last executing test programs: 11.267718118s ago: executing program 3 (id=318): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300b92e00003e030000380000e6d500000097700000fe03200001", @ANYRES32=r0], 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109", @ANYRES32], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x80800, 0x40) 10.768452038s ago: executing program 0 (id=319): ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x2c020400) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x0, 0x1}) io_uring_enter(r1, 0x351e, 0x483, 0x0, 0x0, 0x0) 9.483025846s ago: executing program 0 (id=323): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="ae5afde34c97ecb22a3d586b51aec6f588e53bc60cd8d29653ecbb983500d4a338980039dc8e22f2a5", 0x29}], 0x1, 0x0, 0x0, 0x810}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 8.337595831s ago: executing program 1 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 8.282264535s ago: executing program 0 (id=325): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 8.03556073s ago: executing program 3 (id=327): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) 6.517131572s ago: executing program 1 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x49c, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x3, 0x10e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 6.496199632s ago: executing program 2 (id=331): r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x7f) fsopen(0x0, 0x0) r2 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_pidfd_open(r2, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, r2, 0x0, 0x502, 'syz0\x00', 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) fsopen(0x0, 0x0) 6.409919394s ago: executing program 3 (id=332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x20004800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ppoll(&(0x7f0000000180)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.689894419s ago: executing program 2 (id=334): syz_open_dev$video(0x0, 0xc407, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f00000021c0)=[{0x3, 0xbbdd, 0x2000}, {0x0, 0x2, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 5.581137492s ago: executing program 0 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x81, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 5.511117245s ago: executing program 1 (id=336): getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.754232384s ago: executing program 4 (id=339): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.647436744s ago: executing program 2 (id=340): syz_io_uring_setup(0x79e, &(0x7f0000000200)={0x0, 0x4f69, 0x40, 0x3, 0x353}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.531627425s ago: executing program 4 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85\b\x00\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80', 0x2) write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85\b\x00\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80'}]}, 0x197) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.354264357s ago: executing program 2 (id=342): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x108, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}, @tfcpad={0x8, 0x22, 0x80000000}]}, 0x108}}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb}}, @ip_tos_u8={{0x11, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x1f, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000001840)={'gre0\x00', 0x0, 0x8047, 0x7f80, 0x1, 0x100, {{0x5, 0x4, 0x3, 0x14, 0x14, 0x65, 0x0, 0xa, 0x29, 0x0, @rand_addr=0x64010101, @remote}}}}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 3.575766852s ago: executing program 4 (id=343): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgrp(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x9000, &(0x7f0000000680)={0x8}, 0x20) tgkill(0x0, 0x0, 0x12) 3.225813749s ago: executing program 4 (id=344): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3.068877999s ago: executing program 1 (id=345): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 3.041922225s ago: executing program 3 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.729211379s ago: executing program 3 (id=347): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r1, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.118547333s ago: executing program 4 (id=348): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x409}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 2.103796317s ago: executing program 2 (id=349): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 2.032970289s ago: executing program 0 (id=350): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sync() r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.898815103s ago: executing program 1 (id=351): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000001e00)=""/218, &(0x7f0000001f00)=0xda) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "578e0e048d23cf66029067c74a20dc68d161baf5682a678673d745cab12ff3ba"}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 1.101792563s ago: executing program 2 (id=352): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 1.041479541s ago: executing program 4 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40017}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x35, 0x3, 0x81, 0xab, 0xc, 0x8, 0x3, 0x1, 0xd, 0x8, 0x8, 0xff, 0x6d}, 0xfffffffffffffd5b) 33.784791ms ago: executing program 0 (id=354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 32.947831ms ago: executing program 3 (id=355): timer_create(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=356): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x74, {0x0, 0x10, [@code={0xa, 0x1b, {"49bf563412efbeadde00"}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x21, {"4c89f848ba0001040000000000488902"}}]}}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x1b, {"49bf0000000000000000"}}, @nested_vmresume={0x130, 0x18}], 0xef}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x100000000000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x1deadbeef123456) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 52.382228][ T29] audit: type=1400 audit(1774542970.771:62): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.405690][ T29] audit: type=1400 audit(1774542970.801:63): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.408122][ T5792] cgroup: Unknown subsys name 'net' [ 52.435987][ T29] audit: type=1400 audit(1774542970.831:64): avc: denied { unmount } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.594570][ T5792] cgroup: Unknown subsys name 'cpuset' [ 52.602189][ T5792] cgroup: Unknown subsys name 'rlimit' [ 52.691412][ T29] audit: type=1400 audit(1774542971.081:65): avc: denied { setattr } for pid=5792 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.725149][ T29] audit: type=1400 audit(1774542971.081:66): avc: denied { create } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.746908][ T29] audit: type=1400 audit(1774542971.081:67): avc: denied { write } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.768638][ T29] audit: type=1400 audit(1774542971.081:68): avc: denied { read } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.798614][ T29] audit: type=1400 audit(1774542971.081:69): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 52.814883][ T5796] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 52.823675][ T29] audit: type=1400 audit(1774542971.081:70): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.855405][ T29] audit: type=1400 audit(1774542971.221:71): avc: denied { relabelto } for pid=5796 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.777389][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.746041][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.746067][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.761555][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.769150][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.777207][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.792311][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.800438][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.808504][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.816404][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.825489][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.833198][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.834257][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.842195][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.848168][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.855952][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.862706][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.869901][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.876246][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.883294][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.903384][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.904125][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.917466][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.918260][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.933212][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.947232][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.290606][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 57.371355][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 57.430778][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 57.555430][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 57.567125][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.574770][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.581866][ T5817] bridge_slave_0: entered allmulticast mode [ 57.590755][ T5817] bridge_slave_0: entered promiscuous mode [ 57.601861][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.609025][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.616270][ T5817] bridge_slave_1: entered allmulticast mode [ 57.623372][ T5817] bridge_slave_1: entered promiscuous mode [ 57.642179][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 57.720065][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.727238][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.734507][ T5806] bridge_slave_0: entered allmulticast mode [ 57.741358][ T5806] bridge_slave_0: entered promiscuous mode [ 57.750332][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.760162][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.767317][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.774474][ T5807] bridge_slave_0: entered allmulticast mode [ 57.781154][ T5807] bridge_slave_0: entered promiscuous mode [ 57.801857][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.808948][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.816178][ T5806] bridge_slave_1: entered allmulticast mode [ 57.822917][ T5806] bridge_slave_1: entered promiscuous mode [ 57.831230][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.841587][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.848934][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.856181][ T5807] bridge_slave_1: entered allmulticast mode [ 57.862954][ T5807] bridge_slave_1: entered promiscuous mode [ 57.931295][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.948671][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.966186][ T5817] team0: Port device team_slave_0 added [ 