last executing test programs: 16m27.595318571s ago: executing program 1 (id=539): unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 16m15.689179395s ago: executing program 1 (id=579): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4cc05}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="000028bd7000fbdbdf25078500001800068014000400feef0b4896a232f51db83255b3284147338000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48c1) 16m15.538682309s ago: executing program 1 (id=580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x80000001, 0xfa14, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d00"], 0x5c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000780)={0x1a, 0x5, 0xe}) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d55714e5da04400100"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x200040d1) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000200)=0xab) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 16m12.127771843s ago: executing program 1 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd(0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000040)=0xffffffffffffff23) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x41) io_setup(0x25dc, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r1, &(0x7f00000002c0)="0000100030e67b23aa", 0x9, 0xffffffffffffffff}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x0, 0x10009, 0x0, 0x3, r1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="10000000", @ANYRES16=r7, @ANYBLOB="831028bd7000fcdb9f251600000018000180140002006e657464657673696d300000000000000500040001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x80) r8 = creat(0x0, 0x0) syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000880)=""/4086, 0xff6}], 0x2, &(0x7f0000000640)=""/150, 0x96}, 0x40000000) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r8, @ANYRES8=r8, @ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="d7d04f84a00514b50db2772482b834fbc84391d14f23e657f748a2d6558d95a75cb9e30f87c5dcc76ecfdfdc946f764f554e5c9ecacb1fdd6a9152f65904a9a4553804018b7798b011de757b23de0d4704105a7edc3458f38341584bd2ad4fd18cfa1a8d95bf73dd70b62d49784bf19dd34c8fce8c2fcb1531eb40e797e108e97abb4366724db5c66493d625719eb21ee777f76c1d1a5239a503275e2fb17be1d886", @ANYRESHEX=r5], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x18}, 0x20) 16m10.735041119s ago: executing program 1 (id=594): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) pread64(r0, 0x0, 0x0, 0x2) 16m8.569349884s ago: executing program 1 (id=614): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r8, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010003904000000000000004000000000", @ANYRES32=r4, @ANYBLOB="01980000000000002400128009000100697069700000000014000280050009008900000008000200ac1414bb"], 0x44}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 16m8.302120537s ago: executing program 32 (id=614): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r8, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010003904000000000000004000000000", @ANYRES32=r4, @ANYBLOB="01980000000000002400128009000100697069700000000014000280050009008900000008000200ac1414bb"], 0x44}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.365401274s ago: executing program 0 (id=5306): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/235, &(0x7f0000000100)=0xeb) 5.352094549s ago: executing program 2 (id=5307): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4.723899295s ago: executing program 2 (id=5310): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000001, 0x2172, 0xffffffffffffffff, 0xd031b000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) write$tun(0xffffffffffffffff, 0x0, 0x46) 4.723415793s ago: executing program 0 (id=5312): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000300)={0x20, 0x21, 0x95, {0x95, 0xb095cd678f97cdef, "98aab6d13e92d4cd633a76172773957a83ecb930af2ca33675a2011051bbf712545516a966cedc16fe80732b8757b02c2e8c260a03921639881fce48c585003528b07e2334d5accd5981cb9b7520838cd9408bfd088caaeae9c45a39aa5254d542bb541ebb145087325ed8f8095cd0cc68d126f9e728ac1b35e491d10b5eb0450676d285793a152e06e080817c847b0119a5a1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.57427909s ago: executing program 4 (id=5314): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000008c0)="b907ef19edfff00702000ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1=0xac14142e}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) read$eventfd(r2, &(0x7f0000001580), 0xfe8e) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4.040533091s ago: executing program 0 (id=5316): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x83) io_setup(0x82, 0x0) pread64(r0, 0x0, 0x0, 0x10000000000c0d4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 3.595108975s ago: executing program 2 (id=5320): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6fa6c04eee5c85fd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x7, 0x4, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, 0x32, 0x0, @private, @local, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}}}}}, 0x0) 2.987656989s ago: executing program 0 (id=5321): signalfd(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000980)={0x43, 0x9, 0x1, {0x10001, 0x7, 0xfffffffffffffffe, 0x8, 0x10, 0x8, 0x6, 0x34, 0xfffffffd}}, 0x43) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r0, 0x0, 0x0) 2.891423746s ago: executing program 3 (id=5322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x108) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210327697000fcdbdf25040000000c0001800800030003"], 0x20}}, 0x4000000) 2.856563856s ago: executing program 5 (id=5323): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000140)) 2.854195551s ago: executing program 4 (id=5324): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000000)='./file0\x00', 0x8001420, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000002c40)={0x2020}, 0x2020) 2.747905321s ago: executing program 3 (id=5325): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 2.732491255s ago: executing program 5 (id=5326): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000d0ffffff0000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b706000014"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.656337815s ago: executing program 5 (id=5327): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.575739888s ago: executing program 3 (id=5328): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xd180, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x8880) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={0x0}}, 0x20000080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x68}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008040) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0x80045515, &(0x7f00000000c0)=@usbdevfs_connect={0x7}) 2.561550968s ago: executing program 5 (id=5329): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='fd/3\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x12602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r4, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendfile(r2, r2, 0x0, 0x7) writev(r2, &(0x7f0000001040), 0x0) 2.313465871s ago: executing program 2 (id=5330): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.759835236s ago: executing program 2 (id=5331): arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000004001b0000000c00228059fe008004000080060021005a76c55609fb990e75cad6f7a7f6624dd6c74fda3ba6bd200b2c38625e6e81d9fe09098272675d7d6f2f4974669007402c89f550e18f56b4737b5b6189f4b369f943da131b63d43873344e40"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) 1.759463498s ago: executing program 0 (id=5332): socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="ec", 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.624831943s ago: executing program 3 (id=5333): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_j1939(0x1d, 0x2, 0x7) socket$isdn_base(0x22, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.21261883s ago: executing program 5 (id=5334): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) 980.86779ms ago: executing program 4 (id=5335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 911.234304ms ago: executing program 3 (id=5336): unshare(0x22020600) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r0, r1) 910.255844ms ago: executing program 4 (id=5337): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="180100001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000f8001a8018000a80140007"], 0x118}}, 0x0) 815.436576ms ago: executing program 5 (id=5338): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x80800) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)='ip6gre0\x00') sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2e, 0x639ad587beb9ea67, 0x70bd25, 0x25dfdbfc, {0xb}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 811.742436ms ago: executing program 2 (id=5339): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) 805.370742ms ago: executing program 3 (id=5340): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000001540)=""/4089, 0xff9}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2a, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 783.973031ms ago: executing program 0 (id=5341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xaa1c}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x65, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xc8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a45"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9d}, {}, {}, [@map_fd={0x18, 0xa}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x9a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xb0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004280)=@newsa={0x170, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xee00}, {@in=@remote, 0x4d5, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x4}, {0xfffffffd, 0x7, 0x7fffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e21, @in=@multicast2}}, @coaddr={0x14, 0xe, @in6=@loopback}, @tfcpad={0x8, 0x16, 0x1}]}, 0x170}}, 0x40050) 756.810939ms ago: executing program 4 (id=5342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0x274, 0x12f, 0x4}) 0s ago: executing program 4 (id=5343): mprotect(&(0x7f0000146000/0x4000)=nil, 0x4000, 0x3) sched_setaffinity(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000003c0)='}\x00') syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): mand 0x0406 tx timeout [ 805.721982][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 806.410171][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 806.458033][ T5876] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 806.487877][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 806.522688][ T5876] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 806.529080][T18544] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 806.556441][ T5876] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 806.586026][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.617815][ T5876] usb 4-1: config 0 descriptor?? [ 806.854641][ T5876] hdpvr 4-1:0.0: firmware version 0x8 dated [ 807.056141][T18515] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3508'. [ 807.072561][ T5876] hdpvr 4-1:0.0: device init failed [ 807.078140][ T5876] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 807.088385][ T5876] usb 4-1: USB disconnect, device number 35 [ 807.279187][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'. [ 807.414785][T18561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3517'. [ 807.509106][T18569] netlink: 'syz.2.3520': attribute type 4 has an invalid length. [ 807.565924][T18569] netlink: 'syz.2.3520': attribute type 4 has an invalid length. [ 807.820285][T18573] netlink: 'syz.3.3522': attribute type 1 has an invalid length. [ 807.828311][ T30] audit: type=1400 audit(1772064659.908:5490): avc: denied { getopt } for pid=18572 comm="syz.3.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 808.585962][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.599347][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.964276][T18590] netlink: 'syz.3.3526': attribute type 4 has an invalid length. [ 809.006364][T18590] netlink: 'syz.3.3526': attribute type 4 has an invalid length. [ 809.329074][T18600] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3531'. [ 809.661642][T18602] overlayfs: failed to clone upperpath [ 809.686519][ T30] audit: type=1400 audit(1772064661.768:5491): avc: denied { watch } for pid=18599 comm="syz.2.3531" path="/192/bus/file1" dev="tmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 809.908033][ T30] audit: type=1400 audit(1772064661.768:5492): avc: denied { watch_sb watch_reads } for pid=18599 comm="syz.2.3531" path="/192/bus/file1" dev="tmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 811.886402][ T5924] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 812.006955][T18620] netlink: 'syz.2.3535': attribute type 11 has an invalid length. [ 812.032778][ T6716] libceph: connect (1)[b::]:6789 error -101 [ 812.038838][ T5924] usb 5-1: Invalid ep0 maxpacket: 32 [ 812.040658][ T6716] libceph: mon0 (1)[b::]:6789 connect error [ 812.176423][ T5924] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 812.336398][ T5924] usb 5-1: Invalid ep0 maxpacket: 32 [ 812.337107][ T6716] libceph: connect (1)[b::]:6789 error -101 [ 812.343093][ T5924] usb usb5-port1: attempt power cycle [ 812.357312][ T6716] libceph: mon0 (1)[b::]:6789 connect error [ 812.380604][T18620] ceph: No mds server is up or the cluster is laggy [ 812.757860][ T5924] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 812.829913][ T5924] usb 5-1: Invalid ep0 maxpacket: 32 [ 813.070077][ T5924] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 813.617074][ T5924] usb 5-1: Invalid ep0 maxpacket: 32 [ 813.643618][ T5924] usb usb5-port1: unable to enumerate USB device [ 813.672413][T18647] bridge_slave_0: left allmulticast mode [ 813.686527][T18647] bridge_slave_0: left promiscuous mode [ 813.707678][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.742908][T18647] bridge_slave_1: left allmulticast mode [ 813.755724][T18647] bridge_slave_1: left promiscuous mode [ 813.767370][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.847978][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 813.858516][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 813.867227][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 813.883497][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 813.891694][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 813.892141][T18647] bond0: (slave bond_slave_0): Releasing backup interface [ 813.965251][T18647] bond0: (slave bond_slave_1): Releasing backup interface [ 813.991294][T18647] team0: Port device team_slave_0 removed [ 814.020507][T18647] team0: Port device team_slave_1 removed [ 814.033641][T18647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.047092][T18647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.062837][T18647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.072801][T18647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.085260][T18647] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 814.110387][T18648] team0: Mode changed to "broadcast" [ 814.408923][T18649] chnl_net:caif_netlink_parms(): no params data found [ 814.499487][ T30] audit: type=1400 audit(1772064666.598:5493): avc: denied { connect } for pid=18656 comm="syz.3.