last executing test programs: 1m58.37072151s ago: executing program 0 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) listen(r2, 0x3) accept$inet(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1m57.487304652s ago: executing program 0 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x4004000) 1m57.21909031s ago: executing program 0 (id=18): mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX]) 1m57.024035943s ago: executing program 0 (id=19): getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(0xffffffffffffffff, 0x0, r0) 1m56.798295807s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x0, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m56.323986848s ago: executing program 0 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m41.26030841s ago: executing program 32 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.529751978s ago: executing program 1 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 2.478508099s ago: executing program 1 (id=1745): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x84, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x54, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) 2.469017906s ago: executing program 1 (id=1747): openat$kvm(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x4, &(0x7f000000a040)={0x0, 0x7}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x4) 2.420104179s ago: executing program 4 (id=1748): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.359410279s ago: executing program 4 (id=1750): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$TIOCSETD(r0, 0x5423, 0x0) 1.899367204s ago: executing program 3 (id=1756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x2}, {0x1, 0x9, 0x200, 0x8}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="03", 0x1}], 0x1}, 0x4) 1.672697453s ago: executing program 3 (id=1758): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8, 0x6c033, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8, 0x800) 1.672547784s ago: executing program 3 (id=1759): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xe, {[@global=@item_012={0x1, 0x1, 0xe31d2cc890952081, '\x00'}, @local=@item_4={0x3, 0x2, 0x0, "180000f1"}, @main=@item_4={0x3, 0x0, 0x8, "fbd881fa"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x1, 0x200, 0xfffffffd, 0x2, 0xcc8b, 0x83, 0x6, 0x5, 0x4fff, 0x80000003, 0x7, 0x0, 0xf, 0x54}) 1.54931039s ago: executing program 1 (id=1760): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) link(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) io_setup(0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r5, 0x0, 0x0, 0x6}]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079101a00000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x7, 0x0, 0x8, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000340), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x6}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x678}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @generic={0xfd, 0x1, 0x6, 0x6, 0xa}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}]}, &(0x7f00000002c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x4, 0x7fff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340), &(0x7f0000000500)=[{0x3, 0x4, 0xa, 0x1}, {0x1, 0x5, 0x8, 0x7}, {0x4, 0x4, 0x11, 0x7}, {0x0, 0x1, 0x9, 0xb}], 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) 1.337024071s ago: executing program 4 (id=1761): socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0x1e}, {@in=@multicast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x2, 0xffffffffffffffff, 0x4}, {0x2002, 0x4, 0x3b6cc43b}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x68}, [@algo_auth={0x49, 0x1, {{'sha256\x00'}, 0x8, "c4"}}]}, 0x13c}}, 0x0) 1.240076296s ago: executing program 4 (id=1762): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000000c0)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='syzkaller0\x00', 0x0, r0) 1.239883164s ago: executing program 4 (id=1763): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="00000000f9ff0000", 0x8, 0x36, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.008498626s ago: executing program 3 (id=1764): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x7, 0xffffffffffffffff, 'id1\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848795ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f9000000000000000000413f00000000", 0x9e}, {&(0x7f0000000540)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x480, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x2, r2}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x105, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1, 0xfffffffe, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff7001, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.008269639s ago: executing program 3 (id=1765): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001e40)={'gre0\x00', &(0x7f0000001d80)={'gre0\x00', 0x0, 0x8, 0x10, 0x6, 0x9, {{0x5, 0x4, 0x1, 0x1b, 0x14, 0x65, 0x0, 0x6, 0x2f, 0x0, @empty, @empty}}}}) 939.966042ms ago: executing program 3 (id=1767): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) getrusage(0x0, &(0x7f0000000340)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x6, 0x7, 0x8, 0x6}, {0x7cbe, 0x5, 0x3e, 0x3}, {0x0, 0x6, 0x5, 0x2}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) setuid(0xee01) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) socket$netlink(0x10, 0x3, 0x13) 859.422508ms ago: executing program 4 (id=1771): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d0000000109022400010000"], 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x2a0a01, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xffed) 760.212297ms ago: executing program 2 (id=1773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000002180), &(0x7f00000021c0)=0x30) 579.277933ms ago: executing program 1 (id=1774): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) 578.886718ms ago: executing program 2 (id=1775): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010) 578.69809ms ago: executing program 1 (id=1776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'wg1\x00'}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0xff6d, 0x7ff, 0xfffffffc, 0x9, 0x7}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000009c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}, [0x2, 0xa, 0x7, 0xe, 0x979c, 0x4, 0x3, 0x7fffffff, 0x3b72, 0x9, 0x401, 0x1, 0x3, 0x893, 0xffff]}, &(0x7f00000004c0)=0x100) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) 409.696693ms ago: executing program 2 (id=1777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x2}, {0x1, 0x9, 0x200, 0x8}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x18}, 0x80, 0x0}, 0x4) 189.512177ms ago: executing program 2 (id=1778): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0x20) 70.253952ms ago: executing program 2 (id=1779): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x9, 0x2, 0x3, "d76e1f0f4d3b81b49b2c9b91ec99050b7e736ac441a06b8dc477a34d95fbd9e2", 0x49433553}) 0s ago: executing program 2 (id=1780): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000009c0)=[{&(0x7f0000000480)="68c8f5", 0x3}], 0x1) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000340)=""/243, 0xf3, 0x10120, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 53.076179][ T40] audit: type=1400 audit(1767042593.162:59): avc: denied { write } for pid=5885 comm="sh" path="pipe:[6073]" dev="pipefs" ino=6073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.086510][ T40] audit: type=1400 audit(1767042593.172:60): avc: denied { rlimitinh } for pid=5885 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.093793][ T40] audit: type=1400 audit(1767042593.172:61): avc: denied { siginh } for pid=5885 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:8380' (ED25519) to the list of known hosts. [ 55.398280][ T40] audit: type=1400 audit(1767042595.512:62): avc: denied { name_bind } for pid=5923 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.433093][ T40] audit: type=1400 audit(1767042595.542:63): avc: denied { execute } for pid=5924 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.441902][ T40] audit: type=1400 audit(1767042595.542:64): avc: denied { execute_no_trans } for pid=5924 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.663022][ T40] audit: type=1400 audit(1767042597.772:65): avc: denied { mounton } for pid=5924 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.673070][ T40] audit: type=1400 audit(1767042597.782:66): avc: denied { mount } for pid=5924 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.680810][ T5924] cgroup: Unknown subsys name 'net' [ 57.831142][ T5924] cgroup: Unknown subsys name 'cpuset' [ 57.838467][ T5924] cgroup: Unknown subsys name 'rlimit' [ 58.073394][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 58.073410][ T40] audit: type=1400 audit(1767042598.182:68): avc: denied { setattr } for pid=5924 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.085366][ T40] audit: type=1400 audit(1767042598.182:69): avc: denied { create } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.094373][ T40] audit: type=1400 audit(1767042598.182:70): avc: denied { write } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.106792][ T40] audit: type=1400 audit(1767042598.182:71): avc: denied { read } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.114239][ T40] audit: type=1400 audit(1767042598.192:72): avc: denied { mounton } for pid=5924 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.125955][ T40] audit: type=1400 audit(1767042598.192:73): avc: denied { mount } for pid=5924 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.134501][ T40] audit: type=1400 audit(1767042598.212:74): avc: denied { read } for pid=5643 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.140674][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.141562][ T40] audit: type=1400 audit(1767042598.222:75): avc: denied { read } for pid=5643 comm="dhcpcd" name="n102" dev="tmpfs" ino=1956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.152945][ T40] audit: type=1400 audit(1767042598.222:76): avc: denied { open } for pid=5643 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.163016][ T40] audit: type=1400 audit(1767042598.222:77): avc: denied { getattr } for pid=5643 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1956 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.887872][ T5924] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.644360][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.648864][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.652797][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.656575][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.660212][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.666583][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.677801][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.678802][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.681571][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.685479][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.687810][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.688160][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.688548][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.691881][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.693816][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.706503][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.711448][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.712662][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.718297][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.718527][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.086793][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 63.108655][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 63.144999][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 63.223122][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 63.330724][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.334273][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.336976][ T5947] bridge_slave_0: entered allmulticast mode [ 63.339774][ T5947] bridge_slave_0: entered promiscuous mode [ 63.355225][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.358122][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.361216][ T5940] bridge_slave_0: entered allmulticast mode [ 63.364539][ T5940] bridge_slave_0: entered promiscuous mode [ 63.368743][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.371397][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.374117][ T5940] bridge_slave_1: entered allmulticast mode [ 63.377429][ T5940] bridge_slave_1: entered promiscuous mode [ 63.380935][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.383533][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.387319][ T5947] bridge_slave_1: entered allmulticast mode [ 63.390326][ T5947] bridge_slave_1: entered promiscuous mode [ 63.444102][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.446595][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.449242][ T5938] bridge_slave_0: entered allmulticast mode [ 63.452067][ T5938] bridge_slave_0: entered promiscuous mode [ 63.487637][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.492210][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.495441][ T5938] bridge_slave_1: entered allmulticast mode [ 63.499556][ T5938] bridge_slave_1: entered promiscuous mode [ 63.506359][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.511177][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.513912][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.517557][ T5948] bridge_slave_0: entered allmulticast mode [ 63.520846][ T5948] bridge_slave_0: entered promiscuous mode [ 63.526920][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.541563][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.545766][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.549165][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.552190][ T5948] bridge_slave_1: entered allmulticast mode [ 63.555564][ T5948] bridge_slave_1: entered promiscuous mode [ 63.571258][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.625190][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.641588][ T5940] team0: Port device team_slave_0 added [ 63.646281][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.651931][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.658706][ T5947] team0: Port device team_slave_0 added [ 63.663659][ T5940] team0: Port device team_slave_1 added [ 63.669294][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.690382][ T5947] team0: Port device team_slave_1 added [ 63.714724][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.717128][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.725809][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.741763][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.744425][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.753151][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.772089][ T5938] team0: Port device team_slave_0 added [ 63.776111][ T5948] team0: Port device team_slave_0 added [ 63.792181][ T5938] team0: Port device team_slave_1 added [ 63.795814][ T5948] team0: Port device team_slave_1 added [ 63.799097][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.802601][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.813447][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.818558][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.821176][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.831444][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.873038][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.875782][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.886072][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.914537][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.917211][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.926548][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.931728][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.934940][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.945273][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.951326][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.953719][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.964291][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.973736][ T5940] hsr_slave_0: entered promiscuous mode [ 63.977614][ T5940] hsr_slave_1: entered promiscuous mode [ 64.020387][ T5947] hsr_slave_0: entered promiscuous mode [ 64.024079][ T5947] hsr_slave_1: entered promiscuous mode [ 64.027670][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 64.030398][ T5947] Cannot create hsr debugfs directory [ 64.098752][ T5948] hsr_slave_0: entered promiscuous mode [ 64.102152][ T5948] hsr_slave_1: entered promiscuous mode [ 64.105436][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 64.108774][ T5948] Cannot create hsr debugfs directory [ 64.120231][ T5938] hsr_slave_0: entered promiscuous mode [ 64.122806][ T5938] hsr_slave_1: entered promiscuous mode [ 64.125055][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 64.127190][ T5938] Cannot create hsr debugfs directory [ 64.468718][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.478520][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.483487][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.498182][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.550587][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.557668][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.564230][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.572221][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.659483][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.667119][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.675922][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.684786][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.718207][ T5943] Bluetooth: hci1: command tx timeout [ 64.726825][ T5943] Bluetooth: hci0: command tx timeout [ 64.752167][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.759481][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.765303][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.771248][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.796045][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.796897][ T5943] Bluetooth: hci3: command tx timeout [ 64.800022][ T5944] Bluetooth: hci2: command tx timeout [ 64.835613][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.849457][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.860230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.863439][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.872688][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.875603][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.902633][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.915689][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.919025][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.935716][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.939222][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.957818][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.965840][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.002464][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.009146][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 65.009160][ T40] audit: type=1400 audit(1767042605.122:91): avc: denied { sys_module } for pid=5947 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.011292][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.035679][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.038175][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.053271][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.056693][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.059048][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.067407][ T1256] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.070269][ T1256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.079802][ T1256] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.082186][ T1256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.161801][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.210753][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.226506][ T5947] veth0_vlan: entered promiscuous mode [ 65.234339][ T5947] veth1_vlan: entered promiscuous mode [ 65.268513][ T5947] veth0_macvtap: entered promiscuous mode [ 65.272896][ T5947] veth1_macvtap: entered promiscuous mode [ 65.301477][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.308953][ T5938] veth0_vlan: entered promiscuous mode [ 65.321994][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.338179][ T5938] veth1_vlan: entered promiscuous mode [ 65.342570][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.346005][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.354714][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.357860][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.361847][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.386471][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.438964][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.442621][ T5938] veth0_macvtap: entered promiscuous mode [ 65.442793][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.475592][ T5938] veth1_macvtap: entered promiscuous mode [ 65.488981][ T5948] veth0_vlan: entered promiscuous mode [ 65.497750][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.500833][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.514316][ T40] audit: type=1400 audit(1767042605.622:92): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.516028][ T5948] veth1_vlan: entered promiscuous mode [ 65.522933][ T40] audit: type=1400 audit(1767042605.622:93): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.vHzesk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.534613][ T40] audit: type=1400 audit(1767042605.622:94): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.536144][ T5940] veth0_vlan: entered promiscuous mode [ 65.542707][ T40] audit: type=1400 audit(1767042605.642:95): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.vHzesk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.552806][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.559916][ T40] audit: type=1400 audit(1767042605.642:96): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.vHzesk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.569693][ T40] audit: type=1400 audit(1767042605.642:97): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.577224][ T40] audit: type=1400 audit(1767042605.642:98): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.579315][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.587625][ T40] audit: type=1400 audit(1767042605.642:99): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="gadgetfs" ino=8163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.601035][ T5948] veth0_macvtap: entered promiscuous mode [ 65.601350][ T40] audit: type=1400 audit(1767042605.652:100): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.617809][ T5948] veth1_macvtap: entered promiscuous mode [ 65.621364][ T5940] veth1_vlan: entered promiscuous mode [ 65.622319][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.631987][ T1256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639283][ T1256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.643646][ T1256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.653283][ T1256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.682730][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.721536][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.743577][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.747341][ T5940] veth0_macvtap: entered promiscuous mode [ 65.747395][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.758165][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.762337][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.777021][ T6026] syzkaller0: entered promiscuous mode [ 65.779806][ T6026] syzkaller0: entered allmulticast mode [ 65.784452][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.789347][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.818259][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.821379][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.823127][ T5940] veth1_macvtap: entered promiscuous mode [ 65.876205][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.896955][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.956922][ T4616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.959857][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.961892][ T4616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.964349][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.982215][ T4616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.987258][ T4616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.019477][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.022739][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.088502][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.091849][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.107732][ T6022] IPVS: starting estimator thread 0... [ 66.150303][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.154477][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.191629][ T6042] Bluetooth: MGMT ver 1.23 [ 66.216832][ T6038] IPVS: using max 42 ests per chain, 100800 per kthread [ 66.365436][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 66.777012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 66.796997][ T5943] Bluetooth: hci0: command tx timeout [ 66.799822][ T5943] Bluetooth: hci1: command tx timeout [ 66.846972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.851806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.877047][ T5946] Bluetooth: hci2: command tx timeout [ 66.887277][ T5946] Bluetooth: hci3: command tx timeout [ 66.982342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.183516][ T6071] 9p: Bad value for 'rfdno' [ 67.288924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.297169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.391715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.827493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.831553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.836392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.236869][ T5944] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 68.522873][ T6089] infiniband syz1: set active [ 68.525335][ T6089] infiniband syz1: added syz_tun [ 68.571671][ T6089] RDS/IB: syz1: added [ 68.573569][ T6089] smc: adding ib device syz1 with port count 1 [ 68.576358][ T6089] smc: ib device syz1 port 1 has no pnetid [ 68.886912][ T5944] Bluetooth: hci1: command tx timeout [ 68.886959][ T5946] Bluetooth: hci0: command tx timeout [ 68.957278][ T5946] Bluetooth: hci3: command tx timeout [ 68.957295][ T5944] Bluetooth: hci2: command 0x040f tx timeout [ 69.093816][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 69.639514][ T53] IPVS: starting estimator thread 0... [ 69.641900][ T6137] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 70.367226][ T6138] IPVS: using max 42 ests per chain, 100800 per kthread [ 70.532286][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 70.532380][ T40] audit: type=1400 audit(1767042610.642:169): avc: denied { name_bind } for pid=6148 comm="syz.1.44" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.543437][ T40] audit: type=1400 audit(1767042610.642:170): avc: denied { node_bind } for pid=6148 comm="syz.1.44" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.846170][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 