last executing test programs: 2m9.821236523s ago: executing program 3 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x8c08d8515437beb0) 2m8.838770693s ago: executing program 3 (id=656): r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000000), 0x94000, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x800) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x37, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x40, 0x9ffac2705d37b0b7, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000040) 2m8.591759951s ago: executing program 3 (id=659): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) sendmmsg$unix(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000900)="e22675539a7ea1b8bcdc222b4ed97b335123f5ebb7977e1d83d72af6d993911550bc49041f40a5ae12f20e5b5280662bd0c48e1b6c990a19df9066e1b5c2b954e9131feabe49f9dc6d2b5370fb826e5b022ade6d8a0434a1eae3af59da9ec9298ffcc6aec665343697368b000aeab8ec12faa322d06cf7bed42bdf359ea88f147f4ec1cf1fe4156f735ad09f2b677b0740000000789dc69128b9eb994a063c72f645fb734581454f8f78baa6d03635d1dc6852eea89ff725b6a09296cba406f084a66e74", 0xc4}, {&(0x7f0000000200)="6de3130c7571d26697df2c9b99d2dca2eec729804e5d0762153ccb7c0578ac8ad71f4e80ad2844ef8cc9e629f577383525909812333b39f6eecac00a519e3d2a5e9bd504b299466372c5f42f2c3e7f3a58a2a2911e277b8eae33c205f5e38730d724ac5982a18d2a32b7d8ca7044aa4e97f3220d5a39123d7e855c99c176b9077297a633428d3c0caba6318d172f0509882efcbb688b2e2ee77f842641cd02bb66853b29951bdb44acc7faf0b7893486fb9b680f195acd239567324dd9505f279aec795f79eef489d058b62eb3f83d603e35c523091f27e15a9fa71cc4e06264af32d198053df44bebbc1a", 0xeb}], 0x2, 0x0, 0x0, 0x4000001}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)}, {&(0x7f0000000180)="bd7a0a7c9b768a6b83c2e0e13c7aca39a0bc3bef2f5c2de777b02c28620584", 0x1f}, {&(0x7f00000003c0)="02d51721ae08d4c5e864314787bc3cb898d9ceccdc97cf760f849efc598e49ddb6627dfbf5199c7c8bd52db5cadbc7263a87e6d587f5b8e3011feb6e9c0a3576285c45ae924afb3de03765c181d48bf85a469e944d640ba0806c21b625396ac2e42104626c21738e49e3110ef5d7c0f5bbce2b2b3ac3ad13395f1cd7bdd484489e8443c760884fbe08e715a4c384ce407c30eb2807e5f98307d31936396cf16d4c27735d1f836c03fb950cae10a29f333b658f8d64d33d72c80e7f8ca6fec0deab4a68bd96584d6e70633ea2a23640e347a832f78e951aad3bf0b99eb6", 0xdd}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="506e7e1efc065cc69b9cbcd524973def78649ce45934d2079102d39eac71dbd8f8dc53c6b324877e05e0a0b921a9a6dc08a5557748b546df25d53abd1aa406bce1d95208a2dda663ca97f361", 0x4c}, {&(0x7f0000000580)="2aa67b4377a3dfa111f932cf5374b111a63556351efdd28ee9d19891816eab4eeddec1c6853534cf0226cbd373c823b9e2739900fe5104f33116e55277e9fd3cc4a6f38b48ee1cf816d313eabb482693f2d885bd653b3e6c16f5a12e182e97367866d5bbc162fb876d723e85fb8748eec8925c4a733590b27a4bc4519bf676d4566f18870f9a31e31491d45170a1eea2eacab7f9ef19b774d57a7d5d87f465a6e6d1ccaf", 0xa4}, {&(0x7f0000000640)="06cb71ef7b87a00ae194ac5608830e360b4870cc6a609861157e1273789d46dd61fc6eb8609c38884770c01169d9d9a4208e219986a44a4b04e3347e9cfdc5be90927ebac3de779bb323777f30c0fa0a95281ba0a0735ed6e0f5ec3e063a805209cfc5cf1c5f379af04d031ddb00ace4df7a2bab46f62816d71191a91bb10684b2b8e9f9236f8343c36f9be6968b6d9a65", 0x91}, {&(0x7f0000000700)="088c0ba2f186bf0a68760dd6a2ef8ba52f2f2e4c7a38b9c09008d4c44aaee0aedb11f5d00c697acd3ea0675b29dbb3ffd7a4418bdce50ab0d0f8a2996148ef46c97e56cde68215f667eaf3a2b269a0842e137f177b37c2908c16597d42f10a6895472c6f1acd258e650d2978d44c934e02a62678a86e465a1c6dbb02a6aa8ef6bdbb03d0f60a9c924f8c8be2504281ddbdd7acbfd4739e95e07b98dbea100d105793d79e17d5d5934fdba1e724ad351f59645094b4c2798ccb0a6d28fc3234b5fba7251fceaab20d9adefbebc433de83fba14ba72331646a5d0241dc19a46b82a540", 0xe2}], 0x8, 0x0, 0x0, 0x20008cd1}}], 0x2, 0x0) 2m8.254500316s ago: executing program 3 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7101}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x100) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x268, 0x98, 0xfeffffff, 0x268, 0x268, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @remote, @icmp_id}}}}, {{@ip={@rand_addr=0x64010100, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@mcast2, @port=0x4e23, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r3}, 0x41) 2m8.107237641s ago: executing program 3 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 2m6.623084362s ago: executing program 3 (id=666): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0x401], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m50.92942503s ago: executing program 32 (id=666): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0x401], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.633382911s ago: executing program 1 (id=1166): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\\/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x0, 0x6, 0x1000002, 0x3, 0xffffffff, 0x40}) get_robust_list(r3, 0x0, 0x0) 14.162466033s ago: executing program 1 (id=1204): syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f0000905030300"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.024542685s ago: executing program 2 (id=1216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 10.195492762s ago: executing program 0 (id=1221): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0x4) openat(0xffffffffffffffff, 0x0, 0x312514d, 0x184) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mincore(&(0x7f0000156000/0xc00000)=nil, 0xc00000, &(0x7f0000001640)=""/4096) 9.414147095s ago: executing program 2 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x3, 0x10001, 0x8}, 0x4b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c001400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 9.223559075s ago: executing program 1 (id=1224): fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) memfd_create(0x0, 0x3) unshare(0x64000600) openat$sw_sync_info(0xffffff9c, &(0x7f00000001c0), 0x340, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) 9.090464739s ago: executing program 0 (id=1225): socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 8.898813321s ago: executing program 5 (id=1226): bind$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4605030908770000000000000003000600155eef2e5a020002380000000b03010008000000e10a20000100010007040300030000003d0e000005000000920c00006e020000020000000300000006000000b5862bc21a7c0794b22185754d057f695412adba95fa5a17028ce4cfe8640555faf15141f02065c2a82d934dad267c2585d5f6732b0c4ba3eee819ae4d48df3802e16ce062e325a865f96eb26aa72f124ac3d9b4931e00246d81c35182f5e81a3a04eeee9bf72cc9579ac1e93ef7b4ebf68f77c9fadc5cda25522915a9c671dd45731b1e"], 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) landlock_restrict_self(r2, 0xf) 8.67020993s ago: executing program 5 (id=1227): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x4d, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 8.444709946s ago: executing program 5 (id=1228): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7b5d051a47465618fe24ce2a25419cbd2d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x128}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8.321797082s ago: executing program 5 (id=1229): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0xee) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) 6.991199518s ago: executing program 0 (id=1230): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x804) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendto$packet(r4, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x6f, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.990695176s ago: executing program 5 (id=1231): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80102, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x490, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x460, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_POLICE={0x44c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x7ff, 0x1, 0x8000, 0xa5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x0, 0x4, 0x3, 0xbf, 0xfffffff9, 0x4, 0x180, 0x94, 0x4, 0x80000000, 0xf0, 0x6, 0x4, 0x7ff, 0x200, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x80000001, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x1f12, 0x2, 0x2, 0x6, 0x7, 0x2, 0x56e23768, 0x4, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x7, 0xafd6, 0x80, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x800, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0x3, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x1, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x2, 0x4, 0x24000000, 0xd87, 0xb, 0x4, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0x81, 0x33d0, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xca8, 0x10, 0x4, 0x7, 0x7, 0x10001, 0x5, 0x2, 0x6, 0x6, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x7, 0x17, 0x8, 0x4da0, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0xec, 0x4, 0xfffffffd, 0xf8f63b5, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x0, 0x6, 0x5, 0x6, 0x4, 0x4, 0x1000, 0x401, 0x7, 0x5, 0x3, 0xfffffff9, 0xb617, 0x0, 0x8, 0x3, 0x2, 0x8, 0x4, 0x40, 0x4c4, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0x5, 0x1, 0x5, 0x5, 0x1, 0xffffff38, 0x1, 0xdd9, 0x0, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x4, 0xfffffff8}, {0x6, 0x1, 0x2000, 0x0, 0x2}, 0x101, 0x7fff, 0xf}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x3a}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)='\a', 0x1}], 0x1}, 0x200480d4) 6.183860538s ago: executing program 4 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4.911213944s ago: executing program 4 (id=1235): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x32}, 0x48, 0xfffffffffffffffe) request_key(0x0, &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r0) keyctl$set_timeout(0xf, r0, 0x1ff) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, r0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x6, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x7}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) 4.846072056s ago: executing program 4 (id=1236): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) syz_usb_connect(0x6, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 3.816834261s ago: executing program 2 (id=1237): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) 3.733477209s ago: executing program 0 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.530501514s ago: executing program 2 (id=1239): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.332316654s ago: executing program 2 (id=1240): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.808194217s ago: executing program 0 (id=1241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) 791.592229ms ago: executing program 4 (id=1242): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x6}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) 678.011746ms ago: executing program 0 (id=1243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000004) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 677.161705ms ago: executing program 4 (id=1244): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c2402000000000000080000052405000008240700"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0xa9) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, 0x0, 0x20) fsopen(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x701, 0x10000, 0xffdffffc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x240448c1}, 0x0) 69.129498ms ago: executing program 2 (id=1245): openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000600)={0x0, &(0x7f0000000240)}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) syz_fuse_handle_req(r2, &(0x7f0000004e80)="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", 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000007300)={0x2020}, 0x2020) 41.298699ms ago: executing program 4 (id=1246): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc1, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x0, {[0xc, 0x7, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='as\x9cI\xd4n\x1f\xf5ymmetPic`\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7iLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x91\xca\xe7$\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1b', r2) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0xa, 0x2e, 0xf, 0x6, 0xfffffffe, 0xfe3, 0x0, 0x151}}) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 0s ago: executing program 5 (id=1247): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x20ff}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) eventfd(0xff) kernel console output (not intermixed with test programs): [ T29] audit: type=1400 audit(1779099444.530:413): avc: denied { ioctl } for pid=7045 comm="syz.3.413" path="socket:[18091]" dev="sockfs" ino=18091 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.727632][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.747189][ T29] audit: type=1400 audit(1779099444.670:414): avc: denied { search } for pid=5274 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.760204][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.769354][ T29] audit: type=1400 audit(1779099444.670:415): avc: denied { search } for pid=5274 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.802384][ T29] audit: type=1400 audit(1779099444.670:416): avc: denied { search } for pid=5274 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.827118][ T29] audit: type=1400 audit(1779099444.670:417): avc: denied { read } for pid=5274 comm="dhcpcd" name="n30" dev="tmpfs" ino=3748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.849578][ T29] audit: type=1400 audit(1779099444.670:418): avc: denied { open } for pid=5274 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.883402][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.929095][ T5708] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.962314][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.660696][ T5708] usb 1-1: config 0 descriptor?? [ 134.723766][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 134.723782][ T29] audit: type=1400 audit(1779099445.640:420): avc: denied { read } for pid=7062 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.827985][ T29] audit: type=1400 audit(1779099445.680:421): avc: denied { read open } for pid=7062 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.853710][ T29] audit: type=1400 audit(1779099445.680:422): avc: denied { getattr } for pid=7062 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.014993][ T7070] binder: 7069:7070 ioctl c0306201 200000000180 returned -14 [ 135.188305][ T5708] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 135.495722][ T5716] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 135.585467][ T29] audit: type=1400 audit(1779099446.500:423): avc: denied { validate_trans } for pid=7084 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 135.588105][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 135.588140][ T7087] netlink: 'syz.4.422': attribute type 7 has an invalid length. [ 135.588153][ T7087] netlink: 'syz.4.422': attribute type 8 has an invalid