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 814.543553][T18649] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.552771][T18649] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.560512][T18649] bridge_slave_0: entered allmulticast mode [ 814.568617][T18649] bridge_slave_0: entered promiscuous mode [ 814.593788][T18649] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.607334][T18649] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.618227][T18649] bridge_slave_1: entered allmulticast mode [ 814.630278][T18649] bridge_slave_1: entered promiscuous mode [ 814.735972][T18649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.749174][ T77] bridge_slave_1: left allmulticast mode [ 814.758986][ T77] bridge_slave_1: left promiscuous mode [ 814.768967][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.778966][ T77] bridge_slave_0: left allmulticast mode [ 814.788177][ T77] bridge_slave_0: left promiscuous mode [ 814.798601][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.809961][T18671] 9p: Bad value for 'rfdno' [ 815.181858][ T77] dvmrp1 (unregistering): left allmulticast mode [ 815.422737][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.434798][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.453360][ T77] bond0 (unregistering): Released all slaves [ 815.475480][ T77] bond1 (unregistering): Released all slaves [ 815.525601][T18670] netlink: 'syz.4.3551': attribute type 12 has an invalid length. [ 815.535987][T18649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.890911][T18649] team0: Port device team_slave_0 added [ 815.958152][T18649] team0: Port device team_slave_1 added [ 816.022299][ T5823] Bluetooth: hci1: command tx timeout [ 816.092457][T18649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.100780][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.136588][T18649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.171086][T18649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.178426][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.255266][T18649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.585425][ T77] hsr_slave_0: left promiscuous mode [ 816.612489][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.644234][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.673255][ T77] batman_adv: batadv0: Removing interface: dummy0 [ 816.878624][ T5876] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 816.905860][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'. [ 816.971736][ T77] team0 (unregistering): Port device team_slave_1 removed [ 817.001923][ T77] team0 (unregistering): Port device team_slave_0 removed [ 817.065112][ T5876] usb 5-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 817.098389][ T6716] libceph: connect (1)[c::]:6789 error -101 [ 817.112246][ T6716] libceph: mon0 (1)[c::]:6789 connect error [ 817.158821][ T5876] usb 5-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 817.158857][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.158883][ T5876] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 817.158898][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.198677][ T5876] usb 5-1: config 0 descriptor?? [ 817.199222][T18702] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 817.298703][T18649] hsr_slave_0: entered promiscuous mode [ 817.303930][T18649] hsr_slave_1: entered promiscuous mode [ 817.410093][T18702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.410955][T18702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.438769][ T6715] libceph: connect (1)[c::]:6789 error -101 [ 817.438979][ T6715] libceph: mon0 (1)[c::]:6789 connect error [ 817.558226][T18719] ceph: No mds server is up or the cluster is laggy [ 817.871261][ T77] IPVS: stop unused estimator thread 0... [ 818.077200][ T5823] Bluetooth: hci1: command tx timeout [ 819.195128][ T5876] usbhid 5-1:0.0: can't add hid device: -71 [ 819.223056][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 819.295193][ T5876] usb 5-1: USB disconnect, device number 38 [ 819.547115][T18763] dummy0: entered allmulticast mode [ 819.711262][T18769] lo speed is unknown, defaulting to 1000 [ 819.717195][T18769] lo speed is unknown, defaulting to 1000 [ 819.723422][T18769] lo speed is unknown, defaulting to 1000 [ 819.733629][T18769] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 819.751775][T18769] lo speed is unknown, defaulting to 1000 [ 819.758450][T18769] lo speed is unknown, defaulting to 1000 [ 819.765189][T18769] lo speed is unknown, defaulting to 1000 [ 819.767294][T18761] dummy0: left allmulticast mode [ 819.808028][T18769] lo speed is unknown, defaulting to 1000 [ 819.814658][T18769] lo speed is unknown, defaulting to 1000 [ 819.832576][T18770] lo speed is unknown, defaulting to 1000 [ 820.156422][ T5823] Bluetooth: hci1: command tx timeout [ 821.138596][T18649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 821.236092][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3573'. [ 821.255496][T18649] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 821.283105][T18649] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 821.857509][T18649] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 822.566820][ T5823] Bluetooth: hci1: command tx timeout [ 822.649803][ T30] audit: type=1400 audit(1772064674.728:5494): avc: denied { setattr } for pid=18781 comm="syz.4.3576" name="NETLINK" dev="sockfs" ino=65023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 823.154890][T18649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.254196][T18649] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.283865][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.291067][ T7062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.348658][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.355828][ T7062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.698644][ T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 823.910481][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 823.932474][ T29] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 823.967753][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.984625][ T29] usb 1-1: config 0 descriptor?? [ 824.034073][ T29] as10x_usb: device has been detected [ 824.088329][ T29] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 824.328170][T18649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.342791][ T29] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 824.412643][ T29] as10x_usb: error during firmware upload part1 [ 824.426297][ T29] Registered device nBox DVB-T Dongle [ 824.442028][ T29] usb 1-1: USB disconnect, device number 19 [ 824.494186][ T29] Unregistered device nBox DVB-T Dongle [ 824.516647][ T29] as10x_usb: device has been disconnected [ 824.975187][T18649] veth0_vlan: entered promiscuous mode [ 824.990053][T18649] veth1_vlan: entered promiscuous mode [ 825.496054][T14531] libceph: connect (1)[c::]:6789 error -101 [ 825.569270][T14531] libceph: mon0 (1)[c::]:6789 connect error [ 825.602026][T18649] veth0_macvtap: entered promiscuous mode [ 825.621009][T18649] veth1_macvtap: entered promiscuous mode [ 825.659600][T18870] ceph: No mds server is up or the cluster is laggy [ 825.803312][T18649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.865089][T18649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.915419][T18882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 825.927718][T18882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3588'. [ 826.192624][T14531] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 826.312853][ T7062] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.342256][ T7062] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.445089][ T7062] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.476852][T14531] usb 4-1: Invalid ep0 maxpacket: 32 [ 826.525657][ T7062] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.606874][T14531] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 827.087594][T14531] usb 4-1: Invalid ep0 maxpacket: 32 [ 827.099345][T14531] usb usb4-port1: attempt power cycle [ 827.127779][ T7062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.157898][ T7062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.249449][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.271772][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.485965][T18922] FAULT_INJECTION: forcing a failure. [ 827.485965][T18922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.517566][T14531] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 827.536520][T18922] CPU: 0 UID: 0 PID: 18922 Comm: syz.5.3546 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.536551][T18922] Tainted: [L]=SOFTLOCKUP [ 827.536556][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 827.536565][T18922] Call Trace: [ 827.536571][T18922] [ 827.536577][T18922] dump_stack_lvl+0x100/0x190 [ 827.536611][T18922] should_fail_ex.cold+0x5/0xa [ 827.536632][T18922] _copy_from_user+0x2e/0xd0 [ 827.536658][T18922] video_usercopy+0xe71/0x1740 [ 827.536677][T18922] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 827.536703][T18922] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 827.536723][T18922] ? __pfx_video_usercopy+0x10/0x10 [ 827.536754][T18922] v4l2_ioctl+0x1bd/0x250 [ 827.536772][T18922] ? __pfx_v4l2_ioctl+0x10/0x10 [ 827.536791][T18922] __x64_sys_ioctl+0x18e/0x210 [ 827.536818][T18922] do_syscall_64+0x106/0xf80 [ 827.536834][T18922] ? clear_bhb_loop+0x40/0x90 [ 827.536855][T18922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.536872][T18922] RIP: 0033:0x7f79c8f9c629 [ 827.536886][T18922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.536902][T18922] RSP: 002b:00007f79c9e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.536917][T18922] RAX: ffffffffffffffda RBX: 00007f79c9215fa0 RCX: 00007f79c8f9c629 [ 827.536927][T18922] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 827.536937][T18922] RBP: 00007f79c9e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 827.536946][T18922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.536955][T18922] R13: 00007f79c9216038 R14: 00007f79c9215fa0 R15: 00007fffc4cdca48 [ 827.536977][T18922] [ 827.729004][T14531] usb 4-1: Invalid ep0 maxpacket: 32 [ 827.910986][T14531] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 827.937110][T14531] usb 4-1: Invalid ep0 maxpacket: 32 [ 827.942859][T14531] usb usb4-port1: unable to enumerate USB device [ 828.022679][ T30] audit: type=1400 audit(1772064680.118:5495): avc: denied { getopt } for pid=18926 comm="syz.5.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 829.725916][ T30] audit: type=1400 audit(1772064681.818:5496): avc: denied { append } for pid=18961 comm="syz.5.3609" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 829.850821][ T30] audit: type=1400 audit(1772064681.948:5497): avc: denied { setattr } for pid=18975 comm="syz.3.3612" name="TIPC" dev="sockfs" ino=65948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 830.019379][ T30] audit: type=1400 audit(1772064682.118:5498): avc: denied { name_bind } for pid=18977 comm="syz.4.3611" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 830.472538][ T30] audit: type=1400 audit(1772064682.118:5499): avc: denied { prog_load } for pid=18954 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 830.496492][ T30] audit: type=1400 audit(1772064682.118:5500): avc: denied { allowed } for pid=18954 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 830.519469][ T30] audit: type=1400 audit(1772064682.118:5501): avc: denied { create } for pid=18954 comm="syz.0.3606" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 830.667808][ T30] audit: type=1400 audit(1772064682.118:5502): avc: denied { map } for pid=18954 comm="syz.0.3606" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 830.693416][ T30] audit: type=1400 audit(1772064682.118:5503): avc: denied { read write } for pid=18954 comm="syz.0.3606" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 830.768333][ T30] audit: type=1400 audit(1772064682.198:5504): avc: denied { mount } for pid=18961 comm="syz.5.3609" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 831.102766][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3613'. [ 831.115463][T18999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3613'. [ 831.404673][ T5823] Bluetooth: hci3: link tx timeout [ 831.450952][ T5823] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 831.465819][ T5823] Bluetooth: hci3: link tx timeout [ 831.467166][T19003] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 831.471122][ T5823] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 831.477491][T19003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 831.506906][T19003] vhci_hcd vhci_hcd.0: Device attached [ 831.560163][T19005] vhci_hcd: connection closed [ 831.561652][ T3554] vhci_hcd vhci_hcd.4: stop threads [ 831.576848][T17821] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 831.585996][ T3554] vhci_hcd vhci_hcd.4: release socket [ 831.679333][ T6716] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 831.719847][ T3554] vhci_hcd vhci_hcd.4: disconnect device [ 831.766113][T17821] usb 4-1: Invalid ep0 maxpacket: 32 [ 831.806873][ T6716] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 831.822894][ T6716] usb 41-1: enqueue for inactive port 0 [ 831.896828][ T6716] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 831.959712][T17821] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 832.299243][ T792] libceph: connect (1)[b::]:6789 error -101 [ 832.309183][ T792] libceph: mon0 (1)[b::]:6789 connect error [ 832.479785][T19012] ceph: No mds server is up or the cluster is laggy [ 832.526409][T17821] usb 4-1: Invalid ep0 maxpacket: 32 [ 832.553991][T17821] usb usb4-port1: attempt power cycle [ 832.868302][ T5823] Bluetooth: hci5: Malformed Event: 0x13 [ 832.966601][T17821] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 832.987019][T17821] usb 4-1: Invalid ep0 maxpacket: 32 [ 833.129061][T14531] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 833.136915][T17821] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 833.144894][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 833.145007][ T30] audit: type=1400 audit(1772064685.188:5571): avc: denied { write } for pid=19025 comm="syz.2.