70.957339][ T5946] Bluetooth: hci1: command tx timeout [ 70.967175][ T5946] Bluetooth: hci0: command tx timeout [ 71.036906][ T5946] Bluetooth: hci2: command 0x040f tx timeout [ 71.046977][ T5946] Bluetooth: hci3: command tx timeout [ 71.124875][ T40] audit: type=1400 audit(1767042611.232:171): avc: denied { map_read map_write } for pid=6166 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.206235][ T40] audit: type=1400 audit(1767042611.242:172): avc: denied { create } for pid=6169 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.285551][ T40] audit: type=1400 audit(1767042611.242:173): avc: denied { setopt } for pid=6169 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.508101][ T40] audit: type=1400 audit(1767042611.612:174): avc: denied { mounton } for pid=6175 comm="syz.3.55" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 72.858798][ T40] audit: type=1400 audit(1767042612.972:175): avc: denied { write } for pid=6193 comm="syz.3.58" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.117456][ T5946] Bluetooth: hci2: command 0x040f tx timeout [ 73.177621][ T40] audit: type=1400 audit(1767042613.292:176): avc: denied { read write } for pid=6201 comm="syz.1.64" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.230781][ T40] audit: type=1400 audit(1767042613.292:177): avc: denied { open } for pid=6201 comm="syz.1.64" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.283339][ T40] audit: type=1400 audit(1767042613.292:178): avc: denied { ioctl } for pid=6201 comm="syz.1.64" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.427527][ T6023] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.435888][ T6206] Zero length message leads to an empty skb [ 73.599021][ T6023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.602919][ T6023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.606547][ T6023] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.611725][ T6023] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.614798][ T6023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.627215][ T6023] usb 6-1: config 0 descriptor?? [ 74.713034][ T6242] netlink: 328 bytes leftover after parsing attributes in process `syz.2.80'. [ 75.196860][ T5946] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 75.200378][ T5944] Bluetooth: hci2: command 0x040f tx timeout [ 75.502452][ T6023] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 75.592020][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 75.592033][ T40] audit: type=1400 audit(1767042615.702:196): avc: denied { ioctl } for pid=6257 comm="syz.3.87" path="socket:[11553]" dev="sockfs" ino=11553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.619449][ T6261] 9pnet_fd: p9_fd_create_tcp (6261): problem connecting socket to 127.0.0.1 [ 75.648030][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 75.672545][ T6022] usb 6-1: USB disconnect, device number 2 [ 75.895488][ T6276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.962499][ T40] audit: type=1400 audit(1767042616.012:197): avc: denied { setopt } for pid=6271 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.028601][ T40] audit: type=1400 audit(1767042616.012:198): avc: denied { ioctl } for pid=6271 comm="syz.3.93" path="socket:[9935]" dev="sockfs" ino=9935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.052640][ T40] audit: type=1400 audit(1767042616.052:199): avc: denied { create } for pid=6267 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.059852][ T40] audit: type=1400 audit(1767042616.052:200): avc: denied { connect } for pid=6267 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.204290][ T6285] 9pnet_fd: p9_fd_create_tcp (6285): problem connecting socket to 127.0.0.1 [ 77.352713][ T40] audit: type=1400 audit(1767042617.462:201): avc: denied { read write } for pid=6288 comm="syz.3.100" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 77.373191][ T40] audit: type=1400 audit(1767042617.482:202): avc: denied { open } for pid=6288 comm="syz.3.100" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 77.408716][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 77.927132][ T40] audit: type=1400 audit(1767042618.032:203): avc: denied { connect } for pid=6313 comm="syz.2.108" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.934397][ T40] audit: type=1400 audit(1767042618.042:204): avc: denied { write } for pid=6313 comm="syz.2.108" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.206787][ T6142] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 78.406898][ T6142] usb 7-1: Using ep0 maxpacket: 32 [ 78.417288][ T6142] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 78.421417][ T6142] usb 7-1: config 0 has no interface number 0 [ 78.428995][ T6142] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 78.433034][ T6142] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.437379][ T6142] usb 7-1: Product: syz [ 78.439391][ T6142] usb 7-1: Manufacturer: syz [ 78.441603][ T6142] usb 7-1: SerialNumber: syz [ 78.447194][ T6142] usb 7-1: config 0 descriptor?? [ 78.453295][ T6142] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 78.457923][ T6142] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 78.626312][ T6330] 9pnet_fd: p9_fd_create_tcp (6330): problem connecting socket to 127.0.0.1 [ 78.632666][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 78.654644][ T6142] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 78.697722][ T40] audit: type=1400 audit(1767042618.812:205): avc: denied { setopt } for pid=6334 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.856052][ T6142] radio-raremono 7-1:0.35: raremono_cmd_main failed (-71) [ 78.874011][ T6142] radio-raremono 7-1:0.35: V4L2 device registered as radio48 [ 78.885177][ T6142] usb 7-1: USB disconnect, device number 2 [ 78.888254][ T6142] radio-raremono 7-1:0.35: Thanko's Raremono disconnected [ 78.999093][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 79.458600][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 79.802203][ T6355] 9pnet_fd: p9_fd_create_tcp (6355): problem connecting socket to 127.0.0.1 [ 79.976846][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 80.107242][ T6415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.150'. [ 80.307313][ T6423] netlink: 76 bytes leftover after parsing attributes in process `syz.3.154'. [ 80.314692][ T6423] syzkaller0: entered promiscuous mode [ 80.316852][ T6423] syzkaller0: entered allmulticast mode [ 80.320679][ T6423] 0: reclassify loop, rule prio 0, protocol 800 [ 80.723065][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 81.050269][ T6449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.164'. [ 81.310076][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 81.682438][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.686157][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.875607][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 81.875619][ T40] audit: type=1400 audit(1767042621.982:217): avc: denied { getopt } for pid=6483 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.962905][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 82.256785][ T6023] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 82.541007][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.544829][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.548720][ T6023] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.561175][ T6023] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.566864][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.573733][ T6023] usb 7-1: config 0 descriptor?? [ 82.874399][ T40] audit: type=1400 audit(1767042622.982:218): avc: denied { read write } for pid=6502 comm="syz.3.187" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.888800][ T40] audit: type=1400 audit(1767042623.002:219): avc: denied { open } for pid=6502 comm="syz.3.187" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.903299][ T40] audit: type=1400 audit(1767042623.012:220): avc: denied { map } for pid=6502 comm="syz.3.187" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.904071][ T55] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.912209][ T40] audit: type=1400 audit(1767042623.012:221): avc: denied { read write } for pid=6502 comm="syz.3.187" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.930213][ T40] audit: type=1400 audit(1767042623.042:222): avc: denied { write } for pid=6502 comm="syz.3.187" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.931730][ T55] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 83.029826][ T6023] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 83.070302][ T40] audit: type=1400 audit(1767042623.182:223): avc: denied { execute } for pid=6507 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.096365][ T40] audit: type=1400 audit(1767042623.182:224): avc: denied { execute_no_trans } for pid=6507 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.168502][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.173333][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.181380][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.186517][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.192184][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.286335][ T6022] usb 7-1: USB disconnect, device number 3 [ 83.407566][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 83.471819][ T6510] chnl_net:caif_netlink_parms(): no params data found [ 83.482081][ T6526] 9pnet_fd: p9_fd_create_tcp (6526): problem connecting socket to 127.0.0.1 [ 83.518294][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.539419][ T6529] tipc: Started in network mode [ 83.541666][ T6529] tipc: Node identity , cluster identity 4711 [ 83.544135][ T6529] tipc: Failed to obtain node identity [ 83.546168][ T6529] tipc: Enabling of bearer rejected, failed to enable media [ 83.567800][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.571864][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.575247][ T6510] bridge_slave_0: entered allmulticast mode [ 83.579839][ T6510] bridge_slave_0: entered promiscuous mode [ 83.583502][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.586038][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.593694][ T6510] bridge_slave_1: entered allmulticast mode [ 83.598367][ T6510] bridge_slave_1: entered promiscuous mode [ 83.624087][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.633083][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.637960][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.653846][ T6510] team0: Port device team_slave_0 added [ 83.657416][ T6510] team0: Port device team_slave_1 added [ 83.671848][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.674857][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.683810][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.690796][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.694119][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.705819][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.717926][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.733496][ T6539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.755906][ T6510] hsr_slave_0: entered promiscuous mode [ 83.760457][ T6510] hsr_slave_1: entered promiscuous mode [ 83.763555][ T6510] debugfs: 'hsr0' already exists in 'hsr' [ 83.765893][ T6510] Cannot create hsr debugfs directory [ 83.789701][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.872923][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 83.890717][ T6510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.897520][ T6510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.903353][ T6510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.910504][ T6510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.941175][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.944487][ T6510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.947858][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.950456][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.956829][ T6558] 9pnet_fd: p9_fd_create_tcp (6558): problem connecting socket to 127.0.0.1 [ 83.962045][ T40] audit: type=1400 audit(1767042624.072:225): avc: denied { append } for pid=6559 comm="syz.1.204" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.041991][ T40] audit: type=1400 audit(1767042624.152:226): avc: denied { connect } for pid=6565 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.045429][ T1143] bridge_slave_1: left allmulticast mode [ 84.059046][ T1143] bridge_slave_1: left promiscuous mode [ 84.061740][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.070988][ T1143] bridge_slave_0: left allmulticast mode [ 84.073091][ T1143] bridge_slave_0: left promiscuous mode [ 84.075143][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.309551][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.315782][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.320731][ T1143] bond0 (unregistering): Released all slaves [ 84.379663][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.389195][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.448234][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.496572][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 84.510062][ T6510] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.536112][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.538650][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.642795][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.645669][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.660191][ T6592] 9pnet_fd: p9_fd_create_tcp (6592): problem connecting socket to 127.0.0.1 [ 84.810865][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.086879][ T1143] hsr_slave_0: left promiscuous mode [ 85.091921][ T1143] hsr_slave_1: left promiscuous mode [ 