last executing test programs: 1m20.884358954s ago: executing program 4 (id=359): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x7, 0x3, 0x6}, {0x400, 0x6, 0x6, 0x3}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r3, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x5, r5, &(0x7f00000001c0), 0x7) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20054000) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) munlockall() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x3c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="4a01d5b7ec36c822e84db72788", 0xd}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10) 1m20.646889682s ago: executing program 4 (id=361): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = fcntl$dupfd(r1, 0x406, r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x83}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) 1m18.524694107s ago: executing program 4 (id=363): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="b2e8d43f4aaacffdcb6f1a4216bb2d7b", 0x10) 1m14.889736647s ago: executing program 4 (id=369): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x280}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x5c}}, 0x2000400c) 1m12.276900915s ago: executing program 4 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) write$tun(r4, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1m10.942048467s ago: executing program 4 (id=378): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)={0x10, 0x2e, 0x503}, 0x10}], 0x1}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#.:.', 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x48, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 55.761923757s ago: executing program 32 (id=378): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)={0x10, 0x2e, 0x503}, 0x10}], 0x1}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#.:.', 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x48, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 47.66840986s ago: executing program 0 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2, {0x5, 0xf}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x480bc}, 0x20000000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x4000) syslog(0x3, &(0x7f0000000180)=""/21, 0x15) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 42.149210587s ago: executing program 0 (id=413): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40), 0x2843, 0x0) r1 = mq_open(0x0, 0x40, 0x0, 0x0) mq_notify(r1, &(0x7f0000000b80)={0x0, 0x2f, 0x0, @thr={0x0, 0x0}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) write(r3, &(0x7f0000001640)="8b", 0x11) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x6) 36.856208999s ago: executing program 0 (id=417): socket$inet_tcp(0x2, 0x1, 0x0) set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x138) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0xabd7ae39f84e0bf8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) 32.595263547s ago: executing program 0 (id=419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x1, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x83, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0x3ff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x5c439c21}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x5, 0x9, 0x7df1}, {0x8000, 0x0, 0x2, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x4a0, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x101, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x671f, 0x1, 0x8000, 0x4}, {0x200, 0x8, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x101}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5e, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9b, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0xfffffff9, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x5, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x4, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0xc, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x0, 0x6, 0x5, 0x7}, {0x3, 0x0, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200}, {0x10, 0x1, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0x400, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x10012, 0x6, 0x7ef49f37}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x0, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x401}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 19.230981732s ago: executing program 1 (id=434): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000540)={0xff, "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"}) syz_usb_connect(0x0, 0x39, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x2, 0x5, 0x80000002, 0x0, &(0x7f0000000000)=0x8001, 0x14ffffff) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x6, 0x3, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x50c00, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x6, 0x7, 0x7ff, 0x7fffffff, 0xffff, 0xffffffffffffffff}) syz_open_procfs(r3, &(0x7f0000000240)='net/ip_tables_matches\x00') r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x90000001}) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) ioctl(r1, 0x400448c9, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x18002) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r1, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) 18.207902759s ago: executing program 1 (id=436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5f5b, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e08091b0c"], 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x5, 0x8002) timer_create(0x6, &(0x7f00000001c0)={0x0, 0xb, 0x2, @thr={&(0x7f0000000300)="d126b0b0962f171922000410666710572d07ad65026c90a603558276f61467eca42c88ad0fc50e51d17d8c49343a02ae067139a2ec2ff11a773b8318dcfb73efa7776a7b41608b93e7dbde176ff0e775304ba0d317c0b6723f92a9e35e70db9c55545c114492867e4594c74b87cf0eb554a5890b5f137aa4d0a26935e8a841a12ed41a2a16ef813e048e03d449", &(0x7f00000003c0)}}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) socket(0x6, 0x2, 0x8001) close_range(r2, 0xffffffffffffffff, 0x0) 17.632663335s ago: executing program 0 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000380)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) 17.631518431s ago: executing program 2 (id=439): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf7", 0x9, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), 0x802}, 0x38) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 16.451782177s ago: executing program 2 (id=440): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000003c0)="1695", 0x2}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x8, @mcast2, 0x9}}, 0x9, 0xf10b, 0x3ff, 0x6, 0x10, 0x4, 0x2}, &(0x7f0000000200)=0x9c) 16.447813721s ago: executing program 0 (id=441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a00040076647079300019cc88bc7a85e014f8c970", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="07aa16c201", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000001300)="1f5913541b76ac75afa67453834bd308ec1c87d5ec4087e41fd9eac38e6634c077e328f49776b9b4c69c43cc03b7b5b88207b06129c3661f45bc9b9b2224b540fc5ce992d8497185aa55cd429930617050cd4061f3df87427a656a3d1d8f552af7acc195161614fe1435a61ed1c6121b332b84761141ec7425b4f92f887c776ed285f4baea0a49e85a9c2ead37f29743e4297f1f8d11b74c686637a06fd8fe97e6beeb62d89725e6338c0eb6e9de686860a07d21a9355f2a5051f7f9cb5ca8c80770dc83432572964790c7a4a6bba94e15bb4f71ab546dc94fe35b40", 0xdc}, {&(0x7f00000023c0)="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", 0xc91}], 0x3}}], 0x2, 0x40840) writev(r1, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000078}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) shutdown(r1, 0x1) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="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", 0x1000) 16.337281904s ago: executing program 3 (id=442): io_setup(0x8, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = gettid() syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ptrace(0xffffffffffffffff, r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) timerfd_settime(0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000240)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket(0x22, 0x80805, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r3, 0x4, 0x4, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000000)={0x14}, 0x14) 15.082512101s ago: executing program 1 (id=443): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) socket$inet(0x2, 0x2, 0x0) 14.94157212s ago: executing program 2 (id=444): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x0, 0x5, 0xa, 0xe, 0x1, 0x1, 0x4}}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x25) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000002c0)={0x0, 0x0, 0xff34, 0x5}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x80, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 12.498083678s ago: executing program 2 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) open(0x0, 0x1c1242, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) 12.305592793s ago: executing program 3 (id=446): r0 = gettid() sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f194"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20004080) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) get_robust_list(r0, 0x0, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) 8.62415066s ago: executing program 2 (id=447): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) 6.878401474s ago: executing program 3 (id=448): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 6.324495335s ago: executing program 1 (id=449): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x14) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) write(0xffffffffffffffff, &(0x7f0000000500)='1', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, 0x0, 0x80) 5.996058375s ago: executing program 3 (id=450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a31000000000800024000000006140000001100"], 0x50}}, 0x20044084) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) close(r4) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200000000140000000c0a010200000000000000008c00000514000000110098c507ebcabf5901000000000000000000f500000a"], 0x80}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r5, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) getdents64(r5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000030180c200000108060001080006040001aaaaaaaaaafcac1414bbaaaaaaaaaabbac1414bb"], 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01a1000000000000000000000000789a50afc61c999d12e67a4964856b2eade3c1d5850c98c81caa912ded4a35f17c635e46a449a544524abb4dc0f5722d2505fab2aa7725863929ae6e706e523b9556ff70b7398f78539a26b400000000eb27eb14bf9601984d7538473acbe41e6ab32dd85dd0b3a18020ee6b109b9fd46181e564e03f872c1235787d373ba554ed98cee19aafe9285a3171c7a99912e91206aea665507193a635cb6d3291f73a41db61a1c7d2ba0c5620d6ee2724e684fd7198bbf758a0a3e9a40d360185a70039a170d2de6fb4c71b55566a870a99a7deeac0"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) 4.133890459s ago: executing program 3 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtaction={0x68, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_vlan={0x50, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x40, 0x4, 0x6, 0x97, 0x4}, 0x3}}]}, {0x8, 0x6, "8058c07a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x68}, 0x1, 0x2b1e, 0x0, 0x1}, 0x8d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x3, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x4, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x72, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0xcf, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0xfffffff3, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0xc70, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x3, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x20000006, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x9, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x2, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xc47a, 0x136, 0x6]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsopen(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) 3.992300236s ago: executing program 1 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xe5fb}}]}, 0x38}}, 0x8004) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x2, 0x1000, 0xc, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.018342521s ago: executing program 33 (id=441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a00040076647079300019cc88bc7a85e014f8c970", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="07aa16c201", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000001300)="1f5913541b76ac75afa67453834bd308ec1c87d5ec4087e41fd9eac38e6634c077e328f49776b9b4c69c43cc03b7b5b88207b06129c3661f45bc9b9b2224b540fc5ce992d8497185aa55cd429930617050cd4061f3df87427a656a3d1d8f552af7acc195161614fe1435a61ed1c6121b332b84761141ec7425b4f92f887c776ed285f4baea0a49e85a9c2ead37f29743e4297f1f8d11b74c686637a06fd8fe97e6beeb62d89725e6338c0eb6e9de686860a07d21a9355f2a5051f7f9cb5ca8c80770dc83432572964790c7a4a6bba94e15bb4f71ab546dc94fe35b40", 0xdc}, {&(0x7f00000023c0)="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", 0xc91}], 0x3}}], 0x2, 0x40840) writev(r1, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000078}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) shutdown(r1, 0x1) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000003500)="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", 0x1000) 657.12745ms ago: executing program 2 (id=454): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) timer_settime(r4, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) timer_delete(r4) bind$can_j1939(r2, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r0, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x0, 0x4d, 0x6, 0x3, 0x9, 0x6, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x100007, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0xb9, 0xff, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x9, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x4, 0x78, 0x6, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0x421, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0xcc9, 0x9, 0x3, 0x3, 0x9, 0x1, 0x200, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8ce, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x7, 0x3, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xaca, 0xc2, 0x2, 0x3, 0x7fffffff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xffffffef, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x7, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x9, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x40000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x60040, 0x48) 654.940135ms ago: executing program 3 (id=455): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x83}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xaa}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)="7465737468616e646c65203230303030301b303030203020302030206b726235205c7830303030303230306666876b6666376630303030303030303030303030303cb01ebafd97b0f105a4b9d1f159fe7b3425be0d73c19748234075a724543d664a0e265bdfd399210a3dd939b258257923cede07ac17128f9dbea29df11ceb3798d3f97eee62b00239996de9", 0x8d) openat$sysfs(0xffffffffffffff9c, 0xffffffffffffffff, 0x88200, 0xb) 0s ago: executing program 1 (id=456): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x2}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8b4) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/snmp\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000080)=0x3) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r4}) pread64(r3, &(0x7f0000000300)=""/4092, 0xffc, 0x4) kernel console output (not intermixed with test programs): _hcd vhci_hcd.4: stop threads [ 81.369422][ T1121] vhci_hcd vhci_hcd.4: release socket [ 81.369491][ T1121] vhci_hcd vhci_hcd.4: disconnect device [ 81.374139][ T1121] vhci_hcd vhci_hcd.4: stop threads [ 81.374155][ T1121] vhci_hcd vhci_hcd.4: release socket [ 81.374375][ T1121] vhci_hcd vhci_hcd.4: disconnect device [ 81.382444][ T1121] vhci_hcd vhci_hcd.4: stop threads [ 81.382465][ T1121] vhci_hcd vhci_hcd.4: release socket [ 81.382554][ T1121] vhci_hcd vhci_hcd.4: disconnect device [ 81.406164][ T1121] vhci_hcd vhci_hcd.4: stop threads [ 81.406181][ T1121] vhci_hcd vhci_hcd.4: release socket [ 81.406253][ T1121] vhci_hcd vhci_hcd.4: disconnect device [ 81.411120][ T1121] vhci_hcd vhci_hcd.4: stop threads [ 81.411142][ T1121] vhci_hcd vhci_hcd.4: release socket [ 81.411598][ T1121] vhci_hcd vhci_hcd.4: disconnect device [ 81.495095][ T1121] vhci_hcd vhci_hcd.4: stop threads [ 81.495122][ T1121] vhci_hcd vhci_hcd.4: release socket [ 81.495213][ T1121] vhci_hcd vhci_hcd.4: disconnect device [ 81.651966][ T5713] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.814645][ T5713] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 81.820314][ T5713] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 81.820340][ T5713] usb 2-1: config 255 has no interface number 0 [ 81.820368][ T5713] usb 2-1: config 255 interface 97 has no altsetting 0 [ 82.175561][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.175589][ T5713] usb 2-1: Product: syz [ 82.175605][ T5713] usb 2-1: Manufacturer: syz [ 82.175621][ T5713] usb 2-1: SerialNumber: syz [ 83.518966][ T5713] rndis_host 2-1:255.97: ACM capabilities 01, not really RNDIS? [ 83.575966][ T5713] usb 2-1: USB disconnect, device number 2 [ 83.629438][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 83.629455][ T31] audit: type=1400 audit(1791174084.365:220): avc: denied { create } for pid=5914 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.669567][ T31] audit: type=1400 audit(1791174084.405:221): avc: denied { create } for pid=5914 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.669615][ T31] audit: type=1400 audit(1791174084.405:222): avc: denied { connect } for pid=5914 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.669650][ T31] audit: type=1400 audit(1791174084.405:223): avc: denied { write } for pid=5914 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.361992][ T5917] lo: entered promiscuous mode [ 84.378565][ T5917] tunl0: entered promiscuous mode [ 84.396905][ T5917] gre0: entered promiscuous mode [ 84.397387][ T31] audit: type=1400 audit(1791174085.135:224): avc: denied { bind } for pid=5914 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.414311][ T31] audit: type=1400 audit(1791174085.145:225): avc: denied { node_bind } for pid=5914 comm="syz.4.25" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.422409][ T31] audit: type=1400 audit(1791174085.145:226): avc: denied { connect } for pid=5914 comm="syz.4.25" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.431988][ T31] audit: type=1400 audit(1791174085.165:227): avc: denied { write } for pid=5914 comm="syz.4.25" laddr=172.20.20.187 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.560372][ T5917] gretap0: entered promiscuous mode [ 84.622563][ T5917] erspan0: entered promiscuous mode [ 84.630175][ T5917] ip_vti0: entered promiscuous mode [ 84.636018][ T5917] ip6_vti0: entered promiscuous mode [ 84.660422][ T5917] sit0: entered promiscuous mode [ 84.675274][ T5917] ip6tnl0: entered promiscuous mode [ 84.685979][ T5917] ip6gre0: entered promiscuous mode [ 86.135014][ T5917] syz_tun: entered promiscuous mode [ 86.201984][ T2248] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 86.232612][ T5917] ip6gretap0: entered promiscuous mode [ 86.635107][ T31] audit: type=1400 audit(1791174087.365:228): avc: denied { bind } for pid=5924 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.154865][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.155200][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.160595][ T5917] bridge0: entered promiscuous mode [ 87.166960][ T5917] vcan0: entered promiscuous mode [ 87.199776][ T5917] bond0: entered promiscuous mode [ 87.199789][ T5917] bond_slave_0: entered promiscuous mode [ 87.199939][ T5917] bond_slave_1: entered promiscuous mode [ 87.206906][ T5917] team0: entered promiscuous mode [ 87.206918][ T5917] team_slave_0: entered promiscuous mode [ 87.207012][ T5917] team_slave_1: entered promiscuous mode [ 87.210889][ T5917] dummy0: entered promiscuous mode [ 87.264198][ T5917] nlmon0: entered promiscuous mode [ 87.265047][ T5917] batadv0: entered promiscuous mode [ 87.271182][ T5917] vxcan0: entered promiscuous mode [ 87.277581][ T5917] vxcan1: entered promiscuous mode [ 87.278855][ T5917] veth0: entered promiscuous mode [ 87.301076][ T5917] veth1: entered promiscuous mode [ 87.319681][ T5917] wg0: entered promiscuous mode [ 87.335565][ T5917] wg1: entered promiscuous mode [ 87.339834][ T5917] wg2: entered promiscuous mode [ 87.341395][ T5917] veth0_to_bridge: entered promiscuous mode [ 87.361087][ T5917] veth1_to_bridge: entered promiscuous mode [ 87.375497][ T5917] veth0_to_bond: entered promiscuous mode [ 87.390551][ T5917] veth1_to_bond: entered promiscuous mode [ 87.397646][ T5917] veth0_to_team: entered promiscuous mode [ 87.408356][ T5917] veth1_to_team: entered promiscuous mode [ 87.417359][ T5917] veth0_to_batadv: entered promiscuous mode [ 87.424868][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.424911][ T5917] batadv_slave_0: entered promiscuous mode [ 87.445479][ T5917] veth1_to_batadv: entered promiscuous mode [ 87.596547][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.596584][ T5917] batadv_slave_1: entered promiscuous mode [ 87.615231][ T5917] xfrm0: entered promiscuous mode [ 87.623146][ T5917] veth0_to_hsr: entered promiscuous mode [ 87.635982][ T5917] veth1_to_hsr: entered promiscuous mode [ 87.801469][ T31] audit: type=1400 audit(1791174088.425:229): avc: denied { create } for pid=5933 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.087910][ T5917] hsr0: entered promiscuous mode [ 88.102390][ T5917] veth1_virt_wifi: entered promiscuous mode [ 88.110095][ T5917] veth0_virt_wifi: entered promiscuous mode [ 88.128362][ T5917] virt_wifi0: entered promiscuous mode [ 88.150745][ T5917] vlan0: entered promiscuous mode [ 88.164676][ T5917] vlan1: entered promiscuous mode [ 88.171154][ T5917] macvlan0: entered promiscuous mode [ 88.182260][ T5917] macvlan1: entered promiscuous mode [ 88.185527][ T5917] ipvlan0: entered promiscuous mode [ 88.185677][ T5917] ipvlan1: entered promiscuous mode [ 88.227400][ T5917] macvtap0: entered promiscuous mode [ 88.238754][ T5917] macsec0: entered promiscuous mode [ 88.250215][ T5917] geneve0: entered promiscuous mode [ 88.357559][ T5917] geneve1: entered promiscuous mode [ 88.373064][ T5917] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 88.389325][ T5917] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 88.402310][ T5917] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 88.420968][ T5917] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 88.442644][ T5939] netlink: 260 bytes leftover after parsing attributes in process `syz.1.41'. [ 88.465658][ T5917] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 88.617207][ T5917] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 88.689444][ T5944] SET target dimension over the limit! [ 88.954158][ T43] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.079686][ T5611] usb usb42-port8: attempt power cycle [ 89.108390][ T43] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.108429][ T43] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.108462][ T43] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.222021][ T5698] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.413764][ T5698] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 89.425095][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 89.425121][ T5698] usb 2-1: Product: syz [ 89.425137][ T5698] usb 2-1: SerialNumber: syz [ 89.432452][ T5698] usb 2-1: config 0 descriptor?? [ 89.791709][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 89.791744][ T31] audit: type=1400 audit(1791174090.485:233): avc: denied { unlink } for pid=5948 comm="syz.3.33" name="#1" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.863599][ T5952] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 90.573576][ T5611] usb usb42-port8: unable to enumerate USB device [ 90.577768][ T31] audit: type=1400 audit(1791174091.315:234): avc: denied { write } for pid=5937 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.012743][ T5864] usb 2-1: USB disconnect, device number 3 [ 91.209882][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 91.209897][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 91.231958][ T5956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.295770][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.297069][ T5958] bond1: (slave bond0): Enslaving as an active interface with a down link [ 91.635083][ T5962] can0: slcan on ptm0. [ 93.486512][ T31] audit: type=1400 audit(1791174094.205:235): avc: denied { create } for pid=5970 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.486713][ T31] audit: type=1400 audit(1791174094.205:236): avc: denied { connect } for pid=5970 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.486846][ T31] audit: type=1400 audit(1791174094.215:237): avc: denied { bind } for pid=5970 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.486987][ T31] audit: type=1400 audit(1791174094.215:238): avc: denied { write } for pid=5970 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.974801][ T5959] can0 (unregistered): slcan off ptm0. [ 94.028792][ T31] audit: type=1400 audit(1791174094.765:239): avc: denied { create } for pid=5979 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.178431][ T31] audit: type=1400 audit(1791174094.915:240): avc: denied { read write } for pid=5979 comm="syz.4.38" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.178658][ T31] audit: type=1400 audit(1791174094.915:241): avc: denied { open } for pid=5979 comm="syz.4.38" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.492031][ T5611] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.567634][ T5986] lo: left promiscuous mode [ 94.577673][ T5986] tunl0: left promiscuous mode [ 94.583792][ T5986] gre0: left promiscuous mode [ 94.595519][ T5986] gretap0: left promiscuous mode [ 94.601839][ T5986] erspan0: left promiscuous mode [ 94.608214][ T5986] ip_vti0: left promiscuous mode [ 94.614205][ T5986] ip6_vti0: left promiscuous mode [ 94.620504][ T5986] sit0: left promiscuous mode [ 94.639773][ T5986] ip6tnl0: left promiscuous mode [ 94.643916][ T5986] ip6gre0: left promiscuous mode [ 94.650101][ T5986] syz_tun: left promiscuous mode [ 94.657130][ T5986] ip6gretap0: left promiscuous mode [ 94.667276][ T5986] bridge0: left promiscuous mode [ 94.672864][ T5986] vcan0: left promiscuous mode [ 94.678315][ T5986] bond0: left promiscuous mode [ 94.684093][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.688189][ T5986] team0: left promiscuous mode [ 94.694006][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.698693][ T5986] dummy0: left promiscuous mode [ 94.708286][ T5986] nlmon0: left promiscuous mode [ 94.713488][ T5986] batadv0: left promiscuous mode [ 94.718945][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.722600][ T5986] vxcan0: left promiscuous mode [ 94.727740][ T5986] vxcan1: left promiscuous mode [ 94.732568][ T5986] veth0: left promiscuous mode [ 94.738309][ T5986] veth1: left promiscuous mode [ 94.747454][ T31] audit: type=1400 audit(1791174095.285:242): avc: denied { audit_write } for pid=5983 comm="syz.2.39" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.906286][ T5986] wg0: left promiscuous mode [ 94.934945][ T5986] wg1: left promiscuous mode [ 94.949050][ T5986] wg2: left promiscuous mode [ 94.950253][ T5986] veth0_to_bridge: left promiscuous mode [ 94.952553][ T5986] veth1_to_bridge: left promiscuous mode [ 94.954640][ T5986] veth0_to_bond: left promiscuous mode [ 94.955565][ T5986] bond_slave_0: left promiscuous mode [ 94.956479][ T5986] veth1_to_bond: left promiscuous mode [ 94.957502][ T5986] bond_slave_1: left promiscuous mode [ 94.958450][ T5986] veth0_to_team: left promiscuous mode [ 94.959399][ T5986] team_slave_0: left promiscuous mode [ 94.960341][ T5986] veth1_to_team: left promiscuous mode [ 94.961334][ T5986] team_slave_1: left promiscuous mode [ 94.962322][ T5986] veth0_to_batadv: left promiscuous mode [ 94.963248][ T5986] batadv_slave_0: left promiscuous mode [ 94.963868][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.964138][ T5986] veth1_to_batadv: left promiscuous mode [ 94.965109][ T5986] batadv_slave_1: left promiscuous mode [ 94.965756][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.966032][ T5986] xfrm0: left promiscuous mode [ 94.967390][ T5986] veth0_to_hsr: left promiscuous mode [ 94.969428][ T5986] veth1_to_hsr: left promiscuous mode [ 94.970880][ T5986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.970898][ T5986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.970948][ T5986] hsr0: left promiscuous mode [ 94.972091][ T5986] veth1_virt_wifi: left promiscuous mode [ 94.973026][ T5986] veth0_virt_wifi: left promiscuous mode [ 94.974271][ T5986] virt_wifi0: left promiscuous mode [ 94.975628][ T5986] veth1_vlan: left promiscuous mode [ 94.978181][ T5986] vlan0: left promiscuous mode [ 94.979240][ T5986] vlan1: left promiscuous mode [ 94.980262][ T5986] veth1_vlan: entered promiscuous mode [ 94.980430][ T5986] macvlan0: left promiscuous mode [ 94.981743][ T5986] macvlan1: left promiscuous mode [ 94.982950][ T5986] ipvlan0: left promiscuous mode [ 94.984258][ T5986] ipvlan1: left promiscuous mode [ 94.985358][ T5986] veth1_macvtap: left promiscuous mode [ 94.986296][ T5986] veth0_macvtap: left promiscuous mode [ 94.987246][ T5986] veth0_macvtap: entered promiscuous mode [ 94.987407][ T5986] macvtap0: left promiscuous mode [ 94.988475][ T5986] veth1_macvtap: entered promiscuous mode [ 94.988667][ T5986] macsec0: left promiscuous mode [ 94.989993][ T5986] geneve0: left promiscuous mode [ 94.991813][ T5986] geneve1: left promiscuous mode [ 94.993884][ T5986] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 94.994146][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.995010][ T5986] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 94.995263][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.996106][ T5986] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 94.996727][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.997573][ T5986] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 94.997830][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.998753][ T5986] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 94.999466][ T5986] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 95.036674][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.102300][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.106910][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.106999][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.117058][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.117108][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.135278][ T5611] usb 5-1: not running at top speed; connect to a high speed hub [ 95.135308][ T5611] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 95.136489][ T5611] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.228430][ T5611] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 95.228456][ T5611] usb 5-1: Product: syz [ 95.228471][ T5611] usb 5-1: Manufacturer: syz [ 95.271776][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 95.288811][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.288853][ T25] usb 2-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 95.305487][ T25] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 95.305513][ T25] usb 2-1: config 0 has no interface number 0 [ 95.305552][ T25] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 95.305582][ T25] usb 2-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 95.305609][ T25] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 95.305635][ T25] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.305660][ T25] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 95.305681][ T25] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 95.305704][ T25] usb 2-1: config 0 interface 122 has no altsetting 0 [ 95.327334][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.327359][ T25] usb 2-1: Product: syz [ 95.327378][ T25] usb 2-1: Manufacturer: syz [ 95.327398][ T25] usb 2-1: SerialNumber: syz [ 95.342567][ T5611] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 95.350443][ T25] usb 2-1: config 0 descriptor?? [ 95.352585][ T5977] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.352836][ T5977] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.531944][ T5611] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 95.533932][ T5611] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 95.534006][ T5611] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 95.553110][ T5611] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 95.668837][ T5611] usb 5-1: USB disconnect, device number 2 [ 95.672579][ T3671] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.672954][ T3671] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.672990][ T3671] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708556][ T25] pl2303 2-1:0.122: pl2303 converter detected [ 95.714899][ T25] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 95.716950][ T25] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 95.717270][ T25] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 95.718223][ T25] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 95.720050][ T25] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 95.723359][ T25] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 95.725138][ T25] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 95.726036][ T25] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 95.727179][ T25] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 95.729061][ T25] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 95.729380][ T25] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 95.751844][ T5992] Zero length message leads to an empty skb [ 95.777237][ T25] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 95.882603][ T25] usb 2-1: USB disconnect, device number 4 [ 95.888618][ T5999] lo: entered promiscuous mode [ 95.937429][ T31] audit: type=1400 audit(1791174096.665:243): avc: denied { write } for pid=5971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.937486][ T31] audit: type=1400 audit(1791174096.675:244): avc: denied { bind } for pid=5994 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.976974][ T31] audit: type=1400 audit(1791174096.705:245): avc: denied { listen } for pid=5994 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.015438][ T31] audit: type=1400 audit(1791174096.745:246): avc: denied { read } for pid=5994 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.016345][ T25] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 96.017544][ T25] pl2303 2-1:0.122: device disconnected [ 96.274871][ T31] audit: type=1400 audit(1791174097.015:247): avc: denied { write } for pid=6003 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.318900][ T5999] tunl0: entered promiscuous mode [ 96.319800][ T5999] gre0: entered promiscuous mode [ 96.353801][ T5999] gretap0: entered promiscuous mode [ 96.390529][ T5999] erspan0: entered promiscuous mode [ 96.407235][ T5999] ip_vti0: entered promiscuous mode [ 96.410398][ T5999] ip6_vti0: entered promiscuous mode [ 96.444039][ T5999] sit0: entered promiscuous mode [ 96.483865][ T5999] ip6tnl0: entered promiscuous mode [ 96.518867][ T5999] ip6gre0: entered promiscuous mode [ 96.538113][ T5999] syz_tun: entered promiscuous mode [ 96.571089][ T5999] ip6gretap0: entered promiscuous mode [ 96.585571][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.585975][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.588620][ T5999] bridge0: entered promiscuous mode [ 96.596921][ T5999] vcan0: entered promiscuous mode [ 96.618663][ T5999] bond0: entered promiscuous mode [ 96.618683][ T5999] bond_slave_0: entered promiscuous mode [ 96.618858][ T5999] bond_slave_1: entered promiscuous mode [ 96.624784][ T5999] team0: entered promiscuous mode [ 96.624801][ T5999] team_slave_0: entered promiscuous mode [ 96.624953][ T5999] team_slave_1: entered promiscuous mode [ 96.630192][ T5999] dummy0: entered promiscuous mode [ 96.650719][ T5999] nlmon0: entered promiscuous mode [ 96.651405][ T5999] batadv0: entered promiscuous mode [ 96.657715][ T5999] vxcan0: entered promiscuous mode [ 96.664511][ T5999] vxcan1: entered promiscuous mode [ 96.665206][ T5999] veth0: entered promiscuous mode [ 96.674174][ T5999] veth1: entered promiscuous mode [ 96.687669][ T31] audit: type=1400 audit(1791174097.425:248): avc: denied { name_bind } for pid=6015 comm="syz.1.45" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 96.687716][ T31] audit: type=1400 audit(1791174097.425:249): avc: denied { node_bind } for pid=6015 comm="syz.1.45" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 96.699096][ T5999] wg0: entered promiscuous mode [ 96.786442][ T5999] wg1: entered promiscuous mode [ 96.817665][ T5999] wg2: entered promiscuous mode [ 96.826350][ T5999] veth0_to_bridge: entered promiscuous mode [ 96.841547][ T5999] veth1_to_bridge: entered promiscuous mode [ 96.855825][ T5999] veth0_to_bond: entered promiscuous mode [ 96.872041][ T5999] veth1_to_bond: entered promiscuous mode [ 96.875619][ T5999] veth0_to_team: entered promiscuous mode [ 96.898606][ T5999] veth1_to_team: entered promiscuous mode [ 96.924169][ T31] audit: type=1400 audit(1791174097.665:250): avc: denied { mount } for pid=6012 comm="syz.4.44" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.930541][ T31] audit: type=1400 audit(1791174097.665:251): avc: denied { search } for pid=6012 comm="syz.4.44" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.930589][ T31] audit: type=1400 audit(1791174097.665:252): avc: denied { search } for pid=6012 comm="syz.4.44" name="events" dev="tracefs" ino=4118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.004260][ T5999] veth0_to_batadv: entered promiscuous mode [ 97.010123][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.010511][ T5999] batadv_slave_0: entered promiscuous mode [ 97.045005][ T5999] veth1_to_batadv: entered promiscuous mode [ 97.057864][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.058037][ T5999] batadv_slave_1: entered promiscuous mode [ 97.078334][ T5999] xfrm0: entered promiscuous mode [ 97.091795][ T5999] veth0_to_hsr: entered promiscuous mode [ 97.112945][ T5999] veth1_to_hsr: entered promiscuous mode [ 97.133656][ T5999] hsr0: entered promiscuous mode [ 97.139898][ T5999] veth1_virt_wifi: entered promiscuous mode [ 97.156921][ T5999] veth0_virt_wifi: entered promiscuous mode [ 97.224254][ T5999] virt_wifi0: entered promiscuous mode [ 97.265819][ T6021] netlink: 132732 bytes leftover after parsing attributes in process `syz.4.44'. [ 97.354803][ T5999] vlan0: entered promiscuous mode [ 97.370063][ T5999] vlan1: entered promiscuous mode [ 97.386266][ T5999] macvlan0: entered promiscuous mode [ 97.403546][ T5999] macvlan1: entered promiscuous mode [ 97.409962][ T5999] ipvlan0: entered promiscuous mode [ 97.427499][ T5999] ipvlan1: entered promiscuous mode [ 97.453349][ T5999] macvtap0: entered promiscuous mode [ 97.459566][ T5999] macsec0: entered promiscuous mode [ 97.475484][ T5999] geneve0: entered promiscuous mode [ 97.479238][ T5999] geneve1: entered promiscuous mode [ 97.499697][ T5999] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 97.500487][ T5999] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 97.528344][ T5999] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 97.539537][ T5999] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 98.649853][ T5999] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 98.720528][ T5999] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 98.761789][ T1121] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.761929][ T1121] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.761967][ T1121] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.792639][ T3671] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.999861][ T6013] can0: slcan on ttyS3. [ 100.044870][ T6013] can0 (unregistered): slcan off ttyS3. [ 100.801882][ T6041] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 104.551684][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 104.551722][ T31] audit: type=1400 audit(1791174105.245:264): avc: denied { getopt } for pid=6070 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.500709][ T31] audit: type=1400 audit(1791174106.235:265): avc: denied { mounton } for pid=6072 comm="syz.0.49" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 106.950363][ T6099] process 'syz.3.60' launched './file0' with NULL argv: empty string added [ 107.510631][ T31] audit: type=1400 audit(1791174107.655:266): avc: denied { write } for pid=6088 comm="syz.3.60" name="route" dev="proc" ino=4026533087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 107.510681][ T31] audit: type=1400 audit(1791174107.685:267): avc: denied { execute } for pid=6088 comm="syz.3.60" name="file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.510722][ T31] audit: type=1400 audit(1791174107.685:268): avc: denied { execute_no_trans } for pid=6088 comm="syz.3.60" path="/13/file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.299787][ T31] audit: type=1400 audit(1791174109.035:269): avc: denied { write } for pid=6109 comm="syz.3.64" path="socket:[10334]" dev="sockfs" ino=10334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.325372][ T31] audit: type=1400 audit(1791174109.045:270): avc: denied { setopt } for pid=6109 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.385704][ T31] audit: type=1400 audit(1791174109.125:271): avc: denied { getopt } for pid=6107 comm="syz.2.57" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.588248][ T31] audit: type=1400 audit(1791174110.325:272): avc: denied { bind } for pid=6121 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.644954][ T31] audit: type=1400 audit(1791174110.385:274): avc: denied { write } for pid=6094 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.647809][ T31] audit: type=1400 audit(1791174110.365:273): avc: denied { create } for pid=6123 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.814592][ T6126] bridge0: port 3(syz_tun) entered blocking state [ 109.814648][ T6126] bridge0: port 3(syz_tun) entered disabled state [ 109.814748][ T6126] syz_tun: entered allmulticast mode [ 111.051759][ T31] audit: type=1400 audit(1791174111.665:275): avc: denied { prog_run } for pid=6128 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.222935][ T6131] mmap: syz.3.70 (6131) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.378144][ T3670] IPVS: starting estimator thread 0... [ 111.482579][ T6135] IPVS: using max 32 ests per chain, 76800 per kthread [ 112.725295][ T6148] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 113.478778][ T31] audit: type=1400 audit(1791174114.185:276): avc: denied { read } for pid=6138 comm="syz.2.72" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.478839][ T31] audit: type=1400 audit(1791174114.185:277): avc: denied { open } for pid=6138 comm="syz.2.72" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.772283][ T6144] bridge0: port 3(netdevsim0) entered blocking state [ 113.772381][ T6144] bridge0: port 3(netdevsim0) entered disabled state [ 113.772591][ T6144] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 113.899832][ T31] audit: type=1400 audit(1791174114.635:278): avc: denied { create } for pid=6150 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.928605][ T6144] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 113.930376][ T6144] bridge0: port 3(netdevsim0) entered blocking state [ 113.930464][ T6144] bridge0: port 3(netdevsim0) entered forwarding state [ 114.577069][ T6142] netlink: 'syz.4.71': attribute type 10 has an invalid length. [ 114.577426][ T6142] bridge0: port 3(netdevsim0) entered disabled state [ 114.577524][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.578242][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.111270][ T6142] bridge0: port 3(netdevsim0) entered blocking state [ 115.111416][ T6142] bridge0: port 3(netdevsim0) entered forwarding state [ 115.112038][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.112176][ T6142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.112411][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.112530][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.161204][ T6142] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 115.632071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 116.307288][ T31] audit: type=1400 audit(1791174116.985:279): avc: denied { mount } for pid=6166 comm="syz.2.78" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.307520][ T31] audit: type=1400 audit(1791174116.985:280): avc: denied { search } for pid=6166 comm="syz.2.78" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.307683][ T31] audit: type=1400 audit(1791174116.985:281): avc: denied { setattr } for pid=6166 comm="syz.2.78" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.900622][ T31] audit: type=1400 audit(1791174117.635:282): avc: denied { mount } for pid=6158 comm="syz.0.77" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.017508][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.040299][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.046865][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 117.143335][ T31] audit: type=1400 audit(1791174117.885:283): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.155964][ T6182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.82'. [ 117.172201][ T6182] UBIFS error (pid: 6182): cannot open "ubi0_0", error -19 [ 117.179370][ T6172] bridge0: port 3(netdevsim0) entered disabled state [ 117.205484][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 117.266703][ T6180] 9pnet_virtio: no channels available for device syz [ 119.644928][ T31] audit: type=1400 audit(1791174119.905:284): avc: denied { getopt } for pid=6189 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.864725][ T31] audit: type=1400 audit(1791174120.605:285): avc: denied { read } for pid=6195 comm="syz.4.88" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 119.864783][ T31] audit: type=1400 audit(1791174120.605:286): avc: denied { open } for pid=6195 comm="syz.4.88" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 119.866435][ T31] audit: type=1400 audit(1791174120.605:287): avc: denied { watch watch_reads } for pid=6195 comm="syz.4.88" path="/15/file1" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.285767][ T6198] netlink: 'syz.1.89': attribute type 1 has an invalid length. [ 120.417003][ T6199] gretap1: entered promiscuous mode [ 120.535354][ T6198] macvlan2: entered promiscuous mode [ 120.535379][ T6198] macvlan2: entered allmulticast mode [ 121.720115][ T31] audit: type=1400 audit(1791174122.455:288): avc: denied { mount } for pid=6211 comm="syz.2.84" name="/" dev="autofs" ino=9424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 122.209960][ T31] audit: type=1400 audit(1791174122.585:289): avc: denied { ioctl } for pid=6214 comm="syz.4.92" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10467 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.081366][ T31] audit: type=1400 audit(1791174123.815:290): avc: denied { create } for pid=6221 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.107551][ T31] audit: type=1400 audit(1791174123.845:291): avc: denied { bind } for pid=6221 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.132128][ T31] audit: type=1400 audit(1791174123.875:292): avc: denied { setopt } for pid=6221 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.151381][ T31] audit: type=1400 audit(1791174123.875:293): avc: denied { setopt } for pid=6221 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.151424][ T31] audit: type=1400 audit(1791174123.885:294): avc: denied { create } for pid=6221 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.161706][ T31] audit: type=1400 audit(1791174123.895:295): avc: denied { connect } for pid=6221 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.169545][ T31] audit: type=1400 audit(1791174123.905:296): avc: denied { ioctl } for pid=6221 comm="syz.4.93" path="socket:[9440]" dev="sockfs" ino=9440 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.255987][ T31] audit: type=1400 audit(1791174123.995:297): avc: denied { setopt } for pid=6225 comm="syz.3.87" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.405956][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.406029][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.161185][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 128.161201][ T31] audit: type=1400 audit(1791174128.895:306): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 128.658682][ T6260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.234081][ T31] audit: type=1400 audit(1791174129.305:307): avc: denied { write } for pid=6253 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.234420][ T31] audit: type=1400 audit(1791174129.305:308): avc: denied { nlmsg_write } for pid=6253 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.389662][ T31] audit: type=1400 audit(1791174130.125:309): avc: denied { mount } for pid=6265 comm="syz.3.105" name="/" dev="ramfs" ino=9514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.017738][ T31] audit: type=1400 audit(1791174131.195:310): avc: denied { read write } for pid=6272 comm="syz.1.107" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.017794][ T31] audit: type=1400 audit(1791174131.205:311): avc: denied { open } for pid=6272 comm="syz.1.107" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.017837][ T31] audit: type=1400 audit(1791174131.215:312): avc: denied { map } for pid=6272 comm="syz.1.107" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.095465][ T31] audit: type=1400 audit(1791174131.815:313): avc: denied { prog_load } for pid=6270 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.830647][ T6280] lo: entered promiscuous mode [ 131.841776][ T6280] tunl0: entered promiscuous mode [ 131.846452][ T6280] gre0: entered promiscuous mode [ 131.925298][ T6280] gretap0: entered promiscuous mode [ 131.959637][ T6280] erspan0: entered promiscuous mode [ 131.985820][ T6280] ip_vti0: entered promiscuous mode [ 132.006527][ T6280] ip6_vti0: entered promiscuous mode [ 132.027256][ T6280] sit0: entered promiscuous mode [ 132.042394][ T6280] ip6tnl0: entered promiscuous mode [ 132.053671][ T6280] ip6gre0: entered promiscuous mode [ 132.072674][ T31] audit: type=1400 audit(1791174132.815:314): avc: denied { prog_run } for pid=6282 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.079234][ T6280] syz_tun: entered promiscuous mode [ 133.129999][ T6280] ip6gretap0: entered promiscuous mode [ 133.190063][ T6280] bridge0: entered promiscuous mode [ 133.213035][ T6280] vcan0: entered promiscuous mode [ 133.241177][ T6280] bond0: entered promiscuous mode [ 133.336295][ T6285] netlink: 128 bytes leftover after parsing attributes in process `syz.0.110'. [ 134.371718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 134.554028][ T6280] team0: entered promiscuous mode [ 134.610713][ T6280] dummy0: entered promiscuous mode [ 134.632335][ T6280] nlmon0: entered promiscuous mode [ 134.633784][ T6280] batadv0: entered promiscuous mode [ 134.640900][ T6280] vxcan0: entered promiscuous mode [ 134.645454][ T6280] vxcan1: entered promiscuous mode [ 134.646271][ T6280] veth0: entered promiscuous mode [ 134.655309][ T6280] veth1: entered promiscuous mode [ 134.684184][ T6280] wg0: entered promiscuous mode [ 134.693244][ T6280] wg1: entered promiscuous mode [ 134.707424][ T6280] wg2: entered promiscuous mode [ 134.713884][ T6280] veth0_to_bridge: entered promiscuous mode [ 134.733522][ T6280] bridge_slave_0: entered promiscuous mode [ 134.739727][ T6280] veth1_to_bridge: entered promiscuous mode [ 134.751640][ T6280] bridge_slave_1: entered promiscuous mode [ 134.768536][ T6280] veth0_to_bond: entered promiscuous mode [ 134.775920][ T6280] bond_slave_0: entered promiscuous mode [ 134.786163][ T6280] veth1_to_bond: entered promiscuous mode [ 134.799958][ T6280] bond_slave_1: entered promiscuous mode [ 134.803158][ T6280] veth0_to_team: entered promiscuous mode [ 134.808708][ T6280] team_slave_0: entered promiscuous mode [ 134.821236][ T6280] veth1_to_team: entered promiscuous mode [ 134.829876][ T6280] team_slave_1: entered promiscuous mode [ 134.830129][ T6280] veth0_to_batadv: entered promiscuous mode [ 134.840446][ T6280] batadv_slave_0: entered promiscuous mode [ 134.851352][ T6280] veth1_to_batadv: entered promiscuous mode [ 134.860200][ T6280] batadv_slave_1: entered promiscuous mode [ 134.870878][ T6280] xfrm0: entered promiscuous mode [ 134.880026][ T6280] veth0_to_hsr: entered promiscuous mode [ 134.900127][ T6280] veth1_to_hsr: entered promiscuous mode [ 134.916432][ T6280] hsr0: entered promiscuous mode [ 134.917625][ T6280] veth1_virt_wifi: entered promiscuous mode [ 134.933564][ T6280] veth0_virt_wifi: entered promiscuous mode [ 134.941571][ T6280] virt_wifi0: entered promiscuous mode [ 134.963991][ T6280] vlan0: entered promiscuous mode [ 134.971777][ T6280] vlan1: entered promiscuous mode [ 134.994918][ T6280] macvlan0: entered promiscuous mode [ 135.016197][ T6280] macvlan1: entered promiscuous mode [ 135.017531][ T6280] ipvlan0: entered promiscuous mode [ 135.017619][ T6280] ipvlan1: entered promiscuous mode [ 135.066862][ T6280] macvtap0: entered promiscuous mode [ 135.074895][ T6280] macsec0: entered promiscuous mode [ 135.087824][ T6280] geneve0: entered promiscuous mode [ 135.101590][ T6280] geneve1: entered promiscuous mode [ 135.136293][ T6280] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 135.140576][ T6280] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 135.165465][ T6280] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 135.171312][ T6280] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 135.208730][ T6280] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 135.265904][ T6280] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 135.266922][ T6280] vlan2: entered promiscuous mode [ 135.289300][ T6280] bond1: entered promiscuous mode [ 135.301698][ T1100] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.301738][ T1100] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.301774][ T1100] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.301809][ T1100] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.696460][ T6305] syz.3.114 uses obsolete (PF_INET,SOCK_PACKET) [ 136.645707][ T31] audit: type=1400 audit(1791174136.575:315): avc: denied { map_create } for pid=6296 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.645762][ T31] audit: type=1400 audit(1791174136.585:316): avc: denied { map_read map_write } for pid=6296 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.645804][ T31] audit: type=1400 audit(1791174136.735:317): avc: denied { write } for pid=6299 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 138.703720][ T6317] netlink: 'syz.0.115': attribute type 5 has an invalid length. [ 138.706574][ T31] audit: type=1400 audit(1791174139.445:318): avc: denied { sqpoll } for pid=6313 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 141.285746][ T31] audit: type=1400 audit(1791174142.025:319): avc: denied { read } for pid=6348 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.574372][ T5611] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 141.644129][ T31] audit: type=1400 audit(1791174142.385:320): avc: denied { ioctl } for pid=6361 comm="syz.3.123" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.741094][ T5611] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 141.774568][ T5611] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 141.775203][ T5611] usb 2-1: config 0 has no interface number 0 [ 141.775244][ T5611] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 141.775283][ T5611] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 141.830936][ T31] audit: type=1400 audit(1791174142.505:321): avc: denied { create } for pid=6366 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.831149][ T31] audit: type=1400 audit(1791174142.515:322): avc: denied { bind } for pid=6366 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.831196][ T31] audit: type=1400 audit(1791174142.515:323): avc: denied { setopt } for pid=6366 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.901044][ T31] audit: type=1400 audit(1791174142.635:324): avc: denied { ioctl } for pid=6366 comm="syz.2.124" path="socket:[10643]" dev="sockfs" ino=10643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.931781][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 141.931808][ T5611] usb 2-1: Manufacturer: syz [ 141.931821][ T5611] usb 2-1: SerialNumber: syz [ 142.135344][ T5611] usb 2-1: config 0 descriptor?? [ 143.261844][ T5611] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input5 [ 143.442829][ T9] usb 2-1: USB disconnect, device number 5 [ 144.482196][ T31] audit: type=1400 audit(1791174145.225:325): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.274534][ T31] audit: type=1400 audit(1791174146.005:326): avc: denied { setopt } for pid=6387 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.349675][ T6391] binder: 6390:6391 ioctl 4018620d 0 returned -22 [ 145.613702][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 145.998151][ T31] audit: type=1400 audit(1791174146.355:327): avc: denied { ioctl } for pid=6392 comm="syz.4.129" path="socket:[10680]" dev="sockfs" ino=10680 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.525283][ T6391] binder: 6390:6391 ioctl c0189377 0 returned -22 [ 148.430944][ T6391] binder: 6390:6391 ioctl c018937b 0 returned -22 [ 149.712730][ T31] audit: type=1400 audit(1791174150.445:328): avc: denied { name_connect } for pid=6414 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 149.756301][ T31] audit: type=1400 audit(1791174150.495:329): avc: denied { accept } for pid=6414 comm="syz.3.136" lport=59869 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.768987][ T31] audit: type=1400 audit(1791174150.495:330): avc: denied { read } for pid=6414 comm="syz.3.136" lport=59869 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 149.857785][ T31] audit: type=1400 audit(1791174150.555:331): avc: denied { setopt } for pid=6414 comm="syz.3.136" lport=59869 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 152.090947][ T31] audit: type=1400 audit(1791174152.805:332): avc: denied { name_connect } for pid=6423 comm="syz.1.138" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 152.091131][ T31] audit: type=1400 audit(1791174152.825:333): avc: denied { create } for pid=6423 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 152.091268][ T31] audit: type=1400 audit(1791174152.825:334): avc: denied { write } for pid=6423 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.894796][ T6452] binder: 6450:6452 ioctl 4018620d 0 returned -22 [ 156.121032][ T31] audit: type=1400 audit(1791174156.855:335): avc: denied { setopt } for pid=6450 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.251964][ T31] audit: type=1400 audit(1791174158.925:336): avc: denied { name_bind } for pid=6460 comm="syz.4.134" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 160.668832][ T31] audit: type=1400 audit(1791174161.405:337): avc: denied { read } for pid=6475 comm="syz.4.149" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.668884][ T31] audit: type=1400 audit(1791174161.405:338): avc: denied { open } for pid=6475 comm="syz.4.149" path="/dev/comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.695306][ T31] audit: type=1400 audit(1791174161.435:339): avc: denied { ioctl } for pid=6475 comm="syz.4.149" path="/dev/comedi3" dev="devtmpfs" ino=1276 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.980658][ T6489] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5599] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6489] [ 161.433170][ T31] audit: type=1400 audit(1791174162.175:340): avc: denied { shutdown } for pid=6482 comm="syz.2.135" lport=34088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.438026][ T31] audit: type=1400 audit(1791174162.175:341): avc: denied { read } for pid=6482 comm="syz.2.135" lport=34088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.807981][ T31] audit: type=1400 audit(1791174164.545:342): avc: denied { create } for pid=6498 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.836152][ T31] audit: type=1400 audit(1791174164.575:343): avc: denied { setopt } for pid=6498 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.034588][ T6504] tps6598x 0-0020: failed to read vendor ID: -5, vid: 0x0 [ 164.569026][ T6504] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 164.848305][ T31] audit: type=1400 audit(1791174165.585:344): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 164.888393][ T6512] binder: 6511:6512 ioctl c0306201 200000000040 returned -22 [ 165.486775][ T31] audit: type=1400 audit(1791174165.635:345): avc: denied { write } for pid=6511 comm="syz.0.160" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.714613][ T5611] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 165.931731][ T31] audit: type=1400 audit(1791174166.645:346): avc: denied { read } for pid=6515 comm="syz.3.162" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.989715][ T5611] usb 1-1: not running at top speed; connect to a high speed hub [ 166.016705][ T5611] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 166.091883][ T5611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.094609][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.240302][ T5611] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 167.143320][ T5611] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 167.144404][ T5611] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 167.144454][ T5611] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 167.145555][ T5611] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 167.203124][ T5611] usb 1-1: USB disconnect, device number 2 [ 167.825073][ T6538] syz.2.166: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 167.825171][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(full) [ 167.825186][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.825198][ T6538] Call Trace: [ 167.825203][ T6538] [ 167.825208][ T6538] dump_stack_lvl+0x100/0x190 [ 167.825237][ T6538] warn_alloc.cold+0x9e/0xb2 [ 167.825253][ T6538] ? __pfx_warn_alloc+0x10/0x10 [ 167.825280][ T6538] __vmalloc_node_range_noprof+0x123b/0x1420 [ 167.825299][ T6538] ? rcu_is_watching+0x13/0xc0 [ 167.825317][ T6538] ? trace_contention_end+0x126/0x160 [ 167.825334][ T6538] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 167.825348][ T6538] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 167.825364][ T6538] ? __pfx___mutex_lock+0x10/0x10 [ 167.825378][ T6538] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.825396][ T6538] ? tomoyo_path_number_perm+0x188/0x580 [ 167.825416][ T6538] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 167.825429][ T6538] __vmalloc_node_noprof+0xad/0xf0 [ 167.825447][ T6538] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 167.825462][ T6538] dvb_dvr_do_ioctl+0x15d/0x270 [ 167.825478][ T6538] dvb_usercopy+0x167/0x340 [ 