last executing test programs: 1m11.595851265s ago: executing program 3 (id=528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m11.45325669s ago: executing program 3 (id=532): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f0000000400)={@void, @val={0x1, 0x83, 0x8, 0xe057, 0xe, 0x9}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x9, '\x00', @loopback}}}}, 0x4a) 1m10.765239797s ago: executing program 3 (id=540): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 1m10.620511433s ago: executing program 3 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1m10.496383418s ago: executing program 3 (id=544): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0xa) 1m9.848880382s ago: executing program 3 (id=548): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1m9.453926864s ago: executing program 32 (id=548): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 55.62399408s ago: executing program 5 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 55.324321542s ago: executing program 5 (id=652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0x1}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x44040) sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}, 0x40) 54.87294724s ago: executing program 5 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000010001000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="850b0100009804000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 54.555299255s ago: executing program 33 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000010001000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="850b0100009804000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 4.565107294s ago: executing program 6 (id=1069): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 4.471023165s ago: executing program 6 (id=1070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@delchain={0x44, 0x64, 0xf31, 0xffffffdb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.358941434s ago: executing program 6 (id=1071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.24099181s ago: executing program 6 (id=1072): capset(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 3.365064816s ago: executing program 2 (id=1077): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.98210272s ago: executing program 2 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 2.653255167s ago: executing program 1 (id=1082): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.568016536s ago: executing program 6 (id=1083): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.504019407s ago: executing program 6 (id=1085): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffd, 0x490420, 0x2, 0x3ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x41, 0x1, 0x7) 2.400867037s ago: executing program 1 (id=1087): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = inotify_init() readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.23589827s ago: executing program 0 (id=1089): mount$tmpfs(0x0, 0x0, 0x0, 0x802, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x800896e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.149354953s ago: executing program 4 (id=1090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x0, {0x2, 0xff, 0x4}, {0x1, 0x0, 0x4}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x0, 0xf0}, 0xfc}], 0x40) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2.038579496s ago: executing program 2 (id=1091): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000019c0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 1.879393672s ago: executing program 4 (id=1092): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x80800) 1.638027725s ago: executing program 2 (id=1093): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 1.376074579s ago: executing program 2 (id=1094): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) 1.116251237s ago: executing program 1 (id=1095): sched_setscheduler(0x0, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b87594b3f"}, 0x0, 0x0, @default, @val, @val={0x2d, 0x1a, {0x8, 0x0, 0x5, 0x0, {0x1, 0xff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x2}, 0x6, 0xfffffff8, 0x9}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) 962.581198ms ago: executing program 1 (id=1096): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r3}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}], 0x28}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 773.598108ms ago: executing program 1 (id=1097): mmap$IORING_OFF_CQ_RING(&(0x7f0000a8e000/0x1000)=nil, 0x1000, 0x1000008, 0xc5054dee95ab75b8, 0xffffffffffffffff, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f000001"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, 0x0, &(0x7f00000005c0)) 668.30226ms ago: executing program 0 (id=1098): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xe, @empty, 0x6}}, [0xb, 0xb, 0xc4e7, 0x8000008000000005, 0x8, 0x42, 0xffffffffffff363b, 0x1, 0xffffffffffffff01, 0x10001, 0xfffffffffffffffd, 0x4, 0x814, 0xfffd, 0x76]}, &(0x7f0000000180)=0x100) 636.101487ms ago: executing program 2 (id=1099): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000b928407d1e9c310000000000010902"], 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 618.274771ms ago: executing program 4 (id=1100): openat$drirender128(0xffffffffffffff9c, 0x0, 0x10300, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) close_range(r0, 0xffffffffffffffff, 0x0) 448.410421ms ago: executing program 0 (id=1101): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x7f, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 448.190063ms ago: executing program 1 (id=1102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd17", 0x37}, {0x0}], 0x2}}], 0x1, 0x40) close(r2) 447.974296ms ago: executing program 4 (id=1103): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7"], 0x0, 0x4}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000540)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000191c00049000000000000000e5ffff08000400000000000000000a87d5e1402e3e241faa0b6a521684", 0x49}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0x10, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4c014) 215.775045ms ago: executing program 4 (id=1104): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2}}}}}}}, 0x0) 144.056408ms ago: executing program 0 (id=1105): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x850) syz_open_dev$vim2m(0x0, 0x92c0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_clock={{0x4}, {0xf9, 0xc9, 0xffff320b, 0x7485}}}}, 0xf) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) 87.264548ms ago: executing program 0 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) 15.837251ms ago: executing program 0 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x99fe, 0x11, ')\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 0s ago: executing program 4 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): v: batadv0: Interface activated: batadv_slave_0 [ 77.789915][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.818724][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.908593][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.920376][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.967199][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.977312][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.017557][ T5608] veth0_vlan: entered promiscuous mode [ 78.027624][ T5607] veth0_macvtap: entered promiscuous mode [ 78.075204][ T5607] veth1_macvtap: entered promiscuous mode [ 78.092550][ T439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.104673][ T439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.111407][ T5608] veth1_vlan: entered promiscuous mode [ 78.144586][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.152871][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.193441][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.219120][ T439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.227994][ T5608] veth0_macvtap: entered promiscuous mode [ 78.240524][ T439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.260413][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.275241][ T5613] veth0_vlan: entered promiscuous mode [ 78.278409][ T30] audit: type=1400 audit(1778033532.991:153): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.sYLeRW/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.293156][ T5613] veth1_vlan: entered promiscuous mode [ 78.321561][ T5608] veth1_macvtap: entered promiscuous mode [ 78.336032][ T30] audit: type=1400 audit(1778033533.021:154): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.340929][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.364795][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.378028][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.387447][ T30] audit: type=1400 audit(1778033533.021:155): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.sYLeRW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.394102][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.420407][ T30] audit: type=1400 audit(1778033533.021:156): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.420450][ T30] audit: type=1400 audit(1778033533.031:157): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.sYLeRW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.420486][ T30] audit: type=1400 audit(1778033533.041:158): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.sYLeRW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.515031][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.526067][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.535462][ T30] audit: type=1400 audit(1778033533.091:159): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.558564][ T30] audit: type=1400 audit(1778033533.091:160): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.581987][ T30] audit: type=1400 audit(1778033533.091:161): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="gadgetfs" ino=7621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.607392][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.614720][ T30] audit: type=1400 audit(1778033533.091:162): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.656026][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.695264][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.710473][ T5613] veth0_macvtap: entered promiscuous mode [ 78.745516][ T5613] veth1_macvtap: entered promiscuous mode [ 78.753323][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.768436][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.801929][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.829386][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.847690][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.908964][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.909956][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.927803][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.940182][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.991221][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.051572][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.083411][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.114863][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.142250][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.350079][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 79.367934][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 79.397024][ T439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.410781][ T439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.501987][ T439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.535312][ T439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.613783][ T5625] Bluetooth: hci2: command tx timeout [ 79.614586][ T4928] Bluetooth: hci1: command tx timeout [ 79.682292][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.694643][ T4928] Bluetooth: hci0: command tx timeout [ 79.697372][ T5625] Bluetooth: hci3: command tx timeout [ 79.700099][ T5620] Bluetooth: hci4: command tx timeout [ 79.706760][ T5824] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 79.715622][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.756010][ T5824] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 79.763613][ T5824] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9'. [ 79.921696][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 79.979550][ T5833] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10'. [ 80.050248][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.066832][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.356210][ T5839] ªªªªªª: renamed from vlan0 (while UP) [ 80.570979][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 80.619188][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 80.699793][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 80.714439][ T5849] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 80.718695][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 80.725452][ T5849] syzkaller1: Linktype set failed because interface is up [ 80.739736][ T5845] Zero length message leads to an empty skb [ 81.228023][ T5864] SELinux: ebitmap: high bit 1536 is not equal to the expected value 1152 [ 81.289016][ T5864] SELinux: failed to load policy [ 81.303608][ T5870] dvmrp0: entered allmulticast mode [ 81.316187][ T5873] warning: `syz.0.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.615747][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.758592][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.762991][ T439] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.811132][ T439] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.862888][ T439] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.891050][ T439] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.268199][ T5906] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 82.803341][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 82.901310][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.968559][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.016846][ T1111] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.065323][ T1111] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.181193][ T5936] capability: warning: `syz.3.51' uses deprecated v2 capabilities in a way that may be insecure [ 83.389700][ T5944] netlink: 'syz.0.56': attribute type 1 has an invalid length. [ 83.398325][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 83.398342][ T30] audit: type=1400 audit(1778033538.111:198): avc: denied { create } for pid=5942 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.573274][ T30] audit: type=1326 audit(1778033538.281:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.0.58" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89ccd9cdd9 code=0x0 [ 83.732867][ T30] audit: type=1400 audit(1778033538.441:200): avc: denied { append } for pid=5955 comm="syz.1.61" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.260213][ T30] audit: type=1400 audit(1778033538.971:201): avc: denied { watch } for pid=5964 comm="syz.4.64" path="/8/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.285604][ T30] audit: type=1400 