last executing test programs: 9m0.912993582s ago: executing program 3 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 8m59.223389665s ago: executing program 3 (id=122): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, 0x0, 0x0, 0x40000033, 0x0) 8m57.797605866s ago: executing program 3 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) read$FUSE(r1, &(0x7f000000ae80)={0x2020}, 0x2020) 8m55.254839623s ago: executing program 3 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = memfd_create(&(0x7f0000000580)='\xf3e\t\x9f\x918\xc0\x89.c\xb2g\x176\xd9\x020\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e~\x89\xb8\xc5;~\x04\x03~K\xfb\x98\x18Y\xb8\x05\xe7\x18+p\x96]\x9c\x8a\xa9\x82\xd0v\x821f\xa6\x92\x00X\xbbp\xf5\xa0\xd6\x02\xc9\xe9\xbc\xfa\x05|\x88,\xb1B\x18?VM\x89\x00\x036-\xb9z\x1f`2t\x87b_\xc9\xa6\xf2ZS@\xeee\x1a\xac4~g\x00\x00\x00\x00\x00\x00Tc\xd9\x8e\xc1\xd8\x14\xf2z\xfbO\xa8\xbd\xa5\xc0h\xa2\xb2\xbeK\xa9Z%)\xf3\xbc\x94E\xde\x9b\x03?\r\x06\x82B\xde\x05\xde\xb0\'\xc4\xf6\xc0\xa1\x991\xf8/\x14\xb13\x94G\x1c*E4\xa0\xf6\xfcMmC=\xb2\xbc/\xa5\xa2sB\x00Nw+\x01\xbc\x93`\xb5\xe4\xcf\x9c\x96\xd6<\byT\xb5;RC\x10I\x8f\xd6\x13*\r|\x8cz\xc9\x8ek\x03\xd7\xb9\xbf&g\x8d\x1dZ\xa3kf\xaf9\xe92\xde\x9ey\f4\x02\x00\xaces~t\x00\xce\x94\x9fo\xd4_\x0fit\xe4\xa0-jt\x11\x97\xe5W\xd6kE\x9c\xad9\x99\xa4\xa9\xc0r\"\xc1\x05\xd8\xdb\x19\xb5\xdax\x8f\xc0\xa0Q8*\xea\x86or|=s\xa3\xe7\x03~\xb4\xa3\xe7\xbf\xff\xd6_\xa2Z\a.\xfb\xbd\xa1\xe4\x18\xad\x9d0\xc79', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x799843, 0x0) 8m54.972323008s ago: executing program 3 (id=134): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 8m54.529320326s ago: executing program 3 (id=139): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 8m54.137939523s ago: executing program 32 (id=139): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 14.653266179s ago: executing program 4 (id=1665): syz_open_dev$sndctrl(&(0x7f0000000000), 0x4000000000006, 0x300) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) io_uring_setup(0x2471, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) accept4(r4, 0x0, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) 13.702521006s ago: executing program 4 (id=1668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x382000, 0x8}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r5, 0x1, 0x0, 0x0) 11.401756825s ago: executing program 2 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', r5, 0x0, 0x7800, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, {[@rr={0x7, 0x27, 0x52, [@private=0xa010102, @remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, @empty, @private=0xa010102, @loopback]}]}}}}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x39, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2}}}}) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @broadcast}, &(0x7f0000000200)=0xc) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r1) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}, 0x1, 0x0, 0x0, 0x84}, 0x8014) 10.705151774s ago: executing program 2 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x1ff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x983aec03fbdf90b8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) 10.588109881s ago: executing program 1 (id=1677): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 9.761096204s ago: executing program 2 (id=1678): socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x963, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r2) r4 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) request_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 9.301503372s ago: executing program 5 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x5, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 9.070602769s ago: executing program 4 (id=1680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x2c2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.572104899s ago: executing program 2 (id=1681): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) 8.497661271s ago: executing program 1 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 8.342802963s ago: executing program 5 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r5, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 7.309689213s ago: executing program 5 (id=1685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x3}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x18, &(0x7f0000000280)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 6.589307953s ago: executing program 0 (id=1686): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000280)={{0x2, 0x4e22, @multicast2}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x6c, {0x2, 0x4e23, @rand_addr=0x64010101}, 'veth1_to_bridge\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x11e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x14}, 0x1, 0x40030000000000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xc) getdents64(r4, 0x0, 0x0) 6.4461501s ago: executing program 1 (id=1687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x2fa6, &(0x7f0000010400)={0x0, 0x544b, 0x2, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r2, 0x1) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x801, &(0x7f0000000300)) 5.933082645s ago: executing program 0 (id=1688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfff}], 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.637467396s ago: executing program 5 (id=1689): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, @local}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x86\x81\t\n\xac\"\xff4l\xaa\x91\xec\x99M.p\xdc4\x0e\x1c\xdf\xd3\xd4\x8d\xad\x99\x1c\xae\xb2vt\r@0K\x989\x1c\xd7%\x82\x94\x05\x06\xbeJ\x90\xd8&\xa6?~\x88\x01;\r7\xdf\xb7\xfb\x85\x133\x17I\xb4\xbc`7\xda\x91\xefP0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) socket$inet(0x2, 0x1, 0x0) syz_socket_connect_nvme_tcp() 3.948348794s ago: executing program 5 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) io_uring_setup(0x7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x231}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) 3.8822559s ago: executing program 0 (id=1692): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file1/file2\x00'}, 0x6e) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000300)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, 0x12, 0x17, 0x3, 0x70bd2a, 0x25dfdbfb, {0x1, 0x0, 0x8}, [@nested={0xc, 0xff, 0x0, 0x1, [@nested={0x4, 0x14f}, @nested={0x4, 0xff}]}, @typed={0x8, 0xc9, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@private1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0xc040) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r3, 0x402, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) 3.17993874s ago: executing program 0 (id=1693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xac94, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x20) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000024c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3.088811494s ago: executing program 4 (id=1694): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x807ff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r5, 0x10886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r7, 0x10820, 0x343}}}}}}]}, 0x48}}, 0x0) 3.017515822s ago: executing program 0 (id=1695): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000183000/0x3000)=nil, 0x3000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, 0x0, &(0x7f0000000280)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000002080), 0x501000, 0x0) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) 2.913729075s ago: executing program 5 (id=1696): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.859363545s ago: executing program 2 (id=1697): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x3e8, 0x800, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}}, 0x40000) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4e, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.801488178s ago: executing program 1 (id=1698): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x80) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095", @ANYRES64=r1, @ANYRESOCT=r0, @ANYBLOB="8cda8cb39b5ed6b0e390de7f81a1188729a2e725add375e35087d906ea831643908c2a0e7f8755b7ac37654409356f6d8dcbb3aaa4de787b"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r4}, 0x94) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) 2.149820981s ago: executing program 4 (id=1699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) read$FUSE(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.42549191s ago: executing program 1 (id=1700): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_init_net_socket$ax25(0x3, 0x5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) clock_nanosleep(0x8, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1.355365079s ago: executing program 2 (id=1701): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) unshare(0x64000600) sched_setscheduler(0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 701.594958ms ago: executing program 4 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x541b, 0xfffffffffffffffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) unshare(0x6a040000) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1}) 0s ago: executing program 1 (id=1703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2}) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x18, r6, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): q: adding VLAN 0 to HW filter on device bond0 [ 136.210188][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.293429][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.300582][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.784150][ T6676] wg1: entered promiscuous mode [ 136.789086][ T6676] wg1: entered allmulticast mode [ 136.812964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.820150][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.016215][ T30] audit: type=1400 audit(1759623825.764:311): avc: denied { sys_module } for pid=6466 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.670491][ T30] audit: type=1400 audit(1759623826.034:312): avc: denied { getopt } for pid=6678 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.901020][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.022513][ T30] audit: type=1400 audit(1759623826.724:313): avc: denied { write } for pid=6687 comm="syz.4.189" name="route" dev="proc" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 139.225799][ T30] audit: type=1400 audit(1759623827.984:314): avc: denied { open } for pid=6702 comm="syz.2.192" path="/dev/ptyq8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 139.746083][ T30] audit: type=1400 audit(1759623828.504:315): avc: denied { connect } for pid=6702 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.823855][ T6714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.194'. [ 139.882948][ T6714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.194'. [ 140.356256][ T30] audit: type=1400 audit(1759623829.114:316): avc: denied { ioctl } for pid=6728 comm="syz.0.197" path="socket:[11591]" dev="sockfs" ino=11591 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.569058][ T6466] veth0_vlan: entered promiscuous mode [ 140.597136][ T6466] veth1_vlan: entered promiscuous mode [ 140.646128][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.662914][ T6466] veth0_macvtap: entered promiscuous mode [ 140.677326][ T6466] veth1_macvtap: entered promiscuous mode [ 140.703195][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.713386][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.752669][ T4316] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.769028][ T4316] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.196411][ T10] usb 3-1: config 0 has no interfaces? [ 141.209638][ T10] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 141.219944][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.250185][ T4316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.262199][ T10] usb 3-1: SerialNumber: syz [ 141.354491][ T10] usb 3-1: config 0 descriptor?? [ 141.479361][ T30] audit: type=1400 audit(1759623830.244:317): avc: denied { mount } for pid=6739 comm="syz.1.201" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 141.719022][ T4316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.748041][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.790837][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.874220][ T5882] usb 3-1: USB disconnect, device number 5 [ 141.909802][ T6389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.918604][ T6389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.939630][ T30] audit: type=1400 audit(1759623830.704:318): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 141.991869][ T30] audit: type=1400 audit(1759623830.754:319): avc: denied { mounton } for pid=6466 comm="syz-executor" path="/root/syzkaller.5PajHU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 143.163892][ T30] audit: type=1400 audit(1759623831.924:320): avc: denied { write } for pid=6764 comm="syz.1.207" name="radio6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.347629][ T30] audit: type=1400 audit(1759623832.074:321): avc: denied { read append } for pid=6764 comm="syz.1.207" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.583984][ T30] audit: type=1400 audit(1759623832.074:322): avc: denied { open } for pid=6764 comm="syz.1.207" path="/dev/comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.652899][ T30] audit: type=1400 audit(1759623832.074:323): avc: denied { ioctl } for pid=6764 comm="syz.1.207" path="/dev/comedi3" dev="devtmpfs" ino=1278 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.571228][ T30] audit: type=1400 audit(1759623833.334:324): avc: denied { append } for pid=6778 comm="syz.5.210" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 145.418982][ T6779] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 145.663840][ T30] audit: type=1400 audit(1759623834.384:325): avc: denied { execute } for pid=6792 comm="syz.4.213" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.919933][ T30] audit: type=1400 audit(1759623834.684:326): avc: denied { ioctl } for pid=6798 comm="syz.5.215" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.148754][ T30] audit: type=1400 audit(1759623834.834:327): avc: denied { shutdown } for pid=6794 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.006322][ T30] audit: type=1400 audit(1759623838.454:328): avc: denied { ioctl } for pid=6816 comm="syz.2.218" path="socket:[11971]" dev="sockfs" ino=11971 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.365866][ T30] audit: type=1400 audit(1759623839.004:329): avc: denied { watch } for pid=6822 comm="syz.0.219" path="/51/file1" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.197083][ T30] audit: type=1400 audit(1759623839.004:330): avc: denied { watch_sb watch_reads } for pid=6822 comm="syz.0.219" path="/51/file1" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.853450][ T6851] kvm: pic: level sensitive irq not supported [ 152.853923][ T6851] kvm: pic: level sensitive irq not supported [ 153.195820][ T30] audit: type=1400 audit(1759623841.954:331): avc: denied { read } for pid=6861 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.622248][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 154.676086][ T30] audit: type=1400 audit(1759623843.434:332): avc: denied { write } for pid=6876 comm="syz.4.231" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.051010][ T5940] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.906070][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 156.002216][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 156.020351][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24697, setting to 1024 [ 156.466921][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.479830][ T5940] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 156.489965][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.509503][ T5940] usb 5-1: config 0 descriptor?? [ 156.585302][ T30] audit: type=1400 audit(1759623845.334:333): avc: denied { ioctl } for pid=6878 comm="syz.2.232" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 157.146146][ T30] audit: type=1400 audit(1759623845.884:334): avc: denied { mount } for pid=6906 comm="syz.0.237" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 157.206699][ T5940] hid-multitouch 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 157.363165][ T30] audit: type=1400 audit(1759623846.124:335): avc: denied { watch } for pid=6913 comm="syz.0.238" path="/56/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.431243][ T5940] usb 5-1: USB disconnect, device number 6 [ 157.718217][ T6910] fido_id[6910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0457:07DA.0002/report_descriptor': No such file or directory [ 158.048818][ T30] audit: type=1400 audit(1759623846.804:336): avc: denied { ioctl } for pid=6922 comm="syz.1.239" path="socket:[12073]" dev="sockfs" ino=12073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.772712][ T30] audit: type=1400 audit(1759623847.534:337): avc: denied { bind } for pid=6927 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.520173][ T6945] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 160.786077][ T5858] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.981429][ T5858] usb 5-1: Using ep0 maxpacket: 16 [ 161.011304][ T5858] usb 5-1: config 0 has no interfaces? [ 161.030499][ T5858] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.064781][ T30] audit: type=1400 audit(1759623849.824:338): avc: denied { bind } for pid=6970 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.085781][ T5858] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.107144][ T5858] usb 5-1: Manufacturer: syz [ 161.132044][ T5858] usb 5-1: config 0 descriptor?? [ 161.157722][ T30] audit: type=1400 audit(1759623849.824:339): avc: denied { node_bind } for pid=6970 comm="syz.5.248" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 161.246958][ T30] audit: type=1400 audit(1759623849.884:340): avc: denied { write } for pid=6968 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.607628][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.680521][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.204596][ T5858] usb 5-1: USB disconnect, device number 7 [ 163.395369][ T30] audit: type=1326 audit(1759623852.144:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x0 [ 164.041339][ T30] audit: type=1400 audit(1759623852.554:342): avc: denied { execute } for pid=7006 comm="syz.0.252" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 164.327871][ T30] audit: type=1400 audit(1759623853.064:343): avc: denied { write } for pid=7031 comm="syz.2.256" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.520131][ T30] audit: type=1400 audit(1759623853.064:344): avc: denied { open } for pid=7031 comm="syz.2.256" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.594397][ T30] audit: type=1400 audit(1759623853.084:345): avc: denied { ioctl } for pid=7031 comm="syz.2.256" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.534436][ T30] audit: type=1400 audit(1759623853.904:346): avc: denied { create } for pid=7047 comm="syz.5.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.554840][ T30] audit: type=1400 audit(1759623853.914:347): avc: denied { bind } for pid=7047 comm="syz.5.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.580089][ T30] audit: type=1400 audit(1759623853.914:348): avc: denied { getopt } for pid=7047 comm="syz.5.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.498171][ T30] audit: type=1400 audit(1759623856.264:349): avc: denied { read } for pid=7075 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.124682][ T30] audit: type=1400 audit(1759623856.884:350): avc: denied { mounton } for pid=7089 comm="syz.0.268" path="/63/file0" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 169.068216][ T30] audit: type=1400 audit(1759623857.084:351): avc: denied { read } for pid=7087 comm="syz.1.269" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.092026][ T30] audit: type=1400 audit(1759623857.084:352): avc: denied { open } for pid=7087 comm="syz.1.269" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.240166][ T30] audit: type=1400 audit(1759623857.894:353): avc: denied { bind } for pid=7092 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.259821][ T30] audit: type=1400 audit(1759623857.894:354): avc: denied { name_bind } for pid=7092 comm="syz.4.270" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 169.281601][ T30] audit: type=1400 audit(1759623857.894:355): avc: denied { node_bind } for pid=7092 comm="syz.4.270" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 169.778553][ T30] audit: type=1400 audit(1759623857.914:356): avc: denied { name_connect } for pid=7092 comm="syz.4.270" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 170.106555][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.716210][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 171.526137][ T5858] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 171.542461][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.550816][ T5858] usb 3-1: Product: syz [ 171.558911][ T5858] usb 3-1: Manufacturer: syz [ 171.563558][ T5858] usb 3-1: SerialNumber: syz [ 171.732349][ T5858] usb 3-1: config 0 descriptor?? [ 171.739841][ T5858] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 172.730604][ T5858] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 173.226583][ T5858] usb 3-1: USB disconnect, device number 6 [ 176.707745][ T7169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.446227][ T30] audit: type=1400 audit(1759624122.209:357): avc: denied { connect } for pid=7176 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.579065][ T30] audit: type=1400 audit(1759624122.209:358): avc: denied { write } for pid=7176 comm="syz.5.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.608608][ T30] audit: type=1400 audit(1759624122.209:359): avc: denied { transfer } for pid=7174 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 177.793094][ T7184] syz_tun: entered allmulticast mode [ 177.987926][ T7184] dvmrp1: entered allmulticast mode [ 178.414386][ T7191] Bluetooth: MGMT ver 1.23 [ 178.881646][ T7178] syz_tun: left allmulticast mode [ 179.718856][ T7213] ubi8: attaching mtd0 [ 179.727771][ T7213] ubi8 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 187.441159][ T7286] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.528663][ T30] audit: type=1400 audit(1759624132.299:360): avc: denied { write } for pid=7284 comm="syz.4.322" lport=46065 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 187.529318][ T7289] sctp: [Deprecated]: syz.4.322 (pid 7289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.529318][ T7289] Use struct sctp_sack_info instead [ 187.562989][ T30] audit: type=1400 audit(1759624132.299:361): avc: denied { setopt } for pid=7284 comm="syz.4.322" lport=46065 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 190.042574][ T7318] geneve2: entered promiscuous mode [ 190.338477][ T7318] geneve2: entered allmulticast mode [ 191.506085][ T5940] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 191.723818][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.819724][ T5940] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 191.850117][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.865394][ T5940] usb 3-1: config 0 descriptor?? [ 191.873421][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 193.184981][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 193.599947][ T5940] pwc: recv_control_msg error -32 req 02 val 2700 [ 193.625842][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00 [ 193.633848][ T5940] pwc: recv_control_msg error -32 req 04 val 1000 [ 193.646064][ T5940] pwc: recv_control_msg error -32 req 04 val 1300 [ 193.654328][ T5940] pwc: recv_control_msg error -32 req 04 val 1400 [ 193.665273][ T5940] pwc: recv_control_msg error -32 req 02 val 2000 [ 193.674349][ T5940] pwc: recv_control_msg error -32 req 02 val 2100 [ 193.682375][ T5940] pwc: recv_control_msg error -32 req 04 val 1500 [ 193.874350][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.883907][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.902765][ T5940] pwc: recv_control_msg error -71 req 02 val 2400 [ 193.912759][ T5940] pwc: recv_control_msg error -71 req 02 val 2600 [ 194.003112][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 194.041214][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 194.096668][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 194.105062][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 194.125759][ T5940] pwc: Registered as video103. [ 194.145353][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 194.214882][ T5940] usb 3-1: USB disconnect, device number 7 [ 194.455261][ T7367] 9pnet_fd: Insufficient options for proto=fd [ 194.502811][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.510523][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.623101][ T7363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.639973][ T7363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.655694][ T7371] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 194.715628][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 194.983686][ T7369] bridge_slave_0: left allmulticast mode [ 194.993624][ T7369] bridge_slave_0: left promiscuous mode [ 194.999774][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.814973][ T7381] ptrace attach of "./syz-executor exec"[5830] was attempted by " [ 195.880359][ T30] audit: type=1400 audit(1759624139.849:362): avc: denied { create } for pid=7373 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.006808][ T30] audit: type=1400 audit(1759624139.849:363): avc: denied { connect } for pid=7373 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.058685][ T7369] bridge_slave_1: left allmulticast mode [ 196.075672][ T7369] bridge_slave_1: left promiscuous mode [ 196.084114][ T30] audit: type=1400 audit(1759624139.849:364): avc: denied { write } for pid=7373 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.109344][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.149359][ T7369] bond0: (slave bond_slave_0): Releasing backup interface [ 196.188415][ T7369] bond0: (slave bond_slave_1): Releasing backup interface [ 196.482466][ T7369] team0: Port device team_slave_0 removed [ 196.505922][ T7369] team0: Port device team_slave_1 removed [ 196.512589][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.520305][ T7369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.563413][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.576094][ T7369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.584412][ T7369] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.604629][ T7370] team0: Mode changed to "loadbalance" [ 196.644885][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.673796][ T7371] team0: Port device bond0 added [ 197.755640][ T7372] team0 (unregistering): Port device bond0 removed [ 197.836242][ T4316] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.872436][ T4316] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.990772][ T4316] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.999734][ T4316] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.262389][ T7420] tipc: Started in network mode [ 200.289509][ T7420] tipc: Node identity 9a7e2c0092d9, cluster identity 4711 [ 200.521760][ T7420] tipc: Enabled bearer , priority 0 [ 200.745588][ T7423] syzkaller0: entered promiscuous mode [ 200.746062][ T30] audit: type=1400 audit(1759624145.289:365): avc: denied { bind } for pid=7427 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.780533][ T7423] syzkaller0: entered allmulticast mode [ 200.815184][ T30] audit: type=1400 audit(1759624145.579:366): avc: denied { bind } for pid=7432 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.844052][ T30] audit: type=1400 audit(1759624145.609:367): avc: denied { listen } for pid=7432 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.844090][ T7420] tipc: Resetting bearer [ 200.921702][ T7436] netlink: 'syz.4.359': attribute type 3 has an invalid length. [ 201.075288][ T30] audit: type=1400 audit(1759624145.839:368): avc: denied { append } for pid=7438 comm="syz.2.360" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 201.600998][ T7410] tipc: Resetting bearer [ 201.621491][ T7127] tipc: Node number set to 145173504 [ 201.657358][ T7410] tipc: Disabling bearer [ 202.176554][ T5882] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.355654][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 202.368199][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.379152][ T5882] usb 3-1: config 0 has no interfaces? [ 202.388235][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.402615][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 202.410866][ T5882] usb 3-1: SerialNumber: syz [ 202.452566][ T5882] usb 3-1: config 0 descriptor?? [ 202.565194][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.696563][ T10] usb 3-1: USB disconnect, device number 8 [ 202.718208][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.724932][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=a9.d7 [ 