length. [ 135.588165][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 135.591578][ T24] usb 1-1: USB disconnect, device number 6 [ 135.672242][ T5716] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.672268][ T5716] usb 4-1: config 0 has no interface number 0 [ 135.672300][ T5716] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.672323][ T5716] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 135.672353][ T5716] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.672365][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.681458][ T5716] usb 4-1: config 0 descriptor?? [ 135.682746][ T7073] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.696738][ T5716] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.752026][ T29] audit: type=1400 audit(1779099446.670:424): avc: denied { write } for pid=7061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.752076][ T29] audit: type=1400 audit(1779099446.670:425): avc: denied { add_name } for pid=7061 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.752110][ T29] audit: type=1400 audit(1779099446.670:426): avc: denied { create } for pid=7061 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.752145][ T29] audit: type=1400 audit(1779099446.670:427): avc: denied { write } for pid=7061 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.bnep0.link" dev="tmpfs" ino=3794 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.752183][ T29] audit: type=1400 audit(1779099446.670:428): avc: denied { append } for pid=7061 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" dev="tmpfs" ino=3794 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.875077][ T29] audit: type=1400 audit(1779099446.790:429): avc: denied { write } for pid=7090 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.010912][ T5616] Bluetooth: hci4: link tx timeout [ 136.011007][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.012225][ T5716] usb 4-1: USB disconnect, device number 10 [ 136.012334][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 136.112618][ T5616] Bluetooth: hci4: link tx timeout [ 136.112638][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.160729][ T5616] Bluetooth: hci4: link tx timeout [ 136.160748][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.237168][ T5616] Bluetooth: hci4: link tx timeout [ 136.237186][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.045516][ T7125] input: syz1 as /devices/virtual/input/input8 [ 137.052185][ T5716] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.127444][ T5616] Bluetooth: hci4: link tx timeout [ 137.133502][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.227067][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.245638][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.265765][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.340265][ T5616] Bluetooth: hci4: link tx timeout [ 137.345698][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.358766][ T5716] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 137.367959][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.848243][ T5716] usb 3-1: config 0 descriptor?? [ 137.860106][ T5616] Bluetooth: hci4: link tx timeout [ 137.865278][ T5616] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.086217][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 138.127943][ T5716] usbhid 3-1:0.0: can't add hid device: -71 [ 138.159353][ T5716] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.202110][ T5716] usb 3-1: USB disconnect, device number 8 [ 138.686052][ T990] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.866290][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 138.900378][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.939261][ T990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.975206][ T990] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.005109][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.040639][ T990] usb 5-1: config 0 descriptor?? [ 139.814651][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.830726][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.022352][ T7170] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 140.150962][ T7170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.227028][ T7172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.249764][ T7172] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 140.274745][ T7172] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 140.298228][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 140.298245][ T29] audit: type=1400 audit(1779099451.220:467): avc: denied { map } for pid=7173 comm="syz.2.443" path="socket:[18233]" dev="sockfs" ino=18233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.332232][ T29] audit: type=1400 audit(1779099451.260:468): avc: denied { read } for pid=7173 comm="syz.2.443" path="socket:[18233]" dev="sockfs" ino=18233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.375509][ T7174] gretap1: entered promiscuous mode [ 140.403834][ T7174] bond1: (slave gretap1): making interface the new active one [ 140.418483][ T7174] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 141.336106][ T29] audit: type=1800 audit(1779099452.250:469): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.447" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 141.565305][ T990] usbhid 5-1:0.0: can't add hid device: -71 [ 141.580471][ T990] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.643038][ T990] usb 5-1: USB disconnect, device number 8 [ 141.708833][ T29] audit: type=1400 audit(1779099452.630:470): avc: denied { getopt } for pid=7199 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.946142][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 142.260509][ T29] audit: type=1804 audit(1779099453.180:471): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.455" name="bus" dev="ramfs" ino=18887 res=1 errno=0 [ 142.328924][ T29] audit: type=1804 audit(1779099453.190:472): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.455" name="bus" dev="ramfs" ino=18887 res=1 errno=0 [ 143.051999][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'. [ 143.177703][ T7229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7229 comm=syz.2.459 [ 143.275967][ T29] audit: type=1400 audit(1779099454.190:473): avc: denied { create } for pid=7234 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.723629][ T29] audit: type=1400 audit(1779099455.640:474): avc: denied { connect } for pid=7244 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.927418][ T29] audit: type=1400 audit(1779099455.820:475): avc: denied { write } for pid=7244 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.084218][ T29] audit: type=1400 audit(1779099456.000:476): avc: denied { read } for pid=7244 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.105722][ T990] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.257053][ T990] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.267358][ T990] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 145.282302][ T990] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.291606][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.299675][ T990] usb 1-1: Product: syz [ 145.303838][ T990] usb 1-1: Manufacturer: syz [ 145.308933][ T990] usb 1-1: SerialNumber: syz [ 145.527734][ T990] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 145.577384][ T990] usb 1-1: USB disconnect, device number 7 [ 145.664694][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 145.711217][ T7274] hsr_slave_1 (unregistering): left promiscuous mode [ 145.750889][ T7251] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 145.758877][ T7251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.931547][ T7285] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 147.501873][ T7308] binder: BINDER_SET_CONTEXT_MGR already set [ 147.533536][ T7308] binder: 7307:7308 ioctl 4018620d 200000004a80 returned -16 [ 148.355709][ T5709] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.415956][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.517381][ T5709] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.536550][ T5709] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 148.545686][ T5709] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 148.567752][ T5709] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 148.585680][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 148.595679][ T5709] usb 3-1: config 129 has no interface number 0 [ 148.606410][ T5709] usb 3-1: config 129 has no interface number 1 [ 148.631307][ T5709] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 148.675066][ T5709] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 148.702497][ T5709] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 148.737069][ T5709] usb 3-1: config 129 interface 135 has no altsetting 0 [ 148.753341][ T5709] usb 3-1: config 129 interface 5 has no altsetting 0 [ 148.771758][ T5709] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 148.789419][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.820221][ T5709] usb 3-1: SerialNumber: 㢧ꘫ䧢഍뭝떳숄㖔⟐ࡥ륅Ά篏좓뻦粸炜鰪姆◅銬ో资㱱朲쵱시䣈闋ս꿽忍⪈莂ᮊ㣯崙㚢ꆫÉ嶆븉ﹿ陿岝㫚ꇀ୽ﯳ癕ꓰ䉄杤⯫魳 [ 148.876857][ T29] audit: type=1400 audit(1779099459.790:477): avc: denied { create } for pid=7337 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.924127][ T7338] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 149.097310][ T29] audit: type=1400 audit(1779099460.010:478): avc: denied { write } for pid=7326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.106394][ T7338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.163880][ T7341] bond1: (slave veth3): Enslaving as an active interface with a down link [ 149.199266][ T7343] bond1: (slave dummy0): making interface the new active one [ 149.233344][ T7343] dummy0: entered promiscuous mode [ 149.269077][ T7343] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 149.390975][ T5709] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.399085][ T29] audit: type=1400 audit(1779099460.310:479): avc: denied { write } for pid=7349 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.409739][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.421702][ T5709] usb 3-1: MIDIStreaming interface descriptor not found [ 149.462306][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 149.482003][ T9] usb 2-1: can't read configurations, error -71 [ 149.482034][ T7338] netlink: 14 bytes leftover after parsing attributes in process `syz.0.492'. [ 149.549326][ T7338] bond1: (slave dummy0): Releasing active interface [ 149.565096][ T7338] dummy0 (unregistering): left promiscuous mode [ 149.607101][ T5709] usb 3-1: USB disconnect, device number 9 [ 149.650177][ T29] audit: type=1400 audit(1779099460.570:480): avc: denied { module_request } for pid=7351 comm="syz.4.494" kmod="crypto-cbc(des3_ede)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 152.587581][ T7396] IPVS: lc: FWM 3 0x00000003 - no destination available [ 152.882273][ T5709] IPVS: starting estimator thread 0... [ 152.975927][ T7404] IPVS: using max 40 ests per chain, 96000 per kthread [ 153.072267][ T29] audit: type=1400 audit(1779099463.990:481): avc: denied { write } for pid=7359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.235302][ T7424] lo: Caught tx_queue_len zero misconfig [ 153.373027][ T29] audit: type=1400 audit(1779099464.290:482): avc: denied { write } for pid=7425 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.466044][ T7477] tipc: Enabled bearer , priority 0 [ 157.580152][ T7477] syzkaller0: entered promiscuous mode [ 157.587948][ T7477] syzkaller0: entered allmulticast mode [ 157.596322][ T29] audit: type=1400 audit(1779099468.520:483): avc: denied { bind } for pid=7482 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.606156][ T7477] tipc: Resetting bearer [ 157.670098][ T29] audit: type=1400 audit(1779099468.520:484): avc: denied { name_bind } for pid=7482 comm="syz.2.523" src=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 157.736929][ T29] audit: type=1400 audit(1779099468.520:485): avc: denied { node_bind } for pid=7482 comm="syz.2.523" src=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 157.765384][ T7481] syzkaller0: entered promiscuous mode [ 157.779952][ T7481] syzkaller0: entered allmulticast mode [ 158.416137][ T7476] tipc: Resetting bearer [ 160.089848][ T29] audit: type=1400 audit(1779099471.010:486): avc: denied { create } for pid=7511 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.234428][ T29] audit: type=1400 audit(1779099471.070:487): avc: denied { read } for pid=7511 comm="syz.4.530" path="socket:[19847]" dev="sockfs" ino=19847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.515721][ T5709] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 160.697882][ T5709] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 160.708704][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.760014][ T5709] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.798364][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.831771][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.886479][ T5709] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.929349][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.998591][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.025736][ T5709] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.055726][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.111965][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.122473][ T5709] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.134071][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.142946][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.153874][ T5709] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.168105][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.186349][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.196557][ T5709] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.215861][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.223635][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.233644][ T5709] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.250779][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.258595][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.287989][ T5709] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.311069][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.329129][ T5709] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 161.345468][ T5709] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 161.354435][ T5709] usb 4-1: Product: syz [ 161.367396][ T5709] usb 4-1: Manufacturer: syz [ 161.372066][ T5709] usb 4-1: SerialNumber: syz [ 161.383106][ T5709] usb 4-1: config 0 descriptor?? [ 161.416798][ T5709] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 161.696575][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 161.704048][ T5709] usb 4-1: USB disconnect, device number 11 [ 161.715751][ T5709] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 