audit(1778033538.971:202): avc: denied { watch_sb watch_reads } for pid=5964 comm="syz.4.64" path="/8/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.489520][ T30] audit: type=1400 audit(1778033539.201:203): avc: denied { write } for pid=5968 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.128863][ T30] audit: type=1400 audit(1778033539.841:204): avc: denied { name_bind } for pid=5991 comm="syz.1.75" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 85.178848][ T30] audit: type=1400 audit(1778033539.841:205): avc: denied { node_bind } for pid=5991 comm="syz.1.75" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.325469][ T30] audit: type=1400 audit(1778033540.031:206): avc: denied { unlink } for pid=5998 comm="syz.1.77" name="#1" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.353208][ T6001] ======================================================= [ 85.353208][ T6001] WARNING: The mand mount option has been deprecated and [ 85.353208][ T6001] and is ignored by this kernel. Remove the mand [ 85.353208][ T6001] option from the mount to silence this warning. [ 85.353208][ T6001] ======================================================= [ 85.456413][ T6001] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 85.493292][ T6001] overlayfs: missing 'lowerdir' [ 85.497572][ T30] audit: type=1400 audit(1778033540.201:207): avc: denied { mount } for pid=5998 comm="syz.1.77" name="/" dev="overlay" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.631271][ T989] cfg80211: failed to load regulatory.db [ 88.002428][ T6066] netlink: 'syz.0.105': attribute type 1 has an invalid length. [ 88.035665][ T6066] erspan1: entered allmulticast mode [ 88.307242][ T5735] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.476814][ T5735] usb 5-1: Using ep0 maxpacket: 16 [ 88.510276][ T5735] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.547315][ T5735] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.591882][ T5735] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.619262][ T5735] usb 5-1: string descriptor 0 read error: -22 [ 88.637778][ T5735] usb 5-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.40 [ 88.664901][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.704675][ T6090] __nla_validate_parse: 7 callbacks suppressed [ 88.704694][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 88.738647][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 88.738666][ T30] audit: type=1400 audit(1778033543.441:227): avc: denied { watch watch_reads } for pid=6091 comm="syz.3.116" path="/21" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.856449][ T6095] netlink: 'syz.3.118': attribute type 21 has an invalid length. [ 88.891861][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.901877][ T6095] netlink: 'syz.3.118': attribute type 21 has an invalid length. [ 88.914497][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.939237][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.964101][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.031838][ T5620] Bluetooth: hci4: hcon ffff8880794b0000 sent 1 < count 56588 [ 89.044079][ T5735] usbhid 5-1:1.0: can't add hid device: -71 [ 89.090887][ T5620] Bluetooth: hci4: hcon ffff8880794b0000 sent 0 < count 16 [ 89.103121][ T5735] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 89.149985][ T5735] usb 5-1: USB disconnect, device number 2 [ 89.264309][ T6103] syz.1.121 uses obsolete (PF_INET,SOCK_PACKET) [ 89.588746][ T30] audit: type=1400 audit(1778033544.301:228): avc: denied { ioctl } for pid=6110 comm="syz.3.126" path="socket:[9360]" dev="sockfs" ino=9360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.134249][ T6126] netlink: 'syz.0.133': attribute type 13 has an invalid length. [ 90.140647][ T6128] team0: entered promiscuous mode [ 90.155337][ T6128] team_slave_0: entered promiscuous mode [ 90.170424][ T6128] team_slave_1: entered promiscuous mode [ 90.196767][ T6128] batadv0: entered promiscuous mode [ 90.218227][ T6128] hsr1: entered allmulticast mode [ 90.233571][ T6128] team0: entered allmulticast mode [ 90.239888][ T6128] team_slave_0: entered allmulticast mode [ 90.252504][ T6128] team_slave_1: entered allmulticast mode [ 90.261587][ T6131] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 90.277095][ T6128] batadv0: entered allmulticast mode [ 90.288345][ T6128] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 90.301405][ T6128] team0: left promiscuous mode [ 90.306766][ T6128] team_slave_0: left promiscuous mode [ 90.312762][ T6128] team_slave_1: left promiscuous mode [ 90.322692][ T6128] batadv0: left promiscuous mode [ 90.447074][ T6140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6140 comm=syz.2.139 [ 90.461988][ T6140] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 90.494281][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.503365][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.524770][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.532083][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.540215][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.547346][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.560459][ T6131] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 90.767476][ T30] audit: type=1400 audit(1778033545.481:229): avc: denied { relabelfrom } for pid=6144 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.769228][ T30] audit: type=1400 audit(1778033545.481:230): avc: denied { relabelto } for pid=6144 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.310364][ T6163] netlink: 76 bytes leftover after parsing attributes in process `syz.3.149'. [ 91.328734][ T6166] lo: Caught tx_queue_len zero misconfig [ 91.347473][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 91.368186][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 91.423987][ T5713] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.441706][ T30] audit: type=1400 audit(1778033546.151:231): avc: denied { create } for pid=6169 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 91.480473][ T6170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.625512][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 91.635921][ T5713] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 91.654288][ T5713] usb 3-1: config 0 has no interface number 0 [ 91.679098][ T5713] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.693597][ T5713] usb 3-1: config 0 interface 85 has no altsetting 0 [ 91.711264][ T30] audit: type=1400 audit(1778033546.411:232): avc: denied { mount } for pid=6173 comm="syz.3.154" name="/" dev="autofs" ino=9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 91.732251][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 91.745588][ T5713] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 91.755906][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.764181][ T5713] usb 3-1: Product: syz [ 91.768493][ T5713] usb 3-1: Manufacturer: syz [ 91.773114][ T5713] usb 3-1: SerialNumber: syz [ 91.780237][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 91.790848][ T5713] usb 3-1: config 0 descriptor?? [ 91.866359][ T6179] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 91.866359][ T6179] The task syz.0.156 (6179) triggered the difference, watch for misbehavior. [ 91.920561][ T30] audit: type=1400 audit(1778033546.631:233): avc: denied { mounton } for pid=6181 comm="syz.4.158" path="/30/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.944785][ T6183] macsec1: entered promiscuous mode [ 91.950152][ T6183] macsec1: entered allmulticast mode [ 