202.734197][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.746451][ T24] usb 6-1: config 0 descriptor?? [ 202.769725][ T24] ftdi_sio 6-1:0.0: Ignoring interface reserved for JTAG [ 202.985791][ T30] audit: type=1400 audit(1759624147.749:369): avc: denied { execute } for pid=7451 comm="syz.5.365" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 203.686371][ T5940] usb 6-1: USB disconnect, device number 2 [ 203.914043][ T7498] geneve2: entered promiscuous mode [ 203.919354][ T7498] geneve2: entered allmulticast mode [ 204.381581][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 205.152494][ T30] audit: type=1400 audit(1759624149.909:370): avc: denied { read } for pid=7515 comm="syz.5.376" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.238315][ T30] audit: type=1400 audit(1759624149.909:371): avc: denied { open } for pid=7515 comm="syz.5.376" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.416587][ T30] audit: type=1400 audit(1759624149.909:372): avc: denied { ioctl } for pid=7515 comm="syz.5.376" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 206.618030][ T30] audit: type=1400 audit(1759624151.379:373): avc: denied { bind } for pid=7529 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.956629][ T30] audit: type=1400 audit(1759624151.719:374): avc: denied { read } for pid=7531 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 207.106126][ T5940] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.653527][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.805670][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.001482][ T7551] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 208.056421][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.077932][ T5940] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.088766][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.090764][ T7551] bond2: entered promiscuous mode [ 208.112896][ T5940] usb 3-1: config 0 descriptor?? [ 208.172546][ T7551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.207914][ T30] audit: type=1400 audit(1759624152.979:375): avc: denied { create } for pid=7550 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 208.260131][ T30] audit: type=1400 audit(1759624153.029:376): avc: denied { write } for pid=7550 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 208.265732][ T7551] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.317627][ T7551] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 208.356382][ T7551] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 208.481373][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.389'. [ 208.576281][ T7553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.585818][ T7553] bond2: (slave bond3): making interface the new active one [ 208.606993][ T7553] bond3: entered promiscuous mode [ 208.607521][ T5940] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 208.848012][ T7553] bond2: (slave bond3): Enslaving as an active interface with an up link [ 209.037537][ T7127] usb 3-1: USB disconnect, device number 9 [ 209.080972][ T7563] fido_id[7563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 210.608199][ T30] audit: type=1400 audit(1759624155.369:377): avc: denied { create } for pid=7569 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.194221][ T30] audit: type=1400 audit(1759624156.959:378): avc: denied { setopt } for pid=7611 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.470267][ T30] audit: type=1400 audit(1759624158.209:379): avc: denied { name_bind } for pid=7625 comm="syz.0.406" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 213.566326][ T30] audit: type=1400 audit(1759624158.289:380): avc: denied { bind } for pid=7608 comm="syz.5.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.671527][ T30] audit: type=1400 audit(1759624158.289:381): avc: denied { connect } for pid=7608 comm="syz.5.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.735088][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.408'. [ 216.309781][ T7662] cgroup: fork rejected by pids controller in /syz4 [ 216.429659][ T30] audit: type=1400 audit(1759624161.199:382): avc: denied { create } for pid=7768 comm="syz.5.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 216.634555][ T30] audit: type=1400 audit(1759624161.399:383): avc: denied { ioctl } for pid=7768 comm="syz.5.418" path="socket:[14611]" dev="sockfs" ino=14611 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.018482][ T30] audit: type=1400 audit(1759624163.789:384): avc: denied { bind } for pid=7793 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.212657][ T30] audit: type=1400 audit(1759624163.809:385): avc: denied { listen } for pid=7793 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.242167][ T30] audit: type=1400 audit(1759624163.809:386): avc: denied { accept } for pid=7793 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.402235][ T7803] usb usb1: check_ctrlrecip: process 7803 (syz.4.428) requesting ep 01 but needs 81 [ 219.858879][ T30] audit: type=1400 audit(1759624163.879:387): avc: denied { ioctl } for pid=7793 comm="syz.2.426" path="socket:[15689]" dev="sockfs" ino=15689 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 220.541620][ T30] audit: type=1400 audit(1759624164.799:388): avc: denied { read write } for pid=7797 comm="syz.5.427" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 220.655386][ T30] audit: type=1400 audit(1759624164.799:389): avc: denied { open } for pid=7797 comm="syz.5.427" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 222.246145][ T30] audit: type=1400 audit(1759624422.953:390): avc: denied { read write } for pid=7829 comm="syz.2.436" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 222.886154][ T30] audit: type=1400 audit(1759624422.953:391): avc: denied { open } for pid=7829 comm="syz.2.436" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 222.996156][ T30] audit: type=1400 audit(1759624422.963:392): avc: denied { ioctl } for pid=7829 comm="syz.2.436" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.053578][ T30] audit: type=1400 audit(1759624423.653:393): avc: denied { listen } for pid=7838 comm="syz.2.438" lport=34421 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.462535][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 224.462549][ T30] audit: type=1400 audit(1759624425.213:396): avc: denied { ioctl } for pid=7861 comm="syz.4.443" path="socket:[15841]" dev="sockfs" ino=15841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 224.493061][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.711945][ T30] audit: type=1400 audit(1759624425.553:397): avc: denied { setopt } for pid=7870 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.962873][ T30] audit: type=1400 audit(1759624425.553:398): avc: denied { connect } for pid=7870 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.276202][ T7866] geneve2: entered promiscuous mode [ 226.281458][ T7866] geneve2: entered allmulticast mode [ 226.428614][ T30] audit: type=1400 audit(1759624425.553:399): avc: denied { write } for pid=7870 comm="syz.2.444" laddr=fe80::9426:bbff:fea3:e7d0 lport=52546 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.551819][ T30] audit: type=1400 audit(1759624425.553:400): avc: denied { read } for pid=7870 comm="syz.2.444" laddr=fe80::9426:bbff:fea3:e7d0 lport=52546 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.661735][ T30] audit: type=1400 audit(1759624426.763:401): avc: denied { connect } for pid=7875 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.784565][ T30] audit: type=1400 audit(1759624427.373:402): avc: denied { nlmsg_read } for pid=7880 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.074957][ T30] audit: type=1400 audit(1759624428.833:403): avc: denied { mounton } for pid=7891 comm="syz.5.448" path="/file0" dev="ramfs" ino=15920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 228.111173][ T7892] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.147689][ T7892] overlayfs: failed to set xattr on upper [ 228.156990][ T7894] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 228.306054][ T7892] overlayfs: ...falling back to redirect_dir=nofollow. [ 228.336415][ T7892] overlayfs: ...falling back to index=off. [ 228.346246][ T7892] overlayfs: ...falling back to uuid=null. [ 233.722616][ T7960] nfs4: Deprecated parameter 'intr' [ 233.728780][ T7960] nfs4: Unknown parameter 'smackfsroot' [ 237.009526][ T7985] netlink: 80 bytes leftover after parsing attributes in process `syz.0.474'. [ 238.756877][ T30] audit: type=1400 audit(1759624439.523:404): avc: denied { write } for pid=8005 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.735874][ T8023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.508508][ T30] audit: type=1400 audit(1759624441.153:405): avc: denied { write } for pid=8024 comm="syz.5.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.018198][ T30] audit: type=1400 audit(1759624441.973:406): avc: denied { bind } for pid=8040 comm="syz.5.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.095826][ T30] audit: type=1400 audit(1759624442.853:407): avc: denied { kexec_image_load } for pid=8043 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 245.086926][ T30] audit: type=1400 audit(1759624445.853:408): avc: denied { append } for pid=8054 comm="syz.5.495" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.165865][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 247.636340][ T8103] Driver unsupported XDP return value 0 on prog (id 84) dev N/A, expect packet loss! [ 248.361951][ T8113] syz.5.512 uses obsolete (PF_INET,SOCK_PACKET) [ 250.328494][ T30] audit: type=1400 audit(1759624451.083:409): avc: denied { getopt } for pid=8128 comm="syz.5.516" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.451202][ T5910] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 251.746847][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 251.896230][ T5910] usb 3-1: device descriptor read/64, error -32 [ 252.386131][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 253.033606][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 253.045206][ T5910] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.060732][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.079688][ T5910] usb 3-1: Product: syz [ 253.083882][ T5910] usb 3-1: Manufacturer: syz [ 253.226544][ T5910] usb 3-1: SerialNumber: syz [ 253.251541][ T5910] usb 3-1: config 0 descriptor?? [ 253.708808][ T8168] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 253.768016][ T8168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.778107][ T8168] bond1: (slave bond2): making interface the new active one [ 253.786592][ T8168] bond1: (slave bond2): Enslaving as an active interface with an up link [ 253.796218][ T8140] capability: warning: `syz.2.520' uses 32-bit capabilities (legacy support in use) [ 253.901197][ T8168] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 253.917049][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'. [ 253.929295][ T8168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.456699][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.533878][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.326794][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.333184][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.369358][ T30] audit: type=1400 audit(1759624456.133:410): avc: denied { read } for pid=8188 comm="syz.0.532" path="socket:[16529]" dev="sockfs" ino=16529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.234706][ T10] usb 3-1: USB disconnect, device number 11 [ 258.006158][ T909] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 258.246810][ T30] audit: type=1400 audit(1759624459.003:411): avc: denied { read } for pid=43 comm="kworker/1:1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16565 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 259.306539][ T909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 259.321881][ T909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.352199][ T909] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 259.371074][ T909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.687108][ T909] usb 3-1: config 0 descriptor?? [ 260.829565][ T8249] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 260.869079][ T8217] warning: `syz.2.541' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 260.903123][ T909] usbhid 3-1:0.0: can't add hid device: -71 [ 260.909507][ T909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 260.971794][ T909] usb 3-1: USB disconnect, device number 12 [ 261.304873][ T8264] syz_tun: entered allmulticast mode [ 261.836187][ T8268] dvmrp1: entered allmulticast mode [ 262.556126][ T8263] syz_tun: left allmulticast mode [ 263.089325][ T30] audit: type=1400 audit(1759624463.783:412): avc: denied { connect } for pid=8275 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.118335][ T30] audit: type=1400 audit(1759624463.843:413): avc: denied { setopt } for pid=8275 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.146433][ T30] audit: type=1400 audit(1759624463.853:414): avc: denied { shutdown } for pid=8275 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.147867][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 265.504823][ T8305] trusted_key: syz.4.563 sent an empty control message without MSG_MORE. [ 265.670210][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 267.056385][ T5940] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 267.491729][ T30] audit: type=1400 audit(1759624467.863:415): avc: denied { bind } for pid=8320 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.682754][ T5940] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.818103][ T5940] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 267.946844][ T5940] usb 6-1: config 0 has no interface number 0 [ 268.716073][ T5940] usb 6-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.751141][ T5940] usb 6-1: config 0 interface 1 has no altsetting 0 [ 268.765835][ T5940] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 269.937675][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.949646][ T5940] usb 6-1: config 0 descriptor?? [ 270.452658][ T5940] usb 6-1: can't set config #0, error -71 [ 271.006088][ T5940] usb 6-1: USB disconnect, device number 3 [ 271.278143][ T30] audit: type=1400 audit(1759624472.043:416): avc: denied { connect } for pid=8350 comm="syz.5.