57.981273][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.990665][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.998078][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.005371][ T5822] bridge_slave_0: entered allmulticast mode [ 58.012111][ T5822] bridge_slave_0: entered promiscuous mode [ 58.020750][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.030934][ T5817] team0: Port device team_slave_1 added [ 58.043166][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.050252][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.057477][ T5816] bridge_slave_0: entered allmulticast mode [ 58.064337][ T5816] bridge_slave_0: entered promiscuous mode [ 58.077825][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.085076][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.092259][ T5822] bridge_slave_1: entered allmulticast mode [ 58.098980][ T5822] bridge_slave_1: entered promiscuous mode [ 58.118543][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.125783][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.133322][ T5816] bridge_slave_1: entered allmulticast mode [ 58.140012][ T5816] bridge_slave_1: entered promiscuous mode [ 58.166597][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.173894][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.200109][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.220307][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.227436][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.253530][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.265649][ T5807] team0: Port device team_slave_0 added [ 58.285152][ T5806] team0: Port device team_slave_0 added [ 58.292570][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.310142][ T5807] team0: Port device team_slave_1 added [ 58.337006][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.347228][ T5806] team0: Port device team_slave_1 added [ 58.360142][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.369852][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.377310][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.403239][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.435023][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.445193][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.454941][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.481024][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.511095][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.518115][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.544225][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.565337][ T5817] hsr_slave_0: entered promiscuous mode [ 58.571423][ T5817] hsr_slave_1: entered promiscuous mode [ 58.579580][ T5822] team0: Port device team_slave_0 added [ 58.585740][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.593083][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.619749][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.638779][ T5816] team0: Port device team_slave_0 added [ 58.646396][ T5816] team0: Port device team_slave_1 added [ 58.653153][ T5822] team0: Port device team_slave_1 added [ 58.694707][ T5807] hsr_slave_0: entered promiscuous mode [ 58.700801][ T5807] hsr_slave_1: entered promiscuous mode [ 58.706982][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 58.712799][ T5807] Cannot create hsr debugfs directory [ 58.739024][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.746147][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.772104][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.790639][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.797755][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.823892][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.841972][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.849039][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.875644][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.904086][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.911031][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.937695][ T5811] Bluetooth: hci1: command tx timeout [ 58.942197][ T5813] Bluetooth: hci3: command tx timeout [ 58.943760][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.970801][ T5806] hsr_slave_0: entered promiscuous mode [ 58.977424][ T5806] hsr_slave_1: entered promiscuous mode [ 58.983492][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 58.989194][ T5806] Cannot create hsr debugfs directory [ 59.012223][ T5813] Bluetooth: hci2: command tx timeout [ 59.012236][ T5811] Bluetooth: hci4: command tx timeout [ 59.012501][ T5811] Bluetooth: hci0: command tx timeout [ 59.071896][ T5816] hsr_slave_0: entered promiscuous mode [ 59.077980][ T5816] hsr_slave_1: entered promiscuous mode [ 59.084121][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 59.089850][ T5816] Cannot create hsr debugfs directory [ 59.128843][ T5822] hsr_slave_0: entered promiscuous mode [ 59.135447][ T5822] hsr_slave_1: entered promiscuous mode [ 59.141296][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 59.147281][ T5822] Cannot create hsr debugfs directory [ 59.438274][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.449300][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.458062][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.473916][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.509010][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.523019][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.534540][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.554487][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.601481][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.634461][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.665254][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.677683][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.736765][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.746590][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.756083][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.765691][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.806672][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.844156][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.853625][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.863649][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.874597][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.918490][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.936530][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.965564][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.972764][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.984999][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.005444][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.013008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.037127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.044272][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.062849][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.071259][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.078373][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.103233][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.134288][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.150660][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.167948][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.175039][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.184337][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.191398][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.215836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.222913][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.244223][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.251302][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.300295][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 60.300311][ T29] audit: type=1400 audit(1774542978.691:84): avc: denied { sys_module } for pid=5817 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.319383][ T5816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.367347][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.386753][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.464482][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.505263][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.589521][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.596664][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.623175][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.630306][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.689909][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.825381][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.855411][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.886261][ T5807] veth0_vlan: entered promiscuous mode [ 60.935229][ T5807] veth1_vlan: entered promiscuous mode [ 60.958038][ T5816] veth0_vlan: entered promiscuous mode [ 61.004489][ T5816] veth1_vlan: entered promiscuous mode [ 61.013372][ T5133] Bluetooth: hci3: command tx timeout [ 61.018784][ T5133] Bluetooth: hci1: command tx timeout [ 61.034064][ T5807] veth0_macvtap: entered promiscuous mode [ 61.047379][ T5806] veth0_vlan: entered promiscuous mode [ 61.066865][ T5807] veth1_macvtap: entered promiscuous mode [ 61.080929][ T5806] veth1_vlan: entered promiscuous mode [ 61.092844][ T5133] Bluetooth: hci2: command tx timeout [ 61.098267][ T5133] Bluetooth: hci4: command tx timeout [ 61.099678][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.104402][ T5811] Bluetooth: hci0: command tx timeout [ 61.128974][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.141349][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.157670][ T5816] veth0_macvtap: entered promiscuous mode [ 61.165251][ T5817] veth0_vlan: entered promiscuous mode [ 61.177720][ T5816] veth1_macvtap: entered promiscuous mode [ 61.189606][ T5817] veth1_vlan: entered promiscuous mode [ 61.207021][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.216463][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.236206][ T5806] veth0_macvtap: entered promiscuous mode [ 61.244238][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.253625][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.283922][ T5817] veth0_macvtap: entered promiscuous mode [ 61.291608][ T5806] veth1_macvtap: entered promiscuous mode [ 61.299815][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.310485][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.335970][ T5822] veth0_vlan: entered promiscuous mode [ 61.345287][ T244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.357972][ T5817] veth1_macvtap: entered promiscuous mode [ 61.377560][ T244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.389145][ T244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.407424][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.420482][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.428028][ T244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.454483][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.467337][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.478670][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.497413][ T5822] veth1_vlan: entered promiscuous mode [ 61.521879][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.531017][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.546671][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.569473][ T244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.581257][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.590283][ T244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.599749][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.627977][ T244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.638512][ T244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.677610][ T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.689087][ T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.738719][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.752953][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.760334][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.774146][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.787203][ T29] audit: type=1400 audit(1774542980.181:85): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.wmonKV/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.788195][ T5822] veth0_macvtap: entered promiscuous mode [ 61.831959][ T29] audit: type=1400 audit(1774542980.211:86): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.843651][ T5822] veth1_macvtap: entered promiscuous mode [ 61.860031][ T29] audit: type=1400 audit(1774542980.221:87): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.wmonKV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.887347][ T29] audit: type=1400 audit(1774542980.221:88): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.928994][ T29] audit: type=1400 audit(1774542980.221:89): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.wmonKV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.937460][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.962351][ T29] audit: type=1400 audit(1774542980.231:90): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.wmonKV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.027721][ T29] audit: type=1400 audit(1774542980.231:91): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.048703][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.057530][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.057810][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.066786][ T29] audit: type=1400 audit(1774542980.251:92): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.110121][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.133134][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.146360][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.156986][ T29] audit: type=1400 audit(1774542980.261:93): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="gadgetfs" ino=7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.228610][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.244305][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.253351][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.260756][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.273742][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.296575][ T5921] Zero length message leads to an empty skb [ 62.315533][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.358484][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.366948][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.429709][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.455452][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.562489][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 62.594875][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.227332][ T5813] Bluetooth: hci1: command tx timeout [ 63.233427][ T5133] Bluetooth: hci3: command tx timeout [ 63.233459][ T5133] Bluetooth: hci4: command tx timeout [ 63.233479][ T5133] Bluetooth: hci0: command tx timeout [ 63.233499][ T5133] Bluetooth: hci2: command tx timeout [ 63.263450][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.340697][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.363650][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 63.380326][ T9] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 63.389613][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.397742][ T9] usb 1-1: Product: syz [ 63.401970][ T9] usb 1-1: Manufacturer: syz [ 63.406693][ T9] usb 1-1: SerialNumber: syz [ 63.416984][ T9] usb 1-1: config 0 descriptor?? [ 63.425348][ T5921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.082168][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.238300][ T9] powermate: unknown product id 0240 [ 64.312255][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 64.355484][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 64.508412][ T9] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 64.527273][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 64.593212][ T5918] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 64.604440][ C0] powermate: config urb returned -71 [ 64.610014][ C0] powermate: config urb returned -71 [ 64.617317][ C0] powermate: config urb returned -71 [ 64.629770][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.632183][ C0] powermate: config urb returned -71 [ 64.652073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 64.660529][ T5918] usb 2-1: Product: syz [ 64.662093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 64.666809][ T5918] usb 2-1: Manufacturer: syz [ 64.698959][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 64.707757][ T9] usb 1-1: USB disconnect, device number 2 [ 64.735630][ T5918] usb 2-1: SerialNumber: syz [ 64.763213][ T5918] usb 2-1: config 0 descriptor?? [ 64.873451][ T5918] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 64.904600][ T5918] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 65.092042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 65.257618][ T5813] Bluetooth: hci2: command tx timeout [ 65.266723][ T5811] Bluetooth: hci0: command tx timeout [ 65.266738][ T5133] Bluetooth: hci4: command tx timeout [ 65.266763][ T5133] Bluetooth: hci3: command tx timeout [ 65.333675][ T5133] Bluetooth: hci1: command tx timeout [ 65.717045][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 65.717068][ T29] audit: type=1400 audit(1774542984.111:123): avc: denied { perfmon } for pid=5963 comm="syz.2.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.799988][ T5918] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 65.830424][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.838868][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.967687][ T29] audit: type=1400 audit(1774542984.281:124): avc: denied { prog_run } for pid=5963 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.234539][ T5918] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 66.271152][ T5918] em28xx 2-1:0.0: board has no eeprom [ 66.502987][ T29] audit: type=1400 audit(1774542984.901:125): avc: denied { create } for pid=5965 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 66.656918][ T29] audit: type=1400 audit(1774542984.921:126): avc: denied { read write } for pid=5976 comm="syz.3.14" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.690426][ T29] audit: type=1400 audit(1774542984.921:127): avc: denied { open } for pid=5976 comm="syz.3.14" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.870295][ T29] audit: type=1400 audit(1774542985.181:128): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.465924][ T5940] em28xx 2-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 67.474420][ T5918] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 67.484862][ T5918] em28xx 2-1:0.0: dvb set to bulk mode. [ 67.491216][ T5809] em28xx 2-1:0.0: Binding DVB extension [ 67.573414][ T5889] usb 2-1: USB disconnect, device number 2 [ 67.659799][ T5889] em28xx 2-1:0.0: Disconnecting em28xx [ 67.690555][ T5809] em28xx 2-1:0.0: Registering input extension [ 67.757959][ T5889] em28xx 2-1:0.0: Closing input extension [ 67.847145][ T29] audit: type=1400 audit(1774542986.241:129): avc: denied { create } for pid=5984 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.233493][ T5889] em28xx 2-1:0.0: Freeing device [ 68.359703][ T29] audit: type=1400 audit(1774542986.241:130): avc: denied { ioctl } for pid=5984 comm="syz.0.17" path="socket:[8642]" dev="sockfs" ino=8642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.640278][ T29] audit: type=1400 audit(1774542986.241:131): avc: denied { setopt } for pid=5984 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.873096][ T29] audit: type=1400 audit(1774542986.261:132): avc: denied { write } for pid=5984 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.362176][ T5918] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.522088][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 70.531812][ T5918] usb 5-1: config 0 has no interfaces? [ 70.543096][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.562703][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.593438][ T5918] usb 5-1: config 0 descriptor?? [ 70.866714][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 70.866730][ T29] audit: type=1400 audit(1774542989.261:138): avc: denied { read } for pid=6019 comm="syz.4.27" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 70.940144][ T29] audit: type=1400 audit(1774542989.261:139): avc: denied { open } for pid=6019 comm="syz.4.27" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.037394][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.195133][ T29] audit: type=1400 audit(1774542989.321:140): avc: denied { create } for pid=6019 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.309528][ T5880] usb 5-1: USB disconnect, device number 2 [ 71.454278][ T29] audit: type=1400 audit(1774542989.331:141): avc: denied { write } for pid=6019 comm="syz.4.27" name="event3" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.644639][ T29] audit: type=1400 audit(1774542989.331:142): avc: denied { open } for pid=6019 comm="syz.4.27" path="/dev/input/event3" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.679841][ T29] audit: type=1400 audit(1774542989.361:143): avc: denied { mount } for pid=6019 comm="syz.4.27" name="/" dev="ramfs" ino=9393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 71.777013][ T29] audit: type=1400 audit(1774542989.431:144): avc: denied { create } for pid=6028 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.920589][ T29] audit: type=1400 audit(1774542989.471:145): avc: denied { ioctl } for pid=6028 comm="syz.2.29" path="socket:[9396]" dev="sockfs" ino=9396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.052855][ T29] audit: type=1400 audit(1774542990.201:146): avc: denied { execute } for pid=6035 comm="syz.0.31" path="/4/cpu.stat" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.048443][ T29] audit: type=1400 audit(1774542990.451:147): avc: denied { write } for pid=6037 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.209484][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 74.731150][ T6071] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.580997][ T6088] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.611225][ T6088] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 76.272064][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 76.272080][ T29] audit: type=1400 audit(1774542994.651:167): avc: denied { write } for pid=6074 comm="syz.3.44" name="rt_acct" dev="proc" ino=4026533109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.273480][ T792] cfg80211: failed to load regulatory.db [ 77.069517][ T29] audit: type=1400 audit(1774542995.451:168): avc: denied { name_bind } for pid=6097 comm="syz.2.51" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.196115][ T29] audit: type=1400 audit(1774542995.451:169): avc: denied { node_bind } for pid=6097 comm="syz.2.51" saddr=::ffff:172.20.20.34 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.276700][ T29] audit: type=1400 audit(1774542995.461:170): avc: denied { ioctl } for pid=6097 comm="syz.2.51" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9551 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.367762][ T29] audit: type=1400 audit(1774542995.701:171): avc: denied { write } for pid=6099 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.412110][ T29] audit: type=1400 audit(1774542995.711:172): avc: denied { connect } for pid=6099 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.842168][ T29] audit: type=1400 audit(1774542995.711:173): avc: denied { name_connect } for pid=6099 comm="syz.1.52" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.144412][ T29] audit: type=1400 audit(1774542996.591:174): avc: denied { mounton } for pid=6105 comm="syz.4.55" path="/12/file0" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.294466][ T29] audit: type=1400 audit(1774542996.651:175): avc: denied { getopt } for pid=6109 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.328649][ T29] audit: type=1400 audit(1774542996.661:176): avc: denied { create } for pid=6108 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.511547][ T5880] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.695701][ T5880] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 81.728142][ T5880] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 81.799176][ T5880] usb 4-1: config 0 has no interface number 1 [ 81.822090][ T5880] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.892837][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 81.932108][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 81.932125][ T29] audit: type=1400 audit(1774543000.321:186): avc: denied { read } for pid=6145 comm="syz.4.65" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.005293][ T5880] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 82.016087][ T6146] binder: 6145:6146 ioctl c0306201 2000000002c0 returned -14 [ 82.039323][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.099263][ T5880] usb 4-1: Product: syz [ 82.115413][ T5880] usb 4-1: Manufacturer: syz [ 82.122402][ T29] audit: type=1400 audit(1774543000.321:187): avc: denied { open } for pid=6145 comm="syz.4.65" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.152067][ T5880] usb 4-1: SerialNumber: syz [ 82.193316][ T5880] usb 4-1: config 0 descriptor?? [ 82.214487][ T5880] usb-storage 4-1:0.127: USB Mass Storage device detected [ 82.236698][ T29] audit: type=1400 audit(1774543000.381:188): avc: denied { ioctl } for pid=6145 comm="syz.4.65" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.273749][ T5880] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 82.350739][ T29] audit: type=1400 audit(1774543000.381:189): avc: denied { set_context_mgr } for pid=6145 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.374348][ T29] audit: type=1400 audit(1774543000.391:190): avc: denied { map } for pid=6145 comm="syz.4.65" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.502914][ T5880] usb-storage 4-1:0.0: USB Mass Storage device detected [ 82.720860][ T5880] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 82.885882][ T29] audit: type=1400 audit(1774543000.411:191): avc: denied { call } for pid=6145 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.971861][ T5880] usb 4-1: USB disconnect, device number 2 [ 83.218687][ T29] audit: type=1400 audit(1774543001.011:192): avc: denied { create } for pid=6154 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.502197][ T29] audit: type=1400 audit(1774543001.011:193): avc: denied { setopt } for pid=6154 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.563621][ T29] audit: type=1400 audit(1774543001.961:194): avc: denied { bind } for pid=6154 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.667434][ T29] audit: type=1400 audit(1774543001.991:195): avc: denied { read } for pid=6154 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.914807][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 83.922543][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 84.074312][ T6172] ceph: No mds server is up or the cluster is laggy [ 84.601487][ T6195] tipc: Failed to remove unknown binding: 66,0,0/0:968366699/968366701 [ 84.743603][ T6195] tipc: Failed to remove unknown binding: 66,0,0/0:968366699/968366700 [ 84.802375][ T6195] tipc: Failed to remove unknown binding: 66,0,0/0:968366699/968366701 [ 84.950369][ T6195] tipc: Failed to remove unknown binding: 66,0,0/0:968366699/968366700 [ 87.923041][ T6237] tipc: Started in network mode [ 87.928099][ T6237] tipc: Node identity b214051f021b, cluster identity 4711 [ 88.102282][ T6237] tipc: Enabled bearer , priority 0 [ 88.747416][ T6250] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.780449][ T6232] syzkaller0: entered promiscuous mode [ 88.806763][ T6232] syzkaller0: entered allmulticast mode [ 88.951123][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 88.951151][ T29] audit: type=1400 audit(1774543007.341:206): avc: denied { write } for pid=6245 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.776218][ T6232] tipc: Resetting bearer [ 90.078877][ T29] audit: type=1400 audit(1774543008.461:207): avc: denied { write } for pid=6243 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.143953][ T6231] tipc: Resetting bearer [ 91.125125][ T6264] futex_wake_op: syz.0.95 tries to shift op by 144; fix this program [ 91.126714][ T6262] binder: BINDER_SET_CONTEXT_MGR already set [ 91.145971][ T6262] binder: 6261:6262 ioctl 4018620d 200000000040 returned -16 [ 91.507029][ T5941] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.664665][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 91.680714][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.699066][ T5941] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.730093][ T5941] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.739716][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.747934][ T5941] usb 1-1: Product: syz [ 91.763278][ T5941] usb 1-1: Manufacturer: syz [ 91.767901][ T5941] usb 1-1: SerialNumber: syz [ 91.793718][ T5941] usb 1-1: config 0 descriptor?? [ 92.040647][ T5889] usb 1-1: USB disconnect, device number 3 [ 92.293776][ T29] audit: type=1400 audit(1774543010.681:208): avc: denied { append } for pid=6276 comm="syz.2.100" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.322623][ T29] audit: type=1400 audit(1774543010.691:209): avc: denied { create } for pid=6276 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 92.342996][ T29] audit: type=1400 audit(1774543010.691:210): avc: denied { sys_admin } for pid=6276 comm="syz.2.100" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 92.641674][ T6231] tipc: Disabling bearer [ 92.664176][ T792] tipc: Node number set to 2953774367 [ 92.855029][ T6270] netlink: 'syz.3.98': attribute type 3 has an invalid length. [ 92.956558][ T6270] netlink: 'syz.3.98': attribute type 3 has an invalid length. [ 93.646658][ T29] audit: type=1400 audit(1774543012.041:211): avc: denied { create } for pid=6290 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.742077][ T29] audit: type=1400 audit(1774543012.061:212): avc: denied { setopt } for pid=6290 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.274536][ T29] audit: type=1400 audit(1774543013.661:213): avc: denied { bind } for pid=6310 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.432085][ T29] audit: type=1400 audit(1774543013.671:214): avc: denied { name_bind } for pid=6310 comm="syz.0.111" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.474740][ T29] audit: type=1400 audit(1774543013.671:215): avc: denied { node_bind } for pid=6310 comm="syz.0.111" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 96.109659][ T29] audit: type=1400 audit(1774543013.671:216): avc: denied { name_connect } for pid=6310 comm="syz.0.111" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.262156][ T29] audit: type=1400 audit(1774543014.411:217): avc: denied { setopt } for pid=6316 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.692092][ T29] audit: type=1400 audit(1774543014.421:218): avc: denied { bind } for pid=6316 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.715806][ T6325] ptrace attach of "./syz-executor exec"[5807] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ    ˆ 8   € \x09 Û  þÿÿú ÿÿÿÿ [ 97.402391][ T29] audit: type=1400 audit(1774543014.421:219): avc: denied { write } for pid=6316 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.597765][ T29] audit: type=1400 audit(1774543014.421:220): avc: denied { listen } for pid=6310 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.618424][ T29] audit: type=1400 audit(1774543014.481:221): avc: denied { read } for pid=6316 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.787177][ T29] audit: type=1400 audit(1774543016.181:222): avc: denied { write } for pid=6339 comm="syz.4.120" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.832073][ T792] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.534695][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.547080][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.639302][ T792] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.662395][ T792] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 98.971563][ T792] usb 3-1: Manufacturer: syz [ 99.066525][ T792] usb 3-1: config 0 descriptor?? [ 100.438617][ T792] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 100.534899][ T792] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 101.123481][ T792] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 101.491026][ T792] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 101.507533][ T792] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 101.541708][ T792] usb 3-1: USB disconnect, device number 2 [ 101.852095][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 101.852115][ T29] audit: type=1400 audit(1774543020.101:228): avc: denied { read write } for pid=6381 comm="syz.4.132" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 101.889663][ T6382] syzkaller0: entered promiscuous mode [ 101.930601][ T6382] syzkaller0: entered allmulticast mode [ 102.087452][ T29] audit: type=1400 audit(1774543020.101:229): avc: denied { open } for pid=6381 comm="syz.4.132" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.314362][ T6405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 103.339605][ T29] audit: type=1400 audit(1774543021.731:230): avc: denied { relabelfrom } for pid=6404 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.392110][ T29] audit: type=1400 audit(1774543021.731:231): avc: denied { relabelto } for pid=6404 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 103.414046][ T6408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 103.579360][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 103.611291][ T6405] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 103.622261][ T6408] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 103.777113][ T792] libceph: connect (1)[c::]:6789 error -101 [ 103.799500][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 103.852696][ T6412] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6412 comm=syz.4.139 [ 103.919346][ T6418] ceph: No