5712] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 307.808055][ T5712] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 307.808087][ T5712] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 307.857993][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.858021][ T5712] usb 3-1: Product: syz [ 307.858038][ T5712] usb 3-1: Manufacturer: syz [ 307.858058][ T5712] usb 3-1: SerialNumber: syz [ 307.869296][ T5712] usb 3-1: config 0 descriptor?? [ 307.873511][ T7239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.873629][ T7239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.125288][ T31] audit: type=1400 audit(1789676074.162:766): avc: denied { create } for pid=7249 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.896416][ T7239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.896552][ T7239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.971463][ T31] audit: type=1400 audit(1789676075.012:767): avc: denied { execute } for pid=7249 comm="syz.1.342" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 309.108537][ T31] audit: type=1400 audit(1789676075.132:768): avc: denied { ioctl } for pid=7249 comm="syz.1.342" path="socket:[17428]" dev="sockfs" ino=17428 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 309.213173][ T7260] syz.2.340 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 309.933444][ T5712] Error reading MAC address [ 310.316379][ T7268] xt_policy: too many policy elements [ 311.065114][ T31] audit: type=1400 audit(1789676076.902:769): avc: denied { shutdown } for pid=7271 comm="syz.0.347" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.244996][ T5711] usb 3-1: USB disconnect, device number 3 [ 317.731856][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.731909][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.151863][ T31] audit: type=1400 audit(1789676084.192:770): avc: denied { bind } for pid=7326 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.569012][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.352'. [ 321.165534][ T7358] ip_tables: iptables: counters copy to user failed while replacing table [ 322.245169][ T31] audit: type=1400 audit(1789676088.282:771): avc: denied { ioctl } for pid=7357 comm="syz.2.367" path="socket:[17662]" dev="sockfs" ino=17662 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 322.251759][ T31] audit: type=1400 audit(1789676088.292:772): avc: denied { create } for pid=7357 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 322.264801][ T31] audit: type=1400 audit(1789676088.302:773): avc: denied { write } for pid=7357 comm="syz.2.367" path="socket:[17663]" dev="sockfs" ino=17663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 322.674788][ T7369] input: syz1 as /devices/virtual/input/input7 [ 322.694337][ T31] audit: type=1400 audit(1789676088.732:774): avc: denied { read } for pid=4954 comm="acpid" name="event4" dev="devtmpfs" ino=2846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.694391][ T31] audit: type=1400 audit(1789676088.732:775): avc: denied { open } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.694435][ T31] audit: type=1400 audit(1789676088.732:776): avc: denied { ioctl } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2846 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.550321][ T31] audit: type=1400 audit(1789676091.592:777): avc: denied { append } for pid=7385 comm="syz.2.373" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 325.582083][ T31] audit: type=1400 audit(1789676091.602:778): avc: denied { write } for pid=7385 comm="syz.2.373" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 328.965856][ T31] audit: type=1400 audit(1789676094.522:779): avc: denied { name_bind } for pid=7411 comm="syz.3.378" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 329.620952][ T7421] mmap: syz.0.381 (7421) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.126967][ T31] audit: type=1400 audit(1789676097.152:780): avc: denied { connect } for pid=7425 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.627481][ T31] audit: type=1400 audit(1789676098.662:781): avc: denied { setopt } for pid=7438 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 332.661991][ T7439] tipc: Started in network mode [ 332.662012][ T7439] tipc: Node identity 7f000001, cluster identity 4711 [ 332.662246][ T7439] tipc: New replicast peer: 127.0.0.2 [ 332.664269][ T7439] tipc: Enabled bearer , priority 10 [ 333.228193][ T13] IPVS: starting estimator thread 0... [ 333.328239][ T7446] IPVS: using max 63 ests per chain, 151200 per kthread [ 333.487486][ T7452] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 333.670763][ T50] tipc: Node number set to 2130706433 [ 333.780228][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 334.055521][ T10] usb 2-1: device descriptor read/64, error -71 [ 336.147121][ T31] audit: type=1400 audit(1789676101.612:782): avc: denied { setopt } for pid=7465 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.147819][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 336.981693][ T7472] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 341.742952][ T7494] tipc: Started in network mode [ 341.743154][ T7494] tipc: Node identity 7f000001, cluster identity 4711 [ 341.768460][ T7494] tipc: New replicast peer: 127.0.0.2 [ 341.769552][ T7494] tipc: Enabled bearer , priority 10 [ 342.890403][ T5711] tipc: Node number set to 2130706433 [ 342.904977][ T31] audit: type=1400 audit(1789676108.942:783): avc: denied { module_load } for pid=7519 comm="syz.2.389" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 343.365314][ T7524] xt_policy: too many policy elements [ 346.156655][ T31] audit: type=1400 audit(1789676112.192:784): avc: denied { write } for pid=7543 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 346.303491][ T7552] batman_adv: batadv0: Adding interface: veth0 [ 346.303510][ T7552] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.303543][ T7552] batman_adv: batadv0: Interface activated: veth0 [ 346.309818][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.309848][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.311080][ T7552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.311103][ T7552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.311975][ T7552] batman_adv: batadv0: Interface deactivated: veth0 [ 346.311994][ T7552] batman_adv: batadv0: Removing interface: veth0 [ 346.710037][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 346.710908][ T7556] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 347.758987][ T31] audit: type=1400 audit(1789676113.802:785): avc: denied { ioctl } for pid=7574 comm="syz.3.409" path="socket:[19255]" dev="sockfs" ino=19255 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 347.812346][ T31] audit: type=1400 audit(1789676113.852:786): avc: denied { create } for pid=7574 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 347.816301][ T31] audit: type=1400 audit(1789676113.852:787): avc: denied { setopt } for pid=7574 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.145706][ T31] audit: type=1326 audit(1789676116.182:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.2.411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe019e159 code=0x7fc00000 [ 350.367071][ T31] audit: type=1326 audit(1789676116.402:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.2.411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fefe019e159 code=0x7fc00000 [ 350.610552][ T7597] tipc: Started in network mode [ 350.610572][ T7597] tipc: Node identity 7f000001, cluster identity 4711 [ 350.610731][ T7597] tipc: New replicast peer: 127.0.0.2 [ 350.611316][ T7597] tipc: Enabled bearer , priority 10 [ 350.689074][ T31] audit: type=1400 audit(1789676116.732:790): avc: denied { append } for pid=7599 comm="syz.0.415" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 350.920167][ T7598] xt_policy: too many policy elements [ 351.632770][ T10] tipc: Node number set to 2130706433 [ 352.048975][ T7617] ceph: No mds server is up or the cluster is laggy [ 352.102300][ T10] libceph: connect (1)[c::]:6789 error -101 [ 352.103322][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 352.760422][ T9] libceph: connect (1)[c::]:6789 error -101 [ 352.865225][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 353.458533][ T5610] libceph: connect (1)[c::]:6789 error -101 [ 353.492142][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 353.587337][ T7613] xt_policy: too many policy elements [ 354.449279][ T9] libceph: connect (1)[c::]:6789 error -101 [ 354.449399][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 355.014400][ T31] audit: type=1400 audit(1789676120.932:791): avc: denied { listen } for pid=7640 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.015074][ T31] audit: type=1400 audit(1789676120.962:792): avc: denied { accept } for pid=7640 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.581172][ T5610] libceph: connect (1)[c::]:6789 error -101 [ 355.581359][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 358.887672][ T7668] netlink: 44 bytes leftover after parsing attributes in