162.233715][ T7476] tipc: Disabling bearer [ 163.062550][ T7533] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 163.186014][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 163.730593][ T7520] netlink: 'syz.2.533': attribute type 3 has an invalid length. [ 163.739407][ T7520] netlink: 'syz.2.533': attribute type 3 has an invalid length. [ 163.919425][ T7534] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 163.932747][ T7534] bond2: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 164.023862][ T7534] bond2: (slave vxcan1): making interface the new active one [ 164.044600][ T7534] bond2: (slave vxcan1): Enslaving as an active interface with an up link [ 164.080316][ T7535] bond2 (unregistering): (slave vxcan1): Releasing backup interface [ 164.109595][ T7535] bond2 (unregistering): Released all slaves [ 164.125699][ T5716] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 164.388689][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.400406][ T5716] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 164.412192][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.456483][ T5716] usb 4-1: config 0 descriptor?? [ 164.469066][ T5716] pwc: Askey VC010 type 2 USB webcam detected. [ 164.789134][ T29] audit: type=1400 audit(1779099475.710:488): avc: denied { ioctl } for pid=7585 comm="syz.2.543" path="socket:[19998]" dev="sockfs" ino=19998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.923314][ T29] audit: type=1400 audit(1779099475.840:489): avc: denied { watch } for pid=7590 comm="syz.4.544" path="/104/file1" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.955684][ T29] audit: type=1400 audit(1779099475.870:490): avc: denied { watch_sb watch_reads } for pid=7590 comm="syz.4.544" path="/104/file1" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.111295][ T5716] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.121775][ T5716] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.134050][ T5716] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.227284][ T5716] pwc: recv_control_msg error -32 req 04 val 1300 [ 165.730692][ T5716] pwc: recv_control_msg error -32 req 04 val 1400 [ 165.748616][ T5716] pwc: recv_control_msg error -32 req 02 val 2000 [ 165.767908][ T5716] pwc: recv_control_msg error -71 req 02 val 2100 [ 166.271079][ T5716] pwc: recv_control_msg error -71 req 04 val 1500 [ 166.325868][ T5716] pwc: recv_control_msg error -71 req 02 val 2500 [ 166.354708][ T5716] pwc: recv_control_msg error -71 req 02 val 2400 [ 166.376441][ T5716] pwc: recv_control_msg error -71 req 02 val 2600 [ 166.390795][ T5716] pwc: recv_control_msg error -71 req 02 val 2900 [ 166.404090][ T5716] pwc: recv_control_msg error -71 req 02 val 2800 [ 166.417436][ T5716] pwc: recv_control_msg error -71 req 04 val 1100 [ 166.430530][ T5716] pwc: recv_control_msg error -71 req 04 val 1200 [ 166.574906][ T5716] pwc: Registered as video103. [ 166.584998][ T5716] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 166.614035][ T5716] usb 4-1: USB disconnect, device number 12 [ 166.799631][ T7612] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.829880][ T7612] kvm: pic: non byte read [ 166.834669][ T7612] kvm: pic: level sensitive irq not supported [ 166.834770][ T7612] kvm: pic: non byte read [ 166.975526][ T29] audit: type=1400 audit(1779099477.890:491): avc: denied { getopt } for pid=7604 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.180206][ T5616] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 168.882474][ T29] audit: type=1804 audit(1779099479.800:492): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.564" name="bus" dev="ramfs" ino=20146 res=1 errno=0 [ 168.929883][ T29] audit: type=1804 audit(1779099479.800:493): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.564" name="bus" dev="ramfs" ino=20146 res=1 errno=0 [ 169.205904][ T5616] Bluetooth: hci5: command 0x1003 tx timeout [ 169.214999][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 169.540837][ T29] audit: type=1400 audit(1779099480.460:494): avc: denied { bind } for pid=7661 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.582202][ T5708] kernel write not supported for file /input/event2 (pid: 5708 comm: kworker/1:4) [ 169.893396][ T7671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.914282][ T29] audit: type=1804 audit(1779099480.830:495): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.570" name="bus" dev="ramfs" ino=20810 res=1 errno=0 [ 169.978172][ T29] audit: type=1804 audit(1779099480.860:496): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.570" name="bus" dev="ramfs" ino=20810 res=1 errno=0 [ 171.254952][ T7572] Bluetooth: hci5: Frame reassembly failed (-84) [ 171.497895][ T7704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'. [ 171.548174][ T7704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7704 comm=syz.3.582 [ 171.575787][ T5708] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.611768][ T9] IPVS: starting estimator thread 0... [ 171.623934][ T7708] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 171.739373][ T7710] IPVS: using max 51 ests per chain, 122400 per kthread [ 171.771093][ T5708] usb 2-1: Using ep0 maxpacket: 8 [ 171.785673][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.806242][ T5708] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 171.828458][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.851988][ T5708] usb 2-1: Product: syz [ 171.863695][ T5708] usb 2-1: Manufacturer: syz [ 171.875856][ T5708] usb 2-1: SerialNumber: syz [ 171.933997][ T7715] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 171.976356][ T7714] wireguard: wg2: Could not create IPv6 socket [ 172.050219][ T7717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.585'. [ 172.086706][ T7717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7717 comm=syz.3.585 [ 172.564176][ T7700] syz.2.580 (7700): drop_caches: 2 [ 173.286085][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 173.292870][ T7695] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 173.296866][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.410871][ T5708] usb 2-1: USB disconnect, device number 8 [ 173.475970][ T5709] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 173.501175][ T7361] udevd[7361]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.669064][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 173.695326][ T7735] futex_wake_op: syz.2.592 tries to shift op by 144; fix this program [ 173.841896][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 173.983606][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.000514][ T5709] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.011299][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.019720][ T5709] usb 4-1: Product: syz [ 174.043396][ T5709] usb 4-1: Manufacturer: syz [ 174.056737][ T5709] usb 4-1: SerialNumber: syz [ 174.081103][ T5709] usb 4-1: config 0 descriptor?? [ 174.112111][ T5709] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 174.121846][ T5709] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 174.267939][ T29] audit: type=1400 audit(1779099485.190:497): avc: denied { getopt } for pid=7739 comm="syz.2.594" lport=38103 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 174.454255][ T29] audit: type=1400 audit(1779099485.370:498): avc: denied { connect } for pid=7741 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.715596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 174.731899][ T5709] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 174.761012][ T5709] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 175.440055][ T7752] syz_tun: entered allmulticast mode [ 175.469378][ T7750] syz_tun: left allmulticast mode [ 175.683234][ T29] audit: type=1400 audit(1779099486.600:499): avc: denied { wake_alarm } for pid=7756 comm="syz.4.602" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.738861][ T29] audit: type=1400 audit(1779099486.630:500): avc: denied { getopt } for pid=7756 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.814773][ T5709] em28xx 4-1:0.0: AC97 vendor ID = 0x00fc00fe [ 176.015352][ T5709] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 176.037849][ T5709] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 176.057584][ T5709] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 176.081529][ T5709] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 176.113999][ T5709] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 176.143071][ T5709] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 176.177679][ T5709] usb 4-1: USB disconnect, device number 13 [ 176.533973][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.607'. [ 177.077336][ T29] audit: type=1400 audit(1779099487.980:501): avc: denied { bind } for pid=7779 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.116776][ T29] audit: type=1400 audit(1779099488.040:502): avc: denied { write } for pid=7779 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.462385][ T7789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.988969][ T7799] x_tables: duplicate underflow at hook 1 [ 182.365701][ T990] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 182.537547][ T990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.566327][ T990] usb 4-1: config 1 has an invalid interface number: 5 but max is 0 [ 182.581780][ T990] usb 4-1: config 1 has no interface number 0 [ 182.599488][ T990] usb 4-1: config 1 interface 5 has no altsetting 0 [ 182.641258][ T990] usb 4-1: string descriptor 0 read error: -22 [ 182.668207][ T990] usb 4-1: New USB device found, idVendor=2dee, idProduct=4d22, bcdDevice=f5.d3 [ 182.709852][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.780937][ T990] qmi_wwan 4-1:1.5: bogus CDC Union: master=0, slave=0 [ 182.838106][ T29] audit: type=1400 audit(1779099493.750:503): avc: denied { create } for pid=7853 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 183.008510][ T29] audit: type=1400 audit(1779099493.790:504): avc: denied { setopt } for pid=7853 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 183.105140][ T7860] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 183.131420][ T7860] CIFS mount error: No usable UNC path provided in device string! [ 183.131420][ T7860] [ 183.141732][ T7860] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.449837][ T7848] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.630'. [ 183.493297][ T990] qmi_wwan 4-1:1.5: probe with driver qmi_wwan failed with error -22 [ 183.522916][ T990] option 4-1:1.5: GSM modem (1-port) converter detected [ 183.573857][ T990] usb 4-1: USB disconnect, device number 14 [ 183.597358][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 183.662634][ T990] option 4-1:1.5: device disconnected [ 183.841203][ T7871] syz_tun: entered allmulticast mode [ 183.874899][ T7870] syz_tun: left allmulticast mode [ 186.269862][ T7906] ip6erspan0: entered allmulticast mode [ 187.530502][ T7928] bridge_slave_0: default FDB implementation only supports local addresses [ 187.708898][ T29] audit: type=1400 audit(1779099498.630:505): avc: denied { append } for pid=7932 comm="syz.3.659" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.752201][ T7934] bond0: entered promiscuous mode [ 187.772253][ T7934] bond_slave_0: entered promiscuous mode [ 187.782513][ T7934] bond_slave_1: entered promiscuous mode [ 187.804369][ T7934] batadv0: entered promiscuous mode [ 187.828580][ T7934] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 188.513757][ T29] audit: type=1400 audit(1779099499.420:506): avc: denied { mounton } for pid=7948 comm="syz.3.662" path="/140/file1/file0" dev="autofs" ino=21901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 188.727798][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.944569][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.955025][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 190.959690][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 190.961508][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 191.387250][ T7965] can: request_module (can-proto-0) failed. [ 191.657293][ T7979] netlink: 'syz.1.670': attribute type 10 has an invalid length. [ 191.665262][ T7979] netlink: 55 bytes leftover after parsing attributes in process `syz.1.670'. [ 192.035022][ T7979] batman_adv: batadv0: Interface deactivated: macsec1 [ 192.050857][ T7979] batman_adv: batadv0: Removing interface: macsec1 [ 192.057527][ T29] audit: type=1400 audit(1779099502.970:507): avc: denied { append } for pid=7976 comm="syz.2.672" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 192.479731][ T29] audit: type=1804 audit(1779099503.400:508): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.673" name="bus" dev="ramfs" ino=21242 res=1 errno=0 [ 192.606383][ T29] audit: type=1804 audit(1779099503.400:509): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.673" name="bus" dev="ramfs" ino=21242 res=1 errno=0 [ 192.645739][ T7987] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 194.080590][ T7992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.134160][ T7992] bond1: (slave bond2): making interface the new active one [ 194.179641][ T7992] bond1: (slave bond2): Enslaving as an active interface with an up link [ 194.283552][ T7987] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 194.374113][ T7994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.754002][ T29] audit: type=1400 audit(1779099505.670:510): avc: denied { ioctl } for pid=8013 comm="syz.0.680" path="socket:[22006]" dev="sockfs" ino=22006 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.244437][ T29] audit: type=1400 audit(1779099506.140:511): avc: denied { setopt } for pid=8013 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.564109][ T8021] evm: overlay not supported [ 196.049094][ T29] audit: type=1400 audit(1779099506.970:512): avc: denied { watch } for pid=8019 comm="syz.1.682" path="/131/bus/file1" dev="overlay" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 196.408954][ T8027] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 197.899085][ T29] audit: type=1400 audit(1779099508.820:513): avc: denied { create } for pid=8038 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.949648][ T29] audit: type=1400 audit(1779099508.860:514): avc: denied { write } for pid=8038 comm="syz.2.687" path="socket:[21289]" dev="sockfs" ino=21289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.181926][ T29] audit: type=1326 audit(1779099510.100:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.1.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5673f9ce59 code=0x7ffc0000 [ 199.281307][ T29] audit: type=1326 audit(1779099510.130:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.1.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5673f9ce59 code=0x7ffc0000 [ 199.377697][ T29] audit: type=1326 audit(1779099510.140:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.1.