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.149193][ T8359] gfs2: gfs2 mount does not exist [ 273.816065][ T30] audit: type=1400 audit(1759624474.563:417): avc: denied { connect } for pid=8378 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 274.115093][ T8383] vlan2: entered promiscuous mode [ 274.127228][ T8383] vlan2: entered allmulticast mode [ 274.137037][ T8383] hsr_slave_1: entered allmulticast mode [ 274.156056][ T30] audit: type=1400 audit(1759624474.893:418): avc: denied { read } for pid=8378 comm="syz.1.584" path="socket:[16859]" dev="sockfs" ino=16859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 274.246984][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 274.256272][ T30] audit: type=1400 audit(1759624474.953:419): avc: denied { write } for pid=8378 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 275.111923][ T8389] netlink: 'syz.4.588': attribute type 1 has an invalid length. [ 275.216910][ T8396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.588'. [ 275.248725][ T8389] gretap1: entered promiscuous mode [ 275.614134][ T8389] bond1: (slave gretap1): making interface the new active one [ 275.845486][ T8389] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 275.867662][ T8396] bond1: entered promiscuous mode [ 275.884662][ T8396] bond1: entered allmulticast mode [ 276.109362][ T8396] gretap1: entered allmulticast mode [ 276.684450][ T8396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.734489][ T8411] futex_wake_op: syz.1.592 tries to shift op by 32; fix this program [ 277.975831][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 277.982330][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 278.096121][ T30] audit: type=1400 audit(1759624478.723:420): avc: denied { mounton } for pid=8432 comm="syz.5.600" path="/69/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 278.251179][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 278.611019][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 278.638264][ T30] audit: type=1800 audit(1759624479.403:421): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.600" name="/" dev="9p" ino=2 res=0 errno=0 [ 278.769544][ T8441] fuse: Bad value for 'user_id' [ 278.774434][ T8441] fuse: Bad value for 'user_id' [ 278.829600][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.603'. [ 278.900635][ T30] audit: type=1400 audit(1759624479.653:422): avc: denied { bind } for pid=8447 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.925308][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 278.957411][ T8430] ceph: No mds server is up or the cluster is laggy [ 278.961216][ T30] audit: type=1400 audit(1759624479.713:423): avc: denied { setopt } for pid=8447 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 280.190077][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 284.235047][ T30] audit: type=1400 audit(1759624484.993:424): avc: denied { read } for pid=8506 comm="syz.1.620" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.498158][ T8517] tipc: Started in network mode [ 284.595371][ T8517] tipc: Node identity aaaaaaaaaa39, cluster identity 4711 [ 284.965470][ T8517] tipc: Enabled bearer , priority 0 [ 284.997175][ T5910] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 285.257669][ T5910] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 285.296739][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.723947][ T5910] usb 6-1: config 0 descriptor?? [ 285.942039][ T5910] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 286.256208][ T10] tipc: Node number set to 9677482 [ 286.279919][ T5910] [drm:udl_init] *ERROR* Selecting channel failed [ 286.327967][ T5910] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 286.341040][ T5910] [drm] Initialized udl on minor 2 [ 286.350093][ T5910] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.362655][ T5910] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 286.375374][ T43] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.386711][ T5910] usb 6-1: USB disconnect, device number 4 [ 286.393052][ T43] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 286.462174][ T8529] NILFS (loop2): device size too small [ 286.466123][ T30] audit: type=1400 audit(1759624487.223:425): avc: denied { mounton } for pid=8528 comm="syz.2.628" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 287.882910][ T8544] : entered promiscuous mode [ 288.604081][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 288.731596][ T8563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.634'. [ 288.961500][ T30] audit: type=1804 audit(1759624489.653:426): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.638" name="file0" dev="ramfs" ino=17817 res=1 errno=0 [ 289.205041][ T30] audit: type=1804 audit(1759624489.963:427): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.639" name="/newroot/124/file0" dev="tmpfs" ino=658 res=1 errno=0 [ 289.349194][ T30] audit: type=1800 audit(1759624489.963:428): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.639" name="file0" dev="tmpfs" ino=658 res=0 errno=0 [ 292.326047][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 292.513881][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 292.873002][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 292.882908][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.891412][ T10] usb 2-1: Product: syz [ 292.895694][ T10] usb 2-1: Manufacturer: syz [ 292.902313][ T10] usb 2-1: SerialNumber: syz [ 292.987120][ T10] usb 2-1: config 0 descriptor?? [ 293.531905][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 293.708252][ T10] usb 2-1: Detected FT-X [ 294.861710][ T30] audit: type=1800 audit(1759624495.583:429): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.649" name="bus" dev="overlay" ino=627 res=0 errno=0 [ 295.154434][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 296.535201][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 296.585174][ T10] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 296.640830][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 296.663473][ T10] usb 2-1: USB disconnect, device number 2 [ 296.671095][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 296.735356][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 296.749086][ T10] ftdi_sio 2-1:0.0: device disconnected [ 296.898053][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 297.705083][ T30] audit: type=1400 audit(1759624498.463:430): avc: denied { read write } for pid=8658 comm="syz.1.661" name="mouse0" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 298.556058][ T30] audit: type=1400 audit(1759624498.493:431): avc: denied { open } for pid=8658 comm="syz.1.661" path="/dev/input/mouse0" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 299.087633][ T8664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.662'. [ 299.117787][ T8664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.662'. [ 299.370008][ T8679] netlink: 44 bytes leftover after parsing attributes in process `syz.0.663'. [ 299.484561][ T8682] netlink: 'syz.5.666': attribute type 12 has an invalid length. [ 301.802889][ T8704] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.672'. [ 302.232460][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 305.236598][ T30] audit: type=1400 audit(1759624505.983:432): avc: denied { setopt } for pid=8731 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.176352][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 308.286181][ T30] audit: type=1804 audit(1759624509.043:433): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.689" name="/newroot/127/file1" dev="fuse" ino=1 res=1 errno=0 [ 309.362241][ T30] audit: type=1800 audit(1759624509.043:434): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.689" name="/" dev="fuse" ino=1 res=0 errno=0 [ 309.384106][ T30] audit: type=1800 audit(1759624509.043:435): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.689" name="/" dev="fuse" ino=1 res=0 errno=0 [ 311.448240][ T8805] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 311.459638][ T8805] batman_adv: batadv0: Adding interface: wlan0 [ 311.465887][ T8805] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.491922][ T8805] batman_adv: batadv0: Interface activated: wlan0 [ 311.993994][ T30] audit: type=1400 audit(1759624512.733:436): avc: denied { append } for pid=8814 comm="syz.1.699" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 313.736021][ T8827] netlink: 'syz.1.702': attribute type 10 has an invalid length. [ 313.766027][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.804534][ T8827] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 314.092089][ T8832] overlayfs: failed to clone upperpath [ 315.043619][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.708'. [ 316.871136][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.878589][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.785694][ T7127] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 319.070540][ T7127] usb 2-1: Using ep0 maxpacket: 8 [ 319.091270][ T7127] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 319.101907][ T7127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.121891][ T7127] pvrusb2: Hardware description: Terratec Grabster AV400 [ 319.134848][ T7127] pvrusb2: ********** [ 319.209260][ T7127] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 319.256348][ T7127] pvrusb2: Important functionality might not be entirely working. [ 319.264200][ T7127] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 319.369052][ T7127] pvrusb2: ********** [ 319.988946][ T30] audit: type=1400 audit(1759624520.753:437): avc: denied { watch } for pid=8886 comm="syz.2.719" path="/130/file0" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 321.288910][ T2324] pvrusb2: Invalid write control endpoint [ 321.289475][ T7127] usb 2-1: USB disconnect, device number 3 [ 322.119032][ T2324] pvrusb2: Invalid write control endpoint [ 322.124905][ T2324] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 322.136445][ T2324] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 322.143993][ T2324] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 322.756158][ T2324] pvrusb2: Device being rendered inoperable [ 322.765860][ T2324] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 322.796052][ T2324] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 322.960699][ T2324] pvrusb2: Attached sub-driver cx25840 [ 323.022867][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 323.308246][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 323.427895][ T30] audit: type=1400 audit(1759624524.163:438): avc: denied { associate } for pid=8922 comm="syz.4.727" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 324.791035][ T30] audit: type=1326 audit(1759624525.553:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.5.731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x0 [ 325.548386][ T30] audit: type=1400 audit(1759624526.303:440): avc: denied { create } for pid=8940 comm="syz.1.733" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 325.615698][ T30] audit: type=1400 audit(1759624526.303:441): avc: denied { link } for pid=8940 comm="syz.1.733" name="file1" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 325.722923][ T30] audit: type=1400 audit(1759624526.343:442): avc: denied { setattr } for pid=8940 comm="syz.1.733" name="#c" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 325.861468][ T30] audit: type=1400 audit(1759624526.343:443): avc: denied { rename } for pid=8940 comm="syz.1.733" name="#c" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 326.537171][ T8954] netlink: 'syz.1.737': attribute type 4 has an invalid length. [ 326.544974][ T8954] netlink: 152 bytes leftover after parsing attributes in process `syz.1.737'. [ 326.628247][ T8954] : renamed from bond0 (while UP) [ 327.517227][ T30] audit: type=1400 audit(1759624527.853:444): avc: denied { listen } for pid=8959 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.581185][ T30] audit: type=1400 audit(1759624527.933:445): avc: denied { accept } for pid=8959 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.289508][ T30] audit: type=1400 audit(1759624530.053:446): avc: denied { create } for pid=8977 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 331.335118][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'. [ 331.345750][ T8995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.746'. [ 336.381894][ T9056] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 336.401891][ T5827] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 337.758285][ T9067] batadv_slave_0: entered promiscuous mode [ 338.301694][ T9074] netlink: 176 bytes leftover after parsing attributes in process `syz.0.768'. [ 338.456285][ T9079] tipc: Enabled bearer , priority 0 [ 338.475526][ T9079] syzkaller0: entered promiscuous mode [ 338.490448][ T9079] syzkaller0: entered allmulticast mode [ 338.816833][ T9089] tipc: Resetting bearer [ 339.740948][ T9078] tipc: Resetting bearer [ 339.878842][ T9078] tipc: Disabling bearer [ 340.517298][ T9104] tipc: Enabled bearer , priority 0 [ 340.537924][ T9104] syzkaller0: entered promiscuous mode [ 340.556023][ T9104] syzkaller0: entered allmulticast mode [ 340.583829][ T9104] tipc: Resetting bearer [ 340.916663][ T30] audit: type=1804 audit(1759624541.393:447): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.776" name="file0" dev="ramfs" ino=19703 res=1 errno=0 [ 341.049572][ T9103] tipc: Resetting bearer [ 341.096481][ T9103] tipc: Disabling bearer [ 343.041579][ T30] audit: type=1800 audit(1759624542.963:448): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.779" name="bus" dev="overlay" ino=755 res=0 errno=0 [ 344.096092][ T30] audit: type=1400 audit(1759624544.843:449): avc: denied { create } for pid=9127 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 345.507785][ T9141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 345.522715][ T30] audit: type=1400 audit(1759624546.163:450): avc: denied { setopt } for pid=9140 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.099318][ T9156] netlink: 'syz.0.787': attribute type 12 has an invalid length. [ 346.502037][ T30] audit: type=1400 audit(1759624547.263:451): avc: denied { firmware_load } for pid=9152 comm="syz.4.790" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 346.625486][ T9153] syz.4.790 (9153) used greatest stack depth: 17928 bytes left [ 349.264153][ T30] audit: type=1400 audit(1759624550.003:452): avc: denied { create } for pid=9183 comm="syz.5.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 349.448259][ T30] audit: type=1400 audit(1759624550.033:453): avc: denied { connect } for pid=9183 comm="syz.5.