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 833.208250][T17821] usb 4-1: Invalid ep0 maxpacket: 32 [ 833.216234][T17821] usb usb4-port1: unable to enumerate USB device [ 833.347628][T14531] usb 5-1: Using ep0 maxpacket: 32 [ 833.391222][T14531] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 833.408893][T14531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.437931][T14531] usb 5-1: Product: syz [ 833.451805][T14531] usb 5-1: Manufacturer: syz [ 833.467444][T14531] usb 5-1: SerialNumber: syz [ 833.487004][T14531] usb 5-1: config 0 descriptor?? [ 833.520470][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 833.523625][ T30] audit: type=1400 audit(1772064685.608:5572): avc: denied { read write } for pid=19038 comm="syz.5.3628" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 833.592450][ T30] audit: type=1400 audit(1772064685.608:5573): avc: denied { open } for pid=19038 comm="syz.5.3628" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 833.618093][ T30] audit: type=1400 audit(1772064685.668:5574): avc: denied { name_bind } for pid=19034 comm="syz.0.3627" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 833.652187][ T30] audit: type=1400 audit(1772064685.668:5575): avc: denied { node_bind } for pid=19034 comm="syz.0.3627" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 833.740780][ T30] audit: type=1400 audit(1772064685.718:5576): avc: denied { read } for pid=19038 comm="syz.5.3628" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 834.043647][ T30] audit: type=1400 audit(1772064685.718:5577): avc: denied { open } for pid=19038 comm="syz.5.3628" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 834.112438][T14531] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 834.129387][T14531] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 834.162533][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3630'. [ 834.278208][T14531] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 834.324111][T14531] usb 5-1: USB disconnect, device number 39 [ 834.353813][ T30] audit: type=1400 audit(1772064686.448:5578): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 834.459557][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 834.477293][T19057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3631'. [ 834.758278][ T30] audit: type=1400 audit(1772064686.858:5579): avc: denied { read } for pid=19055 comm="syz.5.3632" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 834.798833][T19062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=19062 comm=syz.4.3633 [ 834.823979][ T30] audit: type=1400 audit(1772064686.858:5580): avc: denied { open } for pid=19055 comm="syz.5.3632" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 835.597083][T19040] Bluetooth: hci3: command 0x0406 tx timeout [ 836.109062][T19077] ip6gre1: entered allmulticast mode [ 836.370616][T14478] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 836.467383][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 836.486910][T19092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3641'. [ 836.667613][T14531] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 836.828171][T14531] usb 4-1: Using ep0 maxpacket: 32 [ 836.840756][T14531] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 836.854341][T14531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.877439][T14531] usb 4-1: Product: syz [ 836.881837][T14531] usb 4-1: Manufacturer: syz [ 836.887261][T14531] usb 4-1: SerialNumber: syz [ 836.895462][T14531] usb 4-1: config 0 descriptor?? [ 837.380135][ T792] libceph: connect (1)[b::]:6789 error -101 [ 837.386942][ T792] libceph: mon0 (1)[b::]:6789 connect error [ 837.473490][T14531] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 837.510191][T14531] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 837.755995][ T792] libceph: connect (1)[b::]:6789 error -101 [ 837.773096][ T792] libceph: mon0 (1)[b::]:6789 connect error [ 837.797402][T14531] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 837.813490][T14531] usb 4-1: USB disconnect, device number 44 [ 837.863599][T19107] ceph: No mds server is up or the cluster is laggy [ 838.622571][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 838.622586][ T30] audit: type=1400 audit(1772064690.718:5608): avc: denied { read } for pid=19131 comm="syz.5.3658" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 838.657623][ T30] audit: type=1400 audit(1772064690.758:5609): avc: denied { open } for pid=19131 comm="syz.5.3658" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 838.834383][T19137] lo speed is unknown, defaulting to 1000 [ 838.973404][ T30] audit: type=1400 audit(1772064690.908:5610): avc: denied { name_bind } for pid=19131 comm="syz.5.3658" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 839.485535][ T30] audit: type=1400 audit(1772064691.568:5611): avc: denied { ioctl } for pid=19139 comm="syz.0.3659" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66203 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 840.278221][T19151] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 840.284784][T19151] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 840.314195][T19151] vhci_hcd vhci_hcd.0: Device attached [ 840.366115][T19152] vhci_hcd: connection closed [ 840.366578][ T49] vhci_hcd vhci_hcd.5: stop threads [ 840.385852][ T49] vhci_hcd vhci_hcd.5: release socket [ 840.392362][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 840.436454][ T30] audit: type=1400 audit(1772064692.518:5612): avc: denied { mounton } for pid=19156 comm="syz.0.3663" path="/127/file1" dev="tmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 840.500966][ T30] audit: type=1400 audit(1772064692.518:5613): avc: denied { mount } for pid=19156 comm="syz.0.3663" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 840.523142][ T30] audit: type=1400 audit(1772064692.598:5614): avc: denied { unmount } for pid=19156 comm="syz.0.3663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 840.806388][ T5924] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 841.548791][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.570597][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.580350][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.589558][ T5924] usb 4-1: Product: syz [ 841.595178][ T5924] usb 4-1: Manufacturer: syz [ 841.602175][ T5924] usb 4-1: SerialNumber: syz [ 841.732347][ T5924] usb 4-1: selecting invalid altsetting 1 [ 842.066064][ T5924] cdc_ncm 4-1:1.0: bind() failure [ 842.157535][ T5924] usb 4-1: USB disconnect, device number 45 [ 842.966550][ T5924] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 843.136731][ T5924] usb 4-1: Invalid ep0 maxpacket: 32 [ 843.178241][ T30] audit: type=1400 audit(1772064695.278:5615): avc: denied { write } for pid=19181 comm="syz.5.3671" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 843.213339][T19183] input: syz0 as /devices/virtual/input/input14 [ 843.266776][ T30] audit: type=1400 audit(1772064695.278:5616): avc: denied { open } for pid=19181 comm="syz.5.3671" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 843.324551][ T5924] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 843.344782][ T30] audit: type=1400 audit(1772064695.308:5617): avc: denied { ioctl } for pid=19181 comm="syz.5.3671" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 843.562873][ T5924] usb 4-1: Invalid ep0 maxpacket: 32 [ 843.570130][ T5924] usb usb4-port1: attempt power cycle [ 843.695043][T19195] lo speed is unknown, defaulting to 1000 [ 843.967592][ T5924] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 843.983993][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 843.984008][ T30] audit: type=1400 audit(1772064696.078:5621): avc: denied { ioctl } for pid=19200 comm="syz.5.3677" path="socket:[66309]" dev="sockfs" ino=66309 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 844.035055][T19203] netlink: 'syz.5.3677': attribute type 1 has an invalid length. [ 844.043141][T19203] netlink: 280 bytes leftover after parsing attributes in process `syz.5.3677'. [ 844.161294][ T5924] usb 4-1: Invalid ep0 maxpacket: 32 [ 844.336385][ T5924] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 844.353204][T19209] netlink: 'syz.5.3678': attribute type 13 has an invalid length. [ 844.361167][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3678'. [ 844.368745][ T30] audit: type=1400 audit(1772064696.128:5622): avc: denied { bind } for pid=19200 comm="syz.5.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 844.435598][T19209] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 844.460982][ T5924] usb 4-1: Invalid ep0 maxpacket: 32 [ 844.468757][ T5924] usb usb4-port1: unable to enumerate USB device [ 844.719431][ T30] audit: type=1400 audit(1772064696.818:5623): avc: denied { setopt } for pid=19214 comm="syz.2.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 844.795717][T19217] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3681'. [ 844.807134][ T30] audit: type=1400 audit(1772064696.908:5624): avc: denied { sys_module } for pid=19214 comm="syz.2.3681" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 844.846454][ T6716] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 844.868843][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3680'. [ 844.880018][T19218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3680'. [ 845.107851][ T6716] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.131857][ T6716] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 845.157601][ T6716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.190671][ T6716] usb 6-1: Product: syz [ 845.211823][ T6716] usb 6-1: Manufacturer: syz [ 845.232132][ T6716] usb 6-1: SerialNumber: syz [ 845.248935][ T6716] usb 6-1: selecting invalid altsetting 1 [ 845.560762][ T6716] cdc_ncm 6-1:1.0: bind() failure [ 845.612810][ T6716] usb 6-1: USB disconnect, device number 34 [ 845.881349][T19226] netlink: 'syz.3.3683': attribute type 4 has an invalid length. [ 845.952568][T19229] netlink: 'syz.3.3683': attribute type 4 has an invalid length. [ 846.330631][ T30] audit: type=1400 audit(1772064698.418:5625): avc: denied { read write } for pid=19238 comm="syz.4.3687" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 846.403129][ T30] audit: type=1400 audit(1772064698.418:5626): avc: denied { open } for pid=19238 comm="syz.4.3687" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 846.659138][ T30] audit: type=1400 audit(1772064698.608:5627): avc: denied { bind } for pid=19238 comm="syz.4.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 847.858244][ T30] audit: type=1400 audit(1772064699.918:5628): avc: denied { create } for pid=19244 comm="syz.0.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 847.892720][T19255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 847.899045][ T30] audit: type=1400 audit(1772064699.918:5629): avc: denied { bind } for pid=19244 comm="syz.0.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 847.982969][ T30] audit: type=1400 audit(1772064699.978:5630): avc: denied { block_suspend } for pid=19254 comm="syz.4.3691" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 848.356468][ T6716] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 848.526658][ T6716] usb 4-1: Invalid ep0 maxpacket: 32 [ 848.666415][ T6716] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 848.838018][ T6716] usb 4-1: Invalid ep0 maxpacket: 32 [ 848.854987][T19274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.859270][ T6716] usb usb4-port1: attempt power cycle [ 848.862305][T19274] IPv6: NLM_F_CREATE should be set when creating new route [ 848.995881][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 848.995898][ T30] audit: type=1400 audit(1772064701.088:5634): avc: denied { mount } for pid=19275 comm="syz.2.3698" name="/" dev="autofs" ino=67035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 849.120400][T19274] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.128005][T19274] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.237338][ T6716] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 849.267171][ T6716] usb 4-1: Invalid ep0 maxpacket: 32 [ 849.333344][T19274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.372096][T19274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.397987][ T6716] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 849.438150][ T6716] usb 4-1: Invalid ep0 maxpacket: 32 [ 849.449502][ T6716] usb usb4-port1: unable to enumerate USB device [ 849.714940][ T6719] lo speed is unknown, defaulting to 1000 [ 849.721276][ T6719] syz1: Port: 1 Link DOWN [ 849.903323][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.922170][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.012978][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.041907][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.300074][ T30] audit: type=1400 audit(1772064702.398:5635): avc: denied { write } for pid=19309 comm="syz.2.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 850.350377][ T30] audit: type=1400 audit(1772064702.438:5636): avc: denied { create } for pid=19309 comm="syz.2.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 850.458871][ T30] audit: type=1400 audit(1772064702.438:5637): avc: denied { connect } for pid=19309 comm="syz.2.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 850.481536][ T30] audit: type=1400 audit(1772064702.438:5638): avc: denied { write } for pid=19309 comm="syz.2.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 850.879113][ T5924] libceph: connect (1)[b::]:6789 error -101 [ 850.924524][ T5924] libceph: mon0 (1)[b::]:6789 connect error [ 851.170113][ T30] audit: type=1400 audit(1772064703.268:5639): avc: denied { create } for pid=19326 comm="syz.0.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 851.222762][T19319] ceph: No mds server is up or the cluster is laggy [ 851.245383][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3709'. [ 851.257090][T19323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3709'. [ 851.337114][ T30] audit: type=1400 audit(1772064703.298:5640): avc: denied { setopt } for pid=19326 comm="syz.0.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 851.344520][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 851.407347][ T792] libceph: connect (1)[b::]:6789 error -101 [ 851.414048][ T792] libceph: mon0 (1)[b::]:6789 connect error [ 851.416813][ T30] audit: type=1400 audit(1772064703.328:5641): avc: denied { ioctl } for pid=19326 comm="syz.0.3710" path="socket:[66492]" dev="sockfs" ino=66492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 851.518443][ T30] audit: type=1400 audit(1772064703.328:5642): avc: denied { bind } for pid=19326 comm="syz.0.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 851.690759][ T30] audit: type=1400 audit(1772064703.328:5643): avc: denied { ioctl } for pid=19326 comm="syz.0.3710" path="socket:[66493]" dev="sockfs" ino=66493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 854.872736][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 854.973811][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 854.992063][T19409] netlink: 'syz.4.3738': attribute type 31 has an invalid length. [ 855.018708][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 855.018726][ T30] audit: type=1400 audit(1772064707.118:5652): avc: denied { bind } for pid=19408 comm="syz.4.