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5673f9ce59 code=0x7ffc0000 [ 199.456272][ T29] audit: type=1326 audit(1779099510.140:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.1.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5673f9ce59 code=0x7ffc0000 [ 199.517139][ T29] audit: type=1326 audit(1779099510.140:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.1.692" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5673f9ce59 code=0x7ffc0000 [ 200.386572][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.697'. [ 200.829998][ T8070] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 200.879285][ T8070] bond2: entered promiscuous mode [ 200.891341][ T8070] bond2: entered allmulticast mode [ 200.911437][ T8070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.937250][ T8073] erspan1: entered allmulticast mode [ 200.945950][ T8073] bond2: (slave erspan1): making interface the new active one [ 200.953607][ T8073] erspan1: entered promiscuous mode [ 200.960379][ T8073] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 201.099746][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 201.123587][ T8070] bond2 (unregistering): (slave erspan1): Releasing active interface [ 201.150308][ T8070] erspan1: left promiscuous mode [ 201.186487][ T8070] bond2 (unregistering): Released all slaves [ 202.968900][ T5619] Bluetooth: hci4: link tx timeout [ 202.974072][ T5619] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 205.066790][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 205.251452][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 205.765900][ T5745] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 205.784949][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.799342][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.810743][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.818753][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.826436][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.871059][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 205.871079][ T29] audit: type=1804 audit(1779099516.780:566): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.716" name="/newroot/135/file0" dev="tmpfs" ino=734 res=1 errno=0 [ 205.906040][ T8131] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 205.923847][ T8131] ref_ctr increment failed for inode: 0x2de offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e1124c0 [ 205.970693][ T29] audit: type=1400 audit(1779099516.890:567): avc: denied { write } for pid=8109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.999970][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 206.012151][ T8131] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 206.029137][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.036002][ T8131] ref_ctr decrement failed for inode: 0x2de offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e1124c0 [ 206.040242][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.075758][ T5745] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.092669][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.097319][ T8131] uprobe: syz.1.716:8131 failed to unregister, leaking uprobe [ 206.130855][ T5745] usb 5-1: config 0 descriptor?? [ 206.147136][ T5745] hub 5-1:0.0: USB hub found [ 206.215525][ T29] audit: type=1400 audit(1779099517.130:568): avc: denied { write } for pid=8142 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.849902][ T29] audit: type=1400 audit(1779099517.770:569): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 207.038663][ T5745] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 207.057424][ T5745] usbhid 5-1:0.0: can't add hid device: -71 [ 207.063594][ T5745] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 207.124705][ T5745] usb 5-1: USB disconnect, device number 9 [ 207.542384][ T29] audit: type=1400 audit(1779099518.460:570): avc: denied { write } for pid=8160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.813642][ T5624] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 207.823102][ T29] audit: type=1400 audit(1779099518.750:571): avc: denied { write } for pid=8195 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.925711][ T5619] Bluetooth: hci5: command tx timeout [ 209.070148][ T29] audit: type=1804 audit(1779099519.990:572): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.732" name="bus" dev="ramfs" ino=22373 res=1 errno=0 [ 209.280890][ T29] audit: type=1804 audit(1779099520.050:573): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.732" name="bus" dev="ramfs" ino=22373 res=1 errno=0 [ 209.616688][ T29] audit: type=1400 audit(1779099520.510:574): avc: denied { write } for pid=8210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.653286][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.697982][ T29] audit: type=1400 audit(1779099520.620:575): avc: denied { write } for pid=8243 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.699918][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.757352][ T8126] bridge_slave_0: entered allmulticast mode [ 209.772371][ T8126] bridge_slave_0: entered promiscuous mode [ 209.805598][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.854880][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.896750][ T8126] bridge_slave_1: entered allmulticast mode [ 209.942657][ T8126] bridge_slave_1: entered promiscuous mode [ 210.005714][ T5624] Bluetooth: hci5: command tx timeout [ 210.073759][ T8126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.124284][ T8126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.210951][ T8126] team0: Port device team_slave_0 added [ 210.229663][ T8126] team0: Port device team_slave_1 added [ 210.265819][ T5709] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 210.304918][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.312201][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.348068][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'. [ 210.360407][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'. [ 210.369851][ T8126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.422143][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.435751][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 210.442418][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.443102][ T8267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.737'. [ 210.493686][ T8126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.505254][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.526307][ T5709] usb 2-1: config 42 has an invalid interface number: 178 but max is 0 [ 210.546190][ T5709] usb 2-1: config 42 has no interface number 0 [ 210.566833][ T5709] usb 2-1: config 42 interface 178 has no altsetting 0 [ 210.584906][ T5709] usb 2-1: string descriptor 0 read error: -22 [ 210.601885][ T5709] usb 2-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 210.633927][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.648851][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 210.673141][ T5709] uvcvideo 2-1:42.178: Found multiple Units with ID 1 [ 210.682664][ T8126] hsr_slave_0: entered promiscuous mode [ 210.695158][ T5709] uvcvideo 2-1:42.178: Found UVC 0.00 device (045e:00f8) [ 210.706083][ T8126] hsr_slave_1: entered promiscuous mode [ 210.718670][ T8126] debugfs: 'hsr0' already exists in 'hsr' [ 210.724471][ T5709] uvcvideo 2-1:42.178: No valid video chain found. [ 210.734016][ T8126] Cannot create hsr debugfs directory [ 210.925662][ T5745] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 211.503430][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 211.503446][ T29] audit: type=1400 audit(1779099522.420:578): avc: denied { map } for pid=8280 comm="syz.4.739" path="socket:[22724]" dev="sockfs" ino=22724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 211.549667][ T5745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.569444][ T8126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.647628][ T5745] usb 1-1: config 202 has an invalid interface number: 2 but max is 0 [ 211.659179][ T5745] usb 1-1: config 202 has no interface number 0 [ 211.665525][ T5745] usb 1-1: config 202 interface 2 has no altsetting 0 [ 211.683334][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.690948][ T5745] usb 1-1: New USB device found, idVendor=09fb, idProduct=602d, bcdDevice=91.fd [ 211.708095][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.716178][ T5745] usb 1-1: Product: syz [ 211.720363][ T5745] usb 1-1: Manufacturer: syz [ 211.725048][ T5745] usb 1-1: SerialNumber: syz [ 211.729846][ T8126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.912665][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.928945][ T8126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.404791][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.492297][ T8126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.513383][ T5624] Bluetooth: hci5: command tx timeout [ 212.572278][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.699344][ T29] audit: type=1400 audit(1779099523.620:579): avc: denied { write } for pid=8274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.920190][ T5745] ftdi_sio 1-1:202.2: FTDI USB Serial Device converter detected [ 212.989610][ T5745] ftdi_sio ttyUSB0: unknown device type: 0x91fd [ 213.002922][ T29] audit: type=1400 audit(1779099523.910:580): avc: denied { write } for pid=8311 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.051468][ T5745] usb 1-1: USB disconnect, device number 8 [ 213.067117][ T5745] ftdi_sio 1-1:202.2: device disconnected [ 213.124158][ T8126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.239313][ T8126] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.290223][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.297518][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.318835][ T5716] usb 2-1: USB disconnect, device number 9 [ 213.361512][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.368675][ T7561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.590365][ T8322] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 213.597100][ T8322] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 213.606123][ T8322] vhci_hcd vhci_hcd.0: Device attached [ 213.642764][ T8325] vhci_hcd: connection closed [ 213.658341][ T7580] vhci_hcd vhci_hcd.1: stop threads [ 213.718618][ T7580] vhci_hcd vhci_hcd.1: release socket [ 213.754438][ T7580] vhci_hcd vhci_hcd.1: disconnect device [ 213.943642][ T29] audit: type=1400 audit(1779099524.860:581): avc: denied { write } for pid=8315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.426269][ T9] usb usb36-port1: attempt power cycle [ 214.704767][ T5624] Bluetooth: hci5: command tx timeout [ 215.175238][ T29] audit: type=1400 audit(1779099524.900:582): avc: denied { read write } for pid=8334 comm="syz.4.747" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 215.199387][ T29] audit: type=1400 audit(1779099524.900:583): avc: denied { open } for pid=8334 comm="syz.4.747" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 215.252974][ T29] audit: type=1400 audit(1779099526.170:584): avc: denied { write } for pid=8346 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.545996][ T8353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.656420][ T9] usb usb36-port1: unable to enumerate USB device [ 215.687694][ T8126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.083863][ T29] audit: type=1400 audit(1779099527.000:585): avc: denied { write } for pid=8358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.276392][ T29] audit: type=1400 audit(1779099527.190:586): avc: denied { write } for pid=8392 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.307829][ T8126] veth0_vlan: entered promiscuous mode [ 216.335001][ T8126] veth1_vlan: entered promiscuous mode [ 216.423819][ T8126] veth0_macvtap: entered promiscuous mode [ 216.458932][ T8126] veth1_macvtap: entered promiscuous mode [ 216.513873][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.551095][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.593869][ T8194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.629247][ T8194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.656566][ T8194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.687807][ T8194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.395009][ T7562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.417837][ T7562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.501666][ T7562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.552554][ T7562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.615459][ T29] audit: type=1400 audit(1779099528.530:587): avc: denied { write } for pid=8396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.689251][ T29] audit: type=1400 audit(1779099528.530:588): avc: denied { write } for pid=8410 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.733853][ T29] audit: type=1400 audit(1779099528.580:589): avc: denied { mounton } for pid=8126 comm="syz-executor" path="/root/syzkaller.3dbtFa/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 217.830967][ T29] audit: type=1400 audit(1779099528.590:590): avc: denied { mounton } for pid=8126 comm="syz-executor" path="/root/syzkaller.3dbtFa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 217.936425][ T29] audit: type=1400 audit(1779099528.590:591): avc: denied { mounton } for pid=8126 comm="syz-executor" path="/root/syzkaller.3dbtFa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 218.032981][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 218.059105][ T29] audit: type=1400 audit(1779099528.680:592): avc: denied { mounton } for pid=8126 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 218.062801][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 218.108721][ T29] audit: type=1804 audit(1779099528.790:593): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.760" name="bus" dev="ramfs" ino=23997 res=1 errno=0 [ 218.171760][ T29] audit: type=1804 audit(1779099528.800:594): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.760" name="bus" dev="ramfs" ino=23997 res=1 errno=0 [ 218.228263][ T29] audit: type=1400 audit(1779099528.830:595): avc: denied { write } for pid=8420 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.391526][ T8441] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 218.454250][ T29] audit: type=1400 audit(1779099529.360:596): avc: denied { mount } for pid=8436 comm="syz.0.764" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 218.523275][ T8441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.372855][ T8457] can0: slcan on ttyS3. [ 219.413241][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 219.511811][ T8194] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.520960][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 219.547408][ T8194] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.581072][ T8194] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.623593][ T8194] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.817349][ T8456] can0 (unregistered): slcan off ttyS3. [ 220.120785][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.776'. [ 220.206051][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 220.772678][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.960816][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.320364][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.522958][ T8529] trusted_key: syz.0.779 sent an empty control message without MSG_MORE. [ 221.596136][ T9] usb 6-1: config 0 descriptor?? [ 221.650390][ T8525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'. [ 221.674155][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 222.060399][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 222.103559][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 222.131812][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 222.154027][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 222.174324][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 222.200888][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 222.212227][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 222.438635][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 222.457192][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 222.489739][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 222.534676][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.561304][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.589077][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.611953][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.629421][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.671782][ T9] pwc: Registered as video103. [ 222.689850][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 222.780230][ T9] usb 6-1: USB disconnect, device number 2 [ 222.979646][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 222.979661][ T29] audit: type=1400 audit(1779099533.900:603): avc: denied { listen } for pid=8558 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.007533][ T8561] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 223.136227][ T5624] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 223.146369][ T5624] CPU: 1 UID: 0 PID: 5624 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.146402][ T5624] Tainted: [L]=SOFTLOCKUP [ 223.146409][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.146421][ T5624] Workqueue: hci1 hci_rx_work [ 223.146452][ T5624] Call Trace: [ 223.146458][ T5624] [ 223.146472][ T5624] dump_stack_lvl+0x100/0x190 [ 223.146505][ T5624] sysfs_warn_dup.cold+0x1c/0x28 [ 223.146535][ T5624] sysfs_create_dir_ns+0x24b/0x2b0 [ 223.146560][ T5624] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 223.146584][ T5624] ? find_held_lock+0x2b/0x80 [ 223.146603][ T5624] ? kobject_add_internal+0x25f/0x930 [ 223.146628][ T5624] ? kobject_add_internal+0x25f/0x930 [ 223.146649][ T5624] ? do_raw_spin_unlock+0x145/0x1e0 [ 223.146679][ T5624] kobject_add_internal+0x2c8/0x930 [ 223.146703][ T5624] kobject_add+0x16a/0x1e0 [ 223.146721][ T5624] ? __pfx_kobject_add+0x10/0x10 [ 223.146738][ T5624] ? class_to_subsys+0x10f/0x150 [ 223.146767][ T5624] ? kobject_put+0xb9/0x640 [ 223.146783][ T5624] ? _raw_spin_unlock+0x28/0x50 [ 223.146813][ T5624] device_add+0x294/0x1950 [ 223.146836][ T5624] ? __pfx_dev_set_name+0x10/0x10 [ 223.146862][ T5624] ? __pfx_device_add+0x10/0x10 [ 223.146884][ T5624] ? mgmt_send_event_skb+0x2fb/0x460 [ 223.146917][ T5624] hci_conn_add_sysfs+0x1a3/0x260 [ 223.146946][ T5624] le_conn_complete_evt+0x11eb/0x1f60 [ 223.146978][ T5624] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 223.147010][ T5624] hci_le_conn_complete_evt+0x23c/0x3a0 [ 223.147037][ T5624] ? skb_pull_data+0x15f/0x1e0 [ 223.147065][ T5624] hci_le_meta_evt+0x34a/0x5f0 [ 223.147091][ T5624] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 223.147119][ T5624] hci_event_packet+0x51c/0xcd0 [ 223.147145][ T5624] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 223.147172][ T5624] ? __pfx_hci_event_packet+0x10/0x10 [ 223.147199][ T5624] ? kcov_remote_start+0x374/0x660 [ 223.147222][ T5624] ? lockdep_hardirqs_on+0x78/0x100 [ 223.147253][ T5624] hci_rx_work+0x451/0xfc0 [ 223.147282][ T5624] process_one_work+0xa0e/0x1980 [ 223.147324][ T5624] ? __pfx_process_one_work+0x10/0x10 [ 223.147357][ T5624] ? __pfx_hci_rx_work+0x10/0x10 [ 223.147385][ T5624] worker_thread+0x5ef/0xe50 [ 223.147423][ T5624] ? kthread+0x13a/0x450 [ 223.147445][ T5624] ? __pfx_worker_thread+0x10/0x10 [ 223.147470][ T5624] kthread+0x370/0x450 [ 223.147498][ T5624] ? __pfx_kthread+0x10/0x10 [ 223.147546][ T5624] ret_from_fork+0x72b/0xd50 [ 223.147574][ T5624] ? __pfx_ret_from_fork+0x10/0x10 [ 223.147602][ T5624] ? __switch_to+0x800/0x1100 [ 223.147634][ T5624] ? __pfx_kthread+0x10/0x10 [ 223.147660][ T5624] ret_from_fork_asm+0x1a/0x30 [ 223.147713][ T5624] [ 223.147812][ T5624] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 223.449051][ T5624] Bluetooth: hci1: failed to register connection device [ 223.477929][ T29] audit: type=1400 audit(1779099533.960:604): avc: denied { accept } for pid=8558 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.154430][ T8561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.292764][ T8566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.309932][ T8566] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 225.369495][ T8566] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 225.898916][ T8568] gretap1: entered promiscuous mode [ 225.912070][ T8568] bond2: (slave gretap1): making interface the new active one [ 225.923038][ T8568] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 226.658437][ T8588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'. [ 226.921489][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.794'. [ 227.067721][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 227.085293][ T29] audit: type=1400 audit(1779099537.980:605): avc: denied { create } for pid=8594 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.165418][ T8593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8593 comm=syz.2.794 [ 227.178326][ T29] audit: type=1400 audit(1779099537.980:606): avc: denied { write } for pid=8594 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 227.710659][ T8597] bond3: entered promiscuous mode [ 227.728314][ T8597] bond3: entered allmulticast mode [ 227.996647][ T8591] netlink: 312 bytes leftover after parsing attributes in process `syz.4.792'. [ 228.103003][ T24] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 228.568416][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.710462][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 228.759121][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 228.786516][ T24] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 228.797846][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.907441][ T24] usb 3-1: config 0 descriptor?? [ 228.913131][ T8607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.230673][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 229.416147][ T8607] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 229.511007][ T8628] hsr0: entered promiscuous mode [ 229.643206][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 229.691522][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 229.706120][ T24] uclogic 0003:5543:0004.0004: ignoring exceeding usage max [ 229.715111][ T24] uclogic 0003:5543:0004.0004: unknown main item tag 0x0 [ 229.724706][ T24] uclogic 0003:5543:0004.0004: unknown main item tag 0x0 [ 229.733938][ T24] uclogic 0003:5543:0004.0004: unknown main item tag 0x0 [ 229.744816][ T24] uclogic 0003:5543:0004.0004: unknown main item tag 0x0 [ 229.752446][ T24] uclogic 0003:5543:0004.0004: unknown main item tag 0x0 [ 229.759696][ T24] uclogic 0003:5543:0004.0004: unknown main item tag 0x0 [ 229.766822][ T24] uclogic 0003:5543:0004.0004: unknown main item tag 0x0 [ 229.773932][ T24] uclogic 0003:5543:0004.0004: unknown main item tag 0x0 [ 229.812198][ T24] uclogic 0003:5543:0004.0004: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 229.933554][ T29] audit: type=1400 audit(1779099540.850:607): avc: denied { lock } for pid=8629 comm="syz.0.804" path="socket:[24308]" dev="sockfs" ino=24308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 230.160896][ T24] usb 3-1: USB disconnect, device number 10 [ 231.500092][ T8648] Invalid ELF header magic: != ELF [ 231.514504][ T29] audit: type=1400 audit(1779099542.420:608): avc: denied { module_load } for pid=8647 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 232.169994][ T8665] xt_hashlimit: size too large, truncated to 1048576 [ 233.327234][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.815'. [ 234.599411][ T29] audit: type=1400 audit(1779099545.520:609): avc: denied { connect } for pid=8696 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.825636][ T5745] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 235.073764][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.168945][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 235.264408][ T5745] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 235.356906][ T5745] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 235.387367][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.411830][ T5745] usb 1-1: config 0 descriptor?? [ 235.430480][ T8700] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 235.906310][ T8700] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 235.912824][ T8700] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 235.959458][ T8700] hsr0: entered promiscuous mode [ 235.994869][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 236.070629][ T5745] uclogic 0003:5543:0004.0005: ignoring exceeding usage max [ 236.111194][ T5745] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 236.128242][ T5745] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 236.149512][ T5745] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 236.173749][ T5745] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 236.197230][ T5745] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 236.212272][ T5745] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 236.230499][ T5745] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 236.256683][ T5745] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 236.311483][ T5745] uclogic 0003:5543:0004.0005: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 236.377538][ T5745] usb 1-1: USB disconnect, device number 9 [ 236.506908][ T8718] fido_id[8718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 237.395868][ T8729] Bluetooth: MGMT ver 1.23 [ 237.428027][ T29] audit: type=1400 audit(1779099548.350:610): avc: denied { read } for pid=8727 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.818291][ T29] audit: type=1404 audit(1779099548.730:611): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 238.059575][ T29] audit: type=1400 audit(1779099548.980:612): avc: denied { read write } for pid=8725 comm="syz.2.830" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 238.260210][ T29] audit: type=1400 audit(1779099549.180:613): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 238.342337][ T29] audit: type=1400 audit(1779099549.230:614): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 238.395216][ T29] audit: type=1400 audit(1779099549.260:615): avc: denied { create } for pid=8754 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 238.452067][ T29] audit: type=1400 audit(1779099549.270:616): avc: denied { create } for pid=8754 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 238.503010][ T29] audit: type=1400 audit(1779099549.280:617): avc: denied { allowed } for pid=8752 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 238.553370][ T29] audit: type=1400 audit(1779099549.280:618): avc: denied { create } for pid=8754 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 238.605757][ T29] audit: type=1400 audit(1779099549.280:619): avc: denied { create } for pid=8754 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 238.697870][ T8759] capability: warning: `syz.2.841' uses 32-bit capabilities (legacy support in use) [ 238.890367][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.842'. [ 239.013536][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.044001][ T8767] bridge_slave_0 (unregistering): left allmulticast mode [ 239.065666][ T8767] bridge_slave_0 (unregistering): left promiscuous mode [ 239.090738][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.194791][ T8774] netlink: 'syz.4.847': attribute type 2 has an invalid length. [ 239.345815][ T8778] syzkaller0: entered promiscuous mode [ 239.375692][ T8778] syzkaller0: entered allmulticast mode [ 239.583751][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.851'. [ 240.089909][ T8799] x9: renamed from bridge_slave_0 (while UP) [ 240.411233][ T8809] block device autoloading is deprecated and will be removed. [ 240.771049][ T8826] syzkaller0: entered promiscuous mode [ 240.787788][ T8826] syzkaller0: entered allmulticast mode [ 242.501948][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 242.502000][ T29] audit: type=1400 audit(1779099553.420:795): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.542955][ T29] audit: type=1400 audit(1779099553.460:796): avc: denied { execmem } for pid=8870 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 242.564049][ T29] audit: type=1400 audit(1779099553.460:797): avc: denied { execmem } for pid=8871 comm="syz.4.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 242.613775][ T29] audit: type=1400 audit(1779099553.530:798): avc: denied { create } for pid=8870 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 242.665474][ T29] audit: type=1400 audit(1779099553.580:799): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.741776][ T29] audit: type=1400 audit(1779099553.660:800): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.827218][ T29] audit: type=1400 audit(1779099553.750:801): avc: denied { name_bind } for pid=8878 comm="syz.5.888" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 242.918161][ T29] audit: type=1400 audit(1779099553.840:802): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.005799][ T29] audit: type=1400 audit(1779099553.870:803): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.073233][ T29] audit: type=1400 audit(1779099553.960:804): avc: denied { execmem } for pid=8880 comm="syz.5.