last executing test programs: 5.612835939s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="001c86dd2000100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) close(r5) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000005c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000680)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x90, 0x0, 0x0, {0x6, 0x1, 0x8, 0xfa0, 0x2, 0xfffffffc, {0x8000, 0x0, 0x0, 0x91, 0x22, 0xf7fe, 0xffffffff, 0x0, 0xfffffff7, 0x6000, 0x1, 0x0, 0x0, 0x0, 0xeffff8a7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002880)={'syzkaller0\x00', @random='\x00\a\x00'}) 5.60096757s ago: executing program 0 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010329bdf000fcdadf25240000001800018014ab6432dd62d2885109cc47ffb7ac597b0002007665746831000000000000000000000012e55ef76c98ba049af59315bf3708d4c6896dfce517e7b01a2d44deb5530ad9e54c67b5fab398d305a86969cba606dfab78e27290f194b8f1103b090505f0162761f5a0aeb7834a"], 0x2c}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"b9fcf882f0cbfbc05e7743e898bdfe1f1c266637a2f28e5d05c48a82043a02c947938373fd9c71e102390f6999535c22a1d85a546cc6666e66e3a7d4a048df089e4510d29d61e062771138e37ad29102f5691288cd253a834605bd55a6670f046d9830a7362b57bc0fc087656223a3e61cabdf22e487c7a46bcd2e2847ac5196cc8a1431b5d98d33e9d08884fcb9ee17745eaad69e1ed37dc97f10f6c7480250847598564fa547220e1baffde8e523bb42f52bc0cbc14bd82589a3744248f11698e91fbb880e548652e00343b5b9b73dea3780db20c1a699a06b9c5a17231829c82888d9b31352b3a16ea2755e83172ebf6f29874ec54aeb8f40f5db0c0225fcafe80e6a04778ed356932a72685c7a90de3acbff8aa3a9b4c7435f9420bc75fc4abc479f540a7dcad5df28406ee1cd11224c5bd6445ccd724be22fde9b3c250c97435bfa4b0a422104025ab2c7d6145f23725435ab281ce03e139cfd6757d0366bdd967b7befdc22cf6a69c82bc8e25327ecdabd664103cedcf1613642a79bf6d6c4c703e1c098836790c456ff5b2100001c6bf4baf69c53d9e51681ea5f9d30098e50fd8177c77708444c61519ebc155e4f56aa0c53cebcd53280a68f2cb9289ef8efd10ebb8bc597d0889f99a315b2364fd5aa092f73a813f67c2fbd5e1467dad9c8d93c910eca0e38750769e7fb745d1a00e0d55a375bb461c3a95038aaae42432784335f36a7d159dd8de6eba5187ad0300002272c9fe60335d2ccba193d70158b458e3987884136f79ac68a2da4604d2413b20351aeefb46c7eda2c76f291a6571279c8d20efc57f2cefa0e1cc460d2f6b06fd15d838f7b9be2cb0e6e9c196187e95b0ae200b37119ef8b8b4e04d27c7831c55a1375d3a37a24d1862d51ba0b93af5eae200c6d220234d3a388fd6de8fdaa7db4529a79d1a24c242495a4b01dd9c09b2206a0c07216bddac6617c82329a8a60a51baf94b4246f46d866607c2c7e7ef1b9a565895f46b25b68b9ec116e8073cdc7aaa23af67a5f3eb876927bb55fab725231c32c908fd27e63263675f589c6c222b5ca0c036435d22b32d39ae7bd75231d4c4df49e817e325e8deb7d22466b39ec17009209dab8aeae923eb8e56c8b17264055670f8b0e85e00dcdc80000000000000047b1607ee88bd51833a142ff20b4294e5dd7c3d6835168f525d8352b6815f0e43a029de8e8cda24737c92f71404d0b2883191f45969252cd30301efce6a6c6299f087b97ba616b764541854643e7a66f4c18ff48971d685c2f5647b9bbf5f17c07b92c4555d89ce3b035bf110aa126a6d024f9be2c623832a21875c8a0d18ee4363bee0599dae621c207f51c6db3d7e5ce6419e437292c8d4d56e9e4c0f4878256eb95885af65e90b1d9716133664b113200"}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d6, 0x32}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x7}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.358605975s ago: executing program 1 (id=6): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) futex(0x0, 0xd, 0x1, &(0x7f0000000080), 0x0, 0x2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="20f63886029ad83b7d3f0be38ad71ad7dd7160fa81cb1378f833dfa5a0c8f03ff58ae7cea31d5e3c388946028964f24a4a33e20257f02db73190ed2b782f3b5b5be8c48c1b663f01713ae3e4b148866e01779a9c3f1d4d3c60c3214b09dad0896eb499f9dfcfbcafa86f2c4a6deaf408b759230e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0xff, 0x458, 0x4018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x50, 0x33, "", [{{0x9, 0x4, 0x0, 0x5f, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0xb67}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x1, 0xdb}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x4, 0x6}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x6, 0x7f, 0x7, 0x20, 0x2}, 0x27, &(0x7f0000000300)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x9, 0x7ff}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x6, 0xf, 0x0, [0x3f00, 0x3f3f]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x5, 0x100}]}, 