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 350.328572][ T9194] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 353.458445][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 353.901410][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.811'. [ 354.057892][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.815'. [ 354.229201][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.955200][ T9253] netlink: 'syz.4.816': attribute type 2 has an invalid length. [ 354.963126][ T9253] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 354.972271][ T9253] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 355.410357][ T9263] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 356.174783][ T30] audit: type=1400 audit(1759624556.923:454): avc: denied { connect } for pid=9270 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 356.227296][ T30] audit: type=1400 audit(1759624556.993:455): avc: denied { read } for pid=9270 comm="syz.5.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 356.675072][ T9279] netlink: 'syz.0.824': attribute type 4 has an invalid length. [ 356.854194][ T9281] tipc: Enabling of bearer rejected, failed to enable media [ 357.125921][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.826'. [ 357.332000][ T9296] bond0: entered promiscuous mode [ 357.347650][ T9296] bond_slave_0: entered promiscuous mode [ 357.362719][ T9296] bond_slave_1: entered promiscuous mode [ 357.377020][ T9296] dummy0: entered promiscuous mode [ 357.518550][ T9296] hsr1: entered promiscuous mode [ 357.540030][ T9296] hsr1: entered allmulticast mode [ 358.225336][ T9296] bond0: entered allmulticast mode [ 358.231389][ T9296] bond_slave_0: entered allmulticast mode [ 358.244358][ T9296] bond_slave_1: entered allmulticast mode [ 358.351284][ T9296] dummy0: entered allmulticast mode [ 359.369932][ T30] audit: type=1400 audit(1759624560.133:456): avc: denied { ioctl } for pid=9320 comm="syz.1.834" path="socket:[20078]" dev="sockfs" ino=20078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 364.817397][ T5940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 366.069495][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.080089][ T5940] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 366.173624][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.184144][ T5940] usb 3-1: config 0 descriptor?? [ 366.192663][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 366.945902][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 366.953308][ T5940] pwc: recv_control_msg error -32 req 02 val 2700 [ 366.981240][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00 [ 366.998306][ T5940] pwc: recv_control_msg error -32 req 04 val 1000 [ 367.015316][ T5940] pwc: recv_control_msg error -32 req 04 val 1300 [ 367.035863][ T5940] pwc: recv_control_msg error -32 req 04 val 1400 [ 367.057564][ T5940] pwc: recv_control_msg error -32 req 02 val 2000 [ 367.070260][ T5940] pwc: recv_control_msg error -32 req 02 val 2100 [ 367.103313][ T5940] pwc: recv_control_msg error -32 req 04 val 1500 [ 367.209870][ T5940] pwc: recv_control_msg error -32 req 02 val 2500 [ 367.217836][ T5940] pwc: recv_control_msg error -32 req 02 val 2400 [ 367.225124][ T5940] pwc: recv_control_msg error -32 req 02 val 2600 [ 367.797373][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 367.804330][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 367.811207][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 367.913896][ T30] audit: type=1400 audit(1759624568.103:457): avc: denied { write } for pid=9405 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 368.118290][ T5940] pwc: Registered as video103. [ 368.648563][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 368.691917][ T5940] usb 3-1: USB disconnect, device number 13 [ 370.632481][ T30] audit: type=1400 audit(1759624571.383:458): avc: denied { read } for pid=9441 comm="syz.1.863" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 370.784140][ T30] audit: type=1400 audit(1759624571.383:459): avc: denied { open } for pid=9441 comm="syz.1.863" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 370.809183][ T30] audit: type=1400 audit(1759624571.383:460): avc: denied { ioctl } for pid=9441 comm="syz.1.863" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 375.442948][ T5940] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 375.736607][ T30] audit: type=1400 audit(1759624576.433:461): avc: denied { read } for pid=9495 comm="syz.5.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 375.747424][ T5940] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 375.845753][ T5940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.863250][ T9507] netlink: 'syz.0.880': attribute type 2 has an invalid length. [ 375.871159][ T9507] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 375.884785][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 375.887100][ T5940] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 376.319971][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 376.384725][ T5940] usb 3-1: Product: syz [ 376.396302][ T5940] usb 3-1: Manufacturer: syz [ 376.400908][ T5940] usb 3-1: SerialNumber: syz [ 376.616715][ T5940] usb 3-1: config 0 descriptor?? [ 376.637469][ T5940] usb 3-1: selecting invalid altsetting 0 [ 377.165194][ T5940] usb 3-1: USB disconnect, device number 14 [ 377.417372][ T9517] udevd[9517]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.800702][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.808770][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.874319][ T30] audit: type=1400 audit(1759624579.633:462): avc: denied { load_policy } for pid=9516 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 378.874737][ T9518] SELinux: ebitmap: map size 74280818 does not match my size 64 (high bit was 33554432) [ 378.998245][ T9518] SELinux: failed to load policy [ 379.796274][ T5858] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 379.957021][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.976064][ T5858] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.988439][ T5858] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 380.000073][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.027934][ T5858] usb 3-1: config 0 descriptor?? [ 382.045190][ T9580] tipc: Enabling of bearer rejected, failed to enable media [ 384.359454][ T43] usb 3-1: USB disconnect, device number 15 [ 385.048371][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 385.178434][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 385.594978][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 385.850200][ T30] audit: type=1400 audit(1759624586.613:463): avc: denied { create } for pid=9614 comm="syz.1.907" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 385.951360][ T30] audit: type=1400 audit(1759624586.713:464): avc: denied { mounton } for pid=9614 comm="syz.1.907" path="/183/file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 387.045047][ T30] audit: type=1400 audit(1759624587.803:465): avc: denied { unlink } for pid=5830 comm="syz-executor" name="file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 387.856076][ T909] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 388.089540][ T909] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 388.179104][ T909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.191717][ T909] usb 2-1: Product: syz [ 388.303526][ T909] usb 2-1: Manufacturer: syz [ 388.312997][ T909] usb 2-1: SerialNumber: syz [ 388.629550][ T909] usb 2-1: config 0 descriptor?? [ 388.896231][ T909] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 389.218862][ T30] audit: type=1400 audit(1759624589.973:466): avc: denied { create } for pid=9657 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 390.127843][ T30] audit: type=1400 audit(1759624589.973:467): avc: denied { ioctl } for pid=9657 comm="syz.4.919" path="socket:[21363]" dev="sockfs" ino=21363 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 391.134257][ T909] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 391.147125][ T909] usb 2-1: USB disconnect, device number 4 [ 391.645044][ T9688] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 391.663966][ T9688] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 393.733700][ T9714] can0: slcan on ptm0. [ 394.684711][ T9710] can0 (unregistered): slcan off ptm0. [ 397.785756][ T30] audit: type=1400 audit(1759624598.543:468): avc: denied { setattr } for pid=9758 comm="syz.2.944" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.842275][ T9764] trusted_key: encrypted_key: insufficient parameters specified [ 398.146222][ T9764] tmpfs: Bad value for 'mpol' [ 399.073026][ T9785] netlink: 165 bytes leftover after parsing attributes in process `syz.1.948'. [ 400.302985][ T9805] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 400.312488][ T5858] IPVS: starting estimator thread 0... [ 400.419622][ T9809] IPVS: using max 46 ests per chain, 110400 per kthread [ 400.629824][ T9816] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 404.681120][ T9863] tipc: Enabling of bearer rejected, failed to enable media [ 406.942037][ T30] audit: type=1400 audit(1759624607.703:469): avc: denied { read } for pid=9892 comm="syz.1.973" dev="sockfs" ino=22962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 407.135213][ T9893] ======================================================= [ 407.135213][ T9893] WARNING: The mand mount option has been deprecated and [ 407.135213][ T9893] and is ignored by this kernel. Remove the mand [ 407.135213][ T9893] option from the mount to silence this warning. [ 407.135213][ T9893] ======================================================= [ 407.232936][ T9893] 9pnet_fd: Insufficient options for proto=fd [ 407.514468][ T30] audit: type=1400 audit(1759624608.273:470): avc: denied { mounton } for pid=9897 comm="syz.2.974" path="/174/file0" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 407.635991][ T30] audit: type=1400 audit(1759624608.273:471): avc: denied { setattr } for pid=9897 comm="syz.2.974" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 407.686004][ T30] audit: type=1400 audit(1759624608.343:472): avc: denied { mounton } for pid=9897 comm="syz.2.974" path="/174/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 407.821514][ T30] audit: type=1804 audit(1759624608.493:473): pid=9902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.975" name="/newroot/195/file1" dev="fuse" ino=1 res=1 errno=0 [ 407.967722][ T30] audit: type=1800 audit(1759624608.493:474): pid=9902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.975" name="/" dev="fuse" ino=1 res=0 errno=0 [ 407.988912][ T30] audit: type=1800 audit(1759624608.493:475): pid=9902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.975" name="/" dev="fuse" ino=1 res=0 errno=0 [ 411.312852][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'. [ 411.336878][ T30] audit: type=1400 audit(1759624612.073:476): avc: denied { write } for pid=9931 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 414.222578][ T9957] orangefs_mount: mount request failed with -4 [ 416.666257][ T9998] tipc: Enabling of bearer rejected, failed to enable media [ 416.701777][T10003] tipc: Enabled bearer , priority 0 [ 416.868992][T10009] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 417.060592][T10009] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 417.150187][T10003] tipc: Resetting bearer [ 418.146062][T10022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1000'. [ 418.527722][T10029] netlink: 'syz.4.1003': attribute type 4 has an invalid length. [ 418.535526][T10029] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1003'. [ 418.548046][T10029] : renamed from bond0 (while UP) [ 418.859201][ T30] audit: type=1400 audit(1759624619.583:477): avc: denied { map } for pid=10032 comm="syz.1.1006" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 418.927399][ T30] audit: type=1400 audit(1759624619.643:478): avc: denied { ioctl } for pid=10032 comm="syz.1.1006" path="socket:[23096]" dev="sockfs" ino=23096 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 419.134451][ T30] audit: type=1400 audit(1759624619.893:479): avc: denied { write } for pid=10045 comm="syz.1.1011" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 419.658244][ T30] audit: type=1400 audit(1759624619.923:480): avc: denied { ioctl } for pid=10045 comm="syz.1.1011" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 421.417683][ T30] audit: type=1400 audit(1759624621.803:481): avc: denied { setopt } for pid=10059 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 425.183027][ T5882] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 425.979102][ T5882] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 425.997963][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 426.007040][ T5882] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.018647][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 426.370737][ T5882] usb 2-1: Product: syz [ 426.392895][ T5882] usb 2-1: Manufacturer: syz [ 426.430814][ T5882] usb 2-1: SerialNumber: syz [ 426.461157][ T5882] usb 2-1: config 0 descriptor?? [ 426.533332][ T5882] usb 2-1: selecting invalid altsetting 0 [ 427.451673][ T5882] usb 2-1: USB disconnect, device number 5 [ 428.188238][T10109] udevd[10109]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.877746][T10163] netlink: 'syz.1.1040': attribute type 39 has an invalid length. [ 432.922166][T10184] tipc: Enabling of bearer rejected, already enabled [ 433.195833][T10192] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1048'. [ 434.256352][ T30] audit: type=1400 audit(1759624634.643:482): avc: denied { override_creds } for pid=10196 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 434.315456][T10207] batadv_slave_0: entered promiscuous mode [ 434.398133][T10212] overlayfs: failed to clone upperpath [ 434.963492][T10214] ntfs3(nullb0): Primary boot signature is not NTFS. [ 434.973964][T10214] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 435.021564][T10214] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10214 comm=syz.1.1054 [ 435.036448][T10214] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10214 comm=syz.1.1054 [ 437.110434][T10241] tipc: Enabling of bearer rejected, failed to enable media [ 439.629040][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.636499][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.354841][T10286] overlayfs: failed to clone upperpath [ 441.424061][T10302] trusted_key: encrypted_key: insufficient parameters specified [ 442.657463][ T30] audit: type=1400 audit(1759624643.423:483): avc: denied { read } for pid=10312 comm="syz.2.1077" path="socket:[22426]" dev="sockfs" ino=22426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 445.166165][ T30] audit: type=1400 audit(1759624645.873:484): avc: denied { create } for pid=10331 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 445.490993][ T30] audit: type=1400 audit(1759624646.253:485): avc: denied { bind } for pid=10340 comm="syz.2.