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 855.056433][ T30] audit: type=1400 audit(1772064707.148:5653): avc: denied { cmd } for pid=19408 comm="syz.4.3738" path="socket:[67289]" dev="sockfs" ino=67289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 855.140280][ T30] audit: type=1400 audit(1772064707.238:5654): avc: denied { connect } for pid=19419 comm="syz.4.3740" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 855.848541][T19430] lo speed is unknown, defaulting to 1000 [ 856.703326][ T30] audit: type=1400 audit(1772064708.798:5655): avc: denied { append } for pid=19439 comm="syz.5.3747" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 856.920129][ T30] audit: type=1400 audit(1772064708.988:5656): avc: denied { create } for pid=19439 comm="syz.5.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 856.982271][ T30] audit: type=1400 audit(1772064708.998:5657): avc: denied { ioctl } for pid=19439 comm="syz.5.3747" path="socket:[67704]" dev="sockfs" ino=67704 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 857.007687][ T30] audit: type=1400 audit(1772064709.018:5658): avc: denied { mount } for pid=19439 comm="syz.5.3747" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 857.357752][ T30] audit: type=1400 audit(1772064709.458:5659): avc: denied { getopt } for pid=19436 comm="syz.2.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 857.407483][ T30] audit: type=1326 audit(1772064709.498:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19452 comm="syz.0.3750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f476d19c629 code=0x0 [ 857.743887][ T30] audit: type=1400 audit(1772064709.838:5661): avc: denied { unmount } for pid=18649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 857.932368][T19466] netlink: 'syz.3.3753': attribute type 4 has an invalid length. [ 857.942945][T19466] netlink: 'syz.3.3753': attribute type 4 has an invalid length. [ 858.264903][T19470] lo speed is unknown, defaulting to 1000 [ 858.481201][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3755'. [ 858.928480][T19482] No such timeout policy "syz0" [ 860.083841][ T30] audit: type=1400 audit(1772064712.168:5662): avc: denied { shutdown } for pid=19489 comm="syz.0.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 860.148597][T19486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3760'. [ 860.277710][ T30] audit: type=1400 audit(1772064712.378:5663): avc: denied { write } for pid=19484 comm="syz.4.3760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 861.218350][ T30] audit: type=1400 audit(1772064713.318:5664): avc: denied { ioctl } for pid=19517 comm="syz.2.3769" path="socket:[67911]" dev="sockfs" ino=67911 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 861.309140][ T30] audit: type=1400 audit(1772064713.408:5665): avc: denied { create } for pid=19517 comm="syz.2.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 861.334784][T19519] 9p: Could not find request transport: fd0xffffffffffffffff [ 861.944256][T19529] No such timeout policy "syz0" [ 863.113650][T19535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.300121][T19546] lo speed is unknown, defaulting to 1000 [ 863.513972][ T30] audit: type=1400 audit(1772064715.608:5666): avc: denied { connect } for pid=19531 comm="syz.2.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 863.768799][ T30] audit: type=1400 audit(1772064715.668:5667): avc: denied { ioctl } for pid=19531 comm="syz.2.3774" path="socket:[67530]" dev="sockfs" ino=67530 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 864.181151][T14478] Bluetooth: hci1: link tx timeout [ 864.188400][T14478] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 864.224822][T19555] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 864.231462][T19555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 864.557439][T19555] vhci_hcd vhci_hcd.0: Device attached [ 864.614298][T19556] vhci_hcd: connection closed [ 864.614507][ T49] vhci_hcd vhci_hcd.5: stop threads [ 864.624908][ T49] vhci_hcd vhci_hcd.5: release socket [ 864.635069][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 864.759302][T19571] syz_tun: entered allmulticast mode [ 864.782352][T19569] syz_tun: left allmulticast mode [ 864.995021][T19576] syz_tun: entered allmulticast mode [ 865.025468][T19576] syz_tun: left allmulticast mode [ 865.360706][T19578] netlink: 'syz.4.3788': attribute type 10 has an invalid length. [ 865.375651][T19578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.403570][T19578] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 865.517294][T19040] Bluetooth: hci3: Malformed Event: 0x13 [ 866.236392][T19040] Bluetooth: hci1: command 0x0406 tx timeout [ 866.462600][T19589] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 866.469209][T19589] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 866.476683][T19589] vhci_hcd vhci_hcd.0: Device attached [ 866.492773][T19596] vhci_hcd: connection closed [ 866.498407][ T3554] vhci_hcd vhci_hcd.5: stop threads [ 866.538211][ T3554] vhci_hcd vhci_hcd.5: release socket [ 866.543631][ T3554] vhci_hcd vhci_hcd.5: disconnect device [ 866.708243][T19609] netlink: 'syz.2.3797': attribute type 1 has an invalid length. [ 866.714164][T19611] netlink: 'syz.0.3796': attribute type 4 has an invalid length. [ 866.819674][T19609] netlink: 'syz.2.3797': attribute type 2 has an invalid length. [ 866.839145][T19613] netlink: 'syz.0.3796': attribute type 4 has an invalid length. [ 866.850650][T19614] netlink: 'syz.2.3797': attribute type 1 has an invalid length. [ 866.858666][T19614] netlink: 'syz.2.3797': attribute type 2 has an invalid length. [ 867.255122][ T30] audit: type=1400 audit(1772064719.258:5668): avc: denied { append } for pid=19621 comm="syz.5.3800" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 867.509765][T14478] Bluetooth: hci1: Malformed Event: 0x13 [ 868.860930][ T30] audit: type=1400 audit(1772064720.838:5669): avc: denied { write } for pid=19636 comm="syz.2.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 870.002854][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.009299][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.169732][T19651] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 870.176272][T19651] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 870.211383][T19651] vhci_hcd vhci_hcd.0: Device attached [ 870.237264][T19655] vhci_hcd: connection closed [ 870.237492][T13034] vhci_hcd vhci_hcd.5: stop threads [ 870.242226][T13034] vhci_hcd vhci_hcd.5: release socket [ 870.242244][T13034] vhci_hcd vhci_hcd.5: disconnect device [ 870.280380][T14478] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 871.277869][T19672] netlink: 'syz.5.3812': attribute type 4 has an invalid length. [ 871.305022][T19672] netlink: 'syz.5.3812': attribute type 4 has an invalid length. [ 872.000734][T19689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3817'. [ 872.326807][T14478] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 872.383739][ T30] audit: type=1400 audit(1772064724.478:5670): avc: denied { map } for pid=19696 comm="syz.5.3819" path="socket:[68256]" dev="sockfs" ino=68256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 872.443518][ T30] audit: type=1400 audit(1772064724.518:5671): avc: denied { read } for pid=19696 comm="syz.5.3819" path="socket:[68258]" dev="sockfs" ino=68258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 873.306633][ T30] audit: type=1400 audit(1772064725.398:5672): avc: denied { write } for pid=19716 comm="syz.2.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 873.564613][T19729] netlink: 'syz.4.3829': attribute type 4 has an invalid length. [ 873.574638][T19729] netlink: 'syz.4.3829': attribute type 4 has an invalid length. [ 873.584116][T19289] lo speed is unknown, defaulting to 1000 [ 873.589889][T19289] syz1: Port: 1 Link ACTIVE [ 874.821683][T14478] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 874.852708][ T30] audit: type=1400 audit(1772064726.948:5673): avc: denied { read } for pid=19754 comm="syz.5.3835" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 874.963583][ T30] audit: type=1400 audit(1772064726.988:5674): avc: denied { open } for pid=19754 comm="syz.5.3835" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 875.045674][ T30] audit: type=1400 audit(1772064726.988:5675): avc: denied { append } for pid=19754 comm="syz.5.3835" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 875.136391][ T30] audit: type=1400 audit(1772064727.008:5676): avc: denied { read } for pid=19754 comm="syz.5.3835" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 875.171807][ T30] audit: type=1400 audit(1772064727.008:5677): avc: denied { open } for pid=19754 comm="syz.5.3835" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 875.246850][ T30] audit: type=1400 audit(1772064727.018:5678): avc: denied { ioctl } for pid=19754 comm="syz.5.3835" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 875.405679][ T30] audit: type=1400 audit(1772064727.018:5679): avc: denied { set_context_mgr } for pid=19754 comm="syz.5.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 876.207472][T14478] Bluetooth: hci5: Malformed Event: 0x13 [ 876.346509][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 877.086577][T19775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3840'. [ 877.467877][T14478] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 880.788808][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 880.788820][ T30] audit: type=1400 audit(1772064732.888:5682): avc: denied { create } for pid=19827 comm="syz.3.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 880.879761][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'. [ 881.115865][ T30] audit: type=1400 audit(1772064732.888:5683): avc: denied { ioctl } for pid=19827 comm="syz.3.3858" path="socket:[68394]" dev="sockfs" ino=68394 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 881.146384][ T30] audit: type=1400 audit(1772064732.888:5684): avc: denied { create } for pid=19827 comm="syz.3.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 881.186524][ T30] audit: type=1400 audit(1772064732.958:5685): avc: denied { bind } for pid=19827 comm="syz.3.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 881.265174][ T30] audit: type=1400 audit(1772064733.008:5686): avc: denied { write } for pid=19827 comm="syz.3.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 881.422019][ T30] audit: type=1400 audit(1772064733.268:5687): avc: denied { create } for pid=19833 comm="syz.5.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 881.469653][ T30] audit: type=1400 audit(1772064733.268:5688): avc: denied { ioctl } for pid=19833 comm="syz.5.3860" path="socket:[68983]" dev="sockfs" ino=68983 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 881.553190][T19847] netlink: 'syz.3.3861': attribute type 11 has an invalid length. [ 883.131008][T14478] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 883.133769][ T30] audit: type=1400 audit(1772064735.228:5689): avc: denied { write } for pid=19873 comm="syz.4.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 883.189267][T19874] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3873'. [ 883.286539][ T30] audit: type=1400 audit(1772064735.388:5690): avc: denied { mount } for pid=19879 comm="syz.3.3875" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 883.317495][T19880] overlayfs: failed to clone lowerpath [ 883.581424][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'. [ 884.407783][ T30] audit: type=1400 audit(1772064736.508:5691): avc: denied { read } for pid=19901 comm="syz.0.3879" path="socket:[69061]" dev="sockfs" ino=69061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 885.097856][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3885'. [ 885.107035][T19915] openvswitch: netlink: Flow actions attr not present in new flow. [ 885.276157][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 885.436920][T19925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3886'. [ 885.745053][T19926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3887'. [ 885.755812][T19926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3887'. [ 887.444804][T19040] Bluetooth: hci4: command 0x0406 tx timeout [ 887.530667][T19950] syz.0.3892 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 888.008228][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3895'. [ 888.031956][T19955] netlink: 'syz.2.3894': attribute type 4 has an invalid length. [ 890.740483][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3909'. [ 890.853627][T20002] netlink: 'syz.5.3908': attribute type 4 has an invalid length. [ 890.882256][T20004] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.3909'. [ 890.940846][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 890.940862][ T30] audit: type=1400 audit(1772064743.038:5693): avc: denied { map } for pid=20007 comm="syz.5.3910" path="socket:[69201]" dev="sockfs" ino=69201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 891.259544][T20014] overlay: Unknown parameter '/' [ 891.361659][T20019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.815688][T20020] overlayfs: failed to clone lowerpath [ 891.914000][ T30] audit: type=1400 audit(1772064743.908:5694): avc: denied { mount } for pid=20009 comm="syz.0.3911" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 892.861113][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3918'. [ 894.139488][T20056] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 894.643410][ T30] audit: type=1400 audit(1772064746.738:5695): avc: denied { getopt } for pid=20061 comm="syz.3.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 894.672933][ T30] audit: type=1400 audit(1772064746.768:5696): avc: denied { getopt } for pid=20061 comm="syz.3.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 894.987703][T20079] netlink: 'syz.3.3929': attribute type 4 has an invalid length. [ 895.322843][T20088] netlink: 'syz.4.3933': attribute type 4 has an invalid length. [ 895.378312][ T6719] lo speed is unknown, defaulting to 1000 [ 895.384263][T20089] netlink: 'syz.4.3933': attribute type 4 has an invalid length. [ 895.392199][ T6719] syz1: Port: 1 Link DOWN [ 895.503856][ T6719] lo speed is unknown, defaulting to 1000 [ 895.511721][ T6719] syz1: Port: 1 Link ACTIVE [ 895.538605][ T30] audit: type=1400 audit(1772064747.628:5697): avc: denied { shutdown } for pid=20081 comm="syz.0.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 895.611358][ T30] audit: type=1400 audit(1772064747.628:5698): avc: denied { setopt } for pid=20081 comm="syz.0.