85.102837][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.109009][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.115764][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.120495][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.170706][ T1143] veth1_macvtap: left promiscuous mode [ 85.174088][ T1143] veth0_macvtap: left promiscuous mode [ 85.179143][ T1143] veth1_vlan: left promiscuous mode [ 85.182682][ T1143] veth0_vlan: left promiscuous mode [ 85.286792][ T5944] Bluetooth: hci4: command tx timeout [ 85.613023][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 85.685953][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 85.747251][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 86.235537][ T6510] veth0_vlan: entered promiscuous mode [ 86.252717][ T6510] veth1_vlan: entered promiscuous mode [ 86.289287][ T6510] veth0_macvtap: entered promiscuous mode [ 86.295336][ T6510] veth1_macvtap: entered promiscuous mode [ 86.326736][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.346088][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.360940][ T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.365095][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.392421][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.396266][ T80] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.471274][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.475478][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.501673][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.505169][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.508662][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 86.605758][ T6668] syzkaller0: entered promiscuous mode [ 86.608008][ T6668] syzkaller0: entered allmulticast mode [ 86.811903][ T6692] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 86.853032][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 86.998801][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 86.998818][ T40] audit: type=1400 audit(1767042627.112:256): avc: denied { create } for pid=6716 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.012024][ T40] audit: type=1400 audit(1767042627.122:257): avc: denied { write } for pid=6716 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.012454][ T6717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.247'. [ 87.026733][ T40] audit: type=1400 audit(1767042627.142:258): avc: denied { read } for pid=6718 comm="syz.1.248" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.030174][ T6717] netlink: 56 bytes leftover after parsing attributes in process `syz.2.247'. [ 87.038113][ T40] audit: type=1400 audit(1767042627.142:259): avc: denied { open } for pid=6718 comm="syz.1.248" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.146355][ T6646] 9pnet_fd: p9_fd_create_tcp (6646): problem connecting socket to 127.0.0.1 [ 87.185193][ T6719] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.188359][ T6719] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.209789][ T6719] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.216044][ T6719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.220598][ T6719] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.221895][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 87.227646][ T6719] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.232561][ T6719] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.235664][ T6719] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.242894][ T6719] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.251358][ T6719] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 87.253683][ T6719] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 87.260674][ T6719] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 87.285625][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'. [ 87.289560][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'. [ 87.309143][ T6739] netlink: 72 bytes leftover after parsing attributes in process `syz.3.256'. [ 87.309385][ T6737] erspan0: entered promiscuous mode [ 87.312719][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 87.316559][ T6737] gretap0: entered promiscuous mode [ 87.606834][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 87.717027][ T6022] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 87.773548][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.786821][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.791169][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.797115][ T53] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.801543][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.811795][ T53] usb 7-1: config 0 descriptor?? [ 87.936806][ T6022] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.942449][ T6022] usb 6-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 87.947912][ T6022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.966607][ T6022] usb 6-1: config 0 descriptor?? [ 88.247838][ T53] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 88.277672][ T40] audit: type=1400 audit(1767042628.392:260): avc: denied { write } for pid=6757 comm="syz.3.263" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.286175][ T40] audit: type=1400 audit(1767042628.392:261): avc: denied { open } for pid=6757 comm="syz.3.263" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.295128][ T40] audit: type=1400 audit(1767042628.392:262): avc: denied { ioctl } for pid=6757 comm="syz.3.263" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.393391][ T6022] elecom 0003:056E:010C.0006: collection stack underflow [ 88.395897][ T6022] elecom 0003:056E:010C.0006: item 0 0 0 12 parsing failed [ 88.399436][ T6022] elecom 0003:056E:010C.0006: probe with driver elecom failed with error -22 [ 88.428336][ T55] usb 7-1: USB disconnect, device number 4 [ 88.509082][ T40] audit: type=1400 audit(1767042628.622:263): avc: denied { create } for pid=6767 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.592551][ T6023] usb 6-1: USB disconnect, device number 3 [ 88.984240][ T6779] 9pnet_fd: p9_fd_create_tcp (6779): problem connecting socket to 127.0.0.1 [ 89.020137][ T40] audit: type=1400 audit(1767042629.132:264): avc: denied { create } for pid=6780 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.030843][ T6781] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.035985][ T40] audit: type=1400 audit(1767042629.142:265): avc: denied { create } for pid=6780 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.116756][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.245436][ T6799] 9pnet_fd: p9_fd_create_tcp (6799): problem connecting socket to 127.0.0.1 [ 89.276787][ T5944] Bluetooth: hci4: command 0x040f tx timeout [ 89.276824][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.276847][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.467938][ T6007] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 89.628517][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.632522][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.635830][ T6007] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.640722][ T6007] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.643895][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.648433][ T6007] usb 7-1: config 0 descriptor?? [ 89.708036][ T6820] evm: overlay not supported [ 89.776748][ T6022] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 89.936783][ T6022] usb 8-1: Using ep0 maxpacket: 16 [ 89.941958][ T6022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.945997][ T6022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.949651][ T6022] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.954102][ T6022] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.957791][ T6022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.965351][ T6022] usb 8-1: config 0 descriptor?? [ 90.074603][ T6007] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 90.258051][ T6007] usb 7-1: USB disconnect, device number 5 [ 90.309206][ T6827] 9pnet_fd: p9_fd_create_tcp (6827): problem connecting socket to 127.0.0.1 [ 90.422212][ T6022] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0008/input/input10 [ 91.206858][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.356867][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.359494][ T5944] Bluetooth: hci4: command 0x040f tx timeout [ 91.362318][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.397927][ T6022] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 91.403479][ T6022] usb 8-1: USB disconnect, device number 2 [ 91.456723][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 91.562546][ T6842] __nla_validate_parse: 5 callbacks suppressed [ 91.562562][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 91.626775][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 91.632091][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.635644][ T10] usb 6-1: config 0 has no interfaces? [ 91.639129][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 91.642102][ T10] usb 6-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 91.644824][ T10] usb 6-1: Product: syz [ 91.646232][ T10] usb 6-1: Manufacturer: syz [ 91.649236][ T10] usb 6-1: config 0 descriptor?? [ 91.863089][ T5953] usb 6-1: USB disconnect, device number 4 [ 91.921218][ T54] cfg80211: failed to load regulatory.db [ 92.193714][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 92.193769][ T40] audit: type=1400 audit(1767042632.302:272): avc: denied { setopt } for pid=6856 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.414566][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 92.450831][ T6872] syzkaller0: entered promiscuous mode [ 92.452856][ T6872] syzkaller0: entered allmulticast mode [ 92.466852][ T54] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 92.657860][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.662846][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.693837][ T40] audit: type=1400 audit(1767042632.802:273): avc: denied { create } for pid=6886 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.841667][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 92.893915][ T6903] syzkaller0: entered promiscuous mode [ 92.896077][ T6903] syzkaller0: entered allmulticast mode [ 92.901555][ T40] audit: type=1400 audit(1767042633.012:274): avc: denied { bind } for pid=6904 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.908302][ T40] audit: type=1400 audit(1767042633.022:275): avc: denied { write } for pid=6904 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.276788][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.379056][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.384460][ T54] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.390354][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.396478][ T54] usb 8-1: config 0 descriptor?? [ 93.441231][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.453949][ T5943] Bluetooth: hci4: command 0x040f tx timeout [ 93.456232][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.468893][ T40] audit: type=1400 audit(1767042633.582:276): avc: denied { connect } for pid=6919 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.547078][ T5944] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 93.803575][ T40] audit: type=1326 audit(1767042633.912:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.2.325" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff52fb8f7c9 code=0x0 [ 93.850647][ T54] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 94.033228][ T55] usb 8-1: USB disconnect, device number 3 [ 94.158022][ T6944] fido_id[6944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 94.538229][ T40] audit: type=1400 audit(1767042634.652:278): avc: denied { create } for pid=6955 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.546296][ T40] audit: type=1400 audit(1767042634.652:279): avc: denied { bind } for pid=6955 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.557640][ T40] audit: type=1400 audit(1767042634.672:280): avc: denied { write } for pid=6955 comm="syz.2.338" path="socket:[13055]" dev="sockfs" ino=13055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.644779][ T6957] netlink: 'syz.4.336': attribute type 3 has an invalid length. [ 94.647593][ T6957] netlink: 'syz.4.336': attribute type 3 has an invalid length. [ 94.652830][ T6957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.336'. [ 95.240508][ T6956] delete_channel: no stack [ 95.284081][ T6963] syzkaller0: entered promiscuous mode [ 95.286579][ T6963] syzkaller0: entered allmulticast mode [ 95.562362][ T5944] Bluetooth: hci4: command 0x040f tx timeout [ 95.836841][ T55] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 95.928820][ T40] audit: type=1400 audit(1767042636.042:281): avc: denied { create } for pid=6987 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.002681][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.012797][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.016130][ T55] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.021455][ T55] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.023154][ T6993] syzkaller0: entered promiscuous mode [ 96.025226][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.028182][ T55] usb 8-1: config 0 descriptor?? [ 96.030886][ T6993] syzkaller0: entered allmulticast mode [ 96.441882][ T55] usbhid 8-1:0.0: can't add hid device: -71 [ 96.444845][ T55] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 96.451700][ T55] usb 8-1: USB disconnect, device number 4 [ 97.027393][ T7018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.272224][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 97.272241][ T40] audit: type=1400 audit(1767042637.382:288): avc: denied { mounton } for pid=7043 comm="syz.1.367" path="/117/file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.331841][ T40] audit: type=1400 audit(1767042637.442:289): avc: denied { read } for pid=7043 comm="syz.1.367" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 97.342930][ T7049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.344234][ T40] audit: type=1400 audit(1767042637.442:290): avc: denied { open } for pid=7043 comm="syz.1.367" path="/117/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 97.352449][ T7049] block device autoloading is deprecated and will be removed. [ 97.361943][ T40] audit: type=1400 audit(1767042637.472:291): avc: denied { ioctl } for pid=7043 comm="syz.1.367" path="/117/file0/file0" dev="fuse" ino=64 ioctlcmd=0x935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 97.607003][ T5946] Bluetooth: hci4: command 0x040f tx timeout [ 97.607195][ T6022] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 97.660175][ T7057] ubi31: attaching mtd0 [ 97.672925][ T7057] ubi31: scanning is finished [ 97.674868][ T7057] ubi31: empty MTD device detected [ 97.725496][ T40] audit: type=1400 audit(1767042637.832:292): avc: denied { kexec_image_load } for pid=7053 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 97.768845][ T6022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.773667][ T6022] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.782989][ T6022] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.789250][ T6022] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.793246][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.800886][ T6022] usb 9-1: config 0 descriptor?? [ 97.874396][ T7057] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 97.879249][ T7057] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 97.884118][ T7057] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 97.888195][ T7057] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 97.891732][ T7057] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 97.895021][ T7057] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 97.899191][ T7057] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2632907734 [ 97.903779][ T7057] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 97.910129][ T7065] ubi31: background thread "ubi_bgt31d" started, PID 7065 [ 98.059412][ T40] audit: type=1400 audit(1767042638.172:293): avc: denied { allowed } for pid=7071 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.079773][ T40] audit: type=1400 audit(1767042638.192:294): avc: denied { prog_load } for pid=7071 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.152809][ T40] audit: type=1400 audit(1767042638.262:295): avc: denied { map_create } for pid=7075 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.165869][ T40] audit: type=1400 audit(1767042638.262:296): avc: denied { map_read map_write } for pid=7075 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.179208][ T40] audit: type=1400 audit(1767042638.292:297): avc: denied { prog_run } for pid=7075 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 98.215850][ T6022] usbhid 9-1:0.0: can't add hid device: -71 [ 98.218075][ T6022] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 98.223414][ T6022] usb 9-1: USB disconnect, device number 2 [ 99.229858][ T7128] warning: `syz.2.398' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.486793][ T5953] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 99.494854][ T7145] netlink: 44 bytes leftover after parsing attributes in process `syz.2.406'. [ 99.641072][ T5953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.652508][ T5953] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.658802][ T5953] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.664759][ T5953] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.669708][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.676024][ T5953] usb 9-1: config 0 descriptor?? [ 100.102739][ T5953] usbhid 9-1:0.0: can't add hid device: -71 [ 100.116085][ T5953] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 100.121346][ T5953] usb 9-1: USB disconnect, device number 3 [ 100.645244][ T7171] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'. [ 100.733520][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 100.848446][ T7190] 9pnet_fd: p9_fd_create_tcp (7190): problem connecting socket to 127.0.0.1 [ 101.033656][ T6179] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 101.108984][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 101.112723][ T7222] netlink: 56 bytes leftover after parsing attributes in process `syz.4.440'. [ 101.218299][ T6179] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.223539][ T6179] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 101.228959][ T6179] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.235208][ T6179] usb 8-1: config 0 descriptor?? [ 101.576898][ T6022] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 101.650789][ T6179] aquacomputer_d5next 0003:0C70:F00B.000A: unknown main item tag 0x0 [ 101.654068][ T6179] aquacomputer_d5next 0003:0C70:F00B.000A: unknown main item tag 0x0 [ 101.661560][ T6179] aquacomputer_d5next 0003:0C70:F00B.000A: hidraw1: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 101.729591][ T6022] usb 9-1: unable to get BOS descriptor or descriptor too short [ 101.734171][ T6022] usb 9-1: not running at top speed; connect to a high speed hub [ 101.741542][ T6022] usb 9-1: config 2 has an invalid interface number: 70 but max is 0 [ 101.745772][ T6022] usb 9-1: config 2 has no interface number 0 [ 101.749337][ T6022] usb 9-1: config 2 interface 70 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 101.754314][ T6022] usb 9-1: New USB device found, idVendor=1e2d, idProduct=00f3, bcdDevice=73.ff [ 101.757766][ T6022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.760523][ T6022] usb 9-1: Product: syz [ 101.761958][ T6022] usb 9-1: Manufacturer: syz [ 101.763550][ T6022] usb 9-1: SerialNumber: syz [ 101.837434][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.458'. [ 101.846813][ T6179] usb 8-1: USB disconnect, device number 5 [ 101.977399][ T6022] uvcvideo 9-1:2.70: Found UVC 0.00 device syz (1e2d:00f3) [ 101.981446][ T6022] uvcvideo 9-1:2.70: No valid video chain found. [ 101.990915][ T6022] usb 9-1: USB disconnect, device number 4 [ 102.010261][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 102.241198][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.467'. [ 102.536731][ T5953] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 102.546052][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 102.546066][ T40] audit: type=1400 audit(1767042642.652:309): avc: denied { create } for pid=7299 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.558460][ T7300] netlink: 72 bytes leftover after parsing attributes in process `syz.4.476'. [ 102.562784][ T40] audit: type=1400 audit(1767042642.672:310): avc: denied { write } for pid=7299 comm="syz.4.476" path="socket:[16602]" dev="sockfs" ino=16602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.614751][ T7302] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.812976][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 102.858584][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.862868][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.873244][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.882421][ T5953] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 102.897305][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.914633][ T5953] usb 6-1: config 0 descriptor?? [ 103.064694][ T40] audit: type=1400 audit(1767042643.172:311): avc: denied { create } for pid=7331 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.091156][ T40] audit: type=1400 audit(1767042643.192:312): avc: denied { ioctl } for pid=7331 comm="syz.4.488" path="socket:[16636]" dev="sockfs" ino=16636 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.116858][ T40] audit: type=1400 audit(1767042643.192:313): avc: denied { setopt } for pid=7331 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.191689][ T40] audit: type=1400 audit(1767042643.302:314): avc: denied { bind } for pid=7331 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.336027][ T5953] wacom 0003:056A:0010.000B: unknown main item tag 0x0 [ 103.342169][ T5953] wacom 0003:056A:0010.000B: unknown main item tag 0x0 [ 103.345556][ T5953] wacom 0003:056A:0010.000B: unknown main item tag 0x0 [ 103.348951][ T5953] wacom 0003:056A:0010.000B: unknown main item tag 0x0 [ 103.351913][ T5953] wacom 0003:056A:0010.000B: unknown main item tag 0x0 [ 103.364938][ T5953] wacom 0003:056A:0010.000B: unknown main item tag 0x0 [ 103.368339][ T5953] wacom 0003:056A:0010.000B: unknown main item tag 0x0 [ 103.372418][ T40] audit: type=1400 audit(1767042643.482:315): avc: denied { setopt } for pid=7346 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.457346][ T40] audit: type=1400 audit(1767042643.572:316): avc: denied { setopt } for pid=7340 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.533915][ T5953] usb 6-1: USB disconnect, device number 6 [ 104.144917][ T40] audit: type=1400 audit(1767042644.252:317): avc: denied { setattr } for pid=7350 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 104.146411][ T7352] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.160725][ T7352] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 104.188441][ T7357] syzkaller0: entered promiscuous mode [ 104.190922][ T7357] syzkaller0: entered allmulticast mode [ 105.067320][ T40] audit: type=1400 audit(1767042645.182:318): avc: denied { create } for pid=7383 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.290315][ T7395] syzkaller0: entered promiscuous mode [ 105.292597][ T7395] syzkaller0: entered allmulticast mode [ 105.346555][ T7399] __nla_validate_parse: 3 callbacks suppressed [ 105.346570][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 106.205390][ T7443] netlink: 'syz.1.535': attribute type 12 has an invalid length. [ 106.208087][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 106.221638][ T7443] netlink: 'syz.1.535': attribute type 12 has an invalid length. [ 106.225336][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 106.226293][ T1145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.226842][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 106.229907][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 106.241724][ T1145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.246079][ T1145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.293021][ T1145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.353124][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 107.661406][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 107.661486][ T40] audit: type=1400 audit(1767042647.772:328): avc: denied { setopt } for pid=7518 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.771497][ T40] audit: type=1400 audit(1767042647.882:329): avc: denied { bind } for pid=7529 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.777325][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 107.827199][ T40] audit: type=1400 audit(1767042647.882:330): avc: denied { ioctl } for pid=7529 comm="syz.2.573" path="socket:[15977]" dev="sockfs" ino=15977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.841360][ T40] audit: type=1400 audit(1767042647.882:331): avc: denied { setopt } for pid=7529 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.855108][ T40] audit: type=1400 audit(1767042647.882:332): avc: denied { write } for pid=7529 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.864125][ T40] audit: type=1400 audit(1767042647.882:333): avc: denied { watch watch_reads } for pid=7530 comm="syz.1.574" path="/169" dev="tmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.874730][ T40] audit: type=1400 audit(1767042647.942:334): avc: denied { connect } for pid=7534 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 108.517646][ T7554] ip6t_srh: unknown srh invflags 7F00 [ 108.521338][ T40] audit: type=1400 audit(1767042648.632:335): avc: denied { getopt } for pid=7548 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.047260][ T40] audit: type=1400 audit(1767042649.162:336): avc: denied { ioctl } for pid=7555 comm="syz.3.581" path="socket:[16795]" dev="sockfs" ino=16795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.365942][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 109.426859][ T5953] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 109.494469][ T40] audit: type=1400 audit(1767042649.602:337): avc: denied { create } for pid=7582 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.586127][ T7589] 9pnet_virtio: no channels available for device 127.0.0.1 [ 109.588763][ T5953] usb 8-1: Using ep0 maxpacket: 16 [ 109.597942][ T5953] usb 8-1: unable to get BOS descriptor or descriptor too short [ 109.601300][ T5953] usb 8-1: config 9 has an invalid interface number: 212 but max is 0 [ 109.604914][ T5953] usb 8-1: config 9 has no interface number 0 [ 109.608006][ T5953] usb 8-1: config 9 interface 212 has no altsetting 0 [ 109.612145][ T5953] usb 8-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=f3.5f [ 109.615579][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.618602][ T5953] usb 8-1: Product: syz [ 109.620018][ T5953] usb 8-1: Manufacturer: syz [ 109.621576][ T5953] usb 8-1: SerialNumber: syz [ 110.002143][ T5953] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:9.212/input/input12 [ 110.016311][ T5326] bcm5974 8-1:9.212: could not read from device [ 110.028651][ T5326] bcm5974 8-1:9.212: could not read from device [ 110.031513][ T5953] usb 8-1: USB disconnect, device number 6 [ 110.034617][ T5326] bcm5974 8-1:9.212: could not read from device [ 110.091489][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 110.163580][ T7604] fuse: Bad value for 'fd' [ 110.792713][ T7622] netlink: 52 bytes leftover after parsing attributes in process `syz.3.606'. [ 110.800502][ T5944] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 111.280855][ T7641] netlink: 'syz.3.615': attribute type 10 has an invalid length. [ 111.294068][ T7641] team0: Port device dummy0 added [ 111.418588][ T7647] netlink: 52 bytes leftover after