92.213828][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.373772][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 92.385541][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.398524][ T29] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.420997][ T5713] appletouch 3-1:0.85: Geyser mode initialized. [ 92.428935][ T29] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.459047][ T29] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.481459][ T5713] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input5 [ 92.511260][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.521061][ T29] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 92.548929][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.579237][ T29] usb 4-1: config 0 descriptor?? [ 92.922086][ T30] audit: type=1326 audit(1778033547.631:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.0.166" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89ccd9cdd9 code=0x0 [ 93.035938][ T29] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 93.128149][ T29] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -38 [ 93.222853][ T9] usb 3-1: USB disconnect, device number 2 [ 93.285752][ T29] usb 4-1: USB disconnect, device number 2 [ 93.409176][ T9] appletouch 3-1:0.85: input: appletouch disconnected [ 93.497399][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 93.544438][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 93.714585][ T6219] netlink: 'syz.4.170': attribute type 10 has an invalid length. [ 93.722395][ T30] audit: type=1400 audit(1778033548.421:235): avc: denied { bind } for pid=6218 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.759017][ T6219] dummy0: entered allmulticast mode [ 93.768833][ T6219] team0: Failed to send options change via netlink (err -105) [ 93.776384][ T30] audit: type=1400 audit(1778033548.431:236): avc: denied { setopt } for pid=6218 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.803859][ T6219] team0: Port device dummy0 added [ 93.809380][ T6225] netlink: 'syz.4.170': attribute type 10 has an invalid length. [ 93.848374][ T6225] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.908322][ T6225] dummy0: left allmulticast mode [ 93.929773][ T6225] team0: Failed to send options change via netlink (err -105) [ 93.944125][ T6225] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.960978][ T6225] team0: Port device dummy0 removed [ 93.968044][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 93.991596][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 94.001188][ T6225] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.095340][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 94.122769][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 94.177280][ T6235] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 94.217559][ T30] audit: type=1400 audit(1778033548.931:237): avc: denied { write } for pid=6233 comm="syz.2.178" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.328767][ T6235] bond1: entered promiscuous mode [ 94.340058][ T30] audit: type=1400 audit(1778033549.051:238): avc: denied { create } for pid=6241 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.349036][ T6235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.421072][ T30] audit: type=1400 audit(1778033549.131:239): avc: denied { execute } for pid=6241 comm="syz.1.179" path="/41/memory.events" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.546942][ T6239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.566317][ T6239] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 94.577962][ T6239] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 94.602974][ T6239] bond1: (slave vcan1): making interface the new active one [ 94.611446][ T6239] vcan1: entered promiscuous mode [ 94.638745][ T6239] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 95.224695][ T30] audit: type=1400 audit(1778033549.941:240): avc: denied { read write } for pid=6261 comm="syz.3.186" name="video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.299932][ T30] audit: type=1400 audit(1778033549.941:241): avc: denied { open } for pid=6261 comm="syz.3.186" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.191911][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 96.204260][ T24] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 96.381610][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.405075][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.439986][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.477897][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.507347][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.546317][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.562279][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.603743][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.622521][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.662872][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.691739][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.708175][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.738945][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.769385][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.794038][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.830360][ T24] usb 4-1: string descriptor 0 read error: -22 [ 96.843356][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.869671][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.946309][ T24] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 96.957100][ T6304] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 97.085933][ T6304] bond2: entered promiscuous mode [ 97.108884][ T6304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.543438][ T6308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.612041][ T6308] bond2: (slave bond3): making interface the new active one [ 97.671604][ T6308] bond3: entered promiscuous mode [ 97.717545][ T6308] bond2: (slave bond3): Enslaving as an active interface with an up link [ 97.808945][ T30] audit: type=1400 audit(1778033552.521:242): avc: denied { mounton } for pid=6314 comm="syz.0.205" path="/38/file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 97.863555][ T30] audit: type=1400 audit(1778033552.531:243): avc: denied { mount } for pid=6314 comm="syz.0.205" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.099988][ T30] audit: type=1326 audit(1778033552.811:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.4.206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833a79cdd9 code=0x0 [ 98.398729][ T30] audit: type=1400 audit(1778033553.111:245): avc: denied { watch watch_reads } for pid=6323 comm="syz.1.207" path="pipe:[5191]" dev="pipefs" ino=5191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 98.782803][ T6328] geneve1: Caught tx_queue_len zero misconfig [ 99.299899][ T10] usb 4-1: USB disconnect, device number 3 [ 99.918061][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 99.918077][ T30] audit: type=1400 audit(1778033554.631:247): avc: denied { ioctl } for pid=6355 comm="syz.0.220" path="socket:[9770]" dev="sockfs" ino=9770 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.031251][ T6357] syzkaller0: entered promiscuous mode [ 100.045218][ T6357] syzkaller0: entered allmulticast mode [ 102.767015][ T30] audit: type=1400 audit(1778033557.481:248): avc: denied { write } for pid=6384 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.848995][ T30] audit: type=1400 audit(1778033557.561:249): avc: denied { create } for pid=6388 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.902507][ T30] audit: type=1400 audit(1778033557.581:250): avc: denied { setopt } for pid=6388 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.955181][ T30] audit: type=1400 audit(1778033557.591:251): avc: denied { write } for pid=6388 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.017204][ T30] audit: type=1326 audit(1778033557.721:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.2.235" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd66bb9cdd9 code=0x0 [ 103.498928][ T30] audit: type=1804 audit(1778033558.201:253): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.238" name="/newroot/53/file1" dev="tmpfs" ino=302 res=1 errno=0 [ 105.011553][ T30] audit: type=1400 audit(1778033559.721:254): avc: denied { create } for pid=6433 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.145670][ T30] audit: type=1400 audit(1778033559.861:255): avc: denied { create } for pid=6437 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.187355][ T30] audit: type=1400 audit(1778033559.881:256): avc: denied { ioctl } for pid=6437 comm="syz.1.247" path="socket:[9884]" dev="sockfs" ino=9884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.812454][ T6486] netlink: 'syz.4.266': attribute type 8 has an invalid length. [ 106.835675][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 106.877847][ T6486] bond0: entered promiscuous mode [ 106.889224][ T6486] bond_slave_0: entered promiscuous mode [ 106.901681][ T6486] bond_slave_1: entered promiscuous mode [ 106.917030][ T6486] dummy0: entered promiscuous mode [ 106.943477][ T6486] gretap0: entered promiscuous mode [ 106.956790][ T6486] ip6gretap0: entered promiscuous mode [ 106.992959][ T6486] hsr1: entered promiscuous mode [ 107.559524][ T30] audit: type=1400 audit(1778033562.271:257): avc: denied { mount } for pid=6511 comm="syz.4.277" name="/" dev="configfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.629345][ T30] audit: type=1400 audit(1778033562.311:258): avc: denied { search } for pid=6511 comm="syz.4.277" name="/" dev="configfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.703990][ T30] audit: type=1400 audit(1778033562.371:259): avc: denied { setattr } for pid=6511 comm="syz.4.277" name="/" dev="configfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.635930][ T30] audit: type=1326 audit(1778033563.351:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.3.283" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f466c59cdd9 code=0x0 [ 109.006428][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.288'. [ 109.126659][ T30] audit: type=1400 audit(1778033563.841:261): avc: denied { read } for pid=6558 comm="syz.0.290" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.175452][ T30] audit: type=1400 audit(1778033563.841:262): avc: denied { open } for pid=6558 comm="syz.0.290" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.228374][ T30] audit: type=1400 audit(1778033563.841:263): avc: denied { ioctl } for pid=6558 comm="syz.0.290" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.569080][ T6578] overlayfs: failed to clone lowerpath [ 109.815350][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 109.831404][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.928563][ T29] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.098111][ T29] libceph: connect (1)[c::]:6789 error -101 [ 110.141024][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 110.225071][ T29] libceph: connect (1)[c::]:6789 error -101 [ 110.272516][ T6593] ceph: No mds server is up or the cluster is laggy [ 110.304751][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 110.357514][ T6608] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.307'. [ 110.644781][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 110.644798][ T30] audit: type=1400 audit(1778033565.361:268): avc: denied { create } for pid=6612 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.728252][ T30] audit: type=1400 audit(1778033565.401:269): avc: denied { bind } for pid=6612 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.815817][ T30] audit: type=1400 audit(1778033565.531:270): avc: denied { write } for pid=6587 comm="syz.0.303" dev="devtmpfs" ino=2812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.884702][ T30] audit: type=1400 audit(1778033565.571:271): avc: denied { setopt } for pid=6616 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.701424][ T6636] SELinux: failed to load policy [ 112.172562][ T30] audit: type=1400 audit(1778033566.881:272): avc: denied { bind } for pid=6651 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.172884][ T6652] Bluetooth: MGMT ver 1.23 [ 112.192624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.225266][ T30] audit: type=1400 audit(1778033566.881:273): avc: denied { write } for pid=6651 comm="syz.0.323" path="socket:[10211]" dev="sockfs" ino=10211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.357032][ T5596] libceph: connect (1)[c::]:6789 error -101 [ 112.363410][ T5596] libceph: mon0 (1)[c::]:6789 connect error [ 112.386678][ T24] libceph: connect (1)[c::]:6789 error -101 [ 112.396491][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 112.408289][ T24] libceph: connect (1)[c::]:6789 error -101 [ 112.416479][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 112.483989][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 112.492980][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 112.505348][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 112.515896][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 112.625207][ T5596] libceph: connect (1)[c::]:6789 error -101 [ 112.635775][ T5596] libceph: mon0 (1)[c::]:6789 connect error [ 112.674103][ T29] libceph: connect (1)[c::]:6789 error -101 [ 112.685678][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 112.701690][ T30] audit: type=1400 audit(1778033567.411:274): avc: denied { create } for pid=6669 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.724205][ T30] audit: type=1400 audit(1778033567.441:275): avc: denied { ioctl } for pid=6669 comm="syz.3.329" path="socket:[11317]" dev="sockfs" ino=11317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.043970][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.067507][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.078388][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.086355][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.140423][ T6660] ceph: No mds server is up or the cluster is laggy [ 113.140423][ T6655] ceph: No mds server is up or the cluster is laggy [ 113.167953][ T10] libceph: connect (1)[c::]:6789 error -101 [ 113.186857][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 113.196481][ T24] libceph: connect (1)[c::]:6789 error -101 [ 113.205987][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 113.429091][ T6691] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.510328][ T6692] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.658060][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'. [ 113.717239][ T30] audit: type=1400 audit(1778033568.431:276): avc: denied { mount } for pid=6705 comm="syz.0.341" name="/" dev="ramfs" ino=11351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.968759][ T6714] netlink: 'syz.0.344': attribute type 18 has an invalid length. [ 113.978876][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 114.002802][ T6714] netlink: 'syz.0.344': attribute type 18 has an invalid length. [ 114.011547][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 114.625929][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 114.635907][ T6734] netlink: 'syz.3.353': attribute type 30 has an invalid