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 896.360378][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3937'. [ 896.677380][ T5876] libceph: connect (1)[b::]:6789 error -101 [ 896.683578][ T5876] libceph: mon0 (1)[b::]:6789 connect error [ 896.721091][ T30] audit: type=1400 audit(1772064748.818:5699): avc: denied { mount } for pid=20106 comm="syz.5.3939" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 896.933300][T20102] ceph: No mds server is up or the cluster is laggy [ 897.086469][T20114] netlink: 'syz.0.3940': attribute type 4 has an invalid length. [ 897.232281][T20125] netlink: 'syz.3.3944': attribute type 4 has an invalid length. [ 897.250325][T20125] netlink: 'syz.3.3944': attribute type 4 has an invalid length. [ 897.535037][ T30] audit: type=1400 audit(1772064749.518:5700): avc: denied { firmware_load } for pid=20127 comm="syz.3.3945" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 898.526588][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 898.537334][T20138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3947'. [ 898.930213][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3950'. [ 898.941486][T20148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3950'. [ 899.249024][T20160] netlink: 'syz.3.3955': attribute type 4 has an invalid length. [ 899.260240][T20160] netlink: 'syz.3.3955': attribute type 4 has an invalid length. [ 899.287524][T20161] netlink: 'syz.0.3953': attribute type 4 has an invalid length. [ 901.184582][T20197] netlink: 'syz.3.3966': attribute type 4 has an invalid length. [ 901.215213][T20197] netlink: 'syz.3.3966': attribute type 4 has an invalid length. [ 901.381910][T20203] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3969'. [ 901.603732][T20208] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 901.603732][T20208] The task syz.4.3970 (20208) triggered the difference, watch for misbehavior. [ 901.720665][ T30] audit: type=1400 audit(1772064753.798:5701): avc: denied { create } for pid=20209 comm="syz.5.3971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 902.490068][T20221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3973'. [ 902.500489][T20221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3973'. [ 902.908701][T20227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3975'. [ 903.712060][T20237] netlink: 'syz.2.3978': attribute type 4 has an invalid length. [ 903.812751][T20248] netlink: 'syz.2.3978': attribute type 4 has an invalid length. [ 903.866152][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3983'. [ 903.903108][T20251] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.3983'. [ 904.091228][T20257] netlink: 'syz.2.3984': attribute type 4 has an invalid length. [ 905.906561][T20282] netlink: 'syz.0.3994': attribute type 4 has an invalid length. [ 906.168634][T20285] netlink: 'syz.0.3994': attribute type 4 has an invalid length. [ 907.274671][T20307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 907.312896][T20307] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.4001'. [ 908.049192][T20322] ip6gre2: entered allmulticast mode [ 908.083102][T20324] IPv6: NLM_F_CREATE should be specified when creating new route [ 908.341278][ T30] audit: type=1400 audit(1772064766.437:5702): avc: denied { kexec_image_load } for pid=20330 comm="syz.4.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 908.450669][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4012'. [ 908.465218][T20340] netlink: 1371 bytes leftover after parsing attributes in process `syz.4.4012'. [ 910.166036][T20361] overlayfs: unescaped trailing colons in lowerdir mount option. [ 910.892595][T20373] netlink: 'syz.4.4020': attribute type 1 has an invalid length. [ 911.020183][T20375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4019'. [ 911.169575][T20373] bond1: entered promiscuous mode [ 911.190829][T20373] bond1: entered allmulticast mode [ 911.197642][T20373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 911.264586][T20377] erspan1: entered allmulticast mode [ 911.292445][T20377] bond1: (slave erspan1): making interface the new active one [ 911.317185][T20377] erspan1: entered promiscuous mode [ 911.345318][T20377] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 912.278325][ T5924] libceph: connect (1)[b::]:6789 error -101 [ 912.288612][ T5924] libceph: mon0 (1)[b::]:6789 connect error [ 912.468171][T20391] ceph: No mds server is up or the cluster is laggy [ 912.576532][ T30] audit: type=1400 audit(1772064770.657:5703): avc: denied { bind } for pid=20402 comm="syz.3.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 912.740858][T14478] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 914.482943][T20432] netlink: 'syz.0.4039': attribute type 13 has an invalid length. [ 914.491570][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 914.503174][T20432] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 915.004284][ T30] audit: type=1400 audit(1772064773.097:5704): avc: denied { write } for pid=20437 comm="syz.3.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 917.438168][T20486] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4051'. [ 918.608723][T20504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20504 comm=syz.0.4058 [ 918.693169][T20505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4056'. [ 919.874438][T20508] tmpfs: Bad value for 'nr_blocks' [ 919.891315][T20508] fuse: Bad value for 'fd' [ 920.584031][T20516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4062'. [ 921.023977][T20530] xt_connbytes: Forcing CT accounting to be enabled [ 921.030871][T20530] Cannot find set identified by id 0 to match [ 921.190500][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4057'. [ 921.204978][T20533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4057'. [ 921.226427][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4064'. [ 921.246765][T20532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4064'. [ 921.283026][ T30] audit: type=1400 audit(1772064779.377:5705): avc: denied { listen } for pid=20525 comm="syz.2.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 921.384752][ T30] audit: type=1400 audit(1772064779.377:5706): avc: denied { accept } for pid=20525 comm="syz.2.4065" lport=41495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 922.058261][ T30] audit: type=1400 audit(1772064779.727:5707): avc: denied { getopt } for pid=20540 comm="syz.0.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 923.247109][T20561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8157 sclass=netlink_route_socket pid=20561 comm=syz.2.4072 [ 923.438750][T20561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4072'. [ 923.839832][T14478] Bluetooth: hci1: link tx timeout [ 923.844965][T14478] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 923.875595][T20573] netlink: 'syz.3.4075': attribute type 4 has an invalid length. [ 923.923556][T20573] netlink: 'syz.3.4075': attribute type 4 has an invalid length. [ 924.226632][ T30] audit: type=1400 audit(1772064782.327:5708): avc: denied { getopt } for pid=20578 comm="syz.2.4079" laddr=::ffff:172.20.20.170 lport=39453 faddr=::ffff:172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 924.415539][T19040] Bluetooth: hci1: Malformed Event: 0x13 [ 924.765419][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4083'. [ 924.807651][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4083'. [ 925.675875][T20615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.917565][T19040] Bluetooth: hci1: command 0x0406 tx timeout [ 926.223942][T14478] Bluetooth: hci2: Malformed Event: 0x13 [ 926.572423][T20632] netlink: 'syz.4.4096': attribute type 4 has an invalid length. [ 926.582672][T20632] netlink: 'syz.4.4096': attribute type 4 has an invalid length. [ 926.595646][ T9] lo speed is unknown, defaulting to 1000 [ 926.601906][ T9] syz1: Port: 1 Link DOWN [ 926.623813][ T9] lo speed is unknown, defaulting to 1000 [ 926.636205][ T9] syz1: Port: 1 Link ACTIVE [ 926.714351][T20634] netlink: 'syz.2.4098': attribute type 4 has an invalid length. [ 926.782474][T20634] IPVS: Scheduler module ip_vs_sip not found [ 928.295030][T14478] Bluetooth: hci5: Malformed Event: 0x13 [ 928.575526][T20656] MPI: mpi too large (130952 bits) [ 928.997575][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4108'. [ 929.007822][T20676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4108'. [ 929.991693][T20691] netlink: 'syz.3.4111': attribute type 4 has an invalid length. [ 930.011849][T20691] netlink: 'syz.3.4111': attribute type 4 has an invalid length. [ 930.429974][T14478] Bluetooth: hci5: Malformed Event: 0x13 [ 931.440475][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.448891][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.038781][T20725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4121'. [ 932.049484][T20725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4121'. [ 933.269545][ T30] audit: type=1400 audit(1772064791.357:5709): avc: denied { watch watch_reads } for pid=20737 comm="syz.0.4126" path="pipe:[70561]" dev="pipefs" ino=70561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 933.312369][T20738] fuse: Unknown parameter 'roLt€odŮĐe' [ 933.676666][T20745] netlink: 'syz.0.4127': attribute type 4 has an invalid length. [ 933.976557][T20751] netlink: 'syz.4.4128': attribute type 4 has an invalid length. [ 933.989578][ T29] lo speed is unknown, defaulting to 1000 [ 933.997036][ T29] syz1: Port: 1 Link DOWN [ 934.004418][T20751] netlink: 'syz.4.4128': attribute type 4 has an invalid length. [ 934.496637][T20733] SELinux: Context system_u:object_r:sound_device_t:s0 is not valid (left unmapped). [ 934.506448][ T30] audit: type=1400 audit(1772064792.597:5710): avc: denied { mac_admin } for pid=20732 comm="syz.3.4124" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 934.552196][ T30] audit: type=1400 audit(1772064792.647:5711): avc: denied { relabelto } for pid=20732 comm="syz.3.4124" name="192" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:sound_device_t:s0" [ 934.600257][ T30] audit: type=1400 audit(1772064792.647:5712): avc: denied { associate } for pid=20732 comm="syz.3.4124" name="192" dev="tmpfs" ino=1006 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sound_device_t:s0" [ 934.657925][ T30] audit: type=1400 audit(1772064792.727:5713): avc: denied { bind } for pid=20732 comm="syz.3.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 934.816424][ T6719] lo speed is unknown, defaulting to 1000 [ 934.818112][T20755] lo speed is unknown, defaulting to 1000 [ 934.822322][ T6719] syz1: Port: 1 Link ACTIVE [ 934.828019][T20755] lo speed is unknown, defaulting to 1000 [ 934.839397][T20755] lo speed is unknown, defaulting to 1000 [ 934.853574][T20755] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 934.883724][T20755] lo speed is unknown, defaulting to 1000 [ 934.893732][T20755] lo speed is unknown, defaulting to 1000 [ 934.901039][T20755] lo speed is unknown, defaulting to 1000 [ 934.908352][T20755] lo speed is unknown, defaulting to 1000 [ 934.914790][T20755] lo speed is unknown, defaulting to 1000 [ 935.777564][ T30] audit: type=1400 audit(1772064793.457:5714): avc: denied { create } for pid=20770 comm="syz.4.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 936.086934][ T6719] libceph: connect (1)[b::]:6789 error -101 [ 936.102708][ T6719] libceph: mon0 (1)[b::]:6789 connect error [ 936.189300][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4138'. [ 936.233036][T20780] ceph: No mds server is up or the cluster is laggy [ 936.305664][T20794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4138'. [ 938.038098][T20818] netlink: 'syz.0.4143': attribute type 4 has an invalid length. [ 938.080915][T20815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4141'. [ 938.093354][T20815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4141'. [ 938.107321][T20820] netlink: 'syz.0.4143': attribute type 4 has an invalid length. [ 938.376491][T20826] netlink: 'syz.3.4144': attribute type 4 has an invalid length. [ 938.645334][T20834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4146'. [ 938.732085][ T30] audit: type=1400 audit(1772064796.827:5715): avc: denied { mount } for pid=20829 comm="syz.4.4147" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 939.156895][T20843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4148'. [ 940.094568][T20852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4151'. [ 941.818979][T20871] ipvlan1: entered promiscuous mode [ 943.321003][T20885] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 943.339612][T20885] team0: Port device batadv1 added [ 943.346799][T20889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4161'. [ 943.679793][T20898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 943.890499][T20900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4163'. [ 943.951563][ T30] audit: type=1400 audit(1772064802.047:5716): avc: denied { ioctl } for pid=20899 comm="syz.3.4163" path="socket:[71257]" dev="sockfs" ino=71257 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 944.681269][T20912] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 945.809973][T20934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4173'. [ 945.865795][T20933] vlan2: entered allmulticast mode [ 945.889474][T20933] team0: entered allmulticast mode [ 945.921494][T20933] team_slave_0: entered allmulticast mode [ 945.927401][T20933] team_slave_1: entered allmulticast mode [ 949.217327][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4184'. [ 949.628651][T20983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4190'. [ 950.142126][T20988] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4192'. [ 950.208908][T14478] Bluetooth: hci5: Malformed Event: 0x02 [ 950.683896][ T30] audit: type=1400 audit(1772064808.487:5717): avc: denied { mount } for pid=20990 comm="syz.2.4193" name="/" dev="ramfs" ino=71358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 950.722417][ T30] audit: type=1400 audit(1772064808.817:5718): avc: denied { ioctl } for pid=20993 comm="syz.3.4194" path="socket:[71892]" dev="sockfs" ino=71892 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 950.803060][T20996] netlink: 'syz.3.4194': attribute type 10 has an invalid length. [ 950.834835][T20996] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 951.052448][T21011] netlink: 'syz.4.4198': attribute type 4 has an invalid length. [ 951.082100][T21011] netlink: 'syz.4.4198': attribute type 4 has an invalid length. [ 951.116637][T19289] lo speed is unknown, defaulting to 1000 [ 951.148711][T19289] lo speed is unknown, defaulting to 1000 [ 951.208548][ T30] audit: type=1400 audit(1772064809.297:5719): avc: denied { listen } for pid=21014 comm="syz.0.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 951.334587][T21019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4200'. [ 951.689256][T21021] overlayfs: failed to clone lowerpath [ 951.703308][T21021] 9p: Bad value for 'rfdno' [ 951.710637][ T30] audit: type=1400 audit(1772064809.297:5720): avc: denied { accept } for pid=21014 comm="syz.0.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 951.753410][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 951.762900][T21021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4203'. [ 951.815815][ T30] audit: type=1400 audit(1772064809.897:5721): avc: denied { mount } for pid=21012 comm="syz.5.4202" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 952.256419][T21034] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4206'. [ 952.424874][T21040] netlink: 'syz.0.4211': attribute type 10 has an invalid length. [ 952.524105][T21043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4208'. [ 952.839853][T21040] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 952.944643][T14478] Bluetooth: hci2: Malformed Event: 0x02 [ 953.522539][T21063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4214'. [ 953.554975][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4216'. [ 953.985942][T21070] xt_TPROXY: Can be used only with -p tcp or -p udp [ 954.008889][ T30] audit: type=1400 audit(1772064812.078:5722): avc: denied { connect } for pid=21069 comm="syz.0.