parsing attributes in process `syz.4.617'. [ 111.427776][ T5944] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 111.561061][ T7656] 9pnet_virtio: no channels available for device 127.0.0.1 [ 111.689712][ T7671] netlink: 52 bytes leftover after parsing attributes in process `syz.2.630'. [ 111.697065][ T5944] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 111.776814][ T7681] 9pnet_virtio: no channels available for device 127.0.0.1 [ 111.923084][ T7687] hub 6-0:1.0: USB hub found [ 111.926243][ T7687] hub 6-0:1.0: 1 port detected [ 113.426418][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 113.429475][ T40] audit: type=1400 audit(1767042653.532:346): avc: denied { mounton } for pid=7732 comm="syz.3.656" path="/147/file0" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.790731][ T7747] 9p: Bad value for 'port' [ 113.832787][ T7750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7750 comm=syz.1.663 [ 114.104742][ T7768] 9p: Bad value for 'port' [ 114.271511][ T40] audit: type=1400 audit(1767042654.382:347): avc: denied { connect } for pid=7778 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.321364][ T40] audit: type=1400 audit(1767042654.432:348): avc: denied { name_connect } for pid=7780 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 114.480940][ T10] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 114.638129][ T10] usb 7-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 114.642189][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.653199][ T10] usb 7-1: config 0 descriptor?? [ 115.078242][ T10] asus 0003:0B05:1807.000C: hidraw1: USB HID v1.01 Device [HID 0b05:1807] on usb-dummy_hcd.2-1/input0 [ 115.091626][ T10] asus 0003:0B05:1807.000C: Asus input not registered [ 115.101757][ T10] asus 0003:0B05:1807.000C: probe with driver asus failed with error -12 [ 115.242613][ T40] audit: type=1400 audit(1767042655.352:349): avc: denied { connect } for pid=7816 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.258926][ T7817] batman_adv: batadv0: Adding interface: dummy0 [ 115.261636][ T7817] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.266799][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 115.267627][ T10] usb 7-1: USB disconnect, device number 6 [ 115.274502][ T7817] batman_adv: batadv0: Interface activated: dummy0 [ 115.291444][ T7817] batadv0: mtu less than device minimum [ 115.295370][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.301177][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.306609][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.312738][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.318363][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.323725][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.329604][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.335386][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.341215][ T7817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 115.529293][ T53] usb 6-1: device descriptor read/64, error -71 [ 115.881245][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 115.933670][ T7830] team0: No ports can be present during mode change [ 116.286798][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 116.416799][ T53] usb 6-1: device descriptor read/64, error -71 [ 116.527756][ T53] usb usb6-port1: attempt power cycle [ 116.887306][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 116.907492][ T53] usb 6-1: device descriptor read/8, error -71 [ 117.146921][ T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.167943][ T53] usb 6-1: device descriptor read/8, error -71 [ 117.245496][ T40] audit: type=1400 audit(1767042657.352:350): avc: denied { mount } for pid=7870 comm="syz.1.714" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 117.291105][ T53] usb usb6-port1: unable to enumerate USB device [ 117.386737][ T54] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 117.596934][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 117.600817][ T54] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.604426][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 117.606974][ T54] usb 7-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 117.610271][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.615451][ T54] usb 7-1: config 0 descriptor?? [ 118.030188][ T54] uclogic 0003:2179:0077.000D: interface is invalid, ignoring [ 118.228460][ T54] usb 7-1: USB disconnect, device number 7 [ 118.765357][ T7892] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.932993][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 118.957393][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 119.030102][ T7914] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.092887][ T40] audit: type=1400 audit(1767042659.202:351): avc: denied { create } for pid=7922 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.099939][ T40] audit: type=1400 audit(1767042659.202:352): avc: denied { ioctl } for pid=7922 comm="syz.1.735" path="socket:[17752]" dev="sockfs" ino=17752 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.168447][ T40] audit: type=1400 audit(1767042659.282:353): avc: denied { bind } for pid=7918 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.961038][ T7948] fuse: Bad value for 'fd' [ 119.966054][ T40] audit: type=1400 audit(1767042660.072:354): avc: denied { unmount } for pid=7947 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 120.007755][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 120.601940][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 121.122056][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 121.402066][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 121.606347][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 122.095682][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 122.396985][ T5953] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 122.548796][ T8064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'. [ 122.559595][ T5953] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 122.564249][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.574664][ T5953] usb 7-1: config 0 descriptor?? [ 122.582973][ T5953] gspca_main: spca508-2.14.0 probing 8086:0110 [ 122.701439][ T8068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.794'. [ 122.773283][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 123.155407][ T5953] gspca_spca508: reg_read err -110 [ 123.666939][ T5953] gspca_spca508: reg_read err -110 [ 123.670711][ T5953] gspca_spca508: reg_read err -32 [ 123.673980][ T5953] gspca_spca508: reg_read err -32 [ 123.679428][ T5953] gspca_spca508: reg_read err -32 [ 123.682805][ T5953] gspca_spca508: reg write: error -32 [ 123.684831][ T5953] spca508 7-1:0.0: probe with driver spca508 failed with error -32 [ 124.278478][ T5953] usb 7-1: USB disconnect, device number 8 [ 124.417499][ T8086] rdma_rxe: rxe_newlink: failed to add syz_tun [ 124.570850][ T8091] fuse: Bad value for 'fd' [ 124.612531][ T40] audit: type=1400 audit(1767042664.722:355): avc: denied { setopt } for pid=8087 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.816253][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 124.855620][ T8105] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 124.866720][ T8105] CIFS mount error: No usable UNC path provided in device string! [ 124.866720][ T8105] [ 124.871158][ T8105] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.198492][ T8145] 9pnet_fd: p9_fd_create_tcp (8145): problem binding to privport [ 126.326815][ T40] audit: type=1326 audit(1767042666.422:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.826" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585cb8f7c9 code=0x7ffc0000 [ 126.335600][ T40] audit: type=1326 audit(1767042666.422:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.826" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585cb8f7c9 code=0x7ffc0000 [ 126.344137][ T40] audit: type=1326 audit(1767042666.422:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.826" exe="/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f585cb8f7c9 code=0x7ffc0000 [ 126.356402][ T40] audit: type=1326 audit(1767042666.422:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.826" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585cb8f7c9 code=0x7ffc0000 [ 126.364553][ T40] audit: type=1326 audit(1767042666.422:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.826" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585cb8f7c9 code=0x7ffc0000 [ 126.372351][ T40] audit: type=1400 audit(1767042666.452:361): avc: denied { read } for pid=8156 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.556458][ T8163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8163 comm=syz.2.829 [ 126.608499][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 126.613148][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 126.616875][ T40] audit: type=1400 audit(1767042666.722:362): avc: denied { bind } for pid=8142 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.685571][ T8167] overlayfs: workdir and upperdir must be separate subtrees [ 127.239281][ T8123] net_ratelimit: 11 callbacks suppressed [ 127.239295][ T8123] Set syz1 is full, maxelem 65536 reached [ 127.589628][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 127.884795][ T40] audit: type=1400 audit(1767042667.992:363): avc: denied { setopt } for pid=8227 comm="syz.4.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.168576][ T8267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8267 comm=syz.3.865 [ 128.737728][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 128.783833][ T8297] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.080257][ T40] audit: type=1400 audit(1767042669.162:364): avc: denied { write } for pid=8298 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.422724][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 129.494649][ T8321] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.744055][ T40] audit: type=1400 audit(1767042669.852:365): avc: denied { ioctl } for pid=8343 comm="syz.1.897" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.220147][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 130.223514][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 130.259858][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 130.262908][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 130.272751][ T1256] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.272811][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 130.275844][ T1256] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.278749][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 130.285252][ T1256] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.290961][ T1256] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.365617][ T8327] 9pnet_fd: p9_fd_create_tcp (8327): problem connecting socket to 127.0.0.1 [ 130.616488][ T8391] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8391 comm=syz.4.917 [ 130.622150][ T8391] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8391 comm=syz.4.917 [ 131.043541][ T8409] IPVS: Scheduler module ip_vs_ not found [ 131.046179][ T8409] IPVS: length: 24 != 12792 [ 131.118998][ T40] audit: type=1400 audit(1767042671.232:366): avc: denied { read write } for pid=8413 comm="syz.1.926" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.129329][ T40] audit: type=1400 audit(1767042671.232:367): avc: denied { open } for pid=8413 comm="syz.1.926" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.140677][ T40] audit: type=1400 audit(1767042671.232:368): avc: denied { ioctl } for pid=8413 comm="syz.1.926" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.530525][ T8478] ======================================================= [ 132.530525][ T8478] WARNING: The mand mount option has been deprecated and [ 132.530525][ T8478] and is ignored by this kernel. Remove the mand [ 132.530525][ T8478] option from the mount to silence this warning. [ 132.530525][ T8478] ======================================================= [ 132.596795][ T6022] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 132.728557][ T8489] __nla_validate_parse: 3 callbacks suppressed [ 132.728569][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 132.758653][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.766228][ T6022] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.777127][ T6022] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.782206][ T6022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.788217][ T6022] usb 7-1: config 0 descriptor?? [ 133.734849][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 134.256771][ T40] audit: type=1400 audit(1767042674.272:369): avc: denied { read } for pid=8526 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.465105][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024fff000: rx timeout, send abort [ 134.469170][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024fff800: rx timeout, send abort [ 134.469871][ T40] audit: type=1400 audit(1767042674.582:370): avc: denied { read } for pid=5323 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 134.472092][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024fff000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 134.480578][ T40] audit: type=1400 audit(1767042674.582:371): avc: denied { search } for pid=5323 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.487045][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024fff800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 134.493042][ T40] audit: type=1400 audit(1767042674.582:372): avc: denied { search } for pid=5323 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.506129][ T40] audit: type=1400 audit(1767042674.582:373): avc: denied { add_name } for pid=5323 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.512978][ T40] audit: type=1400 audit(1767042674.582:374): avc: denied { create } for pid=5323 