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 244.609512][ T8919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'. [ 244.731119][ T8921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8921 comm=syz.1.904 [ 246.534783][ T5624] Bluetooth: hci1: unexpected event 0x04 length: 245 > 10 [ 246.534941][ T5624] Bluetooth: hci1: connection err: -111 [ 247.359440][ T8951] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 247.383371][ T8951] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 247.576574][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 247.576591][ T29] audit: type=1400 audit(1779099558.490:877): avc: denied { execmem } for pid=8953 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 247.664480][ T29] audit: type=1400 audit(1779099558.530:878): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.719797][ T29] audit: type=1400 audit(1779099558.530:879): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.773403][ T29] audit: type=1400 audit(1779099558.580:880): avc: denied { read write } for pid=8955 comm="syz.2.918" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 247.825000][ T29] audit: type=1400 audit(1779099558.620:881): avc: denied { create } for pid=8953 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 247.873094][ T29] audit: type=1400 audit(1779099558.630:882): avc: denied { module_request } for pid=8955 comm="syz.2.918" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 247.919061][ T29] audit: type=1400 audit(1779099558.630:883): avc: denied { sys_module } for pid=8955 comm="syz.2.918" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 247.963718][ T29] audit: type=1400 audit(1779099558.630:884): avc: denied { map_create } for pid=8955 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 248.006265][ T29] audit: type=1400 audit(1779099558.630:885): avc: denied { map_create } for pid=8955 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 248.052361][ T29] audit: type=1400 audit(1779099558.630:886): avc: denied { prog_load } for pid=8955 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 248.278222][ T8965] syzkaller0: entered promiscuous mode [ 248.308150][ T8965] syzkaller0: entered allmulticast mode [ 248.905626][ T8989] xt_ecn: cannot match TCP bits for non-tcp packets [ 250.170639][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.640890][ T9034] syzkaller0: entered promiscuous mode [ 251.671090][ T9034] syzkaller0: entered allmulticast mode [ 252.418615][ T9053] syzkaller0: entered promiscuous mode [ 252.435996][ T9053] syzkaller0: entered allmulticast mode [ 252.558053][ T9058] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 252.620635][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 252.620667][ T29] audit: type=1400 audit(1779099563.540:1003): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 252.643195][ T9058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.695681][ T29] audit: type=1400 audit(1779099563.590:1004): avc: denied { create } for pid=9057 comm="syz.1.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 252.740882][ T29] audit: type=1400 audit(1779099563.660:1005): avc: denied { create } for pid=9062 comm="syz.5.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 252.795762][ T9060] bond4: (slave gretap2): making interface the new active one [ 252.799141][ T9058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9058 comm=syz.1.955 [ 252.844160][ T9060] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 252.876416][ T29] audit: type=1400 audit(1779099563.800:1006): avc: denied { module_request } for pid=9062 comm="syz.5.956" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 252.936949][ T29] audit: type=1400 audit(1779099563.800:1007): avc: denied { sys_module } for pid=9062 comm="syz.5.956" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 253.025510][ T29] audit: type=1400 audit(1779099563.940:1008): avc: denied { execmem } for pid=9057 comm="syz.1.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 253.103618][ T29] audit: type=1400 audit(1779099564.010:1009): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 253.144262][ T9063] syzkaller0: entered promiscuous mode [ 253.165060][ T9063] syzkaller0: entered allmulticast mode [ 253.213263][ T29] audit: type=1400 audit(1779099564.130:1010): avc: denied { create } for pid=9068 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 253.279620][ T29] audit: type=1400 audit(1779099564.170:1011): avc: denied { read } for pid=9068 comm="syz.1.958" dev="nsfs" ino=4026533016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 253.354851][ T29] audit: type=1400 audit(1779099564.200:1012): avc: denied { map_create } for pid=9068 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 255.600676][ T9096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.968'. [ 257.581717][ T9113] syzkaller0: entered promiscuous mode [ 257.626917][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 257.626933][ T29] audit: type=1400 audit(1779099568.550:1075): avc: denied { read } for pid=9124 comm="syz.1.979" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 257.657270][ T9113] syzkaller0: entered allmulticast mode [ 257.681776][ T29] audit: type=1400 audit(1779099568.550:1076): avc: denied { read } for pid=9124 comm="syz.1.979" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 257.720155][ T29] audit: type=1400 audit(1779099568.550:1077): avc: denied { allowed } for pid=9124 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 257.732723][ T9132] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 257.753789][ T29] audit: type=1400 audit(1779099568.550:1078): avc: denied { create } for pid=9124 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 257.797642][ T29] audit: type=1400 audit(1779099568.550:1079): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.863771][ T29] audit: type=1400 audit(1779099568.630:1080): avc: denied { create } for pid=9123 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 257.913096][ T29] audit: type=1400 audit(1779099568.630:1081): avc: denied { create } for pid=9123 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 257.986110][ T29] audit: type=1400 audit(1779099568.630:1082): avc: denied { create } for pid=9123 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 258.055708][ T29] audit: type=1400 audit(1779099568.630:1083): avc: denied { create } for pid=9123 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 258.110696][ T29] audit: type=1400 audit(1779099568.630:1084): avc: denied { create } for pid=9130 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 260.594156][ T9132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.686360][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.987'. [ 260.751350][ T9133] bond5: (slave geneve2): making interface the new active one [ 260.787974][ T9133] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 261.280334][ T9167] syzkaller0: entered promiscuous mode [ 261.286095][ T9167] syzkaller0: entered allmulticast mode [ 261.293816][ T7557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.730683][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 262.730699][ T29] audit: type=1400 audit(1779099573.650:1152): avc: denied { create } for pid=9191 comm="syz.4.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 262.869545][ T29] audit: type=1400 audit(1779099573.790:1153): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 263.056666][ T29] audit: type=1400 audit(1779099573.860:1154): avc: denied { create } for pid=9195 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 263.158211][ T29] audit: type=1400 audit(1779099574.030:1155): avc: denied { mounton } for pid=9195 comm="syz.2.1001" path="/proc/666/task" dev="proc" ino=26083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 263.284626][ T29] audit: type=1400 audit(1779099574.150:1156): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 263.827757][ T29] audit: type=1400 audit(1779099574.750:1157): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 263.914053][ T29] audit: type=1400 audit(1779099574.830:1158): avc: denied { execmem } for pid=9200 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 263.991915][ T29] audit: type=1400 audit(1779099574.890:1159): avc: denied { bpf } for pid=9200 comm="syz.1.1002" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 264.071234][ T29] audit: type=1400 audit(1779099574.900:1160): avc: denied { create } for pid=9199 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 264.188909][ T29] audit: type=1400 audit(1779099575.110:1161): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 265.337473][ T9222] syzkaller0: entered promiscuous mode [ 265.353943][ T9222] syzkaller0: entered allmulticast mode [ 267.770328][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 267.770346][ T29] audit: type=1400 audit(1779099578.690:1218): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 267.902417][ T29] audit: type=1400 audit(1779099578.780:1219): avc: denied { create } for pid=9256 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 268.000158][ T29] audit: type=1400 audit(1779099578.870:1220): avc: denied { read write } for pid=9258 comm="syz.2.1023" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 268.121838][ T29] audit: type=1400 audit(1779099578.890:1221): avc: denied { prog_load } for pid=9258 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 268.169816][ T29] audit: type=1400 audit(1779099578.890:1222): avc: denied { create } for pid=9258 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 268.292911][ T29] audit: type=1400 audit(1779099579.000:1223): avc: denied { read write } for pid=9256 comm="syz.1.1022" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 268.446688][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.454120][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.528016][ T29] audit: type=1400 audit(1779099579.450:1224): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.634022][ T29] audit: type=1400 audit(1779099579.550:1225): avc: denied { create } for pid=9262 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 268.642411][ T9263] capability: warning: `syz.1.1024' uses deprecated v2 capabilities in a way that may be insecure [ 268.802855][ T29] audit: type=1400 audit(1779099579.720:1226): avc: denied { map_create } for pid=9262 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 269.587702][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.626041][ T29] audit: type=1400 audit(1779099580.540:1227): avc: denied { create } for pid=9265 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 269.659045][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.947747][ T7557] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.986223][ T7557] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.041994][ T7557] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.091472][ T7557] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.324778][ T9285] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 271.359161][ T9287] F2FS-fs: Conflicting test_dummy_encryption options [ 271.593678][ T5624] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 271.779429][ T9298] netlink: 'syz.2.1038': attribute type 10 has an invalid length. [ 272.593312][ T139] syzkaller0: tun_net_xmit 76 [ 272.614033][ T139] syzkaller0: tun_net_xmit 48 [ 272.796995][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 272.797010][ T29] audit: type=1400 audit(1779099583.720:1295): avc: denied { execmem } for pid=9321 comm="syz.4.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 273.364816][ T29] audit: type=1400 audit(1779099584.280:1296): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.480153][ T29] audit: type=1400 audit(1779099584.390:1297): avc: denied { execmem } for pid=9324 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 273.632713][ T29] audit: type=1400 audit(1779099584.460:1298): avc: denied { read write } for pid=9324 comm="syz.0.1046" name="swradio1" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 274.378813][ T29] audit: type=1400 audit(1779099585.300:1299): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 274.430685][ T9329] netlink: 'syz.4.1047': attribute type 1 has an invalid length. [ 274.565995][ T29] audit: type=1400 audit(1779099585.490:1300): avc: denied { create } for pid=9330 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 274.607480][ T29] audit: type=1400 audit(1779099585.490:1301): avc: denied { create } for pid=9330 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 274.630127][ T29] audit: type=1400 audit(1779099585.490:1302): avc: denied { module_request } for pid=9330 comm="syz.1.1048" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 274.653891][ T9337] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1047'. [ 274.667682][ T29] audit: type=1400 audit(1779099585.490:1303): avc: denied { sys_module } for pid=9330 comm="syz.1.1048" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 274.690682][ T29] audit: type=1400 audit(1779099585.540:1304): avc: denied { module_request } for pid=9330 comm="syz.1.1048" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 276.689979][ T9329] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 276.789480][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 277.089761][ T9357] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 277.810941][ T9370] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1057'. [ 277.929309][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 277.929325][ T29] audit: type=1400 audit(1779099588.850:1335): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 278.020377][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 278.041437][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 278.071689][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 278.085134][ T9367] ceph: No mds server is up or the cluster is laggy [ 278.097240][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 278.194920][ T29] audit: type=1400 audit(1779099589.110:1336): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 278.283846][ T29] audit: type=1400 audit(1779099589.190:1337): avc: denied { create } for pid=9373 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 278.380966][ T29] audit: type=1400 audit(1779099589.300:1338): avc: denied { read write } for pid=9373 comm="syz.2.1062" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 278.467873][ T29] audit: type=1400 audit(1779099589.300:1339): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 278.541534][ T29] audit: type=1400 audit(1779099589.330:1340): avc: denied { create } for pid=9373 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 278.597965][ T29] audit: type=1400 audit(1779099589.380:1341): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 278.644751][ T29] audit: type=1400 audit(1779099589.460:1342): avc: denied { execmem } for pid=9381 comm="syz.1.