process `syz.4.423'. [ 358.887719][ T7668] netlink: 44 bytes leftover after parsing attributes in process `syz.4.423'. [ 358.887737][ T7668] netlink: 44 bytes leftover after parsing attributes in process `syz.4.423'. [ 360.312788][ T7677] capability: warning: `syz.0.427' uses 32-bit capabilities (legacy support in use) [ 362.837471][ T7685] xt_policy: too many policy elements [ 363.079848][ T7695] tipc: Enabling of bearer rejected, already enabled [ 363.108073][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 363.210306][ T31] audit: type=1400 audit(1789676129.252:793): avc: denied { mount } for pid=7691 comm="syz.4.432" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 363.212183][ T31] audit: type=1400 audit(1789676129.252:794): avc: denied { search } for pid=7691 comm="syz.4.432" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 363.212511][ T31] audit: type=1400 audit(1789676129.252:795): avc: denied { write } for pid=7691 comm="syz.4.432" name="nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 363.212943][ T31] audit: type=1400 audit(1789676129.252:796): avc: denied { open } for pid=7691 comm="syz.4.432" path="/80/nfsd/nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 363.272419][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 363.275106][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 363.275152][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 363.275182][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.275207][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 363.275235][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 363.279028][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 363.279074][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 363.279102][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.279128][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 363.279156][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 363.285513][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 363.285558][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 363.285587][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.285613][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 363.285639][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 363.294769][ T10] usb 3-1: string descriptor 0 read error: -22 [ 363.294887][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.353878][ T7694] SELinux: DCCP has been removed, pid=7694 comm=syz.4.432 [ 363.543218][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 363.636976][ T31] audit: type=1400 audit(1789676129.672:797): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 363.861622][ T7704] ip_tables: iptables: counters copy to user failed while replacing table [ 364.728020][ T5610] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 365.009632][ T5610] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.012237][ T5610] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.012276][ T5610] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 365.012303][ T5610] usb 5-1: config 1 interface 0 has no altsetting 0 [ 365.486094][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 365.486125][ T5610] usb 5-1: SerialNumber: syz [ 365.544841][ T5610] hub 5-1:1.0: bad descriptor, ignoring hub [ 365.544869][ T5610] hub 5-1:1.0: probe with driver hub failed with error -5 [ 365.553055][ T5610] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 366.326561][ T31] audit: type=1400 audit(1789676132.362:798): avc: denied { firmware_load } for pid=7716 comm="syz.3.440" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 366.330144][ T5610] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 366.369081][ T5610] usb 5-1: USB disconnect, device number 5 [ 366.542991][ T7723] syz.3.440 (7723) used greatest stack depth: 18904 bytes left [ 367.274531][ T5712] usb 3-1: USB disconnect, device number 4 [ 368.135779][ T7735] xt_policy: too many policy elements [ 368.409661][ T7748] xt_policy: output policy not valid in PREROUTING and INPUT [ 369.277958][ T7752] tipc: Enabling of bearer rejected, already enabled [ 370.402145][ T7759] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 370.406799][ T7759] CIFS: Attempting to mount //127.0.0.1/share [ 370.485787][ T7759] CIFS: VFS: Error connecting to socket. Aborting operation. [ 370.494214][ T7759] CIFS: VFS: cifs_mount failed w/return code = -111 [ 373.191890][ T7778] netlink: 'syz.2.452': attribute type 4 has an invalid length. [ 373.977471][ T7782] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 375.960205][ T7803] xt_policy: too many policy elements [ 376.131522][ T7807] xt_policy: too many policy elements [ 376.157614][ T7813] fuse: fd is not a fuse device [ 376.170687][ T31] audit: type=1400 audit(1789676142.212:799): avc: denied { ioctl } for pid=7812 comm="syz.3.461" path="socket:[19908]" dev="sockfs" ino=19908 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.269108][ T7819] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 377.269408][ T7819] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 377.269455][ T7819] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 377.303876][ T7819] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 377.402206][ T7819] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 379.163922][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.163979][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.360901][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 383.537546][ T7852] xt_policy: output policy not valid in PREROUTING and INPUT [ 385.094685][ T7856] xt_policy: too many policy elements [ 386.074716][ T7874] tipc: Enabling of bearer rejected, already enabled [ 386.698133][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 387.090858][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 387.093189][ T25] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 387.097652][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.097679][ T25] usb 3-1: config 0 has no interfaces? [ 387.097709][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.105525][ T25] usb 3-1: config 0 descriptor?? [ 387.219450][ T7885] CIFS: Attempting to mount //127.0.0.1/share [ 387.220590][ T7885] CIFS: VFS: Error connecting to socket. Aborting operation. [ 387.220615][ T7885] CIFS: VFS: cifs_mount failed w/return code = -111 [ 387.399467][ T7889] netlink: 'syz.4.482': attribute type 12 has an invalid length. [ 389.083177][ T31] audit: type=1400 audit(1789676155.122:800): avc: denied { map } for pid=7901 comm="syz.0.485" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 389.330366][ T7905] xt_policy: too many policy elements [ 389.951509][ T25] usb 3-1: USB disconnect, device number 5 [ 390.716258][ T7922] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 393.499587][ T7925] xt_policy: too many policy elements [ 393.542745][ T7940] ip_tables: iptables: counters copy to user failed while replacing table [ 393.550264][ T7942] tipc: Enabling of bearer rejected, already enabled [ 394.544379][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 394.792683][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.793894][ T25] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 394.793931][ T25] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 394.793961][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 394.856135][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 394.856165][ T25] usb 5-1: SerialNumber: syz [ 394.904704][ T25] hub 5-1:1.0: bad descriptor, ignoring hub [ 394.904722][ T25] hub 5-1:1.0: probe with driver hub failed with error -5 [ 394.904999][ T25] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 395.145924][ T25] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 395.288617][ T25] usb 5-1: USB disconnect, device number 6 [ 400.044457][ T31] audit: type=1400 audit(1789676165.212:801): avc: denied { bind } for pid=7978 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.391703][ T31] audit: type=1400 audit(1789676167.432:802): avc: denied { append } for pid=7992 comm="syz.4.508" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.441529][ T7995] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 404.713252][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 404.717412][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.529482][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.483011][ T31] audit: type=1400 audit(1789676173.622:803): avc: denied { name_connect } for pid=8013 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 410.502794][ T31] audit: type=1400 audit(1789676176.542:804): avc: denied { attach_queue } for pid=8044 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 410.616837][ T5617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 410.616883][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.616916][ T5617] Tainted: [L]=SOFTLOCKUP [ 410.616925][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 410.616941][ T5617] Workqueue: hci0 hci_rx_work [ 410.616979][ T5617] Call Trace: [ 410.616987][ T5617] [ 410.616996][ T5617] dump_stack_lvl+0x100/0x190 [ 410.617035][ T5617] sysfs_warn_dup.cold+0x1c/0x28 [ 410.617071][ T5617] sysfs_create_dir_ns+0x24b/0x2b0 [ 410.617103][ T5617] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 410.617132][ T5617] ? find_held_lock+0x2b/0x80 [ 410.617163][ T5617] ? kobject_add_internal+0x25f/0x930 [ 410.617185][ T5617] ? kobject_add_internal+0x25f/0x930 [ 410.617211][ T5617] ? do_raw_spin_unlock+0x145/0x1e0 [ 410.617241][ T5617] kobject_add_internal+0x2c8/0x930 [ 410.617270][ T5617] kobject_add+0x16a/0x1e0 [ 410.617292][ T5617] ? __pfx_kobject_add+0x10/0x10 [ 410.617313][ T5617] ? class_to_subsys+0x10f/0x150 [ 410.617349][ T5617] ? kobject_put+0xb9/0x640 [ 410.617368][ T5617] ? _raw_spin_unlock+0x28/0x50 [ 410.617400][ T5617] device_add+0x294/0x1970 [ 410.617431][ T5617] ? __pfx_dev_set_name+0x10/0x10 [ 410.617464][ T5617] ? __pfx_device_add+0x10/0x10 [ 410.617494][ T5617] ? mgmt_send_event_skb+0x2fb/0x460 [ 410.617530][ T5617] hci_conn_add_sysfs+0x1a3/0x260 [ 410.617562][ T5617] le_conn_complete_evt+0x122f/0x2130 [ 410.617598][ T5617] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 410.617623][ T5617] ? hci_event_packet+0x186/0xcd0 [ 410.617656][ T5617] hci_le_conn_complete_evt+0x23c/0x3a0 [ 410.617693][ T5617] ? skb_pull_data+0x15f/0x1e0 [ 410.617734][ T5617] hci_le_meta_evt+0x34a/0x5f0 [ 410.617768][ T5617] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 410.617800][ T5617] hci_event_packet+0x51c/0xcd0 [ 410.617825][ T5617] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 410.617850][ T5617] ? __pfx_hci_event_packet+0x10/0x10 [ 410.617883][ T5617] ? lockdep_hardirqs_on+0x7d/0x110 [ 410.617919][ T5617] hci_rx_work+0x451/0xfc0 [ 410.617951][ T5617] process_one_work+0xac7/0x1b10 [ 410.617999][ T5617] ? __pfx_process_one_work+0x10/0x10 [ 410.618035][ T5617] ? lock_acquire+0x1d1/0x380 [ 410.618068][ T5617] ? __pfx_hci_rx_work+0x10/0x10 [ 410.618097][ T5617] worker_thread+0x5ef/0xe50 [ 410.618143][ T5617] ? kthread+0x13a/0x450 [ 410.618173][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 410.618206][ T5617] kthread+0x373/0x450 [ 410.618236][ T5617] ? __pfx_kthread+0x10/0x10 [ 410.618270][ T5617] ret_from_fork+0x730/0xd60 [ 410.618297][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 410.618325][ T5617] ? __switch_to+0x800/0x10f0 [ 410.618357][ T5617] ? __pfx_kthread+0x10/0x10 [ 410.618390][ T5617] ret_from_fork_asm+0x1a/0x30 [ 410.618431][ T5617] [ 410.618615][ T5617] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 410.618655][ T5617] Bluetooth: hci0: failed to register connection device [ 410.678930][ T8050] tipc: New replicast peer: 127.0.0.2 [ 410.682702][ T8050] tipc: Enabled bearer , priority 10 [ 411.428293][ T31] audit: type=1400 audit(1789676177.362:805): avc: denied { ioctl } for pid=8052 comm="syz.3.521" path="socket:[20376]" dev="sockfs" ino=20376 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 411.798270][ T5803] tipc: Node number set to 2130706433 [ 413.321069][ T8035] [ 413.323443][ T8035] ====================================================== [ 413.330452][ T8035] WARNING: possible circular locking dependency detected [ 413.337475][ T8035] syzkaller #0 Tainted: G L [ 413.343451][ T8035] ------------------------------------------------------ [ 413.350494][ T8035] syz.1.510/8035 is trying to acquire lock: [ 413.356366][ T8035] ffff88805b819c38 (kn->active#67){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 413.365490][ T8035] [ 413.365490][ T8035] but task is already holding lock: [ 413.372944][ T8035] ffffffff904e2de0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 413.382979][ T8035] [ 413.382979][ T8035] which lock already depends on the new lock. [ 413.382979][ T8035] [ 413.393386][ T8035] [ 413.393386][ T8035] the existing dependency chain (in reverse order) is: [ 413.402406][ T8035] [ 413.402406][ T8035] -> #1 (serio_mutex){+.+.}-{4:4}: [ 413.409739][ T8035] lock_acquire+0x1d1/0x380 [ 413.414774][ T8035] __mutex_lock+0x1a4/0x1bd0 [ 413.419906][ T8035] drvctl_store+0x3c/0x350 [ 413.424864][ T8035] dev_attr_store+0x58/0x80 [ 413.429912][ T8035] sysfs_kf_write+0xf2/0x150 [ 413.435123][ T8035] kernfs_fop_write_iter+0x3e0/0x5f0 [ 413.440929][ T8035] vfs_write+0x6af/0x1050 [ 413.445883][ T8035] ksys_write+0x12a/0x250 [ 413.450862][ T8035] do_syscall_64+0x123/0x790 [ 413.455985][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.462395][ T8035] [ 413.462395][ T8035] -> #0 (kn->active#67){++++}-{0:0}: [ 413.469881][ T8035] check_prev_add+0xeb/0xe60 [ 413.474996][ T8035] __lock_acquire+0x1528/0x1f40 [ 413.480379][ T8035] lock_acquire+0x1d1/0x380 [ 413.485405][ T8035] kernfs_drain+0x4f0/0x600 [ 413.490481][ T8035] __kernfs_remove+0x34c/0xb80 [ 413.495776][ T8035] kernfs_remove_by_name_ns+0x7c/0x120 [ 413.501846][ T8035] remove_files+0x96/0x1c0 [ 413.506794][ T8035] sysfs_remove_group+0x8b/0x1b0 [ 413.512257][ T8035] sysfs_remove_groups+0x60/0xb0 [ 413.517735][ T8035] device_remove_attrs+0x192/0x290 [ 413.523370][ T8035] device_del+0x36e/0x9b0 [ 413.528236][ T8035] serio_destroy_port+0x47f/0x590 [ 413.533804][ T8035] serio_unregister_port+0x2b/0x40 [ 413.539479][ T8035] userio_char_release+0x91/0xe0 [ 413.544956][ T8035] __fput+0x3ff/0xb50 [ 413.549484][ T8035] task_work_run+0x150/0x240 [ 413.554592][ T8035] exit_to_user_mode_loop+0x1d8/0x700 [ 413.560707][ T8035] do_syscall_64+0x661/0x790 [ 413.566076][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.572482][ T8035] [ 413.572482][ T8035] other info that might help us debug this: [ 413.572482][ T8035] [ 413.582725][ T8035] Possible unsafe locking scenario: [ 413.582725][ T8035] [ 413.590181][ T8035] CPU0 CPU1 [ 413.595713][ T8035] ---- ---- [ 413.601082][ T8035] lock(serio_mutex); [ 413.605170][ T8035] lock(kn->active#67); [ 413.612266][ T8035] lock(serio_mutex); [ 413.618948][ T8035] lock(kn->active#67); [ 413.623219][ T8035] [ 413.623219][ T8035] *** DEADLOCK *** [ 413.623219][ T8035] [ 413.632217][ T8035] locks held by syz.1.510/8035: 1, last CPU#1: [ 413.638355][ T8035] #0: ffffffff904e2de0 (serio_mutex){+.+.}-{4:4}, at: serio_unregister_port+0x1b/0x40 [ 413.648022][ T8035] [ 413.648022][ T8035] stack backtrace: [ 413.653991][ T8035] CPU: 1 UID: 0 PID: 8035 Comm: syz.1.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.664756][ T8035] Tainted: [L]=SOFTLOCKUP [ 413.669121][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 413.679349][ T8035] Call Trace: [ 413.682877][ T8035] [ 413.685796][ T8035] dump_stack_lvl+0x100/0x190 [ 413.690489][ T8035] print_circular_bug.cold+0x178/0x1be [ 413.695948][ T8035] check_noncircular+0x146/0x160 [ 413.700969][ T8035] check_prev_add+0xeb/0xe60 [ 413.705548][ T8035] __lock_acquire+0x1528/0x1f40 [ 413.710399][ T8035] lock_acquire+0x1d1/0x380 [ 413.714892][ T8035] ? __kernfs_remove+0x34c/0xb80 [ 413.719828][ T8035] ? kernfs_drain+0x4c7/0x600 [ 413.724491][ T8035] kernfs_drain+0x4f0/0x600 [ 413.728986][ T8035] ? __kernfs_remove+0x34c/0xb80 [ 413.733936][ T8035] ? __pfx_kernfs_drain+0x10/0x10 [ 413.739168][ T8035] ? find_held_lock+0x2b/0x80 [ 413.743856][ T8035] ? __kernfs_remove+0x224/0xb80 [ 413.748799][ T8035] ? __kernfs_remove+0x224/0xb80 [ 413.753738][ T8035] ? up_write+0x2dc/0x5b0 [ 413.758098][ T8035] __kernfs_remove+0x34c/0xb80 [ 413.762882][ T8035] kernfs_remove_by_name_ns+0x7c/0x120 [ 413.768330][ T8035] remove_files+0x96/0x1c0 [ 413.772745][ T8035] sysfs_remove_group+0x8b/0x1b0 [ 413.777691][ T8035] sysfs_remove_groups+0x60/0xb0 [ 413.782630][ T8035] device_remove_attrs+0x192/0x290 [ 413.787911][ T8035] ? __pfx_device_remove_attrs+0x10/0x10 [ 413.793536][ T8035] device_del+0x36e/0x9b0 [ 413.797856][ T8035] ? __pfx_device_del+0x10/0x10 [ 413.802726][ T8035] ? preempt_schedule_thunk+0x16/0x40 [ 413.808094][ T8035] serio_destroy_port+0x47f/0x590 [ 413.813117][ T8035] serio_unregister_port+0x2b/0x40 [ 413.818236][ T8035] userio_char_release+0x91/0xe0 [ 413.823254][ T8035] ? __pfx_userio_char_release+0x10/0x10 [ 413.828874][ T8035] __fput+0x3ff/0xb50 [ 413.832836][ T8035] task_work_run+0x150/0x240 [ 413.837764][ T8035] ? __pfx_task_work_run+0x10/0x10 [ 413.843237][ T8035] exit_to_user_mode_loop+0x1d8/0x700 [ 413.848608][ T8035] ? rcu_is_watching+0x13/0xc0 [ 413.853361][ T8035] do_syscall_64+0x661/0x790 [ 413.858463][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.864371][ T8035] RIP: 0033:0x7fcb7d59e159 [ 413.868768][ T8035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.888413][ T8035] RSP: 002b:00007fffc0eda268 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 413.896820][ T8035] RAX: 0000000000000000 RBX: 00007fcb7d827da0 RCX: 00007fcb7d59e159 [ 413.904788][ T8035] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 413.912754][ T8035] RBP: 00007fcb7d827da0 R08: 0000000000000006 R09: 0000000000000000 [ 413.920723][ T8035] R10: 00007fcb7d827cb0 R11: 0000000000000246 R12: 000000000006450b [ 413.928688][ T8035] R13: 00007fcb7d82618c R14: 000000000006432c R15: 00007fcb7d826180 [ 413.936659][ T8035] [ 414.235894][ T31] audit: type=1400 audit(1789676180.272:806): avc: denied { setopt } for pid=8071 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.838025][ T5617] Bluetooth: hci0: command 0x0406 tx timeout