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 445.687431][T10355] tipc: Enabling of bearer rejected, failed to enable media [ 445.751449][T10359] tipc: Enabling of bearer rejected, failed to enable media [ 446.000375][ T30] audit: type=1400 audit(1759624646.743:486): avc: denied { relabelfrom } for pid=10370 comm="syz.2.1093" name="NETLINK" dev="sockfs" ino=22496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 446.098908][ T30] audit: type=1400 audit(1759624646.743:487): avc: denied { relabelto } for pid=10370 comm="syz.2.1093" name="NETLINK" dev="sockfs" ino=22496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 446.490228][ T30] audit: type=1400 audit(1759624647.233:488): avc: denied { watch watch_reads } for pid=10375 comm="syz.4.1095" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 448.047166][T10385] team0 (unregistering): Port device team_slave_0 removed [ 448.056545][T10385] team0 (unregistering): Port device team_slave_1 removed [ 449.084394][T10407] tipc: Enabling of bearer rejected, failed to enable media [ 449.447406][T10419] tipc: Enabling of bearer rejected, failed to enable media [ 451.523998][ T30] audit: type=1400 audit(1759624652.243:489): avc: denied { create } for pid=10437 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 452.784018][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 452.801170][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 452.810789][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 452.820347][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 452.829610][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 452.929024][T10460] team0: Port device team_slave_0 removed [ 452.970691][T10464] Device name cannot be null; rc = [-22] [ 453.918466][T10460] syz.1.1115 (10460): attempted to duplicate a private mapping with mremap. This is not supported. [ 455.408899][T10492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.646618][T10499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.654969][T10499] batadv_slave_0: entered promiscuous mode [ 455.665297][T10499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1130'. [ 456.168038][T10510] tipc: Enabled bearer , priority 0 [ 456.179739][T10510] syzkaller0: entered promiscuous mode [ 456.187827][T10510] syzkaller0: entered allmulticast mode [ 456.232251][T10510] tipc: Resetting bearer [ 456.305064][T10509] tipc: Resetting bearer [ 456.336398][T10509] tipc: Disabling bearer [ 457.687465][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 457.802085][ T30] audit: type=1400 audit(1759624658.563:490): avc: denied { map } for pid=10523 comm="syz.1.1135" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 458.059641][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1136'. [ 459.830796][ T30] audit: type=1400 audit(1759624660.593:491): avc: denied { wake_alarm } for pid=10554 comm="syz.4.1144" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 461.764483][ T30] audit: type=1400 audit(1759624662.523:492): avc: denied { create } for pid=10577 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 462.890777][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1152'. [ 465.555757][ T30] audit: type=1400 audit(1759624666.313:493): avc: denied { create } for pid=10604 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 466.912725][ T30] audit: type=1400 audit(1759624666.413:494): avc: denied { recv } for pid=10607 comm="syz.0.1158" saddr=10.128.0.169 src=30006 daddr=10.128.1.46 dest=58640 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 467.036323][T10619] tipc: Started in network mode [ 467.041205][T10619] tipc: Node identity 4, cluster identity 4711 [ 467.047584][T10619] tipc: Node number set to 4 [ 467.129030][ T30] audit: type=1400 audit(1759624666.753:495): avc: denied { setopt } for pid=10604 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 468.065522][ T30] audit: type=1400 audit(1759624668.363:496): avc: denied { ioctl } for pid=10624 comm="syz.1.1163" path="socket:[23914]" dev="sockfs" ino=23914 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 468.496595][ T30] audit: type=1326 audit(1759624668.853:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9558eec9 code=0x7ffc0000 [ 468.546107][ T30] audit: type=1326 audit(1759624668.853:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9558eec9 code=0x7ffc0000 [ 468.604745][ T30] audit: type=1326 audit(1759624668.853:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffb9558eec9 code=0x7ffc0000 [ 469.247767][ T30] audit: type=1326 audit(1759624668.853:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9558eec9 code=0x7ffc0000 [ 469.407330][ T30] audit: type=1326 audit(1759624668.853:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9558eec9 code=0x7ffc0000 [ 469.435536][ T30] audit: type=1326 audit(1759624668.853:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb9558eec9 code=0x7ffc0000 [ 471.379742][T10674] tipc: Enabling of bearer rejected, failed to enable media [ 471.545761][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 471.553999][ T30] audit: type=1400 audit(1759624672.303:513): avc: denied { module_request } for pid=10672 comm="syz.4.1175" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 471.774500][ T30] audit: type=1326 audit(1759624672.533:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.1.1176" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4db338eec9 code=0x0 [ 473.596262][T10714] gfs2: error -5 reading superblock [ 475.523369][T10725] tipc: Enabling of bearer rejected, failed to enable media [ 475.580198][T10729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1192'. [ 475.676109][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 476.950266][T10732] vlan2: entered allmulticast mode [ 476.955415][T10732] hsr_slave_1: entered allmulticast mode [ 477.628283][T10750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.239941][ T37] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 478.265779][T10753] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 478.361269][ T3013] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 478.608239][T10759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.863421][T10746] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 479.383123][T10759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.549487][T10759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.588488][T10771] tipc: Enabling of bearer rejected, already enabled [ 480.689059][T10759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.949942][ T6710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.970051][ T6710] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.000535][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.063530][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.296083][T10792] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1207'. [ 486.640451][T10838] tipc: Enabling of bearer rejected, failed to enable media [ 486.712994][T10847] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1216'. [ 488.257688][ T30] audit: type=1400 audit(1759624688.543:515): avc: denied { accept } for pid=10860 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 492.146342][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.166062][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.176206][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.186129][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.538039][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.547158][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.556235][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.565301][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.574362][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 492.584375][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 493.931096][T10919] tipc: Enabling of bearer rejected, failed to enable media [ 494.470484][T10928] bridge0: entered promiscuous mode [ 494.477569][T10928] macsec1: entered promiscuous mode [ 494.489700][T10928] bridge0: port 3(macsec1) entered blocking state [ 494.497199][T10928] bridge0: port 3(macsec1) entered disabled state [ 494.504523][T10928] macsec1: entered allmulticast mode [ 494.510462][T10928] bridge0: entered allmulticast mode [ 494.720033][T10928] macsec1: left allmulticast mode [ 494.725121][T10928] bridge0: left allmulticast mode [ 494.733654][T10928] bridge0: left promiscuous mode [ 496.519489][T10947] 9pnet: Could not find request transport: xen [ 497.779589][T10971] hugetlbfs: syz.4.1249 (10971): Using mlock ulimits for SHM_HUGETLB is obsolete [ 497.795764][T10970] __nla_validate_parse: 27 callbacks suppressed [ 497.818064][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 497.967821][ T30] audit: type=1400 audit(1759624698.703:516): avc: denied { write } for pid=10972 comm="syz.2.1250" path="socket:[24325]" dev="sockfs" ino=24325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 498.131723][ T30] audit: type=1400 audit(1759624698.723:517): avc: denied { ioctl } for pid=10972 comm="syz.2.1250" path="socket:[24325]" dev="sockfs" ino=24325 ioctlcmd=0x8b1a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 498.237640][ T30] audit: type=1400 audit(1759624698.973:518): avc: denied { read write } for pid=10962 comm="syz.5.1245" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 498.261412][ T30] audit: type=1400 audit(1759624698.973:519): avc: denied { open } for pid=10962 comm="syz.5.1245" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 498.286029][ T30] audit: type=1400 audit(1759624698.973:520): avc: denied { map } for pid=10962 comm="syz.5.1245" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 498.323042][ T30] audit: type=1400 audit(1759624698.973:521): avc: denied { execute } for pid=10962 comm="syz.5.1245" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 498.515668][ T30] audit: type=1400 audit(1759624699.003:522): avc: denied { ioctl } for pid=10972 comm="syz.2.1250" path="socket:[25355]" dev="sockfs" ino=25355 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 498.684993][T10980] tipc: Enabling of bearer rejected, failed to enable media [ 500.516640][ T6710] wlan1: Trigger new scan to find an IBSS to join [ 501.486771][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.493991][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.754310][T11020] mmap: syz.1.1260 (11020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 501.841850][T11022] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 501.849507][T11022] macsec1: entered promiscuous mode [ 501.861109][T11022] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 502.736498][ T30] audit: type=1400 audit(1759624703.503:523): avc: denied { mounton } for pid=11024 comm="syz.5.1263" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 504.517308][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 504.526402][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 504.596352][T11052] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 505.782304][ T6710] wlan1: Trigger new scan to find an IBSS to join [ 509.460601][ T36] wlan1: Creating new IBSS network, BSSID 0a:ff:8d:00:00:00 [ 511.519136][ T30] audit: type=1326 audit(1759624711.703:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 512.015437][ T30] audit: type=1326 audit(1759624711.703:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 512.451076][ T30] audit: type=1326 audit(1759624711.703:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 512.478641][ T30] audit: type=1326 audit(1759624711.703:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 512.502975][ T30] audit: type=1326 audit(1759624711.703:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 512.597784][ T30] audit: type=1326 audit(1759624711.703:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 512.633106][ T30] audit: type=1326 audit(1759624711.703:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 512.964893][ T30] audit: type=1326 audit(1759624711.703:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 512.988345][ T30] audit: type=1326 audit(1759624711.703:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 513.045187][ T30] audit: type=1326 audit(1759624711.703:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db338eec9 code=0x7ffc0000 [ 517.036874][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 517.036890][ T30] audit: type=1400 audit(1759624717.803:541): avc: denied { create } for pid=11172 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 517.110560][ T30] audit: type=1400 audit(1759624717.863:542): avc: denied { setopt } for pid=11172 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 520.240035][T11225] PKCS7: Unknown OID: [5] (bad) [ 520.270740][T11225] PKCS7: Only support pkcs7_signedData type [ 524.327206][T11255] 9pnet_fd: p9_fd_create_tcp (11255): problem connecting socket to 127.0.0.1 [ 527.967957][T11296] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 532.587535][ T30] audit: type=1400 audit(1759624733.353:543): avc: denied { lock } for pid=11327 comm="syz.4.1345" path="socket:[25990]" dev="sockfs" ino=25990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 534.641798][ T30] audit: type=1400 audit(1759624735.403:544): avc: denied { bind } for pid=11348 comm="syz.1.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 536.022795][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 536.033034][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 537.813451][T11397] tipc: Enabling of bearer rejected, already enabled [ 538.914252][T11409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1367'. [ 539.344126][ T30] audit: type=1400 audit(1759624740.103:545): avc: denied { watch_mount } for pid=11411 comm="syz.4.1368" path="/299" dev="tmpfs" ino=1581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 539.499686][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 543.487533][T11449] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.1376'. [ 544.484135][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1386'. [ 544.496320][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1386'. [ 544.545344][T11473] netlink: 'syz.5.1386': attribute type 11 has an invalid length. [ 544.554296][T11473] netlink: 'syz.5.1386': attribute type 13 has an invalid length. [ 544.555739][T11476] bridge0: entered allmulticast mode [ 544.654275][T11473] bridge_slave_1: left allmulticast mode [ 544.664000][T11473] bridge_slave_1: left promiscuous mode [ 544.757206][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.769510][T11473] bridge_slave_0: left allmulticast mode [ 544.798865][T11473] bridge_slave_0: left promiscuous mode [ 544.807704][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.848956][ T30] audit: type=1400 audit(1759624745.613:546): avc: denied { read } for pid=11478 comm="syz.1.