length. [ 114.794944][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 114.831428][ T30] audit: type=1400 audit(1778033569.541:277): avc: denied { create } for pid=6735 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 114.835271][ T6734] netlink: 'syz.3.353': attribute type 30 has an invalid length. [ 115.112559][ T6742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.356'. [ 115.477410][ T6750] trusted_key: encrypted_key: master key parameter 'ed:syz' is invalid [ 115.541719][ T6750] trusted_key: encrypted_key: keylen parameter is missing [ 115.742162][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.768319][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.800942][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.824136][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.068720][ T6771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6771 comm=syz.4.367 [ 116.107346][ T6771] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 116.310433][ T6775] bond4: (slave bridge1): making interface the new active one [ 116.362451][ T6775] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 116.375877][ T6777] netlink: 'syz.2.369': attribute type 30 has an invalid length. [ 116.381501][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 116.381519][ T30] audit: type=1400 audit(1778033571.091:293): avc: denied { read } for pid=6778 comm="syz.0.370" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.500353][ T30] audit: type=1400 audit(1778033571.091:294): avc: denied { open } for pid=6778 comm="syz.0.370" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.581161][ T6787] netlink: 'syz.4.374': attribute type 10 has an invalid length. [ 116.594364][ T6777] netlink: 'syz.2.369': attribute type 30 has an invalid length. [ 116.861867][ T30] audit: type=1326 audit(1778033571.571:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.3.376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c59cdd9 code=0x7fc00000 [ 116.944463][ T30] audit: type=1326 audit(1778033571.571:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.3.376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f466c59cdd9 code=0x7fc00000 [ 117.039617][ T30] audit: type=1326 audit(1778033571.571:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.3.376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c59cdd9 code=0x7fc00000 [ 117.098465][ T30] audit: type=1326 audit(1778033571.571:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.3.376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c59cdd9 code=0x7fc00000 [ 117.169261][ T30] audit: type=1326 audit(1778033571.571:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.3.376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c59cdd9 code=0x7fc00000 [ 117.236011][ T30] audit: type=1326 audit(1778033571.571:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6790 comm="syz.3.376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466c59cdd9 code=0x7fc00000 [ 117.293091][ T30] audit: type=1400 audit(1778033571.851:301): avc: denied { bind } for pid=6799 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.218677][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6830 comm=syz.0.391 [ 118.265092][ T6830] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 118.411604][ T6834] __nla_validate_parse: 5 callbacks suppressed [ 118.411618][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 118.494256][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 118.506615][ T6832] bond2: (slave bridge1): making interface the new active one [ 118.525943][ T6832] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 119.083752][ T5713] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.248187][ T6849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.263720][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 119.278581][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.295838][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.315275][ T5713] usb 1-1: config 0 has no interfaces? [ 119.327473][ T5713] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.353706][ T5713] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 119.365142][ T6849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.383736][ T5713] usb 1-1: Product: syz [ 119.386216][ T6849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.387981][ T5713] usb 1-1: Manufacturer: syz [ 119.409803][ T30] audit: type=1804 audit(1778033574.121:302): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.397" name="/newroot/66/file1" dev="tmpfs" ino=353 res=1 errno=0 [ 119.453850][ T5713] usb 1-1: config 0 descriptor?? [ 119.759871][ T5596] usb 1-1: USB disconnect, device number 2 [ 120.020281][ T6860] syzkaller0: entered promiscuous mode [ 120.036114][ T6860] syzkaller0: entered allmulticast mode [ 120.139179][ T24] libceph: connect (1)[c::]:6789 error -101 [ 120.145496][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 120.308532][ T6866] ceph: No mds server is up or the cluster is laggy [ 120.400140][ T6876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.373520][ T6895] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 122.468169][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.623709][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 122.632413][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.642919][ T24] usb 3-1: config 0 has no interfaces? [ 122.652784][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.666525][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 122.675252][ T24] usb 3-1: Product: syz [ 122.679451][ T24] usb 3-1: Manufacturer: syz [ 122.700567][ T24] usb 3-1: config 0 descriptor?? [ 122.756415][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 122.756431][ T30] audit: type=1804 audit(1778033577.471:318): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.420" name="file1" dev="tmpfs" ino=514 res=1 errno=0 [ 122.972868][ T24] usb 3-1: USB disconnect, device number 3 [ 123.105618][ T6923] netlink: 'syz.4.421': attribute type 13 has an invalid length. [ 123.153494][ T6895] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 123.781149][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.423'. [ 124.981823][ T30] audit: type=1400 audit(1778033579.691:319): avc: denied { create } for pid=6949 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.029654][ T30] audit: type=1400 audit(1778033579.711:320): avc: denied { bind } for pid=6949 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.077709][ T30] audit: type=1400 audit(1778033579.731:321): avc: denied { listen } for pid=6949 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.118943][ T30] audit: type=1400 audit(1778033579.731:322): avc: denied { write } for pid=6949 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.157778][ T30] audit: type=1400 audit(1778033579.731:323): avc: denied { accept } for pid=6949 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.066776][ T6967] netlink: 'syz.1.437': attribute type 13 has an invalid length. [ 127.240599][ T6972] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.439'. [ 127.262311][ T6972] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 127.294910][ T30] audit: type=1400 audit(1778033582.001:324): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 127.478813][ T6978] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 127.535989][ T30] audit: type=1400 audit(1778033582.251:325): avc: denied { map } for pid=6980 comm="syz.1.443" path="socket:[11673]" dev="sockfs" ino=11673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 127.555887][ T6978] bond1: entered