mds server is up or the cluster is laggy [ 103.993266][ T29] audit: type=1400 audit(1774543022.371:232): avc: denied { create } for pid=6425 comm="syz.0.143" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.032081][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.039604][ T29] audit: type=1400 audit(1774543022.421:233): avc: denied { write } for pid=6425 comm="syz.0.143" name="file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.213387][ T29] audit: type=1400 audit(1774543022.421:234): avc: denied { open } for pid=6425 comm="syz.0.143" path="/31/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.250155][ T5889] usb 4-1: config 0 has no interfaces? [ 104.258229][ T5889] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 104.557091][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.566048][ T29] audit: type=1400 audit(1774543022.421:235): avc: denied { cmd } for pid=6425 comm="syz.0.143" path="/31/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 104.603524][ T5889] usb 4-1: config 0 descriptor?? [ 104.794434][ T29] audit: type=1400 audit(1774543022.461:236): avc: denied { unlink } for pid=5807 comm="syz-executor" name="file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.021989][ T5941] usb 4-1: USB disconnect, device number 3 [ 105.227700][ T6446] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 105.334476][ T6446] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 105.353225][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.149'. [ 105.365489][ T6446] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 105.376574][ T6446] bond1 (unregistering): Released all slaves [ 105.551857][ T29] audit: type=1400 audit(1774543023.941:237): avc: denied { mount } for pid=6452 comm="syz.1.151" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.432836][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 107.432852][ T29] audit: type=1400 audit(1774543025.821:244): avc: denied { append } for pid=6473 comm="syz.0.157" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 107.944492][ T29] audit: type=1400 audit(1774543026.301:245): avc: denied { write } for pid=6483 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.223714][ T29] audit: type=1400 audit(1774543026.471:246): avc: denied { read write } for pid=6481 comm="syz.1.160" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.379312][ T29] audit: type=1400 audit(1774543026.471:247): avc: denied { open } for pid=6481 comm="syz.1.160" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.235586][ T29] audit: type=1400 audit(1774543027.621:248): avc: denied { ioctl } for pid=6491 comm="syz.3.163" path="socket:[11469]" dev="sockfs" ino=11469 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.337038][ T29] audit: type=1400 audit(1774543027.731:249): avc: denied { search } for pid=5476 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.363896][ T29] audit: type=1400 audit(1774543027.731:250): avc: denied { search } for pid=5476 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.700220][ T29] audit: type=1400 audit(1774543027.731:251): avc: denied { search } for pid=5476 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.771479][ T29] audit: type=1400 audit(1774543027.731:252): avc: denied { read } for pid=5476 comm="dhcpcd" name="n100" dev="tmpfs" ino=2599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.827884][ T29] audit: type=1400 audit(1774543027.731:253): avc: denied { open } for pid=5476 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.441083][ T5889] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.626248][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 111.897016][ T5880] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 111.986496][ T5889] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 112.056411][ T5889] usb 1-1: config 0 has no interface number 0 [ 112.077226][ T5889] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.098438][ T5889] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.141482][ T5889] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 112.159061][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.179580][ T5889] usb 1-1: Product: syz [ 112.190629][ T5889] usb 1-1: Manufacturer: syz [ 112.201732][ T5889] usb 1-1: SerialNumber: syz [ 112.210545][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.222296][ T5889] usb 1-1: config 0 descriptor?? [ 112.227392][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.237636][ T6531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.246314][ T5880] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 112.255806][ T6531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.263178][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.282087][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.316458][ T5880] usb 4-1: config 0 descriptor?? [ 112.510897][ T6531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.518149][ T6531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.579145][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 112.615417][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.628883][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.664090][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.702172][ T5941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.716324][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.742992][ T5941] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.752696][ T5941] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.760682][ T5941] usb 3-1: Manufacturer: syz [ 112.776688][ T5941] usb 3-1: config 0 descriptor?? [ 112.813534][ T5880] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 112.820446][ T5880] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 112.829757][ T5880] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 112.839470][ T5880] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 112.865532][ T5880] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 112.873900][ T5880] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 112.888272][ T5880] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 113.005223][ T5890] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.056471][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 113.056486][ T29] audit: type=1400 audit(1774543031.451:262): avc: denied { write } for pid=6537 comm="syz.3.175" name="hidraw0" dev="devtmpfs" ino=2814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.087685][ T5941] rc_core: IR keymap rc-hauppauge not found [ 113.123290][ T5941] Registered IR keymap rc-empty [ 113.174650][ T792] usb 4-1: USB disconnect, device number 4 [ 113.196473][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.299119][ T29] audit: type=1400 audit(1774543031.511:263): avc: denied { getopt } for pid=6547 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.353272][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.395341][ T5889] asix 1-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 72 [ 113.448288][ T5941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 113.450433][ T5889] usb 1-1: USB disconnect, device number 4 [ 113.463735][ T5941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 113.484693][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.485417][ T5890] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 113.502438][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.514412][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.522525][ T5890] usb 5-1: Product: syz [ 113.526699][ T5890] usb 5-1: Manufacturer: syz [ 113.531280][ T5890] usb 5-1: SerialNumber: syz [ 113.539166][ T5890] usb 5-1: config 0 descriptor?? [ 113.543429][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.546593][ T5890] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 113.563470][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.564420][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.580838][ T5890] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 113.591386][ T5890] usb 5-1: media controller created [ 113.592090][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.605976][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.622129][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.646861][ T5890] DVB: Unable to find symbol mt352_attach() [ 113.673774][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.702960][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.743295][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.753811][ T6546] dvb-usb: bulk message failed: -22 (7/0) [ 113.783321][ T5890] DVB: Unable to find symbol nxt6000_attach() [ 113.784866][ T5941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 113.789405][ T5890] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 113.846941][ T5941] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 113.853733][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 113.856339][ T5941] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 113.870264][ T5890] dvb-usb: schedule remote query interval to 1000 msecs. [ 113.882723][ T5941] usb 3-1: USB disconnect, device number 3 [ 113.905819][ T5890] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 113.916019][ T5890] dvb-usb: bulk message failed: -22 (7/0) [ 113.924217][ T5890] dvb-usb: bulk message failed: -22 (7/0) [ 113.965640][ T5890] usb 5-1: USB disconnect, device number 3 [ 114.209678][ T5890] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 114.367894][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 114.385975][ T6569] block nbd0: Unsupported socket: should be TCP or UNIX. [ 114.484320][ T29] audit: type=1400 audit(1774543032.881:264): avc: denied { read } for pid=6570 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.642183][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.968138][ T5890] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 115.010680][ T5890] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 115.066875][ T5890] usb 1-1: config 1 interface 0 has no altsetting 0 [ 115.109189][ T5890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.145843][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.202420][ T5890] usb 1-1: Product: syz [ 115.223450][ T5890] usb 1-1: Manufacturer: syz [ 115.265031][ T5890] usb 1-1: SerialNumber: syz [ 115.391669][ T6569] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.409836][ T6569] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.657052][ T29] audit: type=1400 audit(1774543034.031:265): avc: denied { mounton } for pid=6581 comm="syz.4.188" path="/45/file0" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.691009][ T5133] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 115.691055][ T5133] Bluetooth: hci1: adv larger than maximum supported [ 115.698400][ T5133] Bluetooth: hci1: Malformed LE Event: 0x0d [ 115.762561][ T5890] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 115.809403][ T5890] usb 1-1: USB disconnect, device number 5 [ 116.004103][ T6580] openvswitch: netlink: Message has 1 unknown bytes. [ 116.024155][ T29] audit: type=1400 audit(1774543034.411:266): avc: denied { create } for pid=6586 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.043726][ T6580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.154599][ T6580] openvswitch: netlink: Message has 1 unknown bytes. [ 116.163486][ T29] audit: type=1400 audit(1774543034.451:267): avc: denied { read } for pid=6586 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.269300][ T6580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.208812][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.971588][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.981830][ T5890] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.999412][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.027500][ T5890] usb 4-1: config 0 descriptor?? [ 118.114148][ T5890] pwc: Askey VC010 type 2 USB webcam detected. [ 118.373439][ T5890] pwc: send_video_command error -71 [ 118.387488][ T5890] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 118.409260][ T5890] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 118.496476][ T5890] usb 4-1: USB disconnect, device number 5 [ 119.050630][ T6622] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 119.060279][ T6622] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 119.070935][ T6622] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 119.108380][ T29] audit: type=1400 audit(1774543037.461:268): avc: denied { firmware_load } for pid=6620 comm="syz.0.198" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 119.267706][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.528724][ T29] audit: type=1400 audit(1774543037.491:269): avc: denied { create } for pid=6620 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.683399][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.778545][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.199'. [ 119.792100][ T5941] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 119.828672][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.997130][ T6627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6627 comm=syz.4.199 [ 120.100545][ T5941] usb 4-1: config 0 descriptor?? [ 120.123486][ T5941] usb 4-1: can't set config #0, error -71 [ 120.148013][ T5941] usb 4-1: USB disconnect, device number 6 [ 120.283039][ T6633] netlink: 'syz.4.202': attribute type 4 has an invalid length. [ 120.308537][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 120.333695][ T6636] netlink: 'syz.4.202': attribute type 4 has an invalid length. [ 120.374442][ T5133] block nbd0: Receive control failed (result -1) [ 121.266060][ T29] audit: type=1400 audit(1774543039.661:270): avc: denied { read append } for pid=6645 comm="syz.2.205" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.423555][ T29] audit: type=1400 audit(1774543039.661:271): avc: denied { open } for pid=6645 comm="syz.2.205" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.503424][ T29] audit: type=1400 audit(1774543039.791:272): avc: denied { read } for pid=6645 comm="syz.2.205" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 121.521162][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'. [ 121.547691][ T29] audit: type=1400 audit(1774543039.801:273): avc: denied { open } for pid=6645 comm="syz.2.205" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 121.638446][ T29] audit: type=1400 audit(1774543039.941:274): avc: denied { write } for pid=6656 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.659162][ T29] audit: type=1400 audit(1774543039.971:275): avc: denied { write } for pid=6656 comm="syz.1.208" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 123.035446][ T29] audit: type=1400 audit(1774543041.341:276): avc: denied { execute } for pid=6678 comm="syz.1.213" path="/38/blkio.bfq.io_queued_recursive" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.164992][ T6682] syz.3.214 uses obsolete (PF_INET,SOCK_PACKET) [ 123.262134][ T29] audit: type=1400 audit(1774543041.561:277): avc: denied { create } for pid=6681 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.728400][ T29] audit: type=1400 audit(1774543043.101:278): avc: denied { mount } for pid=6700 comm="syz.1.219" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 125.133832][ T6710] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.133983][ T6710] block device autoloading is deprecated and will be removed. [ 125.141700][ T29] audit: type=1400 audit(1774543043.441:279): avc: denied { read } for pid=6702 comm="syz.0.220" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 125.141730][ T29] audit: type=1400 audit(1774543043.441:280): avc: denied { open } for pid=6702 comm="syz.0.220" path="/46/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 126.365761][ T29] audit: type=1400 audit(1774543044.331:281): avc: denied { getopt } for pid=6715 comm="syz.1.224" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.258904][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.265366][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.959340][ T6764] netlink: 'syz.1.235': attribute type 3 has an invalid length. [ 129.967526][ T6764] netlink: 'syz.1.235': attribute type 3 has an invalid length. [ 130.050401][ T6766] netlink: 'syz.1.235': attribute type 10 has an invalid length. [ 130.614622][ T6766] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.662243][ T6766] bond0: (slave team0): Enslaving as an active interface with an up link [ 131.104236][ T6771] xt_ecn: cannot match TCP bits for non-tcp packets [ 131.352909][ T29] audit: type=1400 audit(1774543049.741:282): avc: denied { bind } for pid=6784 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.011622][ T29] audit: type=1400 audit(1774543049.751:283): avc: denied { create } for pid=6779 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 132.122123][ T29] audit: type=1400 audit(1774543049.751:284): avc: denied { ioctl } for pid=6779 comm="syz.2.241" path="socket:[11243]" dev="sockfs" ino=11243 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 132.465969][ T29] audit: type=1400 audit(1774543049.791:285): avc: denied { write } for pid=6775 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.566938][ T29] audit: type=1400 audit(1774543050.791:286): avc: denied { read open } for pid=6803 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.864185][ T29] audit: type=1400 audit(1774543050.791:287): avc: denied { getattr } for pid=6803 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.864233][ T29] audit: type=1400 audit(1774543050.991:288): avc: denied { accept } for pid=6807 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.050605][ T29] audit: type=1400 audit(1774543051.421:289): avc: denied { accept } for pid=6779 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 133.050650][ T29] audit: type=1400 audit(1774543051.431:290): avc: denied { write } for pid=6779 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 133.141293][ T29] audit: type=1400 audit(1774543051.531:291): avc: denied { add_name } for pid=6801 comm="dhcpcd-run-hook" name="resolv.conf.lec0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.287432][ T6779] lec:lec_atm_close: lec0: Shut down! [ 133.863066][ T5809] lec:lec_start_xmit: lec0:No lecd attached [ 134.613336][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 135.899880][ T6911] bridge_slave_0: left allmulticast mode [ 135.941405][ T6911] bridge_slave_0: left promiscuous mode [ 135.968882][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.995502][ T6911] bridge_slave_1: left allmulticast mode [ 136.003952][ T6911] bridge_slave_1: left promiscuous mode [ 136.011182][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.135785][ T6911] bond0: (slave bond_slave_0): Releasing backup interface [ 136.152752][ T5880] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.317143][ T6911] bond0: (slave bond_slave_1): Releasing backup interface [ 136.531734][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 136.531765][ T29] audit: type=1400 audit(1774543054.921:298): avc: denied { mount } for pid=6924 comm="syz.4.258" name="/" dev="autofs" ino=12622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 136.599489][ T6911] team0: Port device team_slave_0 removed [ 136.803932][ T6911] team0: Port device team_slave_1 removed [ 137.106723][ T29] audit: type=1400 audit(1774543055.151:299): avc: denied { write } for pid=6915 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.127608][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.175654][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.232155][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 137.263903][ T5880] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 137.323486][ T5880] usb 4-1: config 0 has no interface number 0 [ 137.355581][ T5880] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.382059][ T5880] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.409516][ T5880] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 137.425881][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.447421][ T5880] usb 4-1: Product: syz [ 137.457273][ T5880] usb 4-1: Manufacturer: syz [ 137.466248][ T5880] usb 4-1: SerialNumber: syz [ 137.487865][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.508875][ T5880] usb 4-1: config 0 descriptor?? [ 137.537517][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.559020][ T5880] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 137.569675][ T6911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.655433][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.666905][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.676462][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.685494][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.694421][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.703475][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.712437][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.721415][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.730363][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 137.809556][ T5880] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 137.865972][ T5880] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 138.018027][ T29] audit: type=1400 audit(1774543056.411:300): avc: denied { read } for pid=6945 comm="syz.2.261" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.075305][ T6911] team0: Mode changed to "loadbalance" [ 138.092416][ T29] audit: type=1400 audit(1774543056.411:301): avc: denied { open } for pid=6945 comm="syz.2.261" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.137599][ T29] audit: type=1400 audit(1774543056.411:302): avc: denied { ioctl } for pid=6945 comm="syz.2.261" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.192084][ T5809] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.238819][ T24] usb 4-1: USB disconnect, device number 7 [ 138.354814][ T5809] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.364140][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.382664][ T5809] usb 2-1: config 0 descriptor?? [ 138.566690][ T5809] cp210x 2-1:0.0: cp210x converter detected [ 138.863312][ T5809] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 138.919626][ T5809] usb 2-1: cp210x converter now attached to ttyUSB0 [ 139.345166][ T5941] usb 2-1: USB disconnect, device number 3 [ 139.397651][ T29] audit: type=1400 audit(1774543057.781:303): avc: denied { setopt } for pid=6970 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.400471][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 139.417536][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5550 ms [ 139.417640][ C1] lec:lec_tx_timeout: lec0 [ 139.425940][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 139.487786][ T5941] cp210x 2-1:0.0: device disconnected [ 142.547367][ T7007] random: crng reseeded on system resumption [ 142.558710][ T29] audit: type=1400 