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 557.432501][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.440829][ T30] audit: type=1400 audit(1759624758.163:547): avc: denied { egress } for pid=11624 comm="syz.2.1417" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 557.469396][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.787484][ T30] audit: type=1400 audit(1759624758.163:548): avc: denied { sendto } for pid=11624 comm="syz.2.1417" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 558.496992][ T30] audit: type=1400 audit(1759624759.263:549): avc: denied { ioctl } for pid=11655 comm="syz.2.1424" path="socket:[27024]" dev="sockfs" ino=27024 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 558.623697][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1425'. [ 559.168819][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 559.474477][T11668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=11668 comm=syz.4.1426 [ 561.405423][T11683] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1431'. [ 561.414915][T11683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.590239][ T30] audit: type=1326 audit(1759624762.343:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 562.574711][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.584530][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.054727][ T30] audit: type=1326 audit(1759624762.343:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 563.251352][T11701] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 563.317493][ T30] audit: type=1326 audit(1759624762.343:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 563.342101][ T30] audit: type=1326 audit(1759624762.343:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 563.393748][ T30] audit: type=1326 audit(1759624762.343:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 564.386607][ T30] audit: type=1326 audit(1759624762.343:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 564.521020][ T30] audit: type=1326 audit(1759624762.343:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 564.548827][ T30] audit: type=1326 audit(1759624762.343:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 564.577014][ T30] audit: type=1326 audit(1759624762.343:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 564.633521][T11711] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 564.746691][ T30] audit: type=1326 audit(1759624762.343:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 564.777514][ T30] audit: type=1326 audit(1759624762.343:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11678 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f2b8eec9 code=0x7ffc0000 [ 565.264090][T11711] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 565.518400][T11713] gretap1: entered promiscuous mode [ 565.533846][T11713] bond4: (slave gretap1): making interface the new active one [ 565.580700][T11713] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 565.890169][T11729] tipc: Enabled bearer , priority 10 [ 565.945129][T11729] tipc: Enabling of bearer rejected, failed to enable media [ 570.665281][T11764] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.672502][T11764] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.859292][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 572.033681][T11764] wg1: left promiscuous mode [ 572.800919][T11764] batadv_slave_0: left promiscuous mode [ 573.176884][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.623678][T11764] bond1: left promiscuous mode [ 573.737751][T11764] gretap1: left promiscuous mode [ 573.751586][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 573.751600][ T30] audit: type=1400 audit(1759624774.503:568): avc: denied { ioctl } for pid=11808 comm="syz.5.1463" path="socket:[27747]" dev="sockfs" ino=27747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 573.757160][T11764] hsr1: left promiscuous mode [ 573.944768][T11788] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1456'. [ 574.009620][ T7040] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.445824][ T7040] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.454997][ T7040] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.463999][ T7040] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.796685][T11839] : entered promiscuous mode [ 578.046684][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'. [ 578.309180][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 578.572748][T11884] tipc: Enabling of bearer rejected, failed to enable media [ 579.520367][T11912] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1485'. [ 581.585722][ T30] audit: type=1400 audit(1759624782.343:569): avc: denied { mount } for pid=11941 comm="syz.5.1495" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 581.588519][T11942] overlayfs: failed to clone lowerpath [ 581.616330][ T5940] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 581.827618][ T5940] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 581.841538][ T5940] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 581.969380][ T5940] usb 2-1: config 150 has no interface number 0 [ 581.999104][ T5940] usb 2-1: config 150 interface 204 has no altsetting 0 [ 582.017735][ T5940] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 582.027355][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.035412][ T5940] usb 2-1: Product: syz [ 583.138640][ T5940] usb 2-1: Manufacturer: syz [ 583.143271][ T5940] usb 2-1: SerialNumber: syz [ 584.086405][ T5940] xr_serial 2-1:150.204: skipping garbage [ 584.092210][ T5940] xr_serial 2-1:150.204: xr_serial converter detected [ 584.101827][ T5940] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 584.128704][ T5940] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 584.270421][ T5940] usb 2-1: USB disconnect, device number 6 [ 584.322875][ T5940] xr_serial 2-1:150.204: device disconnected [ 585.790430][ T909] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 586.598505][ T909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.616485][ T909] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 586.625615][ T909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.648876][ T909] usb 2-1: config 0 descriptor?? [ 586.661308][ T909] pwc: Askey VC010 type 2 USB webcam detected. [ 586.830229][T12000] overlayfs: failed to clone upperpath [ 587.085027][ T30] audit: type=1400 audit(1759624787.843:570): avc: denied { write } for pid=11999 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 587.516949][ T909] pwc: recv_control_msg error -32 req 02 val 2b00 [ 587.524213][ T909] pwc: recv_control_msg error -32 req 02 val 2700 [ 587.556600][ T909] pwc: recv_control_msg error -32 req 02 val 2c00 [ 587.576518][ T909] pwc: recv_control_msg error -32 req 04 val 1000 [ 587.647016][ T909] pwc: recv_control_msg error -32 req 04 val 1300 [ 587.681026][ T909] pwc: recv_control_msg error -32 req 04 val 1400 [ 587.711730][ T909] pwc: recv_control_msg error -32 req 02 val 2000 [ 587.769518][ T909] pwc: recv_control_msg error -32 req 02 val 2100 [ 587.786981][ T909] pwc: recv_control_msg error -32 req 04 val 1500 [ 587.796443][ T909] pwc: recv_control_msg error -32 req 02 val 2500 [ 587.803817][ T909] pwc: recv_control_msg error -32 req 02 val 2400 [ 587.880460][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1515'. [ 587.890429][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1515'. [ 587.937118][ T909] pwc: recv_control_msg error -32 req 02 val 2600 [ 587.994991][ T909] pwc: recv_control_msg error -32 req 02 val 2900 [ 588.296879][ T909] pwc: recv_control_msg error -71 req 04 val 1100 [ 588.311291][ T909] pwc: recv_control_msg error -71 req 04 val 1200 [ 588.345137][ T909] pwc: Registered as video103. [ 589.098863][ T909] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 589.143108][ T909] usb 2-1: USB disconnect, device number 7 [ 590.348610][ T30] audit: type=1400 audit(1759624790.983:571): avc: denied { getopt } for pid=12048 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.518066][T12054] overlayfs: failed to clone upperpath [ 592.079661][T12069] openvswitch: netlink: Message has 16 unknown bytes. [ 593.544736][ T30] audit: type=1400 audit(1759624794.303:572): avc: denied { accept } for pid=12058 comm="syz.1.1528" path="socket:[27483]" dev="sockfs" ino=27483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 594.481492][T12091] overlayfs: failed to clone upperpath [ 594.934638][ T30] audit: type=1400 audit(1759624795.693:573): avc: denied { listen } for pid=12092 comm="syz.0.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 595.666135][ T30] audit: type=1400 audit(1759624796.383:574): avc: denied { mount } for pid=12095 comm="syz.0.1538" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 596.203644][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1540'. [ 596.367676][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 597.149601][T12115] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 597.159405][T12115] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 597.168379][T12115] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 597.176466][T12115] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 597.987792][ T30] audit: type=1400 audit(1759624798.373:575): avc: denied { getopt } for pid=12120 comm="syz.5.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 602.121172][T12178] netlink: 'syz.5.1552': attribute type 30 has an invalid length. [ 603.174563][ T7040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 604.628057][ T30] audit: type=1400 audit(1759624805.383:576): avc: denied { shutdown } for pid=12198 comm="syz.4.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 604.719993][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 610.305139][ T30] audit: type=1400 audit(1759624810.623:577): avc: denied { watch_sb } for pid=12238 comm="syz.0.1575" path="/371/file0" dev="tmpfs" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 614.119181][ T30] audit: type=1326 audit(1759624814.833:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd950f8eec9 code=0x7ffc0000 [ 614.191681][T12298] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 614.336583][ T30] audit: type=1326 audit(1759624814.833:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd950f8eec9 code=0x7ffc0000 [ 614.491087][ T30] audit: type=1326 audit(1759624814.833:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd950f8eec9 code=0x7ffc0000 [ 614.674236][ T30] audit: type=1326 audit(1759624814.833:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd950f8eec9 code=0x7ffc0000 [ 616.200718][T12315] openvswitch: netlink: Message has 16 unknown bytes. [ 618.641446][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 618.666087][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 619.343858][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 619.350636][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 619.369569][ T30] audit: type=1400 audit(1759624820.133:582): avc: denied { listen } for pid=12356 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 619.393967][ T30] audit: type=1400 audit(1759624820.133:583): avc: denied { accept } for pid=12356 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 619.535121][T12344] ceph: No mds server is up or the cluster is laggy [ 622.307025][T12394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12394 comm=syz.5.1612 [ 622.543156][T12394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=12394 comm=syz.5.1612 [ 622.559365][T12394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12394 comm=syz.5.1612 [ 623.040714][T12394] IPv6: NLM_F_CREATE should be specified when creating new route [ 623.855258][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1615'. [ 623.948074][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.954415][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.108294][T12411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1615'. [ 624.632640][T12425] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 624.687179][T12425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.747734][T12425] vlan2: entered allmulticast mode [ 624.758494][T12425] veth1: entered allmulticast mode [ 624.772948][T12425] bond3: (slave vlan2): making interface the new active one [ 624.790509][T12425] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 625.258626][T12437] batadv_slave_1: entered promiscuous mode [ 625.272017][T12437] batman_adv: batadv0: Adding interface: macsec1 [ 625.278420][T12437] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.304252][T12437] batman_adv: batadv0: Interface activated: macsec1 [ 625.683500][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 625.734205][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 625.746919][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 625.769826][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 625.810722][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 625.820723][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 625.963614][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 625.979896][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 626.005230][T12436] netlink: 'syz.0.1620': attribute type 3 has an invalid length. [ 626.743289][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 627.594212][T12469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1625'. [ 631.272555][ T30] audit: type=1400 audit(1759624832.984:584): avc: denied { execute_no_trans } for pid=12493 comm="syz.1.1635" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=28932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 634.196452][ T30] audit: type=1400 audit(1759624835.964:585): avc: denied { getopt } for pid=12521 comm="syz.1.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 634.441236][ T30] audit: type=1400 audit(1759624836.174:586): avc: denied { create } for pid=12524 comm="syz.5.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 634.554629][ T30] audit: type=1400 audit(1759624836.174:587): avc: denied { accept } for pid=12524 comm="syz.5.