167.825490][ T6538] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 167.825504][ T6538] ? __pfx_dvb_usercopy+0x10/0x10 [ 167.825516][ T6538] ? __fget_files+0x34/0x3d0 [ 167.825539][ T6538] ? selinux_file_ioctl+0x13b/0x290 [ 167.825554][ T6538] ? selinux_file_ioctl+0xb6/0x290 [ 167.825571][ T6538] dvb_dvr_ioctl+0x29/0x40 [ 167.825583][ T6538] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 167.825596][ T6538] __x64_sys_ioctl+0x18e/0x210 [ 167.825612][ T6538] do_syscall_64+0x123/0x790 [ 167.825627][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.825639][ T6538] RIP: 0033:0x7f795179e159 [ 167.825653][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.825664][ T6538] RSP: 002b:00007f795272d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.825678][ T6538] RAX: ffffffffffffffda RBX: 00007f7951a25fa0 RCX: 00007f795179e159 [ 167.825687][ T6538] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 167.825694][ T6538] RBP: 00007f795183506b R08: 0000000000000000 R09: 0000000000000000 [ 167.825702][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.825710][ T6538] R13: 00007f7951a26038 R14: 00007f7951a25fa0 R15: 00007ffe20d17c48 [ 167.825727][ T6538] [ 167.825736][ T6538] Mem-Info: [ 167.825744][ T6538] active_anon:24455 inactive_anon:0 isolated_anon:0 [ 167.825744][ T6538] active_file:0 inactive_file:62124 isolated_file:0 [ 167.825744][ T6538] unevictable:0 dirty:298 writeback:0 [ 167.825744][ T6538] slab_reclaimable:12180 slab_unreclaimable:94434 [ 167.825744][ T6538] mapped:33327 shmem:17188 pagetables:1231 [ 167.825744][ T6538] sec_pagetables:0 bounce:0 [ 167.825744][ T6538] kernel_misc_reclaimable:0 [ 167.825744][ T6538] free:1262780 free_pcp:22964 free_cma:0 [ 167.825776][ T6538] Node 0 active_anon:97820kB inactive_anon:0kB active_file:0kB inactive_file:248296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133308kB dirty:1188kB writeback:0kB shmem:68752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12452kB pagetables:4788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 167.825809][ T6538] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 167.825839][ T6538] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.825870][ T6538] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 167.825891][ T6538] Node 0 DMA32 free:1095836kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:97820kB inactive_anon:0kB active_file:0kB inactive_file:248296kB unevictable:0kB writepending:1188kB zspages:0kB present:3129332kB managed:2530356kB mlocked:0kB bounce:0kB free_pcp:91856kB local_pcp:33788kB free_cma:0kB [ 167.825923][ T6538] lowmem_reserve[]: 0 0 0 0 0 [ 167.825942][ T6538] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.825972][ T6538] lowmem_reserve[]: 0 0 0 0 0 [ 167.825991][ T6538] Node 1 Normal free:3939924kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.826022][ T6538] lowmem_reserve[]: 0 0 0 0 0 [ 167.826041][ T6538] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) [ 167.833150][ T6532] syzkaller0: entered promiscuous mode [ 167.833171][ T6532] syzkaller0: entered allmulticast mode [ 168.384393][ T6538] = 15360kB [ 168.384409][ T6538] Node 0 DMA32: 169*4kB (UME) 365*8kB (UME) 601*16kB (UM) 699*32kB (UME) 482*64kB (UM) 239*128kB (UME) 141*256kB (UM) 34*512kB (UM) 14*1024kB (ME) 9*2048kB (UME) 225*4096kB (M) = 1104892kB [ 168.718745][ T6538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 168.718855][ T6538] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 5*16kB (UM) 9*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939924kB [ 168.719026][ T6538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.719044][ T6538] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.719061][ T6538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.719077][ T6538] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.719094][ T6538] 75538 total pagecache pages [ 168.719112][ T6538] 0 pages in swap cache [ 168.719121][ T6538] Free swap = 124996kB [ 168.719128][ T6538] Total swap = 124996kB [ 168.719137][ T6538] 2097051 pages RAM [ 168.719144][ T6538] 0 pages HighMem/MovableOnly [ 168.719151][ T6538] 432830 pages reserved [ 168.719158][ T6538] 0 pages cma reserved [ 169.140292][ T6544] tipc: Started in network mode [ 169.140310][ T6544] tipc: Node identity 0010000000000000002, cluster identity 1 [ 170.741775][ T31] audit: type=1400 audit(1791174170.995:347): avc: denied { write } for pid=6551 comm="syz.0.171" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 171.289229][ T31] audit: type=1400 audit(1791174172.025:348): avc: denied { mount } for pid=6555 comm="syz.4.172" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 172.415490][ T31] audit: type=1400 audit(1791174173.155:349): avc: denied { bind } for pid=6573 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.464419][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'. [ 172.483847][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.174'. [ 172.830751][ T31] audit: type=1400 audit(1791174173.565:350): avc: denied { write } for pid=6573 comm="syz.0.174" name="event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.857244][ T31] audit: type=1400 audit(1791174173.595:351): avc: denied { open } for pid=6573 comm="syz.0.174" path="/dev/input/event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.949724][ T31] audit: type=1400 audit(1791174173.685:352): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 173.653557][ T31] audit: type=1326 audit(1791174174.145:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.4.175" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd359e159 code=0x7ffc0000 [ 173.653744][ T31] audit: type=1326 audit(1791174174.155:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.4.175" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd359e159 code=0x7ffc0000 [ 173.653933][ T31] audit: type=1326 audit(1791174174.155:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.4.175" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd359e159 code=0x7ffc0000 [ 173.654076][ T31] audit: type=1326 audit(1791174174.155:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.4.175" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5cd359e159 code=0x7ffc0000 [ 174.921639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 176.602312][ T31] kauditd_printk_skb: 165 callbacks suppressed [ 176.602332][ T31] audit: type=1400 audit(1791174177.335:522): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 176.687076][ T31] audit: type=1400 audit(1791174177.425:523): avc: denied { write } for pid=6610 comm="syz.4.182" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 176.960112][ T6614] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6614 comm=syz.2.183 [ 177.036612][ T31] audit: type=1400 audit(1791174177.775:524): avc: denied { allowed } for pid=6616 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 177.191657][ T31] audit: type=1400 audit(1791174177.925:525): avc: denied { read } for pid=6619 comm="syz.2.186" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.191923][ T31] audit: type=1400 audit(1791174177.935:526): avc: denied { open } for pid=6619 comm="syz.2.186" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.898909][ T6629] ip_tables: iptables: counters copy to user failed while replacing table [ 178.764903][ T31] audit: type=1400 audit(1791174179.475:527): avc: denied { create } for pid=6632 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.765082][ T31] audit: type=1400 audit(1791174179.485:528): avc: denied { bind } for pid=6632 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.869069][ T6638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'. [ 181.429798][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 183.296590][ T31] audit: type=1400 audit(1791174183.815:529): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 183.548521][ T6664] Bluetooth: MGMT ver 1.23 [ 184.081840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 186.711260][ T6681] comedi comedi0: No hardware detected at I/O base 0x300 [ 187.030908][ T31] audit: type=1400 audit(1791174187.765:530): avc: denied { create } for pid=6670 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 187.392214][ T5611] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 187.564058][ T5611] usb 3-1: Using ep0 maxpacket: 16 [ 187.566380][ T6690] geneve2: entered promiscuous mode [ 187.567728][ T5611] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 187.571499][ T5611] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 187.571523][ T5611] usb 3-1: config 0 has no interface number 0 [ 187.571561][ T5611] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 187.591777][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 51542 - 0 [ 187.591818][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 51542 - 0 [ 187.591851][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 51542 - 0 [ 187.591889][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 51542 - 0 [ 187.656078][ T5611] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 187.659616][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.659642][ T5611] usb 3-1: Product: syz [ 187.659658][ T5611] usb 3-1: Manufacturer: syz [ 187.659674][ T5611] usb 3-1: SerialNumber: syz [ 187.695222][ T5611] usb 3-1: config 0 descriptor?? [ 187.697183][ T6680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.697313][ T6680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.755275][ T31] audit: type=1400 audit(1791174188.495:531): avc: denied { ioctl } for pid=6692 comm="syz.0.204" path="socket:[11225]" dev="sockfs" ino=11225 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.922920][ T6680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.923047][ T6680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.937567][ T6696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.205'. [ 187.937715][ T6696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.205'. [ 187.937731][ T6696] netlink: 31 bytes leftover after parsing attributes in process `syz.4.205'. [ 187.960304][ T31] audit: type=1400 audit(1791174188.695:532): avc: denied { connect } for pid=6695 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.133233][ T5611] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 188.703143][ T31] audit: type=1400 audit(1791174189.445:533): avc: denied { create } for pid=6700 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.718147][ T31] audit: type=1400 audit(1791174189.455:534): avc: denied { bind } for pid=6700 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.818912][ T31] audit: type=1400 audit(1791174189.535:535): avc: denied { write } for pid=6700 comm="syz.4.216" path="socket:[11250]" dev="sockfs" ino=11250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.959212][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.959704][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.992099][ T31] audit: type=1400 audit(1791174189.725:536): avc: denied { read } for pid=6700 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 189.143631][ T31] audit: type=1400 audit(1791174189.885:537): avc: denied { create } for pid=6679 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.190310][ T5611] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 189.190349][ T5611] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 189.202398][ T5611] asix 3-1:0.34: probe with driver asix failed with error -71 [ 189.750770][ T6715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.780460][ T5611] usb 3-1: USB disconnect, device number 2 [ 191.086039][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.102971][ T6708] Bluetooth: hci0: command 0x0406 tx timeout [ 191.103039][ T6708] Bluetooth: hci1: command 0x0406 tx timeout [ 191.103072][ T6708] Bluetooth: hci2: command 0x0406 tx timeout [ 191.103104][ T6708] Bluetooth: hci3: command 0x0406 tx timeout [ 191.103136][ T6708] Bluetooth: hci4: command 0x0406 tx timeout [ 191.363282][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 191.363299][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.363310][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.367109][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.367123][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.131794][ T31] audit: type=1400 audit(1791174192.795:538): avc: denied { sqpoll } for pid=6742 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.921756][ T6753] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 193.917542][ T6755] netlink: 34 bytes leftover after parsing attributes in process `syz.2.218'. [ 194.661851][ T31] audit: type=1400 audit(1791174195.395:539): avc: denied { map } for pid=6758 comm="syz.0.219" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 194.721566][ T6751] warning: `syz.4.217' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 195.023422][ T31] audit: type=1400 audit(1791174195.765:540): avc: denied { read write } for pid=6764 comm="syz.0.222" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.024386][ T31] audit: type=1400 audit(1791174195.765:541): avc: denied { open } for pid=6764 comm="syz.0.222" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.057759][ T31] audit: type=1400 audit(1791174195.765:542): avc: denied { ioctl } for pid=6764 comm="syz.0.222" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 196.339301][ T5601] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 196.362623][ T31] audit: type=1400 audit(1791174197.075:543): avc: denied { setopt } for pid=6773 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.368268][ T31] audit: type=1400 audit(1791174197.105:544): avc: denied { bind } for pid=6773 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.568803][ T83] wlan1: Trigger new scan to find an IBSS to join [ 197.741772][ T2248] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 198.419928][ T6775] syz.1.223 (6775): drop_caches: 2 [ 199.011403][ T31] audit: type=1400 audit(1791174199.745:545): avc: denied { ioctl } for pid=6785 comm="syz.2.220" path="socket:[12354]" dev="sockfs" ino=12354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.103037][ T13] IPVS: starting estimator thread 0... [ 199.221748][ T2248] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 199.252037][ T6797] IPVS: using max 34 ests per chain, 81600 per kthread [ 199.350564][ T2248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.350592][ T2248] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.350655][ T2248] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.350695][ T2248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.692082][ T2248] usb 5-1: can't set config #1, error -71 [ 199.695264][ T2248] usb 5-1: USB disconnect, device number 3 [ 203.549932][ T31] audit: type=1400 audit(1791174203.995:546): avc: denied { remount } for pid=6819 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.662123][ T3670] wlan1: Trigger new scan to find an IBSS to join [ 204.010695][ T6832] netlink: 'syz.1.236': attribute type 9 has an invalid length. [ 206.151198][ T31] audit: type=1400 audit(1791174206.885:547): avc: denied { write } for pid=6844 comm="syz.4.239" name="nbd4" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.161564][ T6846] nbd4: detected capacity change from 0 to 18 [ 206.176322][ T5601] block nbd4: Receive control failed (result -107) [ 206.179886][ T6846] block nbd4: shutting down sockets [ 206.831704][ T31] audit: type=1400 audit(1791174207.135:548): avc: denied { write } for pid=6841 comm="syz.3.247" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 206.831909][ T31] audit: type=1400 audit(1791174207.225:549): avc: denied { ioctl } for pid=6839 comm="syz.2.238" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 207.271287][ T3670] wlan1: Creating new IBSS network, BSSID fa:56:a2:c3:51:4f [ 209.002617][ T6863] nft_compat: unsupported protocol 15 [ 211.445206][ T31] audit: type=1400 audit(1791174212.185:550): avc: denied { read write } for pid=6875 