0x8, [{0x4f, &(0x7f00000008c0)=ANY=[@ANYBLOB="4f74d09e9ea275cdd6a61a11b094033f7a41ee0e6219c72883afd2282b592ae3a7452714d7ae976eb79699e5c6cd6a0a82491aa6c228c39b479a17d97125c28cfff64acc0fa2b9f23abc49b0ce0506a8e6f70a70ddea7fd68929e86f0f8ac75ad9a03300ad32362c5269e97b517a9ff2bdc9cbcd18525603cfa9ab9422ddd65e4df7f8da3b44f5c20863210019b7e5bea9927c94fe77f02778477ba1a4d46cb7a75144d2b468ed665ffb1a609667b269046f1f135565fc55ffd641ade37883d957a74dc9b53c3b2e73000000005b5060e02f51afcc1034f490190d0a2fa3f4ee6a371dfa811680a37f377ea0fc8fd1b1eff11ccdab9871ae742f5663a8a90efc538722af4b400df89a8a486c"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c02}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x180a}}]}) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="002e2e0000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="20163c000000b98ca93082b23317e37f5de148d81c27132954c60cb3aaee612ae2e80d0000c8e79f24fe851ccc8d2df9062eca60d6a6ec039965c1cb603d0e0fe4a21eb57aed1e597b1ecb8e04461f05a2f92cabd0574f3e2d66963ba9eb82c895191c69bea7072270b8513f68720155bec74b463c7461cf1c07789cbd591fa1aeabb8fbbc0c2877544a3797a4e3634a1734caededd6c755ade8425442355f18554a23a08e88af205900ea1e7a28d4b0887a85ab06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.296447621s ago: executing program 0 (id=7): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40302e0000002e0993358c470cab061447f99c050000", @ANYRES8], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac2(0x0, 0x92, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500200000040cc17151940000102030109028000030107d008080b00010100200f0904000000010120000924010a00042000030b24060404070047050c000c2403010000090204"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 2.225267553s ago: executing program 0 (id=8): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x82000000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.224920093s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) clock_adjtime(0x41, &(0x7f00000002c0)={0x800, 0xffff, 0x4, 0x100000001, 0x9, 0xfffffffffffffffd, 0xf, 0x4, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x8000, 0x4, 0x9, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x6, 0x7, 0x2, 0x10000, 0x4}) io_setup(0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000100)={0x9, 0x6, 0xfffffffffffffffa, 0x1, 0x5, 0x1, 0x9, 0x1}, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f00000001c0), 0xb375) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='30', 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) unshare(0x40000000) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f00000000c0)={0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) (async) clock_adjtime(0x41, &(0x7f00000002c0)={0x800, 0xffff, 0x4, 0x100000001, 0x9, 0xfffffffffffffffd, 0xf, 0x4, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x8000, 0x4, 0x9, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x6, 0x7, 0x2, 0x10000, 0x4}) (async) io_setup(0x5, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) select(0x40, &(0x7f0000000100)={0x9, 0x6, 0xfffffffffffffffa, 0x1, 0x5, 0x1, 0x9, 0x1}, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) fcntl$dupfd(r0, 0x406, r0) (async) write$cgroup_pid(r1, &(0x7f00000001c0), 0xb375) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r2, &(0x7f0000000280)='30', 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) (async) unshare(0x40000000) (async) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f00000000c0)={0x0, 0x7}) (async) 1.845235312s ago: executing program 1 (id=10): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d000500070012000000050019"], 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921080800012201000905810377"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) truncate(0x0, 0xa75) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xce, 0x0, 0x80000003}]}) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8080) 1.844929912s ago: executing program 3 (id=4): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x9000, &(0x7f0000000180)={0x0, 0x87, 0x100000}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.319223206s ago: executing program 0 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="14400000", @ANYRES16=r1, @ANYBLOB="110428bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x40010) 1.318813136s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='100', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x5, [{0x3, 0x7ff}, {0x3, 0x1}, {0x42, 0x8001}, {0x3, 0x800}, {0xfffffffe, 0x3}]}}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) ppoll(&(0x7f0000000300)=[{r0, 0x453a}, {r3, 0x2042}], 0x2, 0x0, 0x0, 0x0) 1.208071817s ago: executing program 0 (id=12): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0xfffffffffffffe15}], 0x1}, 0x0) 1.206376927s ago: executing program 3 (id=4): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x9000, &(0x7f0000000180)={0x0, 