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 954.726550][T14478] Bluetooth: hci4: Malformed Event: 0x02 [ 954.792220][T21101] __nla_validate_parse: 1 callbacks suppressed [ 954.792237][T21101] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4226'. [ 955.020333][T21104] fuse: Unknown parameter 'ą' [ 955.191541][T21107] Cannot find set identified by id 99 to match [ 955.200575][ T30] audit: type=1400 audit(1772064813.209:5723): avc: denied { accept } for pid=21105 comm="syz.5.4230" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 955.357410][T21110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 957.869537][ T30] audit: type=1400 audit(1772064815.716:5724): avc: denied { setopt } for pid=21143 comm="syz.2.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 958.648521][T21158] IPv6: NLM_F_CREATE should be specified when creating new route [ 958.767221][T14478] Bluetooth: hci3: Malformed Event: 0x02 [ 959.065397][T14478] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 960.045755][T21185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4250'. [ 962.063913][T14478] Bluetooth: hci2: unexpected event for opcode 0x080d [ 962.521828][T14478] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 963.539569][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4265'. [ 963.563466][T21233] netlink: 1371 bytes leftover after parsing attributes in process `syz.0.4265'. [ 963.573213][T21229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4263'. [ 963.612392][T21237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4266'. [ 963.901863][T21242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4267'. [ 965.568600][ T30] audit: type=1400 audit(1772064828.910:5725): avc: denied { ioctl } for pid=21246 comm="syz.5.4269" path="socket:[72245]" dev="sockfs" ino=72245 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 965.941464][T14478] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 966.185820][ T30] audit: type=1400 audit(1772064835.496:5726): avc: denied { create } for pid=21283 comm="syz.2.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 966.724179][T21295] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4285'. [ 966.734051][T21295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4285'. [ 967.382766][ T30] audit: type=1400 audit(1772064836.618:5727): avc: denied { write } for pid=21305 comm="syz.0.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 968.254400][T14478] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 968.647187][T21338] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4298'. [ 970.184598][ T30] audit: type=1400 audit(1772064844.863:5728): avc: denied { ioctl } for pid=21361 comm="syz.4.4307" path="socket:[72359]" dev="sockfs" ino=72359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 970.237268][ T30] audit: type=1400 audit(1772064844.863:5729): avc: denied { listen } for pid=21361 comm="syz.4.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 970.261771][ T30] audit: type=1400 audit(1772064844.863:5730): avc: denied { setattr } for pid=21361 comm="syz.4.4307" name="NETLINK" dev="sockfs" ino=72363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 970.295573][T21367] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 970.333023][T21367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 970.480518][T21367] bond2: (slave geneve2): making interface the new active one [ 970.559510][T21367] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 971.272319][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4310'. [ 971.802782][ T5924] IPVS: starting estimator thread 0... [ 971.905839][T21385] IPVS: using max 43 ests per chain, 103200 per kthread [ 972.171134][T21393] IPv6: NLM_F_CREATE should be specified when creating new route [ 972.407305][T21401] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4316'. [ 972.453029][ T30] audit: type=1400 audit(1772064853.355:5731): avc: denied { getopt } for pid=21400 comm="syz.0.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 972.984815][T21412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4319'. [ 973.002582][T21412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4319'. [ 976.984762][ T5924] IPVS: starting estimator thread 0... [ 977.111189][T21444] IPVS: using max 79 ests per chain, 189600 per kthread [ 977.632651][T21461] overlayfs: failed to clone lowerpath [ 978.709126][ T30] audit: type=1400 audit(1772064865.203:5732): avc: denied { mounton } for pid=21472 comm="syz.5.4336" path="/150/file0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 978.888259][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4334'. [ 978.898166][T21477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4334'. [ 980.927356][T21501] netlink: 'syz.5.4341': attribute type 4 has an invalid length. [ 982.640519][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4349'. [ 982.653752][T21524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4349'. [ 982.777939][T21530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21530 comm=syz.0.4350 [ 982.803336][T21531] netlink: 'syz.2.4351': attribute type 10 has an invalid length. [ 982.853927][ T30] audit: type=1400 audit(1772064875.084:5733): avc: denied { name_connect } for pid=21529 comm="syz.0.4350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 982.891763][T21531] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 982.928704][ T30] audit: type=1400 audit(1772064875.159:5734): avc: denied { setopt } for pid=21529 comm="syz.0.4350" lport=60565 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 984.755508][T21555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4357'. [ 984.840532][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4357'. [ 984.971144][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4358'. [ 985.248426][T21565] netlink: 'syz.5.4360': attribute type 4 has an invalid length. [ 985.274318][T21565] netlink: 'syz.5.4360': attribute type 4 has an invalid length. [ 986.845754][ T6719] IPVS: starting estimator thread 0... [ 986.858695][T21601] netlink: 'syz.3.4364': attribute type 11 has an invalid length. [ 986.946350][T21600] IPVS: using max 54 ests per chain, 129600 per kthread [ 987.013688][ T30] audit: type=1400 audit(1772064878.975:5735): avc: denied { listen } for pid=21604 comm="syz.4.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 987.545325][T21608] tmpfs: Bad value for 'nr_blocks' [ 989.247772][ T30] audit: type=1800 audit(1772064881.061:5736): pid=21626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.4380" name="/newroot/362/pids.events" dev="tmpfs" ino=1918 res=0 errno=0 [ 990.807463][T21636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21636 comm=syz.5.4373 [ 990.857413][T21644] fuse: Bad value for 'user_id' [ 990.872937][T21644] fuse: Bad value for 'user_id' [ 991.489866][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 991.496756][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 991.784888][T21656] ceph: No mds server is up or the cluster is laggy [ 991.800130][ T30] audit: type=1400 audit(1772064883.362:5737): avc: denied { read } for pid=21664 comm="syz.2.4390" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 991.821539][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 991.827621][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 992.388160][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 992.396640][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 992.721992][T21683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4398'. [ 992.886740][T21688] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 992.908347][ T30] audit: type=1400 audit(1772064884.447:5738): avc: denied { watch watch_reads } for pid=21684 comm="syz.3.4399" path="/247" dev="tmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 993.771831][T21702] kAFS: unparsable volume name [ 995.177411][ T30] audit: type=1400 audit(1772064886.608:5739): avc: denied { read } for pid=21722 comm="syz.2.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 995.217743][T21719] netlink: 'syz.4.4408': attribute type 1 has an invalid length. [ 995.225525][T21719] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4408'. [ 995.258459][T21704] could not allocate digest TFM handle blake2b-384 [ 995.578492][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.585037][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.632705][ T30] audit: type=1400 audit(1772064886.608:5740): avc: denied { getopt } for pid=21722 comm="syz.2.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 996.064591][T21735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21735 comm=syz.3.4412 [ 996.624681][T21742] gretap0: entered promiscuous mode [ 998.431473][T21762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4417'. [ 998.442554][T21762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4417'. [ 999.632501][T21781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21781 comm=syz.2.4425 [ 999.856378][ T30] audit: type=1400 audit(1772064890.986:5741): avc: denied { getopt } for pid=21784 comm="syz.2.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 999.886188][T14478] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 999.897990][T14478] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 999.952040][ T30] audit: type=1400 audit(1772064891.023:5742): avc: denied { write } for pid=21786 comm="syz.4.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1001.103154][T21817] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 1001.141844][ T30] audit: type=1400 audit(1772064892.183:5743): avc: denied { relabelto } for pid=21816 comm="syz.5.4435" name="169" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1001.188892][ T30] audit: type=1400 audit(1772064892.221:5744): avc: denied { associate } for pid=21816 comm="syz.5.4435" name="169" dev="tmpfs" ino=898 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 1002.595568][T21849] netlink: 'syz.4.4446': attribute type 21 has an invalid length. [ 1002.661623][ T30] audit: type=1400 audit(1772064893.549:5745): avc: denied { nlmsg_read } for pid=21845 comm="syz.4.4446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1003.418907][T21861] netlink: 'syz.3.4450': attribute type 4 has an invalid length. [ 1003.436799][ T9] lo speed is unknown, defaulting to 1000 [ 1003.443660][ T9] syz0: Port: 1 Link DOWN [ 1003.450297][T21861] netlink: 'syz.3.4450': attribute type 4 has an invalid length. [ 1003.461966][ T9] lo speed is unknown, defaulting to 1000 [ 1003.469584][ T9] syz0: Port: 1 Link ACTIVE [ 1003.842573][T21866] netlink: 'syz.2.4451': attribute type 4 has an invalid length. [ 1003.864959][T21866] netlink: 'syz.2.4451': attribute type 4 has an invalid length. [ 1004.203412][T14478] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1004.213242][T14478] Bluetooth: hci5: Injecting HCI hardware error event [ 1004.222421][T14478] Bluetooth: hci5: hardware error 0x00 [ 1005.321455][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1005.465023][ T30] audit: type=1400 audit(1772064896.224:5746): avc: denied { setopt } for pid=21897 comm="syz.4.4461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1006.513185][T14478] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1007.205693][ T30] audit: type=1400 audit(1772064897.870:5747): avc: denied { remount } for pid=21927 comm="syz.5.4468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1007.634168][T21936] netlink: 'syz.3.4471': attribute type 4 has an invalid length. [ 1007.665852][ T9] lo speed is unknown, defaulting to 1000 [ 1007.671762][ T9] syz0: Port: 1 Link DOWN [ 1007.720471][T14478] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1008.268424][T21948] batman_adv: batadv0: Adding interface: dummy0 [ 1008.274739][T21948] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.396785][T21948] batman_adv: batadv0: Interface activated: dummy0 [ 1008.580269][T21952] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1008.649389][T21955] overlayfs: failed to clone lowerpath [ 1008.702460][T21961] overlayfs: failed to clone lowerpath [ 1009.736933][ T30] audit: type=1400 audit(1772064900.228:5748): avc: denied { relabelfrom } for pid=21970 comm="syz.4.4483" name="" dev="pipefs" ino=74040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1011.576224][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1011.588242][T21976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1011.666383][T21991] netlink: 'syz.3.4485': attribute type 4 has an invalid length. [ 1011.685687][T21992] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4486'. [ 1011.933799][T21998] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4487'. [ 1012.410921][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4490'. [ 1012.517075][ T30] audit: type=1400 audit(1772064902.828:5749): avc: denied { name_bind } for pid=22009 comm="syz.5.4492" src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1012.546578][ T30] audit: type=1400 audit(1772064902.828:5750): avc: denied { node_bind } for pid=22009 comm="syz.5.4492" saddr=ff02::1 src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1012.583509][T22010] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4492'. [ 1012.598175][T22010] 9p: Could not find request transport: rÓD[}’’"Ůl¦ťŚdma¬port=0x000000000004exĺűŽ00000000000 [ 1012.694355][T22016] overlayfs: failed to clone lowerpath [ 1013.530237][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1013.726691][T22034] netlink: 'syz.2.4494': attribute type 10 has an invalid length. [ 1013.754253][T22034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.861594][T22034] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1018.911886][ T30] audit: type=1400 audit(1772064908.815:5751): avc: denied { watch_mount } for pid=22070 comm="syz.3.4512" path="/269" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1018.948759][T22072] overlayfs: missing 'lowerdir' [ 1019.199951][T22080] Device name cannot be null; rc = [-22] [ 1020.928723][T22080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.938057][T22080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.068929][ T7062] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.088957][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4516'. [ 1021.120094][ T7062] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.260450][ T7062] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.274436][ T7062] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.909977][ T30] audit: type=1400 audit(1772064913.482:5752): avc: denied { listen } for pid=22110 comm="syz.0.4525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1023.943297][ T30] audit: type=1400 audit(1772064913.482:5753): avc: denied { accept } for pid=22110 comm="syz.0.4525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1024.058409][T22122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4527'. [ 1024.258457][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4528'. [ 1024.643085][T22134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4531'. [ 1025.323962][ T30] audit: type=1400 audit(1772064914.736:5754): avc: denied { module_load } for pid=22127 comm="syz.2.