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.778560][ T8535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.792421][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 134.792433][ T40] audit: type=1400 audit(1767042674.882:377): avc: denied { bind } for pid=8532 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.804301][ T40] audit: type=1400 audit(1767042674.892:378): avc: denied { remount } for pid=8532 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.874256][ T8539] 9p: Bad value for 'rfdno' [ 135.024754][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 135.056481][ T40] audit: type=1400 audit(1767042675.162:379): avc: denied { getopt } for pid=8536 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.175754][ T40] audit: type=1400 audit(1767042675.282:380): avc: denied { firmware_load } for pid=8548 comm="syz.4.978" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 135.351599][ T6022] usb 7-1: USB disconnect, device number 9 [ 135.393531][ T8553] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 135.515344][ T40] audit: type=1400 audit(1767042675.622:381): avc: denied { create } for pid=8559 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.931480][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 135.939484][ T8550] syz.4.978 (8550) used greatest stack depth: 19176 bytes left [ 135.970152][ T8575] capability: warning: `syz.3.988' uses deprecated v2 capabilities in a way that may be insecure [ 136.120726][ T40] audit: type=1400 audit(1767042676.232:382): avc: denied { ioctl } for pid=8582 comm="syz.3.992" path="socket:[18266]" dev="sockfs" ino=18266 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 136.950591][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 137.142078][ T8635] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.168525][ T8637] netlink: 'syz.1.1009': attribute type 13 has an invalid length. [ 137.177539][ T8637] gretap0: refused to change device tx_queue_len [ 137.180170][ T8637] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 137.234910][ T8640] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 137.243196][ T8640] bond1 (unregistering): Released all slaves [ 137.379866][ T40] audit: type=1400 audit(1767042677.492:383): avc: denied { create } for pid=8642 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.388545][ T40] audit: type=1400 audit(1767042677.492:384): avc: denied { setopt } for pid=8642 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.398355][ T40] audit: type=1400 audit(1767042677.502:385): avc: denied { bind } for pid=8642 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.407833][ T40] audit: type=1400 audit(1767042677.502:386): avc: denied { write } for pid=8642 comm="syz.1.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.965400][ T8674] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1022'. [ 137.970927][ T8674] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1022'. [ 137.974041][ T8674] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1022'. [ 138.419061][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 138.578429][ T8704] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 138.884098][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 138.932151][ T8724] fuse: Bad value for 'fd' [ 138.985174][ T8729] overlayfs: failed to clone upperpath [ 139.376480][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 139.506192][ T8753] fuse: Bad value for 'fd' [ 139.721842][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 140.901580][ T8827] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.427714][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 141.780092][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 141.780104][ T40] audit: type=1400 audit(1767042681.892:389): avc: denied { name_bind } for pid=8860 comm="syz.2.1092" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 141.916951][ T8864] lo: entered allmulticast mode [ 141.919381][ T8864] tunl0: entered allmulticast mode [ 141.922267][ T8864] gre0: entered allmulticast mode [ 141.924683][ T8864] gretap0: entered allmulticast mode [ 141.927734][ T8864] erspan0: entered allmulticast mode [ 141.930092][ T8864] ip_vti0: entered allmulticast mode [ 141.932622][ T8864] ip6_vti0: entered allmulticast mode [ 141.935129][ T8864] sit0: entered allmulticast mode [ 141.937541][ T8864] ip6tnl0: entered allmulticast mode [ 141.940690][ T8864] ip6gre0: entered allmulticast mode [ 141.942793][ T8864] syz_tun: entered allmulticast mode [ 141.945591][ T8864] ip6gretap0: entered allmulticast mode [ 141.948791][ T8864] bridge0: entered allmulticast mode [ 141.951412][ T8864] vcan0: entered allmulticast mode [ 141.954986][ T8864] bond0: entered allmulticast mode [ 141.957318][ T8864] bond_slave_0: entered allmulticast mode [ 141.959431][ T8864] bond_slave_1: entered allmulticast mode [ 141.962745][ T8864] team0: entered allmulticast mode [ 141.964948][ T8864] team_slave_0: entered allmulticast mode [ 141.967275][ T8864] team_slave_1: entered allmulticast mode [ 142.094822][ T40] audit: type=1400 audit(1767042682.202:390): avc: denied { ioctl } for pid=8867 comm="syz.3.1094" path="socket:[18391]" dev="sockfs" ino=18391 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.444264][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 142.619700][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 142.744101][ T8917] fuse: Bad value for 'fd' [ 143.026577][ T8944] tipc: Started in network mode [ 143.029561][ T8944] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 143.032991][ T8944] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 143.036171][ T8944] tipc: Enabled bearer , priority 10 [ 143.122771][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.126369][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.315004][ T8966] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.875383][ T8985] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.030213][ T8989] __nla_validate_parse: 2 callbacks suppressed [ 144.030229][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 144.135323][ T6023] tipc: Node number set to 1 [ 144.532525][ T40] audit: type=1400 audit(1767042684.602:391): avc: denied { audit_write } for pid=9009 comm="syz.3.1151" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 144.719957][ T9023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.698947][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 146.075250][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 146.606134][ T9126] fuse: Bad value for 'fd' [ 146.675127][ T40] audit: type=1400 audit(1767042686.782:392): avc: denied { setopt } for pid=9113 comm="syz.3.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.687663][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 146.918404][ T40] audit: type=1326 audit(1767042687.032:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.1.1202" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f585cb8f7c9 code=0x0 [ 147.322009][ T9175] netlink: 'syz.3.1212': attribute type 2 has an invalid length. [ 147.325558][ T9175] netlink: 5356 bytes leftover after parsing attributes in process `syz.3.1212'. [ 147.646160][ T6022] IPVS: starting estimator thread 0... [ 147.709270][ T9198] tipc: Enabling of bearer rejected, failed to enable media [ 147.736856][ T9193] IPVS: using max 41 ests per chain, 98400 per kthread [ 147.778445][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 147.982548][ T9216] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 148.674185][ T40] audit: type=1326 audit(1767042688.782:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.1231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9158f7c9 code=0x7ffc0000 [ 148.686790][ T40] audit: type=1326 audit(1767042688.782:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.1231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9158f7c9 code=0x7ffc0000 [ 148.694539][ T40] audit: type=1326 audit(1767042688.782:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.1231" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbf9158f7c9 code=0x7ffc0000 [ 148.703762][ T40] audit: type=1326 audit(1767042688.782:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.1231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9158f7c9 code=0x7ffc0000 [ 148.716829][ T40] audit: type=1326 audit(1767042688.782:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.1231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9158f7c9 code=0x7ffc0000 [ 148.726376][ T40] audit: type=1326 audit(1767042688.782:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.1231" exe="/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fbf9158f7c9 code=0x7ffc0000 [ 148.735347][ T40] audit: type=1326 audit(1767042688.792:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.1231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9158f7c9 code=0x7ffc0000 [ 148.744433][ T40] audit: type=1326 audit(1767042688.792:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.3.1231" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9158f7c9 code=0x7ffc0000 [ 148.893140][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 148.974093][ T40] audit: type=1400 audit(1767042689.082:402): avc: denied { create } for pid=9254 comm="syz.2.1244" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.388931][ T9271] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 149.400180][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 149.550091][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 151.342916][ T9325] fuse: Bad value for 'fd' [ 151.480998][ T9331] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.664241][ T5944] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 151.697159][ T9358] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.732936][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 153.430138][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 154.067515][ T9447] geneve2: entered promiscuous mode [ 154.069648][ T9447] geneve2: entered allmulticast mode [ 154.721075][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 154.721091][ T40] audit: type=1400 audit(1767042694.832:408): avc: denied { bind } for pid=9466 comm="syz.4.1324" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.736850][ T40] audit: type=1400 audit(1767042694.842:409): avc: denied { node_bind } for pid=9466 comm="syz.4.1324" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 155.786002][ T9504] bond1: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 155.796168][ T9504] bond1: peer notification delay (5) is not a multiple of miimon (7), value rounded to 0 ms [ 155.806298][ T9504] bond1: entered allmulticast mode [ 156.085018][ T9520] mmap: syz.2.1343 (9520) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.382400][ T9490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.685597][ T9531] fuse: Bad value for 'fd' [ 156.753938][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 157.428293][ T40] audit: type=1400 audit(1767042697.542:410): avc: denied { watch watch_reads } for pid=9554 comm="syz.2.1358" path="pipe:[4675]" dev="pipefs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 157.451626][ T40] audit: type=1400 audit(1767042697.552:411): avc: denied { write } for pid=9558 comm="syz.3.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.490069][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1360'. [ 157.497600][ T40] audit: type=1400 audit(1767042697.612:412): avc: denied { read } for pid=9558 comm="syz.3.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.773952][ T9581] netlink: 'syz.2.1365': attribute type 29 has an invalid length. [ 158.296821][ T9589] capability: warning: `syz.4.1367' uses 32-bit capabilities (legacy support in use) [ 158.348031][ T9591] fuse: Bad value for 'fd' [ 158.395984][ T40] audit: type=1400 audit(1767042698.502:413): avc: denied { create } for pid=9592 comm="syz.1.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 158.448487][ T9596] syz.1.1372 uses obsolete (PF_INET,SOCK_PACKET) [ 158.736383][ T40] audit: type=1400 audit(1767042698.842:414): avc: denied { getopt } for pid=9622 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.873054][ T5944] Bluetooth: hci4: unexpected event for opcode 0x202f [ 159.518987][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 159.773442][ T9684] fuse: Bad value for 'fd' [ 159.936814][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 160.690023][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 161.350004][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 161.436181][ T40] audit: type=1326 audit(1767042701.542:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.4.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8f7c9 code=0x7ffc0000 [ 161.456828][ T40] audit: type=1326 audit(1767042701.552:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.4.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8f7c9 code=0x7ffc0000 [ 161.467894][ T40] audit: type=1326 audit(1767042701.582:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.4.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f5901d8f7c9 code=0x7ffc0000 [ 161.486726][ T40] audit: type=1326 audit(1767042701.582:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.4.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8f7c9 code=0x7ffc0000 [ 161.494788][ T40] audit: type=1326 audit(1767042701.582:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.4.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8f7c9 code=0x7ffc0000 [ 161.565097][ T40] audit: type=1400 audit(1767042701.672:420): avc: denied { read } for pid=9751 comm="syz.3.