audit(1774543060.941:304): avc: denied { write } for pid=7006 comm="syz.4.273" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.591595][ T7010] syzkaller0: entered promiscuous mode [ 142.641478][ T7010] syzkaller0: entered allmulticast mode [ 142.796381][ T29] audit: type=1400 audit(1774543060.941:305): avc: denied { open } for pid=7006 comm="syz.4.273" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.240235][ T29] audit: type=1400 audit(1774543061.221:306): avc: denied { bind } for pid=7013 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.725407][ T7037] sctp: [Deprecated]: syz.2.280 (pid 7037) Use of int in max_burst socket option. [ 143.725407][ T7037] Use struct sctp_assoc_value instead [ 144.432079][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 144.440330][ C1] lec:lec_tx_timeout: lec0 [ 144.452148][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 144.773279][ T7048] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 144.782733][ T7048] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.864804][ T29] audit: type=1400 audit(1774543063.141:307): avc: denied { ioctl } for pid=7045 comm="syz.2.281" path="socket:[12240]" dev="sockfs" ino=12240 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 144.965199][ T29] audit: type=1400 audit(1774543063.301:308): avc: denied { write } for pid=7038 comm="syz.0.279" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 145.422886][ T29] audit: type=1400 audit(1774543063.821:309): avc: denied { read } for pid=7053 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.070912][ T29] audit: type=1400 audit(1774543063.891:310): avc: denied { setopt } for pid=7053 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.054058][ T29] audit: type=1400 audit(1774543065.451:311): avc: denied { ioctl } for pid=7091 comm="syz.1.288" path="socket:[13371]" dev="sockfs" ino=13371 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.089152][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.129353][ T29] audit: type=1400 audit(1774543065.511:312): avc: denied { create } for pid=7096 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 147.252125][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 147.258879][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.279770][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.305064][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.327902][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 147.351829][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.369097][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 147.397286][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 147.412586][ T24] usb 3-1: Manufacturer: syz [ 147.430562][ T24] usb 3-1: config 0 descriptor?? [ 147.667464][ T29] audit: type=1400 audit(1774543066.061:313): avc: denied { watch } for pid=7109 comm="syz.4.293" path="/66/control" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.792058][ T24] rc_core: IR keymap rc-hauppauge not found [ 147.812345][ T24] Registered IR keymap rc-empty [ 147.827051][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.865638][ T29] audit: type=1400 audit(1774543066.251:314): avc: denied { create } for pid=7113 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 147.893096][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 147.953233][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 147.993369][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 148.036015][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.067908][ C1] rc rc0: IR event FIFO is full! [ 148.073151][ T7120] rc rc0: two consecutive events of type space [ 148.131940][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.182097][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.262292][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.282150][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.323043][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.372826][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.417116][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.439455][ T29] audit: type=1400 audit(1774543066.831:315): avc: denied { ioctl } for pid=7115 comm="syz.1.295" path="socket:[12905]" dev="sockfs" ino=12905 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.653405][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.753475][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 148.785209][ T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 148.861342][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 149.012541][ T24] usb 3-1: USB disconnect, device number 4 [ 149.472018][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 149.480073][ C1] lec:lec_tx_timeout: lec0 [ 149.486236][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 149.679801][ T7158] netlink: 'syz.3.303': attribute type 39 has an invalid length. [ 150.204665][ T7164] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 150.261058][ T29] audit: type=1400 audit(1774543068.651:316): avc: denied { listen } for pid=7168 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.298724][ T7164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.380790][ T7176] __nla_validate_parse: 12 callbacks suppressed [ 150.380836][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.306'. [ 151.014312][ T29] audit: type=1400 audit(1774543068.651:317): avc: denied { accept } for pid=7168 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.735822][ T29] audit: type=1400 audit(1774543070.131:318): avc: denied { create } for pid=7193 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.805626][ T7192] kvm: pic: level sensitive irq not supported [ 151.805747][ T7192] kvm: pic: level sensitive irq not supported [ 151.868053][ T7192] kvm: pic: non byte write [ 151.912269][ T7192] kvm: pic: level sensitive irq not supported [ 151.913877][ T7192] kvm: pic: level sensitive irq not supported [ 151.937143][ T7192] kvm: pic: level sensitive irq not supported [ 151.992079][ T5880] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 151.998826][ T7204] netlink: 'syz.4.315': attribute type 1 has an invalid length. [ 152.214140][ T5880] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 152.223186][ T5880] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 152.242115][ T5880] usb 2-1: config 8 has no interface number 0 [ 152.248337][ T5880] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.263161][ T5880] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 152.272466][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.280561][ T5880] usb 2-1: Product: syz [ 152.284871][ T5880] usb 2-1: Manufacturer: syz [ 152.289533][ T5880] usb 2-1: SerialNumber: syz [ 152.295095][ T7204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.578998][ T5880] usb 2-1: USB disconnect, device number 4 [ 152.764393][ T7211] bond1: (slave veth9): Enslaving as an active interface with a down link [ 152.921263][ T29] audit: type=1400 audit(1774543071.241:319): avc: denied { write } for pid=7217 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.962981][ T7214] vlan2: entered allmulticast mode [ 152.968131][ T7214] veth0_to_bond: entered allmulticast mode [ 153.005885][ T29] audit: type=1400 audit(1774543071.241:320): avc: denied { nlmsg_write } for pid=7217 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.032133][ T7214] veth0_to_bond: entered promiscuous mode [ 153.039893][ T7214] veth0_to_bond: left promiscuous mode [ 153.235881][ T7214] bond1: (slave vlan2): making interface the new active one [ 153.245155][ T7224] process 'syz.3.318' launched '/dev/fd/4' with NULL argv: empty string added [ 153.261891][ T29] audit: type=1400 audit(1774543071.651:321): avc: denied { execute_no_trans } for pid=7223 comm="syz.3.318" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 153.314692][ T7214] veth0_to_bond: entered promiscuous mode [ 153.345976][ T7214] vlan2: entered promiscuous mode [ 153.378010][ T7214] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 153.603613][ T5941] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 153.799339][ T5941] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 153.967773][ T5941] usb 4-1: can't read configurations, error -61 [ 154.359636][ T5941] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 154.502083][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 154.510113][ C1] lec:lec_tx_timeout: lec0 [ 154.515384][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 154.568068][ T5941] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 155.063661][ T5941] usb 4-1: can't read configurations, error -61 [ 155.257460][ T29] audit: type=1400 audit(1774543072.851:322): avc: denied { append } for pid=7228 comm="syz.1.321" name="sg0" dev="devtmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.446954][ T29] audit: type=1400 audit(1774543072.851:323): avc: denied { open } for pid=7228 comm="syz.1.321" path="/dev/sg0" dev="devtmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.578647][ T5941] usb usb4-port1: attempt power cycle [ 155.873221][ T29] audit: type=1400 audit(1774543074.271:324): avc: denied { create } for pid=7242 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.896955][ T7245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.326'. [ 155.922350][ T5941] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 156.001549][ T7244] syzkaller0: entered promiscuous mode [ 156.007984][ T5941] usb 4-1: device descriptor read/8, error -71 [ 156.117917][ T7244] syzkaller0: entered allmulticast mode [ 157.520818][ T29] audit: type=1400 audit(1774543075.911:325): avc: denied { bind } for pid=7258 comm="syz.2.328" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.543924][ T29] audit: type=1400 audit(1774543075.931:326): avc: denied { node_bind } for pid=7258 comm="syz.2.328" saddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 159.341736][ T29] audit: type=1400 audit(1774543077.731:327): avc: denied { create } for pid=7299 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.386299][ T29] audit: type=1400 audit(1774543077.751:328): avc: denied { connect } for pid=7299 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.436614][ T29] audit: type=1400 audit(1774543077.761:329): avc: denied { cmd } for pid=7299 comm="syz.4.339" path="socket:[13210]" dev="sockfs" ino=13210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 159.532020][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 159.540064][ C1] lec:lec_tx_timeout: lec0 [ 159.545094][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 160.962843][ T7280] syzkaller0: entered promiscuous mode [ 160.968447][ T7280] syzkaller0: entered allmulticast mode [ 161.062580][ T7317] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 161.225406][ T7322] kvm: pic: non byte write [ 161.448336][ T6853] Bluetooth: hci5: Frame reassembly failed (-84) [ 161.963592][ T7317] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 162.016645][ T7331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.032462][ T7331] IPv6: NLM_F_CREATE should be set when creating new route [ 162.256640][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.264017][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.302658][ T7341] IPVS: length: 218 != 24 [ 162.782130][ T29] audit: type=1400 audit(1774543080.691:330): avc: denied { getopt } for pid=7338 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.798353][ T7335] netlink: 'syz.0.350': attribute type 10 has an invalid length. [ 162.858280][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.871471][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.007464][ T7331] vlan2: left allmulticast mode [ 163.012547][ T7331] veth0_to_bond: left allmulticast mode [ 163.050194][ T7341] syz_tun: entered allmulticast mode [ 163.056028][ T7341] syz_tun: left allmulticast mode [ 163.065833][ T7335] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.123576][ T1100] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.492120][ T5133] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 163.565337][ T1100] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.688260][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.353'. [ 163.720071][ T1100] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.840805][ T1100] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.374815][ T7354] "mq-deadline" elevator initialization, failed -12, falling back to "none" [ 164.385246][ T7354] ------------[ cut here ]------------ [ 164.390713][ T7354] !rwb [ 164.390725][ T7354] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x164/0x1c0, CPU#0: syz.4.353/7354 [ 164.404239][ T7354] Modules linked in: [ 164.408329][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.4.