0x87, 0x100000}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.092013439s ago: executing program 0 (id=13): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[], 0x9e) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x92, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) mount$incfs(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x180d00a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xffff}}, 0x14}}, 0x810) chdir(&(0x7f0000000200)='./bus\x00') r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3e, &(0x7f0000000380)={0x200000000000001}, 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 1.091742769s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='100', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x5, [{0x3, 0x7ff}, {0x3, 0x1}, {0x42, 0x8001}, {0x3, 0x800}, {0xfffffffe, 0x3}]}}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) ppoll(&(0x7f0000000300)=[{r0, 0x453a}, {r3, 0x2042}], 0x2, 0x0, 0x0, 0x0) 937.872344ms ago: executing program 3 (id=4): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x9000, &(0x7f0000000180)={0x0, 0x87, 0x100000}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 813.804317ms ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='100', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x5, [{0x3, 0x7ff}, {0x3, 0x1}, {0x42, 0x8001}, {0x3, 0x800}, {0xfffffffe, 0x3}]}}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) ppoll(&(0x7f0000000300)=[{r0, 0x453a}, {r3, 0x2042}], 0x2, 0x0, 0x0, 0x0) 683.26418ms ago: executing program 3 (id=4): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x9000, &(0x7f0000000180)={0x0, 0x87, 0x100000}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 507.769378ms ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='100', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x5, [{0x3, 0x7ff}, {0x3, 0x1}, {0x42, 0x8001}, {0x3, 0x800}, {0xfffffffe, 0x3}]}}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) ppoll(&(0x7f0000000300)=[{r0, 0x453a}, {r3, 0x2042}], 0x2, 0x0, 0x0, 0x0) 381.775791ms ago: executing program 3 (id=4): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x9000, &(0x7f0000000180)={0x0, 0x87, 0x100000}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 267.516663ms ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='100', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x5, [{0x3, 0x7ff}, {0x3, 0x1}, {0x42, 0x8001}, {0x3, 0x800}, {0xfffffffe, 0x3}]}}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) ppoll(&(0x7f0000000300)=[{r0, 0x453a}, {r3, 0x2042}], 0x2, 0x0, 0x0, 0x0) 145.222605ms ago: executing program 3 (id=4): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x9000, &(0x7f0000000180)={0x0, 0x87, 0x100000}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000001000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='100', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x5, [{0x3, 0x7ff}, {0x3, 0x1}, {0x42, 0x8001}, {0x3, 0x800}, {0xfffffffe, 0x3}]}}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) ppoll(&(0x7f0000000300)=[{r0, 0x453a}, {r3, 0x2042}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 19.413525][ T36] audit: type=1400 audit(1793089648.270:64): avc: denied { mounton } for pid=259 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.416515][ T259] cgroup: Unknown subsys name 'net' [ 19.436336][ T36] audit: type=1400 audit(1793089648.270:65): avc: denied { mount } for pid=259 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.463597][ T36] audit: type=1400 audit(1793089648.300:66): avc: denied { unmount } for pid=259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.464136][ T259] cgroup: Unknown subsys name 'devices' [ 19.601987][ T259] cgroup: Unknown subsys name 'hugetlb' [ 19.607613][ T259] cgroup: Unknown subsys name 'rlimit' [ 19.722409][ T36] audit: type=1400 audit(1793089648.580:67): avc: denied { setattr } for pid=259 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.745674][ T36] audit: type=1400 audit(1793089648.580:68): avc: denied { mounton } for pid=259 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.770569][ T36] audit: type=1400 audit(1793089648.580:69): avc: denied { mount } for pid=259 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.780599][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.802890][ T36] audit: type=1400 audit(1793089648.660:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.828386][ T36] audit: type=1400 audit(1793089648.660:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.833047][ T259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.854347][ T36] audit: type=1400 audit(1793089648.690:72): avc: denied { read } for pid=259 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.888201][ T36] audit: type=1400 audit(1793089648.690:73): avc: denied { open } for pid=259 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.975630][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.982860][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.990253][ T296] bridge_slave_0: entered allmulticast mode [ 20.996447][ T296] bridge_slave_0: entered promiscuous mode [ 21.003037][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.010157][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.017214][ T296] bridge_slave_1: entered allmulticast mode [ 21.023509][ T296] bridge_slave_1: entered promiscuous mode [ 21.065114][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.072188][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.079238][ T297] bridge_slave_0: entered allmulticast mode [ 21.085494][ T297] bridge_slave_0: entered promiscuous mode [ 21.103745][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.110823][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.117881][ T295] bridge_slave_0: entered allmulticast mode [ 21.124328][ T295] bridge_slave_0: entered promiscuous mode [ 21.130556][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.137601][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.144722][ T297] bridge_slave_1: entered allmulticast mode [ 21.150948][ T297] bridge_slave_1: entered promiscuous mode [ 21.166759][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.174048][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.181146][ T295] bridge_slave_1: entered allmulticast mode [ 21.187331][ T295] bridge_slave_1: entered promiscuous mode [ 21.193369][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.200416][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.207457][ T294] bridge_slave_0: entered allmulticast mode [ 21.213877][ T294] bridge_slave_0: entered promiscuous mode [ 21.220312][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.227353][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.234438][ T294] bridge_slave_1: entered allmulticast mode [ 21.240690][ T294] bridge_slave_1: entered promiscuous mode [ 21.372444][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.379482][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.386840][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.393898][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.406090][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.413186][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.420488][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.427512][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.439370][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.446426][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.453674][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.460710][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.476571][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.483627][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.490922][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.497954][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.523576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.531147][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.538295][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.546011][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.553238][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.560624][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.567770][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.575083][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.591406][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.598447][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.611713][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.618757][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.641883][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.648926][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.656980][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.664056][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.696381][ T296] veth0_vlan: entered promiscuous mode [ 21.705053][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.712133][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.729025][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.736130][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.743873][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.750934][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.758531][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.765602][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.778731][ T296] veth1_macvtap: entered promiscuous mode [ 21.807611][ T297] veth0_vlan: entered promiscuous mode [ 21.825891][ T295] veth0_vlan: entered promiscuous mode [ 21.835603][ T294] veth0_vlan: entered promiscuous mode [ 21.848053][ T297] veth1_macvtap: entered promiscuous mode [ 21.860739][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 21.894024][ T295] veth1_macvtap: entered promiscuous mode [ 21.900892][ T313] ======================================================= [ 21.900892][ T313] WARNING: The mand mount option has been deprecated and [ 21.900892][ T313] and is ignored by this kernel. Remove the mand [ 21.900892][ T313] option from the mount to silence this warning. [ 21.900892][ T313] ======================================================= [ 21.938450][ T294] veth1_macvtap: entered promiscuous mode [ 21.988366][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.031316][ T317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5'. [ 22.130358][ T46] bridge_slave_1: left allmulticast mode [ 22.140295][ T46] bridge_slave_1: left promiscuous mode [ 22.145967][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.170126][ T46] bridge_slave_0: left allmulticast mode [ 22.175795][ T46] bridge_slave_0: left promiscuous mode [ 22.189415][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.390719][ T46] veth1_macvtap: left promiscuous mode [ 22.396270][ T46] veth0_vlan: left promiscuous mode [ 22.489636][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.499626][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 22.639845][ T45] usb 1-1: device descriptor read/64, error -71 [ 22.670639][ T31] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 22.678838][ T31] usb 2-1: config 1 has no interface number 0 [ 22.686978][ T311] bridge_slave_1: left allmulticast mode [ 22.693175][ T311] bridge_slave_1: left promiscuous mode [ 22.695324][ T31] usb 2-1: config 1 interface 105 has no altsetting 0 [ 22.698910][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.717139][ T31] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 22.726288][ T31] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 22.735022][ T311] bridge_slave_0: left allmulticast mode [ 22.746498][ T31] usb 2-1: Product: syz [ 22.749623][ T311] bridge_slave_0: left promiscuous mode [ 22.750754][ T31] usb 2-1: Manufacturer: syz [ 22.756538][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.776516][ T31] usb 2-1: SerialNumber: syz [ 22.909903][ T45] usb 1-1: device descriptor read/64, error -71 [ 22.939664][ T311] veth1_macvtap: left promiscuous mode [ 22.950005][ T311] veth0_vlan: left promiscuous mode [ 23.160675][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.289609][ T45] usb 1-1: device descriptor read/64, error -71 [ 23.396607][ T31] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 23.413150][ T31] aqc111 2-1:1.105: probe with driver aqc111 failed with error -61 [ 23.559645][ T45] usb 1-1: device descriptor read/64, error -71 [ 23.610786][ T325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.620001][ T325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.679901][ T45] usb usb1-port1: attempt power cycle [ 24.019681][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 24.040964][ T45] usb 1-1: device descriptor read/8, error -71 [ 24.180674][ T45] usb 1-1: device descriptor read/8, error -71 [ 24.449641][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 24.470680][ T45] usb 1-1: device descriptor read/8, error -71 [ 24.610707][ T45] usb 1-1: device descriptor read/8, error -71 [ 24.720113][ T45] usb usb1-port1: unable to enumerate USB device [ 25.233123][ T45] usb 2-1: USB disconnect, device number 2 [ 25.352360][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 25.352375][ T36] audit: type=1400 audit(1793089654.210:115): avc: denied { read } for pid=391 comm="syz.0.8" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 25.390369][ T392] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.390869][ T36] audit: type=1400 audit(1793089654.250:116): avc: denied { create } for pid=390 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.474139][ T392] FAULT_INJECTION: forcing a failure. [ 25.474139][ T392] name failslab, interval 1, probability 0, space 0, times 1 [ 25.476240][ T36] audit: type=1400 audit(1793089654.330:117): avc: denied { bind } for pid=390 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.487390][ T392] CPU: 1 UID: 0 PID: 392 Comm: syz.1.9 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 25.487458][ T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.487501][ T392] Call Trace: [ 25.487513][ T392] [ 25.487530][ T392] __dump_stack+0x21/0x30 [ 25.487615][ T392] dump_stack_lvl+0x140/0x1c0 [ 25.487695][ T392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.487766][ T392] dump_stack+0x19/0x20 [ 25.487828][ T392] should_fail_ex+0x3c2/0x510 [ 25.487879][ T392] should_failslab+0xac/0x100 [ 25.487923][ T392] kmem_cache_alloc_noprof+0x42/0x410 [ 25.487979][ T392] ? security_inode_alloc+0x51/0x230 [ 25.488031][ T392] security_inode_alloc+0x51/0x230 [ 25.488089][ T392] inode_init_always_gfp+0x756/0x9e0 [ 25.488129][ T392] alloc_inode+0xc5/0x270 [ 25.488174][ T392] new_inode_pseudo+0x19/0x40 [ 25.488220][ T392] path_from_stashed+0x208/0x860 [ 25.488284][ T392] ? __kasan_check_write+0x18/0x20 [ 25.488367][ T392] ? __kasan_check_write+0x18/0x20 [ 25.488432][ T392] ? __cfi_path_from_stashed+0x10/0x10 [ 25.488486][ T392] ? _raw_spin_unlock+0x45/0x60 [ 25.488537][ T392] ns_get_path+0x7a/0xa0 [ 25.488579][ T392] proc_ns_get_link+0xfb/0x220 [ 25.488639][ T392] ? __cfi_proc_ns_get_link+0x10/0x10 [ 25.488692][ T392] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 25.488762][ T392] ? security_inode_follow_link+0x7e/0x180 [ 25.488815][ T392] ? __cfi_proc_ns_get_link+0x10/0x10 [ 25.488867][ T392] pick_link+0x673/0xe80 [ 25.488928][ T392] step_into+0xc33/0xf10 [ 25.488978][ T392] ? set_root+0x420/0x420 [ 25.489039][ T392] ? __kasan_check_write+0x18/0x20 [ 25.489095][ T392] path_openat+0x1a30/0x35a0 [ 25.489164][ T392] ? do_filp_open+0x440/0x440 [ 25.489218][ T392] do_filp_open+0x1f2/0x440 [ 25.489270][ T392] ? __cfi_do_filp_open+0x10/0x10 [ 25.489325][ T392] ? alloc_fd+0x4c1/0x570 [ 25.489395][ T392] do_sys_openat2+0x134/0x1d0 [ 25.489450][ T392] ? do_sys_open+0x100/0x100 [ 25.489503][ T392] __x64_sys_openat+0x13a/0x170 [ 25.489562][ T392] x64_sys_call+0xe69/0x2ee0 [ 25.489617][ T392] do_syscall_64+0x57/0xf0 [ 25.489668][ T392] ? clear_bhb_loop+0x50/0xa0 [ 25.489758][ T392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.489824][ T392] RIP: 0033:0x7f8df5f5fd8e [ 25.489867][ T392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 25.489903][ T392] RSP: 002b:00007f8df6ec0f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 25.489956][ T392] RAX: ffffffffffffffda RBX: 00007f8df6ec16c0 RCX: 00007f8df5f5fd8e [ 25.489990][ T392] RDX: 0000000000000000 RSI: 00007f8df603624e RDI: ffffffffffffff9c [ 25.490024][ T392] RBP: 00007f8df6036b20 R08: 0000000000000000 R09: 0000000000000000 [ 25.490040][ T392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.490067][ T392] R13: 00007f8df6226038 R14: 00007f8df6225fa0 R15: 00007ffdcd4f65a8 [ 25.490104][ T392] [ 25.551149][ T392] FAULT_INJECTION: forcing a failure. [ 25.551149][ T392] name fail_futex, interval 1, probability 0, space 0, times 1 [ 25.599669][ T36] audit: type=1400 audit(1793089654.330:118): avc: denied { name_bind } for pid=390 comm="syz.1.9" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 25.632442][ T392] CPU: 1 UID: 0 PID: 392 Comm: syz.1.9 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 25.632512][ T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.632544][ T392] Call Trace: [ 25.632560][ T392] [ 25.632582][ T392] __dump_stack+0x21/0x30 [ 25.632684][ T392] dump_stack_lvl+0x140/0x1c0 [ 25.632752][ T392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.632809][ T392] ? finish_task_switch+0x13d/0x8a0 [ 25.632865][ T392] dump_stack+0x19/0x20 [ 25.632922][ T392] should_fail_ex+0x3c2/0x510 [ 25.632974][ T392] should_fail+0xf/0x20 [ 25.633015][ T392] get_futex_key+0x178/0x940 [ 25.633058][ T392] ? __cfi_get_futex_key+0x10/0x10 [ 25.633097][ T392] futex_wait_setup+0xae/0x260 [ 25.633151][ T392] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 25.633200][ T392] ? __cfi_futex_wait_setup+0x10/0x10 [ 25.633254][ T392] ? __asan_memcpy+0x5a/0x80 [ 25.633315][ T392] __futex_wait+0x12c/0x3d0 [ 25.633367][ T392] ? __cfi___futex_wait+0x10/0x10 [ 25.633419][ T392] ? __cfi_futex_wake_mark+0x10/0x10 [ 25.633471][ T392] ? __kasan_check_read+0x15/0x20 [ 25.633540][ T392] ? futex_wake+0x627/0x950 [ 25.633600][ T392] futex_wait+0x128/0x7c0 [ 25.633647][ T392] ? __cfi_futex_wait+0x10/0x10 [ 25.633704][ T392] ? selinux_file_ioctl+0x732/0x1480 [ 25.633755][ T392] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 25.633811][ T392] do_futex+0x32a/0x510 [ 25.633855][ T392] ? __cfi_do_futex+0x10/0x10 [ 25.633906][ T392] __se_sys_futex+0x13c/0x320 [ 25.633967][ T392] ? __x64_sys_futex+0x110/0x110 [ 25.634022][ T392] ? __kasan_check_write+0x18/0x20 [ 25.634088][ T392] __x64_sys_futex+0xe9/0x110 [ 25.634136][ T392] x64_sys_call+0x227f/0x2ee0 [ 25.634185][ T392] do_syscall_64+0x57/0xf0 [ 25.634230][ T392] ? clear_bhb_loop+0x50/0xa0 [ 25.634291][ T392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.634352][ T392] RIP: 0033:0x7f8df5f9f559 [ 25.634389][ T392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.634424][ T392] RSP: 002b:00007f8df6ec10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 25.634474][ T392] RAX: ffffffffffffffda RBX: 00007f8df6225fa8 RCX: 00007f8df5f9f559 [ 25.634497][ T392] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8df6225fa8 [ 25.634524][ T392] RBP: 00007f8df6225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 25.634545][ T392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.634571][ T392] R13: 00007f8df6226038 R14: 00007ffdcd4f64c0 R15: 00007ffdcd4f65a8 [ 25.634609][ T392] [ 26.089009][ T36] audit: type=1400 audit(1793089654.330:119): avc: denied { node_bind } for pid=390 comm="syz.1.9" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 26.117637][ T36] audit: type=1400 audit(1793089654.330:120): avc: denied { connect } for pid=390 comm="syz.1.9" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.139870][ T36] audit: type=1400 audit(1793089654.330:121): avc: denied { write } for pid=390 comm="syz.1.9" path="socket:[3825]" dev="sockfs" ino=3825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.170672][ T36] audit: type=1400 audit(1793089654.350:122): avc: denied { create } for pid=390 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.190899][ T36] audit: type=1400 audit(1793089654.350:123): avc: denied { write } for pid=390 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.214120][ T36] audit: type=1400 audit(1793089654.350:124): avc: denied { read } for pid=390 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.370745][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.529653][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 26.536052][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.548530][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.558712][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.568549][ T31] usb 2-1: config 0 descriptor?? [ 26.574931][ T31] hub 2-1:0.0: USB hub found [ 26.749616][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 26.775173][ T31] hub 2-1:0.0: 1 port detected [ 26.933649][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 26.940160][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 26.951137][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.962195][ T45] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 26.976172][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 26.982926][ T45] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 26.992166][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.001336][ T45] usb 1-1: config 0 descriptor?? [ 27.415219][ T45] hid-multitouch 0003:1FD2:6007.0001: No inputs registered, leaving [ 27.426987][ T45] hid-multitouch 0003:1FD2:6007.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 27.444221][ T432] udevd[432]: open /dev/null failed: Not a directory SYZFAIL: mount(dev) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=3 state=3 status=67 (errno 32: Broken pipe) [ 27.593588][ T405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 27.690432][ T31] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 27.704913][ T31] usb 2-1: USB disconnect, device number 3 [ 27.713131][ T311] bridge_slave_1: left allmulticast mode [ 27.718792][ T311] bridge_slave_1: left promiscuous mode [ 27.720535][ T344] usb 1-1: USB disconnect, device number 6 [ 27.725633][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.737923][ T311] bridge_slave_0: left allmulticast mode [ 27.743703][ T311] bridge_slave_0: left promiscuous mode [ 27.749331][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.861498][ T311] veth1_macvtap: left promiscuous mode [ 27.867082][ T311] veth0_vlan: left promiscuous mode [ 28.071190][ T311] bridge_slave_1: left allmulticast mode [ 28.076842][ T311] bridge_slave_1: left promiscuous mode [ 28.082494][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.089969][ T311] bridge_slave_0: left allmulticast mode [ 28.095661][ T311] bridge_slave_0: left promiscuous mode [ 28.101421][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.201628][ T311] veth1_macvtap: left promiscuous mode [ 28.207141][ T311] veth0_vlan: left promiscuous mode