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1026.078693][T22145] netlink: 'syz.5.4535': attribute type 10 has an invalid length. [ 1026.111909][T22145] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1026.396027][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'. [ 1026.479692][T22159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4538'. [ 1026.498604][T22162] overlayfs: failed to clone lowerpath [ 1026.504828][T22159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4538'. [ 1027.198751][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4543'. [ 1027.520129][T22177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4546'. [ 1028.976933][T22194] netlink: 'syz.4.4551': attribute type 10 has an invalid length. [ 1029.005970][T22194] team0 (unregistering): Port device team_slave_0 removed [ 1029.098736][T22194] team0 (unregistering): Port device team_slave_1 removed [ 1029.229890][T22194] team0 (unregistering): Port device batadv1 removed [ 1029.263315][ T30] audit: type=1400 audit(1772064918.496:5755): avc: denied { mount } for pid=22202 comm="syz.5.4553" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1030.310215][ T30] audit: type=1326 audit(1772064919.450:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1030.602017][ T30] audit: type=1326 audit(1772064919.450:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1030.627411][ T30] audit: type=1326 audit(1772064919.450:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1030.652282][ T30] audit: type=1326 audit(1772064919.450:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1030.676600][ T30] audit: type=1326 audit(1772064919.450:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1030.852799][ T30] audit: type=1326 audit(1772064919.450:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1030.868235][T14478] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1030.892971][ T30] audit: type=1326 audit(1772064919.450:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1030.951445][ T30] audit: type=1326 audit(1772064919.459:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1030.991924][ T30] audit: type=1326 audit(1772064919.459:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1031.019050][ T30] audit: type=1326 audit(1772064919.459:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79c8f9c392 code=0x7ffc0000 [ 1031.042739][ T30] audit: type=1326 audit(1772064919.459:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79c8f9c392 code=0x7ffc0000 [ 1031.143937][ T30] audit: type=1326 audit(1772064919.459:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1031.169278][ T30] audit: type=1326 audit(1772064919.469:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1031.664743][ T30] audit: type=1326 audit(1772064919.469:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22202 comm="syz.5.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1033.331897][T22236] 9p: Bad value for 'rfdno' [ 1033.441973][T14478] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1034.342348][T22269] overlayfs: failed to clone lowerpath [ 1035.908719][T22285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1036.087626][T22284] netlink: 'syz.4.4578': attribute type 10 has an invalid length. [ 1036.190758][T22284] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1036.249317][T22288] trusted_key: encrypted_key: insufficient parameters specified [ 1037.302755][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4585'. [ 1037.947503][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1037.947522][ T30] audit: type=1400 audit(1772064926.615:5783): avc: denied { accept } for pid=22309 comm="syz.5.4586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1038.516937][T22322] overlayfs: failed to clone upperpath [ 1038.733151][T22326] netlink: 'syz.3.4592': attribute type 10 has an invalid length. [ 1038.873456][T14478] Bluetooth: hci4: Malformed Event: 0x02 [ 1038.884713][T22331] overlayfs: failed to clone upperpath [ 1038.909072][T22331] netlink: 798 bytes leftover after parsing attributes in process `syz.2.4594'. [ 1039.633387][T22348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1040.018486][T22355] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4601'. [ 1040.205644][ T30] audit: type=1400 audit(1772064928.729:5784): avc: denied { search } for pid=22359 comm="syz.0.4603" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1040.314346][ T30] audit: type=1400 audit(1772064928.757:5785): avc: denied { search } for pid=22359 comm="syz.0.4603" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1040.424486][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4602'. [ 1040.815434][ T30] audit: type=1326 audit(1772064929.300:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22364 comm="syz.5.4604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79c8f9c629 code=0x0 [ 1041.245055][T14478] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1041.378053][ T30] audit: type=1400 audit(1772064929.721:5787): avc: denied { read } for pid=22367 comm="syz.4.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1041.572101][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4608'. [ 1042.453522][T22379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.570563][T22379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.634806][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4610'. [ 1042.651885][T22381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1042.661449][T22379] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1042.696554][T22379] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1042.709036][T22379] bond0 (unregistering): Released all slaves [ 1042.720875][T22381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.730748][T22381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.741535][T22381] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1042.750454][T22381] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1042.759476][T22381] bond0 (unregistering): Released all slaves [ 1042.883734][T22392] syz.2.4614 (22392): attempted to duplicate a private mapping with mremap. This is not supported. [ 1043.150575][ T30] audit: type=1400 audit(1772064931.489:5788): avc: denied { accept } for pid=22394 comm="syz.3.4615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1043.289078][T22401] overlayfs: failed to clone upperpath [ 1043.473867][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.484512][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.494833][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.504948][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.515101][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.525176][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.535293][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.550318][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.560491][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.570655][T22407] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1043.805087][T22409] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 1044.179001][T22429] netlink: 'syz.3.4623': attribute type 4 has an invalid length. [ 1044.743525][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1044.753767][T22444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1045.016046][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4632'. [ 1046.078939][T22474] lo speed is unknown, defaulting to 1000 [ 1046.088325][T22474] lo speed is unknown, defaulting to 1000 [ 1046.203114][T22491] overlayfs: failed to clone upperpath [ 1046.557258][T22520] overlay: ./file0 is not a directory [ 1046.686086][ T30] audit: type=1400 audit(1772064934.791:5789): avc: denied { mount } for pid=22531 comm="syz.5.4672" name="/" dev="hugetlbfs" ino=75634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1048.052191][T22577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4688'. [ 1048.267549][ T30] audit: type=1400 audit(1772064936.269:5790): avc: denied { map } for pid=22579 comm="syz.0.4689" path="socket:[74669]" dev="sockfs" ino=74669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1048.296672][T22584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4690'. [ 1048.311339][T22583] all (unregistering): Released all slaves [ 1049.972397][T22617] netlink: 'syz.3.4699': attribute type 1 has an invalid length. [ 1050.019708][T22617] bond3: entered promiscuous mode [ 1050.025085][T22617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1050.037478][ T30] audit: type=1400 audit(1772064937.924:5791): avc: denied { write } for pid=22616 comm="syz.3.4699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1050.043500][T22621] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1050.149770][T22621] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1050.200328][T22621] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1051.102949][T22629] No such timeout policy "syz0" [ 1051.119935][ T30] audit: type=1400 audit(1772064938.916:5792): avc: denied { connect } for pid=22624 comm="syz.4.4701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1053.053968][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4707'. [ 1053.292815][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4710'. [ 1054.750131][T22615] net_ratelimit: 6529 callbacks suppressed [ 1054.750152][T22615] Set syz1 is full, maxelem 65536 reached [ 1055.351975][ T30] audit: type=1400 audit(1772064942.611:5793): avc: denied { getopt } for pid=22679 comm="syz.3.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1058.226572][T22713] netlink: 'syz.3.4729': attribute type 4 has an invalid length. [ 1058.743608][T22731] overlayfs: failed to clone lowerpath [ 1061.470874][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.480188][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.506918][ T30] audit: type=1400 audit(1772064948.298:5794): avc: denied { read open } for pid=22746 comm="syz.0.4739" path="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1065.868873][T22806] lo speed is unknown, defaulting to 1000 [ 1065.883706][T22806] lo speed is unknown, defaulting to 1000 [ 1068.897149][T22854] F2FS-fs: Conflicting test_dummy_encryption options [ 1069.509729][ T30] audit: type=1400 audit(1772064956.127:5795): avc: denied { setopt } for pid=22862 comm="syz.0.4776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1069.714489][T22868] Cannot find del_set index 2 as target [ 1070.702606][T22869] xt_CT: No such helper "pptp" [ 1071.891833][ T30] audit: type=1400 audit(1772064958.353:5796): avc: denied { watch } for pid=22889 comm="syz.2.4783" path="/446/file0" dev="tmpfs" ino=2372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1072.556275][T22900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4785'. [ 1076.073373][T22937] overlayfs: missing 'lowerdir' [ 1077.393708][T22956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4806'. [ 1077.758085][ T30] audit: type=1400 audit(1772064963.854:5797): avc: denied { create } for pid=22972 comm="syz.3.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1078.204287][ T30] audit: type=1400 audit(1772064964.274:5798): avc: denied { listen } for pid=22972 comm="syz.3.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1079.394892][ T30] audit: type=1400 audit(1772064965.388:5799): avc: denied { setopt } for pid=22990 comm="syz.4.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1079.516388][T22999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1079.823699][T23012] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1081.469962][T23032] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1082.061927][T23045] overlayfs: failed to resolve './file1/file0': -2 [ 1083.089293][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1083.168976][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1083.213100][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1085.023499][T23077] Cannot find del_set index 2 as target [ 1085.514265][T23084] xt_CONNSECMARK: invalid mode: 66 [ 1087.263779][T23109] 9p: Bad value for 'msize' [ 1089.103717][T14478] Bluetooth: hci4: Invalid handle: 0x30c9 > 0x0eff [ 1089.633765][T23146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4876'. [ 1089.865092][T23147] process '/newroot/380/file0' started with executable stack [ 1089.924377][T23146] vlan2: entered allmulticast mode [ 1089.931249][T23146] syz_tun: entered allmulticast mode [ 1091.056980][T23175] 9p: Bad value for 'rfdno' [ 1091.603532][ T30] audit: type=1326 audit(1772064976.809:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1091.730090][ T30] audit: type=1326 audit(1772064976.837:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1091.794397][ T30] audit: type=1326 audit(1772064976.884:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1091.853899][ T30] audit: type=1326 audit(1772064976.884:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1091.944056][ T30] audit: type=1326 audit(1772064976.884:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1092.478680][ T30] audit: type=1326 audit(1772064976.884:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1092.502507][ T30] audit: type=1326 audit(1772064976.884:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1092.569261][ T30] audit: type=1326 audit(1772064976.884:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1092.621877][ T30] audit: type=1326 audit(1772064976.884:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1092.696857][ T30] audit: type=1326 audit(1772064976.884:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23189 comm="syz.5.