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 634.761960][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 635.134133][T12544] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 638.968108][T12589] veth3: entered promiscuous mode [ 638.988988][T12589] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1659'. [ 639.294540][ T30] audit: type=1400 audit(1759624841.054:588): avc: denied { unmount } for pid=12590 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 642.739634][ T30] audit: type=1400 audit(1759624844.374:589): avc: denied { setattr } for pid=12628 comm="syz.0.1669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 643.188942][T12636] udevd[12636]: failed to send result of seq 17879 to main daemon: Connection refused [ 644.506576][T12637] bond0: (slave ip6gretap2): link status up again after 0 ms [ 644.514602][T12637] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 644.776478][ T1147] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 645.519878][T12653] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 645.675047][T12637] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 645.796025][T12637] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 645.906523][T12653] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 646.026040][T12637] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 646.182223][T12637] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 646.684653][T12637] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 648.710381][T12706] overlayfs: failed to clone upperpath [ 648.884933][ T30] audit: type=1400 audit(1759624850.644:590): avc: denied { mount } for pid=12710 comm="syz.1.1687" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 649.586213][T11405] net_ratelimit: 6 callbacks suppressed [ 649.586226][T11405] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 649.706545][ T1147] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 649.826180][T11405] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 650.424229][T12637] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 651.368736][ T1147] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 651.486327][ T36] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 651.606014][T11405] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 651.726008][T11405] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 651.835933][T11405] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 651.945951][ T1147] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 652.464450][ T30] audit: type=1400 audit(1759624854.224:591): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 652.945518][T12749] validate_nla: 43 callbacks suppressed [ 652.945556][T12749] netlink: 'syz.5.1696': attribute type 1 has an invalid length. [ 653.268649][T12759] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 653.294816][T12759] CIFS mount error: No usable UNC path provided in device string! [ 653.294816][T12759] [ 653.305256][T12759] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 653.650614][T12755] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 653.697859][T12756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.781172][ T30] audit: type=1400 audit(1759624855.544:592): avc: denied { create } for pid=12743 comm="syz.0.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 654.146643][T12761] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 655.329125][T12761] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 655.348742][T12761] bond2 (unregistering): Released all slaves [ 655.579373][T12778] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1702'. [ 656.486427][ T1147] net_ratelimit: 10 callbacks suppressed [ 656.486444][ T1147] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 656.508161][ T30] audit: type=1400 audit(1759624858.264:593): avc: denied { lock } for pid=12774 comm="syz.1.1703" path="/dev/video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 656.850544][T12779] ================================================================== [ 656.858616][T12779] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 656.865804][T12779] Read of size 8 at addr ffff888140a9caf8 by task syz.1.1703/12779 [ 656.873661][T12779] [ 656.875962][T12779] CPU: 0 UID: 0 PID: 12779 Comm: syz.1.1703 Not tainted syzkaller #0 PREEMPT(full) [ 656.875977][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.875984][T12779] Call Trace: [ 656.875990][T12779] [ 656.875995][T12779] dump_stack_lvl+0x116/0x1f0 [ 656.876012][T12779] print_report+0xcd/0x630 [ 656.876026][T12779] ? __virt_addr_valid+0x81/0x610 [ 656.876043][T12779] ? __phys_addr+0xe8/0x180 [ 656.876060][T12779] ? __cpa_addr+0x1d3/0x220 [ 656.876071][T12779] kasan_report+0xe0/0x110 [ 656.876085][T12779] ? __cpa_addr+0x1d3/0x220 [ 656.876098][T12779] __cpa_addr+0x1d3/0x220 [ 656.876110][T12779] cpa_flush+0x28b/0x8a0 [ 656.876124][T12779] ? __pfx_cpa_flush+0x10/0x10 [ 656.876137][T12779] ? pgprot2cachemode+0x9a/0x130 [ 656.876154][T12779] ? __pfx_pgprot2cachemode+0x10/0x10 [ 656.876171][T12779] ? drm_gem_get_pages+0x6a0/0xa10 [ 656.876186][T12779] change_page_attr_set_clr+0x34e/0x4a0 [ 656.876201][T12779] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 656.876220][T12779] _set_pages_array+0x1ab/0x2c0 [ 656.876235][T12779] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 656.876247][T12779] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 656.876259][T12779] ? __pfx___might_resched+0x10/0x10 [ 656.876278][T12779] drm_gem_shmem_mmap+0xc9/0x550 [ 656.876289][T12779] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 656.876301][T12779] drm_gem_mmap_obj+0x1b5/0x560 [ 656.876315][T12779] drm_gem_mmap+0x40b/0x620 [ 656.876328][T12779] ? __pfx_drm_gem_mmap+0x10/0x10 [ 656.876340][T12779] ? vm_area_alloc+0x1f/0x160 [ 656.876357][T12779] ? lockdep_init_map_type+0x5c/0x280 [ 656.876371][T12779] __mmap_region+0x1306/0x27a0 [ 656.876382][T12779] ? __pfx___mmap_region+0x10/0x10 [ 656.876393][T12779] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 656.876410][T12779] ? audit_log_end+0x1f/0x30 [ 656.876422][T12779] ? audit_log_end+0x1f/0x30 [ 656.876433][T12779] ? common_lsm_audit+0x260/0x300 [ 656.876459][T12779] ? __lock_acquire+0xb97/0x1ce0 [ 656.876472][T12779] mmap_region+0x1ab/0x3f0 [ 656.876482][T12779] ? __get_unmapped_area+0x267/0x440 [ 656.876500][T12779] do_mmap+0xa3e/0x1210 [ 656.876514][T12779] ? __pfx_do_mmap+0x10/0x10 [ 656.876527][T12779] ? __pfx_down_write_killable+0x10/0x10 [ 656.876545][T12779] vm_mmap_pgoff+0x29e/0x470 [ 656.876560][T12779] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 656.876574][T12779] ? __fget_files+0x20e/0x3c0 [ 656.876587][T12779] ksys_mmap_pgoff+0x32c/0x5c0 [ 656.876601][T12779] __x64_sys_mmap+0x125/0x190 [ 656.876614][T12779] do_syscall_64+0xcd/0x4e0 [ 656.876629][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.876641][T12779] RIP: 0033:0x7f4db338eec9 [ 656.876650][T12779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.876662][T12779] RSP: 002b:00007f4db418f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 656.876673][T12779] RAX: ffffffffffffffda RBX: 00007f4db35e6180 RCX: 00007f4db338eec9 [ 656.876681][T12779] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 656.876688][T12779] RBP: 00007f4db3411f91 R08: 0000000000000009 R09: 0000000100000000 [ 656.876694][T12779] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 656.876701][T12779] R13: 00007f4db35e6218 R14: 00007f4db35e6180 R15: 00007ffe9721c838 [ 656.876711][T12779] [ 656.876715][T12779] [ 657.201931][T12779] Allocated by task 12779: [ 657.206324][T12779] kasan_save_stack+0x33/0x60 [ 657.210985][T12779] kasan_save_track+0x14/0x30 [ 657.215639][T12779] __kasan_kmalloc+0xaa/0xb0 [ 657.220210][T12779] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 657.225558][T12779] drm_gem_get_pages+0x144/0xa10 [ 657.230474][T12779] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 657.236519][T12779] drm_gem_shmem_mmap+0xc9/0x550 [ 657.241439][T12779] drm_gem_mmap_obj+0x1b5/0x560 [ 657.246272][T12779] drm_gem_mmap+0x40b/0x620 [ 657.250763][T12779] __mmap_region+0x1306/0x27a0 [ 657.255502][T12779] mmap_region+0x1ab/0x3f0 [ 657.259895][T12779] do_mmap+0xa3e/0x1210 [ 657.264032][T12779] vm_mmap_pgoff+0x29e/0x470 [ 657.268601][T12779] ksys_mmap_pgoff+0x32c/0x5c0 [ 657.273342][T12779] __x64_sys_mmap+0x125/0x190 [ 657.277997][T12779] do_syscall_64+0xcd/0x4e0 [ 657.282480][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.288351][T12779] [ 657.290651][T12779] The buggy address belongs to the object at ffff888140a9ca00 [ 657.290651][T12779] which belongs to the cache kmalloc-256 of size 256 [ 657.304687][T12779] The buggy address is located 0 bytes to the right of [ 657.304687][T12779] allocated 248-byte region [ffff888140a9ca00, ffff888140a9caf8) [ 657.319165][T12779] [ 657.321471][T12779] The buggy address belongs to the physical page: [ 657.327855][T12779] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x140a9c [ 657.336676][T12779] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 657.345151][T12779] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 657.352757][T12779] page_type: f5(slab) [ 657.356717][T12779] raw: 057ff00000000040 ffff88801b026b40 dead000000000100 dead000000000122 [ 657.365277][T12779] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 657.373838][T12779] head: 057ff00000000040 ffff88801b026b40 dead000000000100 dead000000000122 [ 657.382485][T12779] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 657.391131][T12779] head: 057ff00000000001 ffffea000502a701 00000000ffffffff 00000000ffffffff [ 657.399779][T12779] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 657.408422][T12779] page dumped because: kasan: bad access detected [ 657.414811][T12779] page_owner tracks the page as allocated [ 657.420511][T12779] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9982436660, free_ts 0 [ 657.438567][T12779] post_alloc_hook+0x1c0/0x230 [ 657.443333][T12779] get_page_from_freelist+0x10a3/0x3a30 [ 657.448868][T12779] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 657.454835][T12779] alloc_pages_mpol+0x1fb/0x550 [ 657.459669][T12779] new_slab+0x24a/0x360 [ 657.463810][T12779] ___slab_alloc+0xdc4/0x1ae0 [ 657.468472][T12779] __slab_alloc.constprop.0+0x63/0x110 [ 657.473916][T12779] __kmalloc_cache_noprof+0x477/0x780 [ 657.479272][T12779] usb_string+0x116/0x670 [ 657.483606][T12779] usb_cache_string+0x80/0x150 [ 657.488360][T12779] usb_new_device+0x169/0x1a60 [ 657.493099][T12779] register_root_hub+0x299/0x730 [ 657.498014][T12779] usb_add_hcd+0xaf2/0x1730 [ 657.502496][T12779] vhci_hcd_probe+0x14b/0x490 [ 657.507155][T12779] platform_probe+0x106/0x1d0 [ 657.511820][T12779] really_probe+0x23e/0xa90 [ 657.516306][T12779] page_owner free stack trace missing [ 657.521646][T12779] [ 657.523946][T12779] Memory state around the buggy address: [ 657.529552][T12779] ffff888140a9c980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 657.537591][T12779] ffff888140a9ca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 657.545627][T12779] >ffff888140a9ca80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 657.553668][T12779] ^ [ 657.561617][T12779] ffff888140a9cb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 657.569655][T12779] ffff888140a9cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 657.577690][T12779] ================================================================== [ 657.590945][ T62] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 657.641936][ T30] audit: type=1400 audit(1759624858.264:594): avc: denied { map } for pid=12774 comm="syz.1.1703" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 657.667002][T12779] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 657.674193][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.1.1703 Not tainted syzkaller #0 PREEMPT(full) [ 657.683563][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.693622][T12779] Call Trace: [ 657.696918][T12779] [ 657.699856][T12779] dump_stack_lvl+0x3d/0x1f0 [ 657.704459][T12779] vpanic+0x640/0x6f0 [ 657.708455][T12779] panic+0xca/0xd0 [ 657.712178][T12779] ? __pfx_panic+0x10/0x10 [ 657.716593][T12779] ? __cpa_addr+0x1d3/0x220 [ 657.721097][T12779] ? preempt_schedule_common+0x44/0xc0 [ 657.726560][T12779] ? preempt_schedule_thunk+0x16/0x30 [ 657.731952][T12779] check_panic_on_warn+0xab/0xb0 [ 657.736895][T12779] end_report+0x107/0x170 [ 657.741236][T12779] kasan_report+0xee/0x110 [ 657.745664][T12779] ? __cpa_addr+0x1d3/0x220 [ 657.750179][T12779] __cpa_addr+0x1d3/0x220 [ 657.754515][T12779] cpa_flush+0x28b/0x8a0 [ 657.758766][T12779] ? __pfx_cpa_flush+0x10/0x10 [ 657.763540][T12779] ? pgprot2cachemode+0x9a/0x130 [ 657.768488][T12779] ? __pfx_pgprot2cachemode+0x10/0x10 [ 657.773872][T12779] ? drm_gem_get_pages+0x6a0/0xa10 [ 657.778999][T12779] change_page_attr_set_clr+0x34e/0x4a0 [ 657.784553][T12779] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 657.790641][T12779] _set_pages_array+0x1ab/0x2c0 [ 657.795497][T12779] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 657.801569][T12779] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 657.808163][T12779] ? __pfx___might_resched+0x10/0x10 [ 657.813467][T12779] drm_gem_shmem_mmap+0xc9/0x550 [ 657.818413][T12779] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 657.824581][T12779] drm_gem_mmap_obj+0x1b5/0x560 [ 657.829451][T12779] drm_gem_mmap+0x40b/0x620 [ 657.833969][T12779] ? __pfx_drm_gem_mmap+0x10/0x10 [ 657.839005][T12779] ? vm_area_alloc+0x1f/0x160 [ 657.843699][T12779] ? lockdep_init_map_type+0x5c/0x280 [ 657.849083][T12779] __mmap_region+0x1306/0x27a0 [ 657.853860][T12779] ? __pfx___mmap_region+0x10/0x10 [ 657.858984][T12779] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 657.864993][T12779] ? audit_log_end+0x1f/0x30 [ 657.869600][T12779] ? audit_log_end+0x1f/0x30 [ 657.874202][T12779] ? common_lsm_audit+0x260/0x300 [ 657.879269][T12779] ? __lock_acquire+0xb97/0x1ce0 [ 657.884216][T12779] mmap_region+0x1ab/0x3f0 [ 657.888636][T12779] ? __get_unmapped_area+0x267/0x440 [ 657.893940][T12779] do_mmap+0xa3e/0x1210 [ 657.898112][T12779] ? __pfx_do_mmap+0x10/0x10 [ 657.902716][T12779] ? __pfx_down_write_killable+0x10/0x10 [ 657.908370][T12779] vm_mmap_pgoff+0x29e/0x470 [ 657.912971][T12779] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 657.918092][T12779] ? __fget_files+0x20e/0x3c0 [ 657.922781][T12779] ksys_mmap_pgoff+0x32c/0x5c0 [ 657.927561][T12779] __x64_sys_mmap+0x125/0x190 [ 657.932244][T12779] do_syscall_64+0xcd/0x4e0 [ 657.936757][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.942660][T12779] RIP: 0033:0x7f4db338eec9 [ 657.947073][T12779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.966685][T12779] RSP: 002b:00007f4db418f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 657.975109][T12779] RAX: ffffffffffffffda RBX: 00007f4db35e6180 RCX: 00007f4db338eec9 [ 657.983084][T12779] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 657.991060][T12779] RBP: 00007f4db3411f91 R08: 0000000000000009 R09: 0000000100000000 [ 657.999123][T12779] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 658.007101][T12779] R13: 00007f4db35e6218 R14: 00007f4db35e6180 R15: 00007ffe9721c838 [ 658.015179][T12779] [ 658.018439][T12779] Kernel Offset: disabled [ 658.022744][T12779] Rebooting in 86400 seconds..