promiscuous mode [ 127.580389][ T6978] bond1: entered allmulticast mode [ 127.588521][ T6978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.677071][ T6983] erspan1: entered allmulticast mode [ 127.723152][ T6983] bond1: (slave erspan1): making interface the new active one [ 127.772395][ T6983] erspan1: entered promiscuous mode [ 127.817312][ T6983] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 127.852936][ T6988] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 127.971950][ T6988] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.984514][ T6990] ip_vti0: entered promiscuous mode [ 127.990140][ T6992] overlayfs: failed to clone upperpath [ 128.095600][ T30] audit: type=1400 audit(1778033582.801:326): avc: denied { create } for pid=6995 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.099325][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 128.168151][ T30] audit: type=1400 audit(1778033582.801:327): avc: denied { setopt } for pid=6995 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.251038][ T30] audit: type=1400 audit(1778033582.811:328): avc: denied { ioctl } for pid=6995 comm="syz.1.449" path="socket:[11693]" dev="sockfs" ino=11693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.323698][ T30] audit: type=1400 audit(1778033582.811:329): avc: denied { bind } for pid=6995 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.467597][ T30] audit: type=1400 audit(1778033583.181:330): avc: denied { read write } for pid=7003 comm="syz.0.454" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 128.523078][ T30] audit: type=1400 audit(1778033583.181:331): avc: denied { open } for pid=7003 comm="syz.0.454" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 128.790137][ T7011] netlink: 'syz.3.455': attribute type 16 has an invalid length. [ 128.822683][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.849677][ T7011] netlink: 'syz.3.455': attribute type 17 has an invalid length. [ 128.877188][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.011179][ T30] audit: type=1400 audit(1778033583.721:332): avc: denied { setopt } for pid=7012 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.073720][ T30] audit: type=1400 audit(1778033583.721:333): avc: denied { read } for pid=7012 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.131529][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.138756][ T7011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.202624][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.209822][ T7011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.421659][ T7011] batadv_slave_1: entered promiscuous mode [ 129.448284][ T7011] batadv_slave_1: entered allmulticast mode [ 129.466338][ T7011] macsec1: left promiscuous mode [ 129.475037][ T7011] macsec1: left allmulticast mode [ 129.486747][ T7011] batadv_slave_1: left allmulticast mode [ 129.505463][ T7011] bond1: left promiscuous mode [ 129.516268][ T7011] erspan1: left promiscuous mode [ 129.529233][ T7011] bond1: left allmulticast mode [ 129.547094][ T7011] erspan1: left allmulticast mode [ 129.624002][ T30] audit: type=1400 audit(1778033584.341:334): avc: denied { read } for pid=7025 comm="syz.0.460" path="socket:[12877]" dev="sockfs" ino=12877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.696177][ T30] audit: type=1400 audit(1778033584.401:335): avc: denied { write } for pid=7025 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.030566][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 130.053487][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 130.159693][ T7047] could not open pipe file descriptor [ 130.326102][ T7051] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 130.446945][ T7057] overlayfs: failed to clone upperpath [ 130.523757][ T5735] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.682216][ T7066] Illegal XDP return value 4294967274 on prog (id 23) dev syz_tun, expect packet loss! [ 130.693172][ T5735] usb 3-1: Using ep0 maxpacket: 32 [ 130.704540][ T5735] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 130.721469][ T5735] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.747303][ T5735] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.764909][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.782012][ T5735] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.805712][ T5735] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.823249][ T5735] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.833109][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.862102][ T5735] usb 3-1: config 0 descriptor?? [ 131.083149][ T5735] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.310337][ T5735] usb 3-1: USB disconnect, device number 4 [ 131.341963][ T5735] usblp0: removed [ 131.701603][ T7105] overlayfs: failed to clone lowerpath [ 132.421020][ T7128] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 132.529321][ T7136] bond1: (slave ip6gretap1): making interface the new active one [ 132.538992][ T7136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.560947][ T7136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.579331][ T7136] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 132.657018][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.665910][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.000251][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 133.309817][ T30] kauditd_printk_skb: 1820 callbacks suppressed [ 133.309834][ T30] audit: type=1400 audit(1778033588.021:2156): avc: denied { append } for pid=7168 comm="syz.1.516" name="icmp6" dev="proc" ino=4026533169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.961828][ T7190] overlayfs: failed to clone upperpath [ 134.199374][ T7195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.525'. [ 134.235027][ T7195] netlink: 43 bytes leftover after parsing attributes in process `syz.3.525'. [ 134.260619][ T7195] netlink: 'syz.3.525': attribute type 6 has an invalid length. [ 134.270252][ T7195] netlink: 'syz.3.525': attribute type 5 has an invalid length. [ 134.282472][ T7195] netlink: 43 bytes leftover after parsing attributes in process `syz.3.525'. [ 134.559585][ T7212] xt_hashlimit: size too large, truncated to 1048576 [ 134.725398][ T7219] fuse: Bad value for 'fd' [ 135.442536][ T30] audit: type=1400 audit(1778033590.041:2157): avc: denied { write } for pid=7239 comm="syz.4.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.574515][ T30] audit: type=1400 audit(1778033591.291:2158): avc: denied { watch_sb watch_reads } for pid=7255 comm="syz.4.552" path="/117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.794316][ T4928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.807122][ T4928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.812239][ T30] audit: type=1400 audit(1778033591.501:2159): avc: denied { ioctl } for pid=7264 comm="syz-executor" path="socket:[12067]" dev="sockfs" ino=12067 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.843350][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.870253][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.888871][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.120743][ T7274] bridge_slave_0: left allmulticast mode [ 137.143718][ T7274] bridge_slave_0: left promiscuous mode [ 137.149564][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.185757][ T7274] bridge_slave_1: left allmulticast mode [ 137.203856][ T7274] bridge_slave_1: left promiscuous mode [ 137.211226][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.255205][ T7274] bond0: (slave bond_slave_0): Releasing backup interface [ 