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f79c8f9c629 code=0x7ffc0000 [ 1094.068622][T23235] netlink: 'syz.2.4905': attribute type 2 has an invalid length. [ 1096.295012][T23266] lo speed is unknown, defaulting to 1000 [ 1096.303451][T23266] lo speed is unknown, defaulting to 1000 [ 1097.455829][T23293] netlink: 'syz.2.4932': attribute type 2 has an invalid length. [ 1099.025010][T23326] netem: incorrect ge model size [ 1099.030816][T23326] netem: change failed [ 1100.498806][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1100.498824][ T30] audit: type=1400 audit(1772064985.125:5815): avc: denied { read } for pid=23358 comm="syz.0.4953" name="file2" dev="tmpfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1100.529419][ T30] audit: type=1400 audit(1772064985.125:5816): avc: denied { open } for pid=23358 comm="syz.0.4953" path="/393/file2" dev="tmpfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1101.031535][ T30] audit: type=1400 audit(1772064985.162:5817): avc: denied { ioctl } for pid=23358 comm="syz.0.4953" path="/393/file2" dev="tmpfs" ino=2090 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1102.485461][T23428] ipt_REJECT: ECHOREPLY no longer supported. [ 1102.572587][T23428] lo speed is unknown, defaulting to 1000 [ 1102.585496][T23428] lo speed is unknown, defaulting to 1000 [ 1108.026124][ T30] audit: type=1326 audit(1772064992.168:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1108.650839][ T30] audit: type=1326 audit(1772064992.168:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1108.674490][ T30] audit: type=1326 audit(1772064992.168:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1108.698022][ T30] audit: type=1326 audit(1772064992.168:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1108.766026][ T30] audit: type=1326 audit(1772064992.168:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1108.849301][T23495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.951549][T23495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1109.011838][ T30] audit: type=1326 audit(1772064992.168:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1109.082037][ T30] audit: type=1326 audit(1772064992.168:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1109.113818][ T30] audit: type=1326 audit(1772064992.168:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1109.601925][ T30] audit: type=1326 audit(1772064992.168:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1109.642498][ T30] audit: type=1326 audit(1772064992.168:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23485 comm="syz.0.5000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476d19c629 code=0x7ffc0000 [ 1109.713360][T23519] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5009'. [ 1110.747459][T23545] bridge_slave_0: left allmulticast mode [ 1110.776800][T23545] bridge_slave_0: left promiscuous mode [ 1110.795651][T23545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.878187][T23545] bridge_slave_1: left allmulticast mode [ 1110.907417][T23545] bridge_slave_1: left promiscuous mode [ 1110.954163][T23545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.084583][T23545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.111721][T23545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.158883][T23545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1114.040553][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1114.040571][ T30] audit: type=1400 audit(1772064997.799:5865): avc: denied { lock } for pid=23614 comm="syz.2.5045" path="socket:[78940]" dev="sockfs" ino=78940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1114.224913][ T30] audit: type=1400 audit(1772064997.968:5866): avc: denied { bind } for pid=23609 comm="syz.3.5044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1114.630158][ T30] audit: type=1400 audit(1772064998.351:5867): avc: denied { connect } for pid=23628 comm="syz.5.5050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1114.670976][ T30] audit: type=1400 audit(1772064998.370:5868): avc: denied { write } for pid=23628 comm="syz.5.5050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1115.606207][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5058'. [ 1115.615218][T23650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5058'. [ 1116.165064][T23654] tipc: Started in network mode [ 1116.170039][T23654] tipc: Node identity , cluster identity 4711 [ 1117.820970][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5074'. [ 1118.845773][T23723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5084'. [ 1118.856345][T23723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.903657][T23723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.303577][T23744] cgroup: Unknown subsys name 'cpuset' [ 1120.762593][T23764] 9p: Bad value for 'rfdno' [ 1121.045472][T23770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5103'. [ 1123.679421][T23836] netlink: 'syz.3.5127': attribute type 2 has an invalid length. [ 1125.864626][T23878] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5146'. [ 1125.879107][T23875] xt_CT: No such helper "snmp_trap" [ 1126.337025][T23893] netlink: 'syz.4.5150': attribute type 2 has an invalid length. [ 1127.057492][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.064065][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.490589][ T30] audit: type=1400 audit(2000000010.747:5869): avc: denied { getopt } for pid=23940 comm="syz.4.5171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1129.031511][ T30] audit: type=1326 audit(2000000011.262:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.2.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12bb9c629 code=0x7ffc0000 [ 1129.062102][ T30] audit: type=1326 audit(2000000011.262:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.2.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12bb9c629 code=0x7ffc0000 [ 1129.088977][T23950] lo speed is unknown, defaulting to 1000 [ 1129.096259][T23950] lo speed is unknown, defaulting to 1000 [ 1129.125643][ T30] audit: type=1326 audit(2000000011.290:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.2.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb12bb9c629 code=0x7ffc0000 [ 1129.278544][ T30] audit: type=1326 audit(2000000011.496:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.2.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12bb9c629 code=0x7ffc0000 [ 1129.303984][ T30] audit: type=1326 audit(2000000011.496:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.2.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12bb9c629 code=0x7ffc0000 [ 1134.470847][T24078] netlink: 'syz.0.5223': attribute type 11 has an invalid length. [ 1135.017158][T24074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5221'. [ 1137.197336][T24121] netlink: 'syz.5.5238': attribute type 2 has an invalid length. [ 1137.880192][ T30] audit: type=1400 audit(2000000001.721:5875): avc: denied { watch watch_reads } for pid=24117 comm="syz.0.5240" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1138.159790][ T30] audit: type=1400 audit(2000000001.973:5876): avc: denied { map } for pid=24116 comm="syz.2.5241" path="socket:[79522]" dev="sockfs" ino=79522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1138.840321][T24146] netlink: 'syz.0.5245': attribute type 11 has an invalid length. [ 1139.685515][T24159] netlink: 'syz.5.5253': attribute type 2 has an invalid length. [ 1141.404053][T24191] overlayfs: failed to clone upperpath [ 1142.819740][T24198] 9p: Bad value for 'rfdno' [ 1144.503900][ T30] audit: type=1400 audit(2000000007.922:5877): avc: denied { read } for pid=24221 comm="syz.4.5275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1145.332127][T24249] netlink: 'syz.2.5284': attribute type 2 has an invalid length. [ 1146.459943][T24266] xt_hashlimit: size too large, truncated to 1048576 [ 1147.647037][ T30] audit: type=1400 audit(2000000010.859:5878): avc: denied { connect } for pid=24293 comm="syz.0.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1147.696115][ T30] audit: type=1400 audit(2000000010.888:5879): avc: denied { read } for pid=24293 comm="syz.0.5300" laddr=fe80::13 lport=2977 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1149.610819][ T30] audit: type=1400 audit(2000000012.375:5880): avc: denied { create } for pid=24304 comm="syz.0.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1149.654365][ T30] audit: type=1400 audit(2000000012.394:5881): avc: denied { write } for pid=24304 comm="syz.0.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1155.067855][T24414] netlink: 'syz.5.5338': attribute type 11 has an invalid length. [ 1155.278763][ T3554] [ 1155.281116][ T3554] ============================================ [ 1155.287251][ T3554] WARNING: possible recursive locking detected [ 1155.293381][ T3554] syzkaller #0 Tainted: G L [ 1155.299340][ T3554] -------------------------------------------- [ 1155.305468][ T3554] kworker/u8:8/3554 is trying to acquire lock: [ 1155.311600][ T3554] ffff8880329ee158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 1155.321436][ T3554] [ 1155.321436][ T3554] but task is already holding lock: [ 1155.328779][ T3554] ffff88806511f958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 1155.338617][ T3554] [ 1155.338617][ T3554] other info that might help us debug this: [ 1155.346661][ T3554] Possible unsafe locking scenario: [ 1155.346661][ T3554] [ 1155.354096][ T3554] CPU0 [ 1155.357359][ T3554] ---- [ 1155.360618][ T3554] lock(&qdisc_xmit_lock_key#3); [ 1155.365637][ T3554] lock(&qdisc_xmit_lock_key#3); [ 1155.370655][ T3554] [ 1155.370655][ T3554] *** DEADLOCK *** [ 1155.370655][ T3554] [ 1155.378777][ T3554] May be due to missing lock nesting notation [ 1155.378777][ T3554] [ 1155.387078][ T3554] 11 locks held by kworker/u8:8/3554: [ 1155.392438][ T3554] #0: ffff888074cdb148 ((wq_completion)bond1){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1155.402790][ T3554] #1: ffffc9000e24fd08 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1155.415045][ T3554] #2: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xec/0x1700 [ 1155.424609][ T3554] #3: ffffffff8e7e9380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x4750 [ 1155.434525][ T3554] #4: ffff88807bf62228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x226a/0x4750 [ 1155.447140][ T3554] #5: ffff88806511f958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 1155.457415][ T3554] #6: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0xb3/0xec0 [ 1155.466286][ T3554] #7: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x356/0x24d0 [ 1155.476021][ T3554] #8: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x26/0x2e0 [ 1155.484806][ T3554] #9: ffffffff8e7e9380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x4750 [ 1155.494727][ T3554] #10: ffff88802c2bb228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x226a/0x4750 [ 1155.507426][ T3554] [ 1155.507426][ T3554] stack backtrace: [ 1155.513306][ T3554] CPU: 1 UID: 0 PID: 3554 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.513331][ T3554] Tainted: [L]=SOFTLOCKUP [ 1155.513337][ T3554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1155.513351][ T3554] Workqueue: bond1 bond_alb_monitor [ 1155.513371][ T3554] Call Trace: [ 1155.513377][ T3554] [ 1155.513384][ T3554] dump_stack_lvl+0x100/0x190 [ 1155.513412][ T3554] print_deadlock_bug.cold+0xbd/0xca [ 1155.513439][ T3554] __lock_acquire+0x12bb/0x2630 [ 1155.513467][ T3554] ? __alloc_skb+0x185/0x710 [ 1155.513494][ T3554] lock_acquire+0x1cf/0x380 [ 1155.513518][ T3554] ? sch_direct_xmit+0x3b5/0xc60 [ 1155.513547][ T3554] _raw_spin_lock+0x2e/0x40 [ 1155.513583][ T3554] ? sch_direct_xmit+0x3b5/0xc60 [ 1155.513607][ T3554] sch_direct_xmit+0x3b5/0xc60 [ 1155.513632][ T3554] ? lock_acquire+0x1cf/0x380 [ 1155.513657][ T3554] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1155.513682][ T3554] ? do_raw_spin_lock+0x190/0x260 [ 1155.513703][ T3554] __dev_queue_xmit+0x250e/0x4750 [ 1155.513732][ T3554] ? __pfx_arpt_do_table+0x10/0x10 [ 1155.513759][ T3554] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1155.513780][ T3554] ? lock_acquire+0x100/0x380 [ 1155.513805][ T3554] ? find_held_lock+0x2b/0x80 [ 1155.513825][ T3554] ? nf_hook.constprop.0+0x2f0/0x760 [ 1155.513847][ T3554] ? nf_hook.constprop.0+0x2f0/0x760 [ 1155.513870][ T3554] ? nf_hook.constprop.0+0x2fa/0x760 [ 1155.513891][ T3554] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1155.513917][ T3554] arp_xmit+0x106/0x2e0 [ 1155.513937][ T3554] arp_send_dst+0x200/0x280 [ 1155.513958][ T3554] arp_solicit+0x672/0x1070 [ 1155.513981][ T3554] ? rcu_is_watching+0x12/0xc0 [ 1155.514001][ T3554] ? __pfx_arp_solicit+0x10/0x10 [ 1155.514023][ T3554] ? neigh_probe+0x72/0x110 [ 1155.514048][ T3554] ? __pfx_arp_solicit+0x10/0x10 [ 1155.514069][ T3554] neigh_probe+0xce/0x110 [ 1155.514093][ T3554] __neigh_event_send+0xae9/0x1430 [ 1155.514114][ T3554] neigh_resolve_output+0x550/0x8f0 [ 1155.514133][ T3554] ? __pfx____neigh_create+0x10/0x10 [ 1155.514154][ T3554] ip_finish_output2+0x851/0x24d0 [ 1155.514175][ T3554] ? __pfx_ip_finish_output2+0x10/0x10 [ 1155.514193][ T3554] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 1155.514211][ T3554] ? nf_nat_ipv4_out+0xb2/0x510 [ 1155.514235][ T3554] ? find_held_lock+0x2b/0x80 [ 1155.514257][ T3554] __ip_finish_output.part.0+0x444/0x6f0 [ 1155.514276][ T3554] ip_output+0x39b/0xec0 [ 1155.514293][ T3554] ? __pfx_ip_output+0x10/0x10 [ 1155.514310][ T3554] ? __pfx_get_random_u32+0x10/0x10 [ 1155.514332][ T3554] ? __pfx_ip_finish_output+0x10/0x10 [ 1155.514352][ T3554] ip_local_out+0x35b/0x4a0 [ 1155.514370][ T3554] iptunnel_xmit+0x6d2/0xac0 [ 1155.514395][ T3554] ip_tunnel_xmit+0x1b85/0x3200 [ 1155.514419][ T3554] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1155.514437][ T3554] ? kasan_quarantine_put+0x104/0x240 [ 1155.514460][ T3554] ? lockdep_hardirqs_on+0x78/0x100 [ 1155.514480][ T3554] ? skb_free_head+0x1cb/0x220 [ 1155.514504][ T3554] __gre_xmit+0x820/0xb20 [ 1155.514522][ T3554] ? __pfx___gre_xmit+0x10/0x10 [ 1155.514537][ T3554] ? __pfx_pskb_expand_head+0x10/0x10 [ 1155.514552][ T3554] ? arch_stack_walk+0x94/0xf0 [ 1155.514574][ T3554] erspan_xmit+0x55a/0x1ec0 [ 1155.514591][ T3554] ? netif_skb_features+0x46d/0xe50 [ 1155.514612][ T3554] ? __pfx_erspan_xmit+0x10/0x10 [ 1155.514631][ T3554] dev_hard_start_xmit+0x121/0x7d0 [ 1155.514655][ T3554] sch_direct_xmit+0x1b2/0xc60 [ 1155.514681][ T3554] ? lock_acquire+0x1cf/0x380 [ 1155.514710][ T3554] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1155.514735][ T3554] ? do_raw_spin_lock+0x190/0x260 [ 1155.514756][ T3554] __dev_queue_xmit+0x250e/0x4750 [ 1155.514781][ T3554] ? rcu_is_watching+0x12/0xc0 [ 1155.514800][ T3554] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1155.514821][ T3554] ? __kasan_slab_alloc+0x89/0x90 [ 1155.514846][ T3554] ? __kasan_kfree_large+0x50/0xa0 [ 1155.514873][ T3554] ? __alloc_skb+0x4e9/0x710 [ 1155.514901][ T3554] ? __netdev_alloc_skb+0x10d/0x960 [ 1155.514928][ T3554] alb_send_lp_vid+0x31e/0x540 [ 1155.514945][ T3554] ? rcu_is_watching+0x12/0xc0 [ 1155.514963][ T3554] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1155.514981][ T3554] ? __lock_acquire+0x4a5/0x2630 [ 1155.515006][ T3554] ? nsim_dev_trap_report_work+0x96d/0xd10 [ 1155.515033][ T3554] alb_send_learning_packets+0xe0/0x2f0 [ 1155.515051][ T3554] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1155.515074][ T3554] bond_alb_monitor+0x9a0/0x1700 [ 1155.515094][ T3554] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1155.515111][ T3554] ? rcu_is_watching+0x12/0xc0 [ 1155.515131][ T3554] process_one_work+0x9d7/0x1920 [ 1155.515153][ T3554] ? __pfx_process_one_work+0x10/0x10 [ 1155.515174][ T3554] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1155.515193][ T3554] worker_thread+0x5da/0xe40 [ 1155.515214][ T3554] ? kthread+0x13a/0x450 [ 1155.515230][ T3554] ? __pfx_worker_thread+0x10/0x10 [ 1155.515246][ T3554] kthread+0x370/0x450 [ 1155.515261][ T3554] ? __pfx_kthread+0x10/0x10 [ 1155.515277][ T3554] ret_from_fork+0x754/0xd80 [ 1155.515295][ T3554] ? __pfx_ret_from_fork+0x10/0x10 [ 1155.515312][ T3554] ? __switch_to+0x7b4/0x1120 [ 1155.515331][ T3554] ? __pfx_kthread+0x10/0x10 [ 1155.515346][ T3554] ret_from_fork_asm+0x1a/0x30 [ 1155.515371][ T3554]