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.419511][ T7354] Tainted: [L]=SOFTLOCKUP [ 164.423868][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.434000][ T7354] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 164.440253][ T7354] Code: 1f 20 fd 5b 5d 41 5c 41 5d 41 5e e9 86 f5 aa 06 4c 89 f7 e8 ee ad 8c fd eb 83 4c 89 f7 e8 e4 ad 8c fd eb d0 e8 6d 1f 20 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 5f 1f 20 fd 90 0f 0b 90 48 b8 00 00 00 [ 164.460097][ T7354] RSP: 0018:ffffc9000432f180 EFLAGS: 00010283 [ 164.466213][ T7354] RAX: 000000000001cbf4 RBX: ffff88802b3c7000 RCX: ffffc9000f309000 [ 164.474460][ T7354] RDX: 0000000000080000 RSI: ffffffff84e8d673 RDI: ffffffff8c1b12a0 [ 164.482529][ T7354] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 164.490505][ T7354] R10: 0000000000000001 R11: ffffffff827583ab R12: ffff88802be51310 [ 164.498538][ T7354] R13: ffff8880332ca4ec R14: ffff88802b3c7390 R15: ffff88802be51320 [ 164.507075][ T7354] FS: 00007fce8cb2b6c0(0000) GS:ffff88812433f000(0000) knlGS:0000000000000000 [ 164.516282][ T7354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.522948][ T7354] CR2: 0000001b2ff03ff8 CR3: 0000000037a67000 CR4: 00000000003526f0 [ 164.531453][ T7354] Call Trace: [ 164.534941][ T7354] [ 164.537872][ T7354] blk_register_queue+0x42c/0x590 [ 164.542985][ T7354] __add_disk+0x73f/0xe40 [ 164.547332][ T7354] add_disk_fwnode+0x118/0x5c0 [ 164.552164][ T7354] nbd_dev_add+0x77a/0xb10 [ 164.552189][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 164.556591][ T7354] ? find_held_lock+0x2b/0x80 [ 164.564561][ C1] lec:lec_tx_timeout: lec0 [ 164.564649][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 164.569249][ T7354] ? __pfx_nbd_dev_add+0x10/0x10 [ 164.584525][ T7354] ? nbd_genl_connect+0x131a/0x1a40 [ 164.589744][ T7354] ? __radix_tree_lookup+0x217/0x2b0 [ 164.595107][ T7354] nbd_genl_connect+0xb8d/0x1a40 [ 164.600068][ T7354] ? rcu_is_watching+0x12/0xc0 [ 164.604954][ T7354] ? __pfx_nbd_genl_connect+0x10/0x10 [ 164.611035][ T7354] ? __nla_parse+0x40/0x60 [ 164.615774][ T7354] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 164.622781][ T7354] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 164.629726][ T7354] genl_family_rcv_msg_doit+0x214/0x300 [ 164.635354][ T7354] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 164.641435][ T7354] ? genl_get_cmd+0x3ef/0x720 [ 164.646189][ T7354] ? genl_rcv_msg+0x5e1/0x800 [ 164.650887][ T7354] ? genl_rcv_msg+0x3bc/0x800 [ 164.655623][ T7354] genl_rcv_msg+0x560/0x800 [ 164.660137][ T7354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.665223][ T7354] ? irqentry_exit+0x180/0x670 [ 164.670021][ T7354] ? __pfx_nbd_genl_connect+0x10/0x10 [ 164.675472][ T7354] netlink_rcv_skb+0x159/0x420 [ 164.680251][ T7354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.685326][ T7354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.690618][ T7354] ? netlink_deliver_tap+0x1ae/0xcc0 [ 164.696122][ T7354] genl_rcv+0x28/0x40 [ 164.700379][ T7354] netlink_unicast+0x5aa/0x870 [ 164.705259][ T7354] ? __pfx_netlink_unicast+0x10/0x10 [ 164.711124][ T7354] netlink_sendmsg+0x8b0/0xda0 [ 164.716212][ T7354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.721509][ T7354] ? __might_fault+0x80/0x140 [ 164.726281][ T7354] ____sys_sendmsg+0x9e1/0xb70 [ 164.731061][ T7354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.736444][ T7354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.741761][ T7354] ___sys_sendmsg+0x190/0x1e0 [ 164.746494][ T7354] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.751705][ T7354] ? find_held_lock+0x2b/0x80 [ 164.756431][ T7354] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 164.763086][ T7354] ? __rcu_read_unlock+0x26a/0x5e0 [ 164.768230][ T7354] __sys_sendmsg+0x170/0x220 [ 164.773146][ T7354] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.778277][ T7354] ? trace_irq_enable.constprop.0+0x2f/0x180 [ 164.784402][ T7354] do_syscall_64+0x106/0xf80 [ 164.789000][ T7354] ? clear_bhb_loop+0x40/0x90 [ 164.793768][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.799691][ T7354] RIP: 0033:0x7fce8bb9c799 [ 164.804176][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.824431][ T7354] RSP: 002b:00007fce8cb2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.833157][ T7354] RAX: ffffffffffffffda RBX: 00007fce8be15fa0 RCX: 00007fce8bb9c799 [ 164.841136][ T7354] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004 [ 164.849180][ T7354] RBP: 00007fce8bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 164.857386][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.865515][ T7354] R13: 00007fce8be16038 R14: 00007fce8be15fa0 R15: 00007fff676a1c38 [ 164.873541][ T7354] [ 164.876559][ T7354] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.883919][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.4.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.894686][ T7354] Tainted: [L]=SOFTLOCKUP [ 164.899016][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.909054][ T7354] Call Trace: [ 164.912330][ T7354] [ 164.915249][ T7354] dump_stack_lvl+0x100/0x190 [ 164.919913][ T7354] vpanic+0x552/0x970 [ 164.923871][ T7354] ? __pfx_vpanic+0x10/0x10 [ 164.928352][ T7354] panic+0xd1/0xe0 [ 164.932055][ T7354] ? __pfx_panic+0x10/0x10 [ 164.936471][ T7354] check_panic_on_warn.cold+0x19/0x34 [ 164.941846][ T7354] ? wbt_init_enable_default+0x164/0x1c0 [ 164.947460][ T7354] __warn.cold+0x191/0x348 [ 164.951866][ T7354] __report_bug+0x296/0x3d0 [ 164.956353][ T7354] ? wbt_init_enable_default+0x164/0x1c0 [ 164.961967][ T7354] ? __pfx___report_bug+0x10/0x10 [ 164.966988][ T7354] ? wbt_init_enable_default+0x164/0x1c0 [ 164.972604][ T7354] report_bug+0xb2/0x220 [ 164.976919][ T7354] ? wbt_init_enable_default+0x164/0x1c0 [ 164.982534][ T7354] handle_bug+0x16a/0x2a0 [ 164.986856][ T7354] exc_invalid_op+0x17/0x50 [ 164.991345][ T7354] asm_exc_invalid_op+0x1a/0x20 [ 164.996178][ T7354] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 165.002402][ T7354] Code: 1f 20 fd 5b 5d 41 5c 41 5d 41 5e e9 86 f5 aa 06 4c 89 f7 e8 ee ad 8c fd eb 83 4c 89 f7 e8 e4 ad 8c fd eb d0 e8 6d 1f 20 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 5f 1f 20 fd 90 0f 0b 90 48 b8 00 00 00 [ 165.021991][ T7354] RSP: 0018:ffffc9000432f180 EFLAGS: 00010283 [ 165.028046][ T7354] RAX: 000000000001cbf4 RBX: ffff88802b3c7000 RCX: ffffc9000f309000 [ 165.035998][ T7354] RDX: 0000000000080000 RSI: ffffffff84e8d673 RDI: ffffffff8c1b12a0 [ 165.043949][ T7354] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 165.051899][ T7354] R10: 0000000000000001 R11: ffffffff827583ab R12: ffff88802be51310 [ 165.059847][ T7354] R13: ffff8880332ca4ec R14: ffff88802b3c7390 R15: ffff88802be51320 [ 165.067800][ T7354] ? kasan_save_free_info+0x3b/0x70 [ 165.072987][ T7354] ? wbt_init_enable_default+0x163/0x1c0 [ 165.078606][ T7354] blk_register_queue+0x42c/0x590 [ 165.083614][ T7354] __add_disk+0x73f/0xe40 [ 165.087935][ T7354] add_disk_fwnode+0x118/0x5c0 [ 165.092689][ T7354] nbd_dev_add+0x77a/0xb10 [ 165.097094][ T7354] ? find_held_lock+0x2b/0x80 [ 165.101754][ T7354] ? __pfx_nbd_dev_add+0x10/0x10 [ 165.106674][ T7354] ? nbd_genl_connect+0x131a/0x1a40 [ 165.111864][ T7354] ? __radix_tree_lookup+0x217/0x2b0 [ 165.117155][ T7354] nbd_genl_connect+0xb8d/0x1a40 [ 165.122072][ T7354] ? rcu_is_watching+0x12/0xc0 [ 165.126833][ T7354] ? __pfx_nbd_genl_connect+0x10/0x10 [ 165.132189][ T7354] ? __nla_parse+0x40/0x60 [ 165.136600][ T7354] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 165.143533][ T7354] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 165.150453][ T7354] genl_family_rcv_msg_doit+0x214/0x300 [ 165.155981][ T7354] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 165.162026][ T7354] ? genl_get_cmd+0x3ef/0x720 [ 165.166697][ T7354] ? genl_rcv_msg+0x5e1/0x800 [ 165.171353][ T7354] ? genl_rcv_msg+0x3bc/0x800 [ 165.176010][ T7354] genl_rcv_msg+0x560/0x800 [ 165.180500][ T7354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.185503][ T7354] ? irqentry_exit+0x180/0x670 [ 165.190265][ T7354] ? __pfx_nbd_genl_connect+0x10/0x10 [ 165.195625][ T7354] netlink_rcv_skb+0x159/0x420 [ 165.200374][ T7354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.205381][ T7354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.210671][ T7354] ? netlink_deliver_tap+0x1ae/0xcc0 [ 165.215945][ T7354] genl_rcv+0x28/0x40 [ 165.219917][ T7354] netlink_unicast+0x5aa/0x870 [ 165.224669][ T7354] ? __pfx_netlink_unicast+0x10/0x10 [ 165.229948][ T7354] netlink_sendmsg+0x8b0/0xda0 [ 165.234701][ T7354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.239980][ T7354] ? __might_fault+0x80/0x140 [ 165.244995][ T7354] ____sys_sendmsg+0x9e1/0xb70 [ 165.249749][ T7354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.255020][ T7354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.260302][ T7354] ___sys_sendmsg+0x190/0x1e0 [ 165.264960][ T7354] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.270136][ T7354] ? find_held_lock+0x2b/0x80 [ 165.274796][ T7354] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 165.281383][ T7354] ? __rcu_read_unlock+0x26a/0x5e0 [ 165.286489][ T7354] __sys_sendmsg+0x170/0x220 [ 165.291065][ T7354] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.296169][ T7354] ? trace_irq_enable.constprop.0+0x2f/0x180 [ 165.302163][ T7354] do_syscall_64+0x106/0xf80 [ 165.306739][ T7354] ? clear_bhb_loop+0x40/0x90 [ 165.311404][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.317279][ T7354] RIP: 0033:0x7fce8bb9c799 [ 165.321685][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.341272][ T7354] RSP: 002b:00007fce8cb2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.349666][ T7354] RAX: ffffffffffffffda RBX: 00007fce8be15fa0 RCX: 00007fce8bb9c799 [ 165.357616][ T7354] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004 [ 165.365565][ T7354] RBP: 00007fce8bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 165.373516][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.381466][ T7354] R13: 00007fce8be16038 R14: 00007fce8be15fa0 R15: 00007fff676a1c38 [ 165.389435][ T7354] [ 165.392704][ T7354] Kernel Offset: disabled [ 165.397004][ T7354] Rebooting in 86400 seconds..