comm="syz.4.249" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 211.447093][ T31] audit: type=1400 audit(1791174212.185:551): avc: denied { open } for pid=6875 comm="syz.4.249" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 211.505831][ T31] audit: type=1400 audit(1791174212.245:552): avc: denied { name_connect } for pid=6871 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 212.527554][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.233'. [ 212.669810][ T31] audit: type=1400 audit(1791174213.405:553): avc: denied { read } for pid=6869 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.861340][ T31] audit: type=1400 audit(1791174213.595:554): avc: denied { create } for pid=6884 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.127071][ T31] audit: type=1400 audit(1791174214.815:555): avc: denied { create } for pid=6886 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.837870][ T31] audit: type=1400 audit(1791174217.575:556): avc: denied { node_bind } for pid=6900 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 217.104368][ T31] audit: type=1400 audit(1791174217.845:557): avc: denied { read write } for pid=6916 comm="syz.0.257" name="sg0" dev="devtmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 217.104768][ T31] audit: type=1400 audit(1791174217.845:558): avc: denied { open } for pid=6916 comm="syz.0.257" path="/dev/sg0" dev="devtmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 217.781745][ T5611] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 218.859318][ T31] audit: type=1400 audit(1791174219.025:559): avc: denied { ioctl } for pid=6916 comm="syz.0.257" path="/dev/sg0" dev="devtmpfs" ino=1146 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 218.951734][ T5611] usb 2-1: Using ep0 maxpacket: 32 [ 218.956426][ T5611] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.956469][ T5611] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 218.957386][ T5611] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 218.957410][ T5611] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 218.957431][ T5611] usb 2-1: config 14 has no interface number 0 [ 218.957447][ T5611] usb 2-1: config 14 has no interface number 1 [ 218.957511][ T5611] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 218.957537][ T5611] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 218.957563][ T5611] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 218.957589][ T5611] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 218.957616][ T5611] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 218.957642][ T5611] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.957666][ T5611] usb 2-1: config 14 interface 57 has no altsetting 0 [ 218.957684][ T5611] usb 2-1: config 14 interface 228 has no altsetting 0 [ 218.960938][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 218.961000][ T6926] openvswitch: netlink: Message has 1 unknown bytes. [ 218.961518][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.961541][ T5611] usb 2-1: Product: syz [ 218.961557][ T5611] usb 2-1: Manufacturer: syz [ 218.961681][ T5611] usb 2-1: SerialNumber: syz [ 219.213115][ T31] audit: type=1400 audit(1791174219.955:560): avc: denied { mount } for pid=6925 comm="syz.3.259" name="/" dev="hugetlbfs" ino=12683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 219.351603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 219.391609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 220.331607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 220.920449][ T5611] legousbtower 2-1:14.57: interrupt endpoints not found [ 220.935309][ T5611] legousbtower 2-1:14.228: get version request failed: -71 [ 220.935460][ T5611] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 220.961349][ T5611] usb 2-1: USB disconnect, device number 6 [ 221.008009][ T6940] ======================================================= [ 221.008009][ T6940] WARNING: The mand mount option has been deprecated and [ 221.008009][ T6940] and is ignored by this kernel. Remove the mand [ 221.008009][ T6940] option from the mount to silence this warning. [ 221.008009][ T6940] ======================================================= [ 221.056872][ T31] audit: type=1400 audit(1791174221.795:561): avc: denied { read } for pid=6939 comm="syz.2.262" path="socket:[12693]" dev="sockfs" ino=12693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.101794][ T5864] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 221.396549][ T5864] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 221.400687][ T5864] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.400718][ T5864] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.400743][ T5864] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.400771][ T5864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.400802][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.415030][ T5864] usb 4-1: config 0 descriptor?? [ 222.193259][ T5864] elan 0003:04F3:074D.0001: ignoring exceeding usage max [ 222.222252][ T5864] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 222.325677][ T5864] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input0 [ 222.357222][ T5864] usb 4-1: USB disconnect, device number 2 [ 222.413517][ T31] audit: type=1400 audit(1791174223.155:562): avc: denied { create } for pid=6952 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.418912][ T31] audit: type=1400 audit(1791174223.155:563): avc: denied { connect } for pid=6952 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.424064][ T31] audit: type=1400 audit(1791174223.165:564): avc: denied { write } for pid=6952 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.559804][ T6954] fido_id[6954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 223.172301][ T31] audit: type=1400 audit(1791174223.875:565): avc: denied { execute } for pid=6961 comm="syz.4.260" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 223.281818][ T31] audit: type=1400 audit(1791174223.995:566): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 225.105886][ T6992] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 225.711641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 225.998363][ T31] audit: type=1400 audit(1791174226.735:567): avc: denied { accept } for pid=6988 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.466149][ T31] audit: type=1400 audit(1791174227.205:568): avc: denied { open } for pid=6996 comm="syz.2.279" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 226.683178][ T31] audit: type=1400 audit(1791174227.425:569): avc: denied { node_bind } for pid=6985 comm="syz.1.272" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 227.124068][ T6999] ip_tables: iptables: counters copy to user failed while replacing table [ 227.657146][ T31] audit: type=1400 audit(1791174228.395:570): avc: denied { create } for pid=7006 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 227.690313][ T31] audit: type=1400 audit(1791174228.425:571): avc: denied { write } for pid=7006 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 227.725508][ T31] audit: type=1400 audit(1791174228.455:572): avc: denied { read } for pid=7006 comm="syz.2.280" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.761768][ T31] audit: type=1400 audit(1791174228.505:573): avc: denied { ioctl } for pid=7006 comm="syz.2.280" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.826334][ T7010] input: syz0 as /devices/virtual/input/input7 [ 228.992793][ T31] audit: type=1400 audit(1791174229.725:574): avc: denied { cmd } for pid=7007 comm="iou-wrk-7009" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 229.027925][ T31] audit: type=1400 audit(1791174229.735:575): avc: denied { map } for pid=7007 comm="syz.1.281" path="/dev/ublkc0" dev="devtmpfs" ino=2813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.803530][ T6322] IPVS: starting estimator thread 0... [ 229.873655][ T7016] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 229.902222][ T7017] IPVS: using max 33 ests per chain, 79200 per kthread [ 229.929687][ T31] audit: type=1400 audit(1791174230.665:576): avc: denied { create } for pid=7018 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.951075][ T31] audit: type=1400 audit(1791174230.675:577): avc: denied { connect } for pid=7018 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.951105][ T31] audit: type=1400 audit(1791174230.675:578): avc: denied { write } for pid=7018 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 230.032790][ T31] audit: type=1400 audit(1791174230.775:579): avc: denied { bind } for pid=7021 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.388180][ T7044] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 234.887469][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 234.887503][ T31] audit: type=1400 audit(1791174235.625:582): avc: denied { write } for pid=7049 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.740182][ T7077] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 237.285258][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.171424][ T31] audit: type=1400 audit(1791174238.905:583): avc: denied { write } for pid=7095 comm="syz.0.302" name="subsystems" dev="configfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.194476][ T31] audit: type=1400 audit(1791174238.925:584): avc: denied { add_name } for pid=7095 comm="syz.0.302" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.194525][ T31] audit: type=1400 audit(1791174238.925:585): avc: denied { create } for pid=7095 comm="syz.0.302" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 238.236383][ T31] audit: type=1400 audit(1791174238.965:586): avc: denied { read write } for pid=7095 comm="syz.0.302" name="attr_allow_any_host" dev="configfs" ino=13223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 238.236436][ T31] audit: type=1400 audit(1791174238.965:587): avc: denied { open } for pid=7095 comm="syz.0.302" path="/62/config/nvmet/subsystems/testsubsys/attr_allow_any_host" dev="configfs" ino=13223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 238.260930][ T31] audit: type=1400 audit(1791174238.985:588): avc: denied { write } for pid=7095 comm="syz.0.302" name="ports" dev="configfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.271702][ T31] audit: type=1400 audit(1791174239.005:589): avc: denied { write } for pid=7095 comm="syz.0.302" name="subsystems" dev="configfs" ino=13228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 238.306139][ T31] audit: type=1400 audit(1791174239.045:590): avc: denied { create } for pid=7095 comm="syz.0.302" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 238.325578][ T31] audit: type=1400 audit(1791174239.065:591): avc: denied { write } for pid=7095 comm="syz.0.302" name="subsystems" dev="configfs" ino=13228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.272280][ T5890] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:6536f319-a095-4df1-b6c5-c95df7ffaccc. [ 239.429592][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 239.508092][ T7099] nvme nvme0: creating 2 I/O queues. [ 239.570402][ T7099] nvme nvme0: new ctrl: "testsubsys" [ 240.006590][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 240.006608][ T31] audit: type=1400 audit(1791174240.745:593): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 240.581833][ T7124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'. [ 241.101327][ T31] audit: type=1400 audit(1791174241.755:594): avc: denied { create } for pid=7117 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 241.101386][ T31] audit: type=1400 audit(1791174241.755:595): avc: denied { ioctl } for pid=7117 comm="syz.0.307" path="socket:[13289]" dev="sockfs" ino=13289 ioctlcmd=0x6150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 241.569292][ T7128] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5599] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7128] [ 243.689990][ T31] audit: type=1400 audit(1791174243.424:596): avc: denied { watch_mount } for pid=7135 comm="syz.3.312" path="/64" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 243.997245][ T7155] ip_tables: iptables: counters copy to user failed while replacing table [ 244.942096][ T31] audit: type=1400 audit(1791174244.654:597): avc: denied { sys_module } for pid=7146 comm="syz.2.313" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 245.887836][ T7153] CIFS: Invalid mount helper version specified [ 245.900052][ T7162] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.909735][ T31] audit: type=1400 audit(1791174245.634:598): avc: denied { create } for pid=7161 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.909785][ T31] audit: type=1400 audit(1791174245.634:599): avc: denied { write } for pid=7161 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.081972][ T7166] jffs2: notice: (7166) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 246.112984][ T31] audit: type=1400 audit(1791174245.854:600): avc: denied { unmount } for pid=7161 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 247.958822][ T7147] syzkaller0: entered promiscuous mode [ 247.958846][ T7147] syzkaller0: entered allmulticast mode [ 247.977720][ T7150] netlink: 168 bytes leftover after parsing attributes in process `syz.2.313'. [ 250.293075][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.293130][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.200903][ T31] audit: type=1400 audit(1791174250.934:601): avc: denied { name_bind } for pid=7205 comm="syz.3.326" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 251.781848][ T5611] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 251.935145][ T5611] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 251.936318][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 251.936352][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.936377][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 251.936405][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 251.938579][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.938606][ T5611] usb 2-1: Product: syz [ 251.938623][ T5611] usb 2-1: Manufacturer: syz [ 251.938649][ T5611] usb 2-1: SerialNumber: syz [ 252.018450][ T5611] usb 2-1: config 0 descriptor?? [ 252.472838][ T31] audit: type=1400 audit(1791174252.214:602): avc: denied { ioctl } for pid=7216 comm="syz.0.329" path="/68/dev/md0" dev="devtmpfs" ino=2818 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 252.479155][ T7217] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.187033][ T31] audit: type=1400 audit(1791174252.634:603): avc: denied { read append } for pid=7223 comm="syz.4.331" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.187192][ T31] audit: type=1400 audit(1791174252.634:604): avc: denied { open } for pid=7223 comm="syz.4.331" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.233255][ T7229] overlayfs: failed to clone lowerpath [ 254.032516][ T7230] hub 1-0:1.0: USB hub found [ 254.034799][ T7230] hub 1-0:1.0: 1 port detected [ 254.472475][ T7241] ip_tables: iptables: counters copy to user failed while replacing table [ 254.478490][ T31] audit: type=1400 audit(1791174254.174:605): avc: denied { mount } for pid=7235 comm="syz.4.333" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 254.821590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 255.071586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 255.506100][ T31] audit: type=1400 audit(1791174255.244:606): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 255.566466][ T5611] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 255.607943][ T5611] usb 2-1: USB disconnect, device number 7 [ 255.694433][ T7243] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.695148][ T7243] block device autoloading is deprecated and will be removed. [ 255.720925][ T31] audit: type=1400 audit(1791174255.464:607): avc: denied { checkpoint_restore } for pid=7242 comm="syz.4.335" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.339023][ T7250] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5598] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7250] [ 256.378792][ T31] audit: type=1400 audit(1791174256.074:608): avc: denied { read } for pid=7244 comm="syz.0.337" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 256.378848][ T31] audit: type=1400 audit(1791174256.074:609): avc: denied { open } for pid=7244 comm="syz.0.337" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 258.296009][ T7261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.435435][ T7275] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 260.466533][ T7283] raw_sendmsg: syz.1.342 forgot to set AF_INET. Fix it! [ 260.609287][ T7282] xt_CT: No such helper "netbios-ns" [ 262.047902][ T31] audit: type=1400 audit(1791174261.784:610): avc: denied { name_bind } for pid=7308 comm="syz.3.351" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 265.921875][ T31] audit: type=1400 audit(1791174265.284:611): avc: denied { setopt } for pid=7334 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.185842][ T31] audit: type=1400 audit(1791174265.924:612): avc: denied { cmd } for pid=7336 comm="iou-wrk-7349" path="socket:[14383]" dev="sockfs" ino=14383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 266.316127][ T31] audit: type=1400 audit(1791174266.054:613): avc: denied { cmd } for pid=7336 comm="iou-wrk-7349" path="socket:[14383]" dev="sockfs" ino=14383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 266.503264][ T7350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7350 comm=syz.1.356 [ 266.503656][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 266.575236][ T31] audit: type=1400 audit(1791174266.294:614): avc: denied { setopt } for pid=7351 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.673181][ T31] audit: type=1400 audit(1791174266.394:615): avc: denied { ioctl } for pid=7351 comm="syz.4.361" path="socket:[14389]" dev="sockfs" ino=14389 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.760118][ T7361] tmpfs: Bad value for 'mpol' [ 267.557563][ T31] audit: type=1400 audit(1791174267.294:616): avc: denied { ioctl } for pid=7365 comm="syz.2.362" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 268.476264][ T7372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 269.071150][ T7377] process 7375 (syz.3.365) no longer affine to cpu1 [ 269.729260][ T7369] smpboot: CPU 1 is now offline [ 271.917578][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 271.917619][ T7404] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 272.225452][ T31] audit: type=1400 audit(1791174271.964:617): avc: denied { ioctl } for pid=7402 comm="syz.3.372" path="socket:[14504]" dev="sockfs" ino=14504 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 273.592809][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 276.989718][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 281.847405][ T7445] gadgetfs: bound to dummy_udc driver [ 282.252213][ T194] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 282.252577][ C0] gadgetfs: connected [ 282.252876][ T194] gadgetfs: disconnected [ 282.506800][ C0] gadgetfs: connected [ 282.510084][ T194] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 282.510327][ T194] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 282.510348][ T194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.766134][ C0] gadgetfs: configuration #1 [ 282.868725][ T31] audit: type=1400 audit(1791174282.604:618): avc: denied { read write } for pid=7443 comm="syz.1.386" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 282.868757][ T31] audit: type=1400 audit(1791174282.604:619): avc: denied { open } for pid=7443 comm="syz.1.386" path="/73/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 283.218968][ T7445] gadgetfs: suspended from state 3 [ 283.219037][ T7445] gadgetfs: disconnected [ 283.227549][ T194] usb 1-1: USB disconnect, device number 3 [ 284.587407][ T31] audit: type=1400 audit(1791174284.324:620): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 285.873391][ T5713] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 286.088007][ T5713] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 286.112370][ T5713] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 286.112388][ T5713] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 286.112402][ T5713] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 286.112415][ T5713] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 286.112429][ T5713] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 286.112443][ T5713] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 286.266110][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 286.266128][ T5713] usb 1-1: Product: syz [ 286.266138][ T5713] usb 1-1: Manufacturer: syz [ 286.308780][ T7465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.308838][ T7465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.308907][ T7465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.308959][ T7465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.309010][ T7465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.309060][ T7465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.371132][ T5713] usb 1-1: USB2VGA dongle found at address 4 [ 286.418897][ T5713] usb 1-1: Allocated 8 output buffers [ 286.460353][ T5713] usb 1-1: Failed to early initialize device [ 287.059666][ T7478] ipvlan2: entered allmulticast mode [ 287.059681][ T7478] virt_wifi0: entered allmulticast mode [ 287.268829][ T5713] usb 1-1: USB disconnect, device number 4 [ 288.157369][ T7486] lo: left promiscuous mode [ 288.231332][ T7486] tunl0: left promiscuous mode [ 288.235100][ T7486] gre0: left promiscuous mode [ 288.408123][ T7486] gretap0: left promiscuous mode [ 288.411411][ T7486] erspan0: left promiscuous mode [ 288.414703][ T7486] ip_vti0: left promiscuous mode [ 288.417208][ T7486] ip6_vti0: left promiscuous mode [ 288.420243][ T7486] sit0: left promiscuous mode [ 288.429939][ T7486] ip6tnl0: left promiscuous mode [ 288.433648][ T7486] ip6gre0: left promiscuous mode [ 288.440297][ T7486] ip6gretap0: left promiscuous mode [ 288.444075][ T7486] bridge0: port 3(syz_tun) entered blocking state [ 288.444160][ T7486] bridge0: port 3(syz_tun) entered forwarding state [ 288.445082][ T7486] bridge0: left promiscuous mode [ 288.447414][ T7486] vcan0: left promiscuous mode [ 288.449792][ T7486] bond0: left promiscuous mode [ 288.453731][ T7486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.454906][ T7486] team0: left promiscuous mode [ 288.456870][ T7486] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.458151][ T7486] dummy0: left promiscuous mode [ 288.462317][ T7486] nlmon0: left promiscuous mode [ 288.464787][ T7486] batadv0: left promiscuous mode [ 288.467390][ T7486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.468274][ T7486] vxcan0: left promiscuous mode [ 288.470372][ T7486] vxcan1: left promiscuous mode [ 288.473155][ T7486] veth0: left promiscuous mode [ 288.475368][ T7486] veth1: left promiscuous mode [ 288.650763][ T7486] wg0: left promiscuous mode [ 288.778380][ T7486] wg1: left promiscuous mode [ 288.875686][ T7486] wg2: left promiscuous mode [ 288.878344][ T7486] veth0_to_bridge: left promiscuous mode [ 288.884004][ T7486] veth1_to_bridge: left promiscuous mode [ 288.888259][ T7486] veth0_to_bond: left promiscuous mode [ 288.890479][ T7486] bond_slave_0: left promiscuous mode [ 288.892965][ T7486] veth1_to_bond: left promiscuous mode [ 288.895241][ T7486] bond_slave_1: left promiscuous mode [ 288.896766][ T7486] veth0_to_team: left promiscuous mode [ 288.899030][ T7486] team_slave_0: left promiscuous mode [ 288.900816][ T7486] veth1_to_team: left promiscuous mode [ 288.903530][ T7486] team_slave_1: left promiscuous mode [ 288.905308][ T7486] veth0_to_batadv: left promiscuous mode [ 288.907533][ T7486] batadv_slave_0: left promiscuous mode [ 288.908881][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.909652][ T7486] veth1_to_batadv: left promiscuous mode [ 288.912498][ T7486] batadv_slave_1: left promiscuous mode [ 288.913831][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.914601][ T7486] xfrm0: left promiscuous mode [ 288.917757][ T7486] veth0_to_hsr: left promiscuous mode [ 288.922195][ T7486] veth1_to_hsr: left promiscuous mode [ 288.925875][ T7486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.925887][ T7486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.925995][ T7486] hsr0: left promiscuous mode [ 288.928968][ T7486] veth1_virt_wifi: left promiscuous mode [ 288.931171][ T7486] veth0_virt_wifi: left promiscuous mode [ 288.933706][ T7486] virt_wifi0: left promiscuous mode [ 288.935925][ T7486] veth1_vlan: left promiscuous mode [ 288.940627][ T7486] vlan0: left promiscuous mode [ 288.943812][ T7486] vlan1: left promiscuous mode [ 288.946267][ T7486] veth1_vlan: entered promiscuous mode [ 288.946772][ T7486] macvlan0: left promiscuous mode [ 288.950410][ T7486] macvlan1: left promiscuous mode [ 288.953684][ T7486] ipvlan0: left promiscuous mode [ 288.956301][ T7486] ipvlan1: left promiscuous mode [ 288.958812][ T7486] veth1_macvtap: left promiscuous mode [ 288.961011][ T7486] veth0_macvtap: left promiscuous mode [ 288.963511][ T7486] veth0_macvtap: entered promiscuous mode [ 288.964015][ T7486] macvtap0: left promiscuous mode [ 288.966443][ T7486] veth1_macvtap: entered promiscuous mode [ 288.966960][ T7486] macsec0: left promiscuous mode [ 288.969899][ T7486] geneve0: left promiscuous mode [ 288.974466][ T7486] geneve1: left promiscuous mode [ 288.978150][ T7486] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 288.979114][ T7486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 288.980455][ T7486] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 288.981409][ T7486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 288.983250][ T7486] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 288.984586][ T7486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.985923][ T7486] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 288.986876][ T7486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 288.988185][ T7486] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 288.990124][ T7486] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 289.137288][ T1100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.137924][ T1100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.140250][ T1100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.568302][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.568364][ T5890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.155000][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.155064][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.552373][ T5890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.597501][ T31] audit: type=1400 audit(1791174290.334:621): avc: denied { write } for pid=7490 comm="syz.2.394" name="dlm" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 290.645135][ T31] audit: type=1400 audit(1791174290.384:622): avc: denied { write } for pid=7490 comm="syz.2.394" name="comms" dev="configfs" ino=14746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 290.686820][ T31] audit: type=1400 audit(1791174290.424:623): avc: denied { write } for pid=7490 comm="syz.2.394" name="comms" dev="configfs" ino=14746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 291.127771][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.131229][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.148604][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.150949][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.194619][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.905110][ T31] audit: type=1400 audit(1791174292.644:624): avc: denied { create } for pid=7506 comm="syz.0.398" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 292.941699][ T31] audit: type=1400 audit(1791174292.674:625): avc: denied { write } for pid=7506 comm="syz.0.398" name="file2" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 292.941729][ T31] audit: type=1400 audit(1791174292.684:626): avc: denied { open } for pid=7506 comm="syz.0.398" path="/79/file2" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 293.055475][ T31] audit: type=1400 audit(1791174292.784:627): avc: denied { cmd } for pid=7506 comm="syz.0.398" path="/79/file2" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 293.970354][ T5600] Bluetooth: hci5: command tx timeout [ 294.848515][ T31] audit: type=1400 audit(1791174294.584:628): avc: denied { unlink } for pid=5598 comm="syz-executor" name="file2" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.984387][ T7519] ip_tables: iptables: counters copy to user failed while replacing table [ 295.366408][ T7526] ip_tables: iptables: counters copy to user failed while replacing table [ 295.582530][ T2248] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 295.733617][ T2248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.735944][ T2248] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.735965][ T2248] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 295.735980][ T2248] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 295.735995][ T2248] usb 3-1: config 1 interface 0 has no altsetting 0 [ 295.736927][ T2248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.736941][ T2248] usb 3-1: SerialNumber: syz [ 295.739457][ T7519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.762432][ T7533] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 295.777576][ T31] audit: type=1400 audit(1791174295.494:629): avc: denied { mounton } for pid=7530 comm="syz.1.403" path="/77/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 295.970745][ T2248] hub 3-1:1.0: bad descriptor, ignoring hub [ 295.970761][ T2248] hub 3-1:1.0: probe with driver hub failed with error -5 [ 296.021230][ T2248] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 296.065482][ T5600] Bluetooth: hci5: command tx timeout [ 296.227313][ T2248] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 296.276164][ T2248] usb 3-1: USB disconnect, device number 3 [ 298.122197][ T5600] Bluetooth: hci5: command tx timeout [ 298.888768][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 298.985786][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.193487][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.202499][ T5600] Bluetooth: hci5: command tx timeout [ 301.782707][ T7570] capability: warning: `syz.3.410' uses 32-bit capabilities (legacy support in use) [ 302.165616][ T7564] db_root: cannot open: /dev/sequencer2 [ 302.165629][ T7564] db_root: not a directory: /dev/sequencer2 [ 303.633335][ T31] audit: type=1400 audit(1791174303.044:630): avc: denied { setopt } for pid=7574 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.184091][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.192470][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.192641][ T7498] bridge_slave_0: entered allmulticast mode [ 304.286849][ T7498] bridge_slave_0: entered promiscuous mode [ 304.290459][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.290672][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.290835][ T7498] bridge_slave_1: entered allmulticast mode [ 304.378634][ T7498] bridge_slave_1: entered promiscuous mode [ 304.720019][ T31] audit: type=1400 audit(1791174304.454:631): avc: denied { read write } for pid=7582 comm="syz.0.413" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 304.720333][ T31] audit: type=1400 audit(1791174304.454:632): avc: denied { ioctl open } for pid=7582 comm="syz.0.413" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 305.620339][ T7585] random: crng reseeded on system resumption [ 305.675269][ T7498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.734827][ T7498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.654106][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.512223][ T7498] team0: Port device team_slave_0 added [ 307.543826][ T7498] team0: Port device team_slave_1 added [ 309.145061][ T7594] Illegal XDP return value 4294967294 on prog (id 36) dev N/A, expect packet loss! [ 309.208424][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.208436][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.208450][ T7498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.404631][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.404643][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.404658][ T7498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.343947][ T7498] hsr_slave_0: entered promiscuous mode [ 311.348536][ T7498] hsr_slave_1: entered promiscuous mode [ 311.349367][ T7498] debugfs: 'hsr0' already exists in 'hsr' [ 311.349379][ T7498] Cannot create hsr debugfs directory [ 311.779340][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.779455][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.069150][ T7638] futex_wake_op: syz.1.424 tries to shift op by 144; fix this program [ 317.147793][ T7640] netlink: zone id is out of range [ 317.926522][ T7638] futex_wake_op: syz.1.424 tries to shift op by 144; fix this program [ 327.897853][ T5600] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 327.916181][ T31] audit: type=1326 audit(1791174324.651:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.1.436" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f2079e159 code=0x0 [ 327.968837][ T31] audit: type=1400 audit(1791174324.701:634): avc: denied { create } for pid=7671 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 328.875480][ T7686] netlink: 'syz.3.437': attribute type 2 has an invalid length. [ 328.875494][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.437'. [ 328.880893][ T7686] : entered promiscuous mode [ 331.228692][ T7498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 332.054611][ T7498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.055706][ T7498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 332.092654][ T31] audit: type=1400 audit(1791174328.831:635): avc: denied { create } for pid=7691 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 332.094324][ T7700] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 333.268585][ T7498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.404023][ T7498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.435452][ T7498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.440399][ T7498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.613469][ T7498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.619818][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.936115][ T7498] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.158604][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.158659][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.232638][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.232692][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.893420][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 339.894458][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 339.894720][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 339.895487][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 343.647118][ T31] audit: type=1400 audit(1791174340.381:636): avc: denied { read } for pid=5265 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 344.154095][ T7754] syzkaller0: entered promiscuous mode [ 344.154200][ T7754] syzkaller0: entered allmulticast mode [ 344.157798][ T7745] netlink: 'syz.3.451': attribute type 6 has an invalid length. [ 344.157811][ T7745] netlink: 'syz.3.451': attribute type 7 has an invalid length. [ 344.157818][ T7745] netlink: 'syz.3.451': attribute type 8 has an invalid length. [ 344.712820][ T7747] tipc: Started in network mode [ 344.712841][ T7747] tipc: Node identity f2a96a696202, cluster identity 4711 [ 344.713067][ T7747] tipc: Enabled bearer , priority 0 [ 345.278853][ T7746] tipc: Resetting bearer [ 345.494602][ T7746] tipc: Disabling bearer [ 346.127629][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.142191][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.142863][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.146036][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.148279][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.573730][ T31] audit: type=1400 audit(1791174343.311:637): avc: denied { read } for pid=7769 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.640629][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.697490][ T31] audit: type=1400 audit(1791174343.431:638): avc: denied { create } for pid=7769 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 346.769515][ T7498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.982951][ T31] audit: type=1400 audit(1791174343.711:639): avc: denied { ioctl } for pid=7769 comm="syz.1.456" path="socket:[16087]" dev="sockfs" ino=16087 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 347.027487][ T31] audit: type=1400 audit(1791174343.771:640): avc: denied { ioctl } for pid=7773 comm="syz.2.454" path="socket:[16096]" dev="sockfs" ino=16096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 347.055146][ T31] audit: type=1400 audit(1791174343.801:641): avc: denied { bind } for pid=7773 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 347.078652][ T7785] [ 347.080964][ T7785] ====================================================== [ 347.087950][ T7785] WARNING: possible circular locking dependency detected [ 347.094939][ T7785] syzkaller #0 Tainted: G L [ 347.100887][ T7785] ------------------------------------------------------ [ 347.107871][ T7785] syz.2.454/7785 is trying to acquire lock: [ 347.113746][ T7785] ffff888038d800b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 347.122857][ T7785] [ 347.122857][ T7785] but task is already holding lock: [ 347.130189][ T7785] ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 347.139024][ T7785] [ 347.139024][ T7785] which lock already depends on the new lock. [ 347.139024][ T7785] [ 347.149407][ T7785] [ 347.149407][ T7785] the existing dependency chain (in reverse order) is: [ 347.158406][ T7785] [ 347.158406][ T7785] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 347.165782][ T7785] lock_acquire+0x1d1/0x380 [ 347.170787][ T7785] __mutex_lock+0x1a4/0x1bd0 [ 347.175876][ T7785] rfcomm_security_cfm+0x3f/0x4b0 [ 347.181395][ T7785] hci_encrypt_cfm+0x18e/0x740 [ 347.186657][ T7785] hci_encrypt_change_evt+0x92c/0xfb0 [ 347.192527][ T7785] hci_event_packet+0x8e9/0xcd0 [ 347.197874][ T7785] hci_rx_work+0x451/0xfc0 [ 347.202793][ T7785] process_one_work+0xac7/0x1b10 [ 347.208232][ T7785] worker_thread+0x5ef/0xe50 [ 347.213313][ T7785] kthread+0x373/0x450 [ 347.217878][ T7785] ret_from_fork+0x730/0xd60 [ 347.222960][ T7785] ret_from_fork_asm+0x1a/0x30 [ 347.228236][ T7785] [ 347.228236][ T7785] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 347.235939][ T7785] lock_acquire+0x1d1/0x380 [ 347.240939][ T7785] __mutex_lock+0x1a4/0x1bd0 [ 347.246027][ T7785] hci_remote_features_evt+0x485/0x9b0 [ 347.251980][ T7785] hci_event_packet+0x8e9/0xcd0 [ 347.257344][ T7785] hci_rx_work+0x451/0xfc0 [ 347.262254][ T7785] process_one_work+0xac7/0x1b10 [ 347.267690][ T7785] worker_thread+0x5ef/0xe50 [ 347.272770][ T7785] kthread+0x373/0x450 [ 347.277355][ T7785] ret_from_fork+0x730/0xd60 [ 347.282440][ T7785] ret_from_fork_asm+0x1a/0x30 [ 347.287695][ T7785] [ 347.287695][ T7785] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 347.294958][ T7785] check_prev_add+0xeb/0xe60 [ 347.300043][ T7785] __lock_acquire+0x1528/0x1f40 [ 347.305384][ T7785] lock_acquire+0x1d1/0x380 [ 347.310381][ T7785] __mutex_lock+0x1a4/0x1bd0 [ 347.315508][ T7785] l2cap_chan_connect+0xac/0x2110 [ 347.321032][ T7785] l2cap_sock_connect+0x37a/0x770 [ 347.326550][ T7785] kernel_connect+0x107/0x160 [ 347.331723][ T7785] rfcomm_dlc_open+0x838/0xac0 [ 347.336992][ T7785] rfcomm_sock_connect+0x42c/0x690 [ 347.342611][ T7785] __sys_connect_file+0x146/0x1a0 [ 347.348131][ T7785] __sys_connect+0x141/0x170 [ 347.353214][ T7785] __x64_sys_connect+0x72/0xb0 [ 347.358472][ T7785] do_syscall_64+0x123/0x790 [ 347.363556][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.369941][ T7785] [ 347.369941][ T7785] other info that might help us debug this: [ 347.369941][ T7785] [ 347.380153][ T7785] Chain exists of: [ 347.380153][ T7785] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 347.380153][ T7785] [ 347.392628][ T7785] Possible unsafe locking scenario: [ 347.392628][ T7785] [ 347.400046][ T7785] CPU0 CPU1 [ 347.405384][ T7785] ---- ---- [ 347.410717][ T7785] lock(rfcomm_mutex); [ 347.414843][ T7785] lock(hci_cb_list_lock); [ 347.421834][ T7785] lock(rfcomm_mutex); [ 347.428480][ T7785] lock(&hdev->lock); [ 347.432518][ T7785] [ 347.432518][ T7785] *** DEADLOCK *** [ 347.432518][ T7785] [ 347.440641][ T7785] locks held by syz.2.454/7785: 1, last CPU#0: [ 347.446763][ T7785] #0: ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 347.456039][ T7785] [ 347.456039][ T7785] stack backtrace: [ 347.461901][ T7785] CPU: 0 UID: 0 PID: 7785 Comm: syz.2.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.472630][ T7785] Tainted: [L]=SOFTLOCKUP [ 347.476938][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 347.486975][ T7785] Call Trace: [ 347.490232][ T7785] [ 347.493137][ T7785] dump_stack_lvl+0x100/0x190 [ 347.497791][ T7785] print_circular_bug.cold+0x178/0x1be [ 347.503231][ T7785] check_noncircular+0x146/0x160 [ 347.508146][ T7785] check_prev_add+0xeb/0xe60 [ 347.512707][ T7785] __lock_acquire+0x1528/0x1f40 [ 347.517548][ T7785] lock_acquire+0x1d1/0x380 [ 347.522022][ T7785] ? l2cap_chan_connect+0xac/0x2110 [ 347.527199][ T7785] ? __pfx___might_resched+0x10/0x10 [ 347.532457][ T7785] __mutex_lock+0x1a4/0x1bd0 [ 347.537023][ T7785] ? l2cap_chan_connect+0xac/0x2110 [ 347.542196][ T7785] ? l2cap_chan_connect+0xac/0x2110 [ 347.547368][ T7785] ? hci_get_route+0x368/0x520 [ 347.552106][ T7785] ? hci_get_route+0x368/0x520 [ 347.556862][ T7785] ? __pfx___mutex_lock+0x10/0x10 [ 347.561859][ T7785] ? _raw_read_unlock+0x28/0x50 [ 347.566682][ T7785] ? hci_get_route+0x368/0x520 [ 347.571423][ T7785] ? __pfx_hci_get_route+0x10/0x10 [ 347.576511][ T7785] ? reacquire_held_locks+0xdd/0x1f0 [ 347.581771][ T7785] ? release_sock+0x21/0x280 [ 347.586344][ T7785] ? l2cap_chan_connect+0xac/0x2110 [ 347.591518][ T7785] l2cap_chan_connect+0xac/0x2110 [ 347.596521][ T7785] ? __local_bh_enable_ip+0xa5/0x120 [ 347.601780][ T7785] l2cap_sock_connect+0x37a/0x770 [ 347.606779][ T7785] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 347.612315][ T7785] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 347.618092][ T7785] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 347.623870][ T7785] kernel_connect+0x107/0x160 [ 347.628529][ T7785] ? __pfx_kernel_connect+0x10/0x10 [ 347.633704][ T7785] ? timer_init_key+0x150/0x310 [ 347.638534][ T7785] rfcomm_dlc_open+0x838/0xac0 [ 347.643273][ T7785] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 347.648531][ T7785] ? rfcomm_sock_connect+0x3e8/0x690 [ 347.653790][ T7785] ? find_held_lock+0x2b/0x80 [ 347.658446][ T7785] ? rfcomm_sock_connect+0x3e8/0x690 [ 347.663705][ T7785] ? __local_bh_enable_ip+0xa5/0x120 [ 347.668977][ T7785] rfcomm_sock_connect+0x42c/0x690 [ 347.674148][ T7785] __sys_connect_file+0x146/0x1a0 [ 347.679147][ T7785] __sys_connect+0x141/0x170 [ 347.683709][ T7785] ? __pfx___sys_connect+0x10/0x10 [ 347.688798][ T7785] __x64_sys_connect+0x72/0xb0 [ 347.693535][ T7785] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.698704][ T7785] do_syscall_64+0x123/0x790 [ 347.703267][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.709130][ T7785] RIP: 0033:0x7f795179e159 [ 347.713518][ T7785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.733107][ T7785] RSP: 002b:00007f79526eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 347.741506][ T7785] RAX: ffffffffffffffda RBX: 00007f7951a26180 RCX: 00007f795179e159 [ 347.749458][ T7785] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000004 [ 347.757425][ T7785] RBP: 00007f795183506b R08: 0000000000000000 R09: 0000000000000000 [ 347.765372][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.773320][ T7785] R13: 00007f7951a26218 R14: 00007f7951a26180 R15: 00007ffe20d17c48 [ 347.781277][ T7785] [ 347.870035][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 348.027792][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.099327][ T31] audit: type=1400 audit(1791174344.831:642): avc: denied { write } for pid=7759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.157501][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.187509][ T31] audit: type=1400 audit(1791174344.921:643): avc: denied { shutdown } for pid=7773 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.294503][ T5600] Bluetooth: hci1: command tx timeout [ 348.829458][ T31] audit: type=1400 audit(1791174345.561:644): avc: denied { write } for pid=7793 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.189198][ T43] bridge_slave_1: left allmulticast mode [ 349.189341][ T43] bridge_slave_1: left promiscuous mode [ 349.189681][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.250225][ T43] bridge_slave_0: left allmulticast mode [ 349.250368][ T43] bridge_slave_0: left promiscuous mode [ 349.250702][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.894052][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.923786][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.960437][ T43] bond0 (unregistering): Released all slaves [ 351.149542][ T7789] bridge0: port 3(syz_tun) entered disabled state [ 351.210334][ T7789] syz_tun (unregistering): left allmulticast mode [ 351.210479][ T7789] syz_tun (unregistering): left promiscuous mode [ 351.210630][ T7789] bridge0: port 3(syz_tun) entered disabled state [ 351.382298][ T43] tipc: Left network mode [ 351.587673][ T43] hsr_slave_0: left promiscuous mode [ 351.588281][ T43] hsr_slave_1: left promiscuous mode [ 351.588968][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.589041][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.668359][ T43] veth1_macvtap: left promiscuous mode [ 351.668577][ T43] veth0_macvtap: left promiscuous mode [ 351.668984][ T43] veth1_vlan: left promiscuous mode [ 351.669511][ T43] veth0_vlan: left promiscuous mode [ 353.235840][ T31] audit: type=1400 audit(1791174349.971:645): avc: denied { write } for pid=7796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.593776][ T43] team0 (unregistering): Port device team_slave_1 removed [ 353.795610][ T43] team0 (unregistering): Port device team_slave_0 removed [ 353.824432][ T31] audit: type=1400 audit(1791174350.561:646): avc: denied { write } for pid=7807 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.088373][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 355.594608][ T43] IPVS: stop unused estimator thread 0... [ 355.737772][ T43] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 51542 - 0 [ 355.824929][ T43] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 51542 - 0 [ 355.971084][ T43] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 51542 - 0 [ 356.050913][ T43] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 51542 - 0 [ 356.235222][ T31] audit: type=1400 audit(1791174352.971:647): avc: denied { write } for pid=7810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.469393][ T31] audit: type=1400 audit(1791174353.201:648): avc: denied { write } for pid=7823 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.654322][ T43] bridge_slave_1: left allmulticast mode [ 356.654464][ T43] bridge_slave_1: left promiscuous mode [ 356.654790][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.683919][ T43] bridge_slave_0: left allmulticast mode [ 356.684061][ T43] bridge_slave_0: left promiscuous mode [ 356.684384][ T43] bridge0: port 1(bridge_slave_0) entered disabled state