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 278.707734][ T29] audit: type=1400 audit(1779099589.490:1343): avc: denied { read write } for pid=9382 comm="syz.2.1065" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 278.746668][ T29] audit: type=1400 audit(1779099589.490:1344): avc: denied { mounton } for pid=9382 comm="syz.2.1065" path="/237/file0" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 279.955190][ T9408] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 280.113034][ T9412] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9412 comm=syz.4.1074 [ 280.204534][ T9] libceph: connect (1)[c::]:6789 error -101 [ 280.208668][ T9418] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1075'. [ 280.215494][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 280.274120][ T9] libceph: connect (1)[c::]:6789 error -101 [ 280.281041][ T9408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.281365][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 280.303902][ T9411] ceph: No mds server is up or the cluster is laggy [ 280.403408][ T9410] bond2: (slave gretap1): making interface the new active one [ 280.435121][ T9410] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 281.780839][ T9446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.805776][ T9446] batadv_slave_1: entered promiscuous mode [ 282.356272][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 283.117952][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 283.117968][ T29] audit: type=1400 audit(1779099594.040:1412): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 283.247936][ T29] audit: type=1400 audit(1779099594.170:1413): avc: denied { create } for pid=9471 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 283.467644][ T29] audit: type=1400 audit(1779099594.390:1414): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 283.583113][ T29] audit: type=1400 audit(1779099594.500:1415): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 283.667788][ T29] audit: type=1400 audit(1779099594.540:1416): avc: denied { create } for pid=9469 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 283.709144][ T29] audit: type=1400 audit(1779099594.550:1417): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 283.766485][ T29] audit: type=1400 audit(1779099594.580:1418): avc: denied { create } for pid=9477 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 283.808765][ T29] audit: type=1400 audit(1779099594.580:1419): avc: denied { read write } for pid=9477 comm="syz.5.1097" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 283.887359][ T29] audit: type=1400 audit(1779099594.580:1420): avc: denied { create } for pid=9477 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 283.938942][ T29] audit: type=1400 audit(1779099594.590:1421): avc: denied { create } for pid=9477 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 288.152528][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 288.152572][ T29] audit: type=1400 audit(1779099599.070:1486): avc: denied { create } for pid=9544 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 288.182323][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 288.203375][ T139] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.213006][ T139] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.225649][ T29] audit: type=1400 audit(1779099599.100:1487): avc: denied { create } for pid=9544 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 288.225747][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 288.268440][ T8194] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.277821][ T8194] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.297389][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 288.403584][ T29] audit: type=1400 audit(1779099599.320:1488): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 288.531071][ T29] audit: type=1400 audit(1779099599.450:1489): avc: denied { execmem } for pid=9546 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 289.307938][ T29] audit: type=1400 audit(1779099600.220:1490): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.405470][ T9551] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 289.442975][ T29] audit: type=1400 audit(1779099600.360:1491): avc: denied { create } for pid=9552 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 289.478031][ T29] audit: type=1400 audit(1779099600.360:1492): avc: denied { module_request } for pid=9552 comm="syz.4.1123" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 289.497118][ T9551] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.507779][ T29] audit: type=1400 audit(1779099600.360:1493): avc: denied { sys_module } for pid=9552 comm="syz.4.1123" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 289.540870][ T29] audit: type=1400 audit(1779099600.460:1494): avc: denied { module_request } for pid=9552 comm="syz.4.1123" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 289.563669][ T29] audit: type=1400 audit(1779099600.460:1495): avc: denied { sys_module } for pid=9552 comm="syz.4.1123" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 289.652057][ T9555] bond6: (slave ip6gretap1): making interface the new active one [ 289.665165][ T9555] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 289.696410][ T9551] bond6: entered allmulticast mode [ 289.704069][ T9551] ip6gretap1: entered allmulticast mode [ 289.951456][ T9563] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 290.053136][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1127'. [ 290.091177][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1127'. [ 290.153794][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1127'. [ 290.262031][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1127'. [ 290.707586][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 290.723305][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 290.751663][ T9582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.786482][ T9582] bond3: (slave bond0): making interface the new active one [ 290.802737][ T9582] bond3: (slave bond0): Enslaving as an active interface with an up link [ 290.895868][ T9579] netlink: 'syz.2.1132': attribute type 4 has an invalid length. [ 290.905109][ T9579] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1132'. [ 290.950533][ T9579] .`: renamed from bond0 (while UP) [ 293.183741][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 293.183757][ T29] audit: type=1400 audit(1779099604.100:1549): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 293.340072][ T9616] syzkaller0: entered promiscuous mode [ 293.361549][ T9616] syzkaller0: entered allmulticast mode [ 293.391627][ T29] audit: type=1400 audit(1779099604.310:1550): avc: denied { create } for pid=9614 comm="syz.1.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 293.481267][ T29] audit: type=1400 audit(1779099604.380:1551): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 293.561624][ T29] audit: type=1400 audit(1779099604.480:1552): avc: denied { read write } for pid=9619 comm="syz.2.1146" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 293.591223][ T9618] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 293.648149][ T29] audit: type=1400 audit(1779099604.480:1553): avc: denied { create } for pid=9619 comm="syz.2.1146" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 293.760507][ T29] audit: type=1400 audit(1779099604.530:1554): avc: denied { create } for pid=9619 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 293.782079][ T29] audit: type=1400 audit(1779099604.610:1555): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 293.791989][ T9622] bond3: entered promiscuous mode [ 293.809338][ T29] audit: type=1400 audit(1779099604.630:1556): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 293.841666][ T29] audit: type=1400 audit(1779099604.660:1557): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 293.868511][ T29] audit: type=1400 audit(1779099604.680:1558): avc: denied { create } for pid=9623 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 293.921751][ T9622] bond3: entered allmulticast mode [ 293.946197][ T9622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.046812][ T9618] bridge1: entered promiscuous mode [ 294.081765][ T9618] bridge1: entered allmulticast mode [ 294.106039][ T9618] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 294.117071][ T7551] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 294.266111][ T9622] bridge2: entered promiscuous mode [ 294.267403][ T57] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 294.271559][ T9622] bridge2: entered allmulticast mode [ 294.401554][ T9622] bond3: (slave bridge2): Enslaving as a backup interface with a down link [ 294.461520][ T9622] bridge3: entered promiscuous mode [ 294.471759][ T9622] bridge3: entered allmulticast mode [ 294.486757][ T9622] bond3: (slave bridge3): Enslaving as a backup interface with a down link [ 294.760380][ T9649] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1156'. [ 295.228209][ T9662] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 295.340618][ T9662] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 295.351844][ T9662] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 295.509675][ T9668] bond0: (slave bridge1): Enslaving as an active interface with a down link [ 295.672492][ T9662] macvlan2: entered promiscuous mode [ 295.703106][ T9662] macvlan2: entered allmulticast mode [ 295.734242][ T9662] bond0: entered promiscuous mode [ 295.743360][ T9679] CIFS: VFS: UNC: path must begin with // or \\ [ 295.782022][ T9662] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 295.789080][ T9679] CIFS: VFS: Malformed UNC in devname [ 295.834834][ T9662] bond0: left promiscuous mode [ 297.393120][ T9711] netlink: 'syz.5.1178': attribute type 1 has an invalid length. [ 297.489695][ T9711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.538241][ T9714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9714 comm=syz.5.1178 [ 297.632777][ T9713] bond1: (slave gretap1): making interface the new active one [ 297.730201][ T9713] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 298.429623][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 298.429660][ T29] audit: type=1400 audit(1779099609.350:1650): avc: denied { execmem } for pid=9731 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 298.609355][ T29] audit: type=1400 audit(1779099609.520:1651): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 298.715699][ T29] audit: type=1400 audit(1779099609.570:1652): avc: denied { prog_load } for pid=9734 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 298.782837][ T29] audit: type=1400 audit(1779099609.580:1653): avc: denied { execmem } for pid=9734 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 299.007538][ T29] audit: type=1400 audit(1779099609.930:1654): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 299.137737][ T29] audit: type=1400 audit(1779099610.040:1655): avc: denied { create } for pid=9739 comm="syz.2.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 299.217604][ T29] audit: type=1400 audit(1779099610.040:1656): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 299.336748][ T29] audit: type=1400 audit(1779099610.040:1657): avc: denied { read } for pid=9739 comm="syz.2.1186" dev="nsfs" ino=4026533310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 299.439095][ T29] audit: type=1400 audit(1779099610.170:1658): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 299.482305][ T9744] syzkaller0: entered promiscuous mode [ 299.512253][ T9744] syzkaller0: entered allmulticast mode [ 299.553504][ T29] audit: type=1400 audit(1779099610.300:1659): avc: denied { read write } for pid=9741 comm="syz.5.1187" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 299.743229][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1189'. [ 299.860311][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.912577][ T9748] bridge_slave_1 (unregistering): left allmulticast mode [ 299.933491][ T9748] bridge_slave_1 (unregistering): left promiscuous mode [ 299.971738][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.155553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 303.040639][ T9794] xt_hashlimit: max too large, truncated to 1048576 [ 303.058730][ T9794] xt_hashlimit: overflow, rate too high: 0 [ 303.460718][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 303.460752][ T29] audit: type=1400 audit(1779099614.380:1723): avc: denied { execmem } for pid=9797 comm="syz.5.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 303.558971][ T29] audit: type=1400 audit(1779099614.480:1724): avc: denied { allowed } for pid=9797 comm="syz.5.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 303.988589][ T29] audit: type=1400 audit(1779099614.910:1725): avc: denied { execmem } for pid=9801 comm="syz.4.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 304.335116][ T29] audit: type=1400 audit(1779099615.250:1726): avc: denied { read write } for pid=8126 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 304.436185][ T29] audit: type=1400 audit(1779099615.360:1727): avc: denied { read write } for pid=9804 comm="syz.5.1210" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 304.467355][ T29] audit: type=1400 audit(1779099615.360:1728): avc: denied { prog_load } for pid=9804 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 304.493287][ T29] audit: type=1400 audit(1779099615.390:1729): avc: denied { create } for pid=9804 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 304.638895][ T29] audit: type=1400 audit(1779099615.560:1730): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 304.744007][ T29] audit: type=1400 audit(1779099615.660:1731): avc: denied { execute } for pid=9806 comm="syz.2.1212" name="file1" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 304.814401][ T29] audit: type=1400 audit(1779099615.710:1732): avc: denied { execute } for pid=9806 comm="syz.2.1212" name="file1" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 305.180246][ T24] libceph: connect (1)[c::]:6789 error -101 [ 305.211255][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 305.237799][ T9821] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1215'. [ 305.285180][ T24] libceph: connect (1)[c::]:6789 error -101 [ 305.291298][ T9816] ceph: No mds server is up or the cluster is laggy [ 305.301876][ T9822] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 305.312855][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 305.473608][ T5624] Bluetooth: hci2: unexpected event for opcode 0x203d [ 305.622567][ T9829] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 305.696822][ T9830] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 305.706086][ T9830] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 305.846400][ T9831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9831 comm=syz.4.1219 [ 306.094049][ T9829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.029742][ T139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.362619][ T9848] syzkaller0: entered promiscuous mode [ 307.402265][ T9848] syzkaller0: entered allmulticast mode [ 307.621357][ T139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.218748][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 309.218762][ T29] audit: type=1400 audit(1779099620.140:1789): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.295421][ T9866] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 309.371226][ T29] audit: type=1400 audit(1779099620.290:1790): avc: denied { create } for pid=9864 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 309.419513][ T9870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9870 comm=syz.0.1230 [ 309.432620][ T29] audit: type=1400 audit(1779099620.340:1791): avc: denied { create } for pid=9865 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 309.533972][ T5624] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 309.547153][ T5624] Bluetooth: hci2: Injecting HCI hardware error event [ 309.557054][ T5624] Bluetooth: hci2: hardware error 0x00 [ 309.588384][ T29] audit: type=1400 audit(1779099620.380:1792): avc: denied { execmem } for pid=9865 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 309.655595][ T29] audit: type=1400 audit(1779099620.380:1793): avc: denied { module_request } for pid=9864 comm="syz.5.1231" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 309.728911][ T29] audit: type=1400 audit(1779099620.380:1794): avc: denied { sys_module } for pid=9864 comm="syz.5.1231" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 309.766744][ T29] audit: type=1400 audit(1779099620.380:1795): avc: denied { module_request } for pid=9864 comm="syz.5.1231" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 309.796694][ T29] audit: type=1400 audit(1779099620.380:1796): avc: denied { sys_module } for pid=9864 comm="syz.5.1231" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 309.827108][ T29] audit: type=1400 audit(1779099620.560:1798): avc: denied { map_create } for pid=9873 comm="syz.4.