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.608887][ T40] audit: type=1400 audit(1767042701.722:421): avc: denied { read } for pid=5953 comm="kworker/3:3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21992 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.002507][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 162.283055][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 162.357211][ T9783] 9p: Bad value for 'wfdno' [ 162.418924][ T9787] fuse: Bad value for 'fd' [ 162.452573][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 162.888821][ T5944] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 162.891741][ T5944] Bluetooth: hci4: Injecting HCI hardware error event [ 162.895615][ T5946] Bluetooth: hci4: hardware error 0x00 [ 163.203157][ T9811] sock: sock_timestamping_bind_phc: sock not bind to device [ 163.346774][ T40] audit: type=1326 audit(1767042703.282:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9808 comm="syz.1.1449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585cb8f7c9 code=0x7ffc0000 [ 163.361157][ T40] audit: type=1326 audit(1767042703.282:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9808 comm="syz.1.1449" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585cb8f7c9 code=0x7ffc0000 [ 163.372167][ T40] audit: type=1326 audit(1767042703.282:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9808 comm="syz.1.1449" exe="/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f585cb8f7c9 code=0x7ffc0000 [ 163.505974][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 164.329491][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 164.357683][ T9867] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 164.373262][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'. [ 164.718743][ T5944] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 164.722024][ T5944] Bluetooth: hci3: Injecting HCI hardware error event [ 164.725400][ T5944] Bluetooth: hci3: hardware error 0x00 [ 164.957898][ T5946] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 166.797082][ T5944] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 166.816496][ T9935] overlayfs: failed to clone upperpath [ 167.360586][ T9957] process 'syz.2.1505' launched '/dev/fd/3' with NULL argv: empty string added [ 167.365900][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 167.365913][ T40] audit: type=1400 audit(1767042707.472:428): avc: denied { execute_no_trans } for pid=9951 comm="syz.2.1505" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.430112][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 167.841008][ T9980] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.846155][ T40] audit: type=1400 audit(1767042707.952:429): avc: denied { ioctl } for pid=9981 comm="syz.3.1517" path="socket:[21486]" dev="sockfs" ino=21486 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.061593][ T9997] netlink: 'syz.1.1514': attribute type 4 has an invalid length. [ 168.142398][T10009] netlink: 'syz.1.1514': attribute type 4 has an invalid length. [ 168.462984][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 169.000820][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 169.353615][ T5944] Bluetooth: hci0: unexpected event for opcode 0x202f [ 169.840684][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 170.167355][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 170.683002][ T40] audit: type=1400 audit(1767042710.792:430): avc: denied { getopt } for pid=10133 comm="syz.1.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.542853][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 171.802305][T10182] pimreg3: entered allmulticast mode [ 171.917541][T10187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1588'. [ 172.256876][ T5944] Bluetooth: hci1: unexpected event for opcode 0x202f [ 172.490964][T10219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1597'. [ 172.530955][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 172.535629][ T40] audit: type=1400 audit(1767042712.642:431): avc: denied { getopt } for pid=10222 comm="syz.1.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.806028][T10238] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 173.353662][T10245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1607'. [ 173.366832][ T5944] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 173.373842][ T5944] Bluetooth: hci0: Injecting HCI hardware error event [ 173.378378][ T5944] Bluetooth: hci0: hardware error 0x00 [ 173.409380][ T5946] Bluetooth: hci0: unexpected event for opcode 0x202f [ 173.672788][T10273] netlink: 'syz.1.1618': attribute type 72 has an invalid length. [ 174.174428][T10296] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 174.696920][T10306] netlink: 'syz.4.1629': attribute type 72 has an invalid length. [ 174.791999][ T40] audit: type=1400 audit(1767042714.902:432): avc: denied { connect } for pid=10300 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.066905][T10313] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1632'. [ 175.193968][T10322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1636'. [ 175.278358][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 175.451503][ T5944] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 175.508162][T10333] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.053345][ T40] audit: type=1400 audit(1767042716.162:433): avc: denied { create } for pid=10340 comm="syz.3.1643" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 176.317756][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 176.322273][ T5944] Bluetooth: hci1: Injecting HCI hardware error event [ 176.327234][ T5944] Bluetooth: hci1: hardware error 0x00 [ 176.374537][T10361] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 176.484915][ T5946] Bluetooth: hci1: unexpected event for opcode 0x202f [ 178.398080][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 179.401505][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 179.485861][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 179.772951][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 179.776343][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1715'. [ 179.780897][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 180.467452][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 180.682861][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 181.888216][ T40] audit: type=1400 audit(1767042722.002:434): avc: denied { nlmsg_read } for pid=10583 comm="syz.2.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.888221][T10584] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1746'. [ 181.898079][ T40] audit: type=1400 audit(1767042722.012:435): avc: denied { bind } for pid=10585 comm="syz.4.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.463649][T10650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1770'. [ 183.775707][T10666] syz_tun: entered allmulticast mode [ 183.787166][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1776'. [ 183.804546][T10666] syz_tun (unregistering): left allmulticast mode [ 183.811604][ T1143] smc: removing ib device syz1 [ 183.830621][ T5953] syz1: Port: 1 Link DOWN [ 184.356330][ T4567] ------------[ cut here ]------------ [ 184.359241][ T4567] GID entry ref leak for dev syz1 index 2 ref=1 [ 184.361566][ T4567] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#0: kworker/u32:11/4567 [ 184.365860][ T4567] Modules linked in: [ 184.368600][ T4567] CPU: 0 UID: 0 PID: 4567 Comm: kworker/u32:11 Not tainted syzkaller #0 PREEMPT(full) [ 184.372507][ T4567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.377906][ T4567] Workqueue: netns cleanup_net [ 184.380287][ T4567] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 184.382230][ T4567] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 1a 73 4d f9 48 8d 3d 23 ba 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 00 73 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 184.389892][ T4567] RSP: 0018:ffffc90028357880 EFLAGS: 00010293 [ 184.392052][ T4567] RAX: 0000000000000000 RBX: ffff8880331d1400 RCX: 0000000000000001 [ 184.395062][ T4567] RDX: 0000000000000002 RSI: ffff88801fd6aa60 RDI: ffffffff90952e30 [ 184.398114][ T4567] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed10053edb20 [ 184.400949][ T4567] R10: ffff888029f6d903 R11: ffff888035902ff0 R12: ffffed100663a29b [ 184.403816][ T4567] R13: ffff888033858000 R14: 0000000000000002 R15: dffffc0000000000 [ 184.407732][ T4567] FS: 0000000000000000(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 184.410688][ T4567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.412970][ T4567] CR2: 00007ff52fb73460 CR3: 0000000028427000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 184.416325][ T4567] Call Trace: [ 184.418328][ T4567] [ 184.419388][ T4567] ib_device_release+0xef/0x1e0 [ 184.421098][ T4567] ? __pfx_ib_device_release+0x10/0x10 [ 184.422996][ T4567] device_release+0xa4/0x240 [ 184.424611][ T4567] kobject_put+0x1ef/0x6f0 [ 184.426324][ T4567] put_device+0x1f/0x30 [ 184.428453][ T4567] rdma_dev_exit_net+0x2e5/0x590 [ 184.430363][ T4567] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 184.432291][ T4567] ? __pfx___might_resched+0x10/0x10 [ 184.434914][ T4567] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 184.438137][ T4567] ? mutex_is_locked+0x17/0x60 [ 184.440689][ T4567] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 184.442635][ T4567] ops_undo_list+0x2ee/0xab0 [ 184.444265][ T4567] ? __pfx_ops_undo_list+0x10/0x10 [ 184.446046][ T4567] ? cleanup_net+0x347/0x830 [ 184.448281][ T4567] ? idr_destroy+0x62/0x2e0 [ 184.449859][ T4567] cleanup_net+0x41b/0x830 [ 184.451442][ T4567] ? __pfx_cleanup_net+0x10/0x10 [ 184.453183][ T4567] ? rcu_is_watching+0x12/0xc0 [ 184.454856][ T4567] process_one_work+0x9ba/0x1b20 [ 184.457483][ T4567] ? __pfx_process_one_work+0x10/0x10 [ 184.459532][ T4567] ? assign_work+0x1a0/0x250 [ 184.461153][ T4567] worker_thread+0x6c8/0xf10 [ 184.462851][ T4567] ? __kthread_parkme+0x19e/0x250 [ 184.464555][ T4567] ? __pfx_worker_thread+0x10/0x10 [ 184.466448][ T4567] kthread+0x3c5/0x780 [ 184.468637][ T4567] ? __pfx_kthread+0x10/0x10 [ 184.470244][ T4567] ? rcu_is_watching+0x12/0xc0 [ 184.471925][ T4567] ? __pfx_kthread+0x10/0x10 [ 184.473742][ T4567] ret_from_fork+0x983/0xb10 [ 184.475328][ T4567] ? __pfx_ret_from_fork+0x10/0x10 [ 184.477418][ T4567] ? __switch_to+0x7af/0x10d0 [ 184.479263][ T4567] ? __pfx_kthread+0x10/0x10 [ 184.481088][ T4567] ret_from_fork_asm+0x1a/0x30 [ 184.482791][ T4567] [ 184.483974][ T4567] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.486406][ T4567] CPU: 0 UID: 0 PID: 4567 Comm: kworker/u32:11 Not tainted syzkaller #0 PREEMPT(full) [ 184.489709][ T4567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.493772][ T4567] Workqueue: netns cleanup_net [ 184.495981][ T4567] Call Trace: [ 184.497608][ T4567] [ 184.499110][ T4567] dump_stack_lvl+0x3d/0x1f0 [ 184.501465][ T4567] vpanic+0x640/0x6f0 [ 184.503487][ T4567] ? gid_table_release_one+0x1ad/0x450 [ 184.505773][ T4567] panic+0xca/0xd0 [ 184.507309][ T4567] ? __pfx_panic+0x10/0x10 [ 184.509264][ T4567] ? check_panic_on_warn+0x1f/0xb0 [ 184.511330][ T4567] check_panic_on_warn+0xab/0xb0 [ 184.513348][ T4567] __warn+0x108/0x3c0 [ 184.515468][ T4567] __report_bug+0x2a0/0x520 [ 184.517521][ T4567] ? gid_table_release_one+0x1ad/0x450 [ 184.520006][ T4567] ? __pfx___report_bug+0x10/0x10 [ 184.522148][ T4567] report_bug_entry+0xe1/0x290 [ 184.524757][ T4567] ? gid_table_release_one+0x1b6/0x450 [ 184.527768][ T4567] handle_bug+0x18a/0x260 [ 184.529361][ T4567] exc_invalid_op+0x17/0x50 [ 184.531001][ T4567] asm_exc_invalid_op+0x1a/0x20 [ 184.532910][ T4567] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 184.535309][ T4567] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 1a 73 4d f9 48 8d 3d 23 ba 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 00 73 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 184.544205][ T4567] RSP: 0018:ffffc90028357880 EFLAGS: 00010293 [ 184.546442][ T4567] RAX: 0000000000000000 RBX: ffff8880331d1400 RCX: 0000000000000001 [ 184.549991][ T4567] RDX: 0000000000000002 RSI: ffff88801fd6aa60 RDI: ffffffff90952e30 [ 184.552732][ T4567] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed10053edb20 [ 184.555762][ T4567] R10: ffff888029f6d903 R11: ffff888035902ff0 R12: ffffed100663a29b [ 184.558602][ T4567] R13: ffff888033858000 R14: 0000000000000002 R15: dffffc0000000000 [ 184.561264][ T4567] ib_device_release+0xef/0x1e0 [ 184.562898][ T4567] ? __pfx_ib_device_release+0x10/0x10 [ 184.564855][ T4567] device_release+0xa4/0x240 [ 184.566473][ T4567] kobject_put+0x1ef/0x6f0 [ 184.567971][ T4567] put_device+0x1f/0x30 [ 184.569367][ T4567] rdma_dev_exit_net+0x2e5/0x590 [ 184.571089][ T4567] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 184.573054][ T4567] ? __pfx___might_resched+0x10/0x10 [ 184.574844][ T4567] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 184.576914][ T4567] ? mutex_is_locked+0x17/0x60 [ 184.578901][ T4567] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 184.580760][ T4567] ops_undo_list+0x2ee/0xab0 [ 184.582472][ T4567] ? __pfx_ops_undo_list+0x10/0x10 [ 184.584381][ T4567] ? cleanup_net+0x347/0x830 [ 184.586123][ T4567] ? idr_destroy+0x62/0x2e0 [ 184.587868][ T4567] cleanup_net+0x41b/0x830 [ 184.589538][ T4567] ? __pfx_cleanup_net+0x10/0x10 [ 184.591448][ T4567] ? rcu_is_watching+0x12/0xc0 [ 184.593320][ T4567] process_one_work+0x9ba/0x1b20 [ 184.595625][ T4567] ? __pfx_process_one_work+0x10/0x10 [ 184.598076][ T4567] ? assign_work+0x1a0/0x250 [ 184.600332][ T4567] worker_thread+0x6c8/0xf10 [ 184.602542][ T4567] ? __kthread_parkme+0x19e/0x250 [ 184.604597][ T4567] ? __pfx_worker_thread+0x10/0x10 [ 184.606432][ T4567] kthread+0x3c5/0x780 [ 184.608102][ T4567] ? __pfx_kthread+0x10/0x10 [ 184.610049][ T4567] ? rcu_is_watching+0x12/0xc0 [ 184.612224][ T4567] ? __pfx_kthread+0x10/0x10 [ 184.614287][ T4567] ret_from_fork+0x983/0xb10 [ 184.616369][ T4567] ? __pfx_ret_from_fork+0x10/0x10 [ 184.618669][ T4567] ? __switch_to+0x7af/0x10d0 [ 184.620783][ T4567] ? __pfx_kthread+0x10/0x10 [ 184.622958][ T4567] ret_from_fork_asm+0x1a/0x30 [ 184.625087][ T4567] [ 184.626844][ T4567] Kernel Offset: disabled [ 184.628377][ T4567] Rebooting in 86400 seconds..