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 309.848521][ T29] audit: type=1400 audit(1779099620.540:1797): avc: denied { module_request } for pid=9864 comm="syz.5.1231" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 311.608624][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.695744][ T5624] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 312.310484][ T9866] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 312.382364][ T9872] syzkaller0: entered promiscuous mode [ 312.439976][ T9872] syzkaller0: entered allmulticast mode [ 312.532305][ T139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.868956][ T9899] netlink: 'syz.2.1240': attribute type 39 has an invalid length. [ 314.387417][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 314.387435][ T29] audit: type=1400 audit(1779099625.310:1826): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 314.471933][ T29] audit: type=1400 audit(1779099625.390:1827): avc: denied { execmem } for pid=9900 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 314.612572][ T29] audit: type=1400 audit(1779099625.540:1828): avc: denied { create } for pid=9900 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 315.420910][ T29] audit: type=1400 audit(1779099626.340:1829): avc: denied { create } for pid=9903 comm="syz.4.1242" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 315.474109][ T29] audit: type=1400 audit(1779099626.370:1830): avc: denied { allowed } for pid=9903 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 315.528293][ T29] audit: type=1400 audit(1779099626.370:1831): avc: denied { create } for pid=9903 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 315.555261][ T29] audit: type=1400 audit(1779099626.430:1832): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 315.595386][ T29] audit: type=1400 audit(1779099626.520:1833): avc: denied { create } for pid=9907 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 315.620174][ T29] audit: type=1400 audit(1779099626.520:1834): avc: denied { create } for pid=9907 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 315.641553][ T29] audit: type=1400 audit(1779099626.520:1835): avc: denied { create } for pid=9907 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 316.150717][ T9911] syzkaller0: entered promiscuous mode [ 316.175907][ T9911] syzkaller0: entered allmulticast mode [ 316.229666][ T139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.295485][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 421.302501][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9846/1:b..l [ 421.310839][ C1] rcu: (detected by 1, t=10502 jiffies, g=54649, q=199 ncpus=2) [ 421.318542][ C1] task:syz.1.1224 state:R running task stack:26056 pid:9846 tgid:9844 ppid:5609 task_flags:0x480140 flags:0x00080002 [ 421.332539][ C1] Call Trace: [ 421.335825][ C1] [ 421.338748][ C1] __schedule+0x1295/0x67a0 [ 421.343264][ C1] ? __lock_acquire+0x4a5/0x2630 [ 421.348207][ C1] ? __pfx___schedule+0x10/0x10 [ 421.353050][ C1] ? mark_held_locks+0x40/0x70 [ 421.357809][ C1] preempt_schedule_irq+0x50/0x90 [ 421.362827][ C1] irqentry_exit+0x205/0x7e0 [ 421.367414][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.373386][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 421.379535][ C1] Code: 00 00 8b 44 24 04 eb b2 89 44 24 04 e8 a9 fa ff ff 8b 44 24 04 eb aa 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 8b 05 22 ed 4c 05 85 c0 74 20 8b 05 c0 1f 4d 05 85 c0 [ 421.399158][ C1] RSP: 0018:ffffc900034df4d0 EFLAGS: 00000287 [ 421.405229][ C1] RAX: ffffc900034e0001 RBX: ffffc900034dfd90 RCX: ffffffff9207dd01 [ 421.413190][ C1] RDX: ffffc900034dfd98 RSI: ffffc900034dfd60 RDI: ffffc900034df558 [ 421.421149][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 421.429106][ C1] R10: 0000000000000200 R11: 0000000000085e7a R12: ffffc900034df598 [ 421.437080][ C1] R13: ffffc900034df548 R14: ffffc900034dfd90 R15: ffffc900034df57c [ 421.445057][ C1] unwind_next_frame+0x3a8/0x2090 [ 421.450084][ C1] ? copy_net_ns+0x46f/0x7c0 [ 421.454669][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 421.460815][ C1] arch_stack_walk+0x94/0xf0 [ 421.465405][ C1] ? create_new_namespaces+0x3ea/0xac0 [ 421.470864][ C1] stack_trace_save+0x8e/0xc0 [ 421.475528][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 421.480889][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 421.486346][ C1] ? __lock_acquire+0x4a5/0x2630 [ 421.491276][ C1] kasan_save_stack+0x30/0x50 [ 421.495952][ C1] ? kasan_save_stack+0x30/0x50 [ 421.500798][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 421.506161][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 421.512221][ C1] ? kernfs_put.part.0+0x22f/0x720 [ 421.517336][ C1] ? kernfs_put+0x53/0x60 [ 421.521663][ C1] ? sysfs_remove_group+0xc6/0x1b0 [ 421.526765][ C1] ? dpm_sysfs_remove+0x9d/0xb0 [ 421.531606][ C1] ? device_del+0x180/0x9b0 [ 421.536094][ C1] ? unregister_netdevice_many_notify+0x179e/0x24f0 [ 421.542669][ C1] ? ops_undo_list+0x8ff/0xab0 [ 421.547421][ C1] ? setup_net+0x1fa/0x3a0 [ 421.551823][ C1] ? copy_net_ns+0x46f/0x7c0 [ 421.556433][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 421.561622][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 421.566899][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 421.572791][ C1] kernfs_put.part.0+0x22f/0x720 [ 421.577725][ C1] kernfs_put+0x53/0x60 [ 421.581972][ C1] sysfs_remove_group+0xc6/0x1b0 [ 421.586906][ C1] dpm_sysfs_remove+0x9d/0xb0 [ 421.591575][ C1] device_del+0x180/0x9b0 [ 421.595895][ C1] ? __pfx_device_del+0x10/0x10 [ 421.600734][ C1] ? netdev_unregister_kobject+0x2da/0x540 [ 421.606538][ C1] unregister_netdevice_many_notify+0x179e/0x24f0 [ 421.612951][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 421.619721][ C1] ? mutex_is_locked+0x17/0x60 [ 421.624482][ C1] ops_undo_list+0x8ff/0xab0 [ 421.629066][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 421.634171][ C1] ? ops_init+0x2fa/0x5f0 [ 421.638489][ C1] setup_net+0x1fa/0x3a0 [ 421.642728][ C1] ? __pfx_setup_net+0x10/0x10 [ 421.647482][ C1] ? mutex_init_lockdep+0xf1/0x120 [ 421.652591][ C1] copy_net_ns+0x46f/0x7c0 [ 421.657001][ C1] create_new_namespaces+0x3ea/0xac0 [ 421.662285][ C1] unshare_nsproxy_namespaces+0xf2/0x220 [ 421.667994][ C1] ksys_unshare+0x438/0xab0 [ 421.672495][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 421.677511][ C1] ? xfd_validate_state+0x129/0x190 [ 421.682709][ C1] __x64_sys_unshare+0x31/0x40 [ 421.687461][ C1] do_syscall_64+0x10b/0xf80 [ 421.692045][ C1] ? clear_bhb_loop+0x40/0x90 [ 421.696724][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.702615][ C1] RIP: 0033:0x7f5673f9ce59 [ 421.707016][ C1] RSP: 002b:00007f5674f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 421.715422][ C1] RAX: ffffffffffffffda RBX: 00007f5674215fa0 RCX: 00007f5673f9ce59 [ 421.723379][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 421.731336][ C1] RBP: 00007f5674032d6f R08: 0000000000000000 R09: 0000000000000000 [ 421.739292][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.747250][ C1] R13: 00007f5674216038 R14: 00007f5674215fa0 R15: 00007ffebbcd9d18 [ 421.755223][ C1] [ 421.758232][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g54649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 421.770650][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=17007 [ 421.778519][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g54649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 421.789870][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 421.799821][ C1] rcu: RCU grace-period kthread stack dump: [ 421.805690][ C1] task:rcu_preempt state:I stack:28904 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 421.817616][ C1] Call Trace: [ 421.820904][ C1] [ 421.824000][ C1] __schedule+0x1295/0x67a0 [ 421.828516][ C1] ? __pfx___schedule+0x10/0x10 [ 421.833371][ C1] ? find_held_lock+0x2b/0x80 [ 421.838041][ C1] ? schedule+0x2bf/0x390 [ 421.842370][ C1] schedule+0xdd/0x390 [ 421.846431][ C1] schedule_timeout+0x127/0x280 [ 421.851279][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 421.856640][ C1] ? __pfx_process_timeout+0x10/0x10 [ 421.861926][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 421.867724][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 421.873178][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 421.877932][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 421.883212][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 421.888663][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 421.893593][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 421.898784][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 421.904599][ C1] rcu_gp_kthread+0x179/0x230 [ 421.909269][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 421.914459][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 421.920273][ C1] ? __kthread_parkme+0x18c/0x230 [ 421.925287][ C1] ? kthread+0x13a/0x450 [ 421.929521][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 421.934712][ C1] kthread+0x370/0x450 [ 421.938771][ C1] ? __pfx_kthread+0x10/0x10 [ 421.943353][ C1] ret_from_fork+0x72b/0xd50 [ 421.947940][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 421.953057][ C1] ? __switch_to+0x800/0x1100 [ 421.957733][ C1] ? __pfx_kthread+0x10/0x10 [ 421.962402][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.967179][ C1] [ 421.970184][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 421.976499][ C1] Sending NMI from CPU 1 to CPUs 0: [ 421.981697][ C0] NMI backtrace for cpu 0 [ 421.981710][ C0] CPU: 0 UID: 0 PID: 9913 Comm: syz.2.1245 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.981728][ C0] Tainted: [L]=SOFTLOCKUP [ 421.981733][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.981740][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x33/0x60 [ 421.981758][ C0] Code: 9c 5d fa f7 c5 00 02 00 00 75 39 bf 01 00 00 00 e8 62 40 47 f6 ff 74 24 10 48 8d 7b 18 45 31 c9 31 c9 41 b8 01 00 00 00 31 d2 <31> f6 e8 a6 bf 56 f6 48 89 df e8 ee 10 57 f6 58 48 89 e8 5b 5d c3 [ 421.981770][ C0] RSP: 0018:ffffc90000007d80 EFLAGS: 00000046 [ 421.981784][ C0] RAX: 0000000000010003 RBX: ffffffff9b3a22f8 RCX: 0000000000000000 [ 421.981793][ C0] RDX: 0000000000000000 RSI: ffffffff8bb2dde0 RDI: ffffffff9b3a2310 [ 421.981801][ C0] RBP: 0000000000000006 R08: 0000000000000001 R09: 0000000000000000 [ 421.981808][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff9b3a22f0 [ 421.981816][ C0] R13: dffffc0000000000 R14: ffff8880350ff300 R15: 1ffff92000000fb6 [ 421.981825][ C0] FS: 000055558b128500(0000) GS:ffff88812436d000(0000) knlGS:0000000000000000 [ 421.981838][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.981847][ C0] CR2: 000000110c273b73 CR3: 000000007c11f000 CR4: 00000000003526f0 [ 421.981856][ C0] Call Trace: [ 421.981861][ C0] [ 421.981865][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 421.981883][ C0] debug_object_deactivate+0x135/0x3b0 [ 421.981901][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 421.981920][ C0] ? timerqueue_linked_add+0x260/0x430 [ 421.981935][ C0] __hrtimer_run_queues+0x2f0/0xa00 [ 421.981958][ C0] hrtimer_interrupt+0x3e5/0x940 [ 421.981975][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 421.981994][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 421.982012][ C0] [ 421.982016][ C0] [ 421.982021][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.982035][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 421.982051][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 aa c2 56 f6 48 89 df e8 82 12 57 f6 e8 8d 20 83 f6 fb bf 01 00 00 00 12 dc 46 f6 65 8b 05 8b 5f 7d 08 85 c0 74 06 5b c3 cc cc cc cc [ 421.982063][ C0] RSP: 0018:ffffc9000343fc88 EFLAGS: 00000202 [ 421.982073][ C0] RAX: 0000000000005501 RBX: ffff88801ff43780 RCX: 0000000000000000 [ 421.982081][ C0] RDX: 0000000000000000 RSI: ffffffff8df223d3 RDI: 0000000000000001 [ 421.982089][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 421.982097][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000021 [ 421.982105][ C0] R13: ffff88801ff43b80 R14: ffff88801ff43780 R15: ffff88801ff43c18 [ 421.982120][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.982135][ C0] get_signal+0x19d0/0x2210 [ 421.982158][ C0] ? __pfx_get_signal+0x10/0x10 [ 421.982176][ C0] ? do_futex+0x192/0x350 [ 421.982196][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 421.982215][ C0] ? ktime_get+0x22c/0x320 [ 421.982230][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 421.982253][ C0] ? rcu_is_watching+0x12/0xc0 [ 421.982274][ C0] exit_to_user_mode_loop+0x8b/0x4f0 [ 421.982290][ C0] ? rcu_is_watching+0x12/0xc0 [ 421.982310][ C0] do_syscall_64+0x706/0xf80 [ 421.982327][ C0] ? clear_bhb_loop+0x40/0x90 [ 421.982341][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.982354][ C0] RIP: 0033:0x7f55def9ce59 [ 421.982365][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.982376][ C0] RSP: 002b:00007fff8a558948 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 421.982387][ C0] RAX: fffffffffffffdfc RBX: 000000000004d33b RCX: 00007f55def9ce59 [ 421.982395][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f55df215fac [ 421.982403][ C0] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 421.982410][ C0] R10: 00007fff8a558a50 R11: 0000000000000246 R12: 00007fff8a558a70 [ 421.982418][ C0] R13: 00007f55df215fac R14: 000000000004d36d R15: 00007fff8a558a50 [ 421.982432][ C0]