137.337498][ T7274] bond0: (slave bond_slave_1): Releasing backup interface [ 137.372482][ T7274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.554180][ T7077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.570096][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.577096][ T7077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.755338][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.780179][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 137.799086][ T7077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.816248][ T29] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 137.836665][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.856212][ T7077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.915335][ T29] usb 3-1: config 0 descriptor?? [ 138.076090][ T7077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.097163][ T7077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.233040][ T29] ath6kl: Failed to submit usb control message: -71 [ 138.248446][ T7077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.260763][ T29] ath6kl: unable to send the bmi data to the device: -71 [ 138.275380][ T29] ath6kl: Unable to send get target info: -71 [ 138.285342][ T7077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.304390][ T29] ath6kl: Failed to init ath6kl core: -71 [ 138.329281][ T29] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 138.359953][ T29] usb 3-1: USB disconnect, device number 5 [ 138.977495][ T4928] Bluetooth: hci3: command tx timeout [ 139.052566][ T7077] bridge_slave_1: left allmulticast mode [ 139.083325][ T7077] bridge_slave_1: left promiscuous mode [ 139.118534][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.206357][ T7077] bridge_slave_0: left allmulticast mode [ 139.223789][ T7077] bridge_slave_0: left promiscuous mode [ 139.240020][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.799482][ T7077] bond1 (unregistering): (slave erspan1): Releasing active interface [ 140.198297][ T7077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.250579][ T7077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.273988][ T7077] bond0 (unregistering): Released all slaves [ 140.299400][ T7077] bond1 (unregistering): Released all slaves [ 140.396463][ T30] audit: type=1400 audit(1778033595.101:2160): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.502226][ T30] audit: type=1400 audit(1778033595.101:2161): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.641934][ T30] audit: type=1400 audit(1778033595.131:2162): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.787450][ T30] audit: type=1400 audit(1778033595.131:2163): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.878931][ T30] audit: type=1400 audit(1778033595.131:2164): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.963714][ T30] audit: type=1400 audit(1778033595.131:2165): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.026608][ T30] audit: type=1400 audit(1778033595.131:2166): avc: denied { read } for pid=5272 comm="dhcpcd" name="n30" dev="tmpfs" ino=3646 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.054385][ T4928] Bluetooth: hci3: command tx timeout [ 141.073327][ T30] audit: type=1400 audit(1778033595.131:2167): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3646 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.097669][ T30] audit: type=1400 audit(1778033595.131:2168): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3646 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.122958][ T30] audit: type=1400 audit(1778033595.491:2169): avc: denied { read } for pid=7332 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.887780][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 142.063755][ T7077] hsr_slave_0: left promiscuous mode [ 142.085504][ T7077] hsr_slave_1: left promiscuous mode [ 142.160661][ T7077] batadv_slave_1: left promiscuous mode [ 142.168277][ T7077] veth1_macvtap: left promiscuous mode [ 142.179587][ T7077] veth0_macvtap: left promiscuous mode [ 142.197773][ T7077] veth1_vlan: left promiscuous mode [ 142.203152][ T7077] veth0_vlan: left promiscuous mode [ 143.136314][ T4928] Bluetooth: hci3: command tx timeout [ 143.364143][ T7077] team0 (unregistering): Port device team_slave_1 removed [ 143.434612][ T7077] team0 (unregistering): Port device team_slave_0 removed [ 143.844571][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.857890][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.872160][ T7264] bridge_slave_0: entered allmulticast mode [ 143.887241][ T7264] bridge_slave_0: entered promiscuous mode [ 143.914761][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.932922][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.990835][ T7264] bridge_slave_1: entered allmulticast mode [ 144.017747][ T7264] bridge_slave_1: entered promiscuous mode [ 144.175851][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.224488][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.304189][ T7264] team0: Port device team_slave_0 added [ 144.327322][ T7264] team0: Port device team_slave_1 added [ 144.469854][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.492686][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.542105][ T7264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.570179][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.601942][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.693230][ T7264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.911762][ T7264] hsr_slave_0: entered promiscuous mode [ 144.936049][ T7264] hsr_slave_1: entered promiscuous mode [ 144.958338][ T7264] debugfs: 'hsr0' already exists in 'hsr' [ 144.971953][ T7264] Cannot create hsr debugfs directory [ 144.976565][ T7312] Set syz1 is full, maxelem 65536 reached [ 145.213686][ T4928] Bluetooth: hci3: command tx timeout [ 145.329502][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.512606][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 145.512622][ T30] audit: type=1400 audit(1778033600.221:2190): avc: denied { ioctl } for pid=7444 comm="syz.1.605" path="socket:[13689]" dev="sockfs" ino=13689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.605207][ T30] audit: type=1400 audit(1778033600.261:2191): avc: denied { bind } for pid=7444 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.940812][ T7264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.962496][ T7264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.981638][ T7264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.001219][ T7264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.056317][ T7264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.071905][ T7264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.084122][ T7472] policy can only be matched on NF_INET_PRE_ROUTING [ 146.084141][ T7472] unable to load match [ 146.103107][ T7264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.146039][ T7264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.290182][ T30] audit: type=1400 audit(1778033601.001:2192): avc: denied { write } for pid=7465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.472788][ T30] audit: type=1400 audit(1778033601.181:2193): avc: denied { create } for pid=7504 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.524692][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.531922][ T7506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'. [ 146.542688][ T30] audit: type=1400 audit(1778033601.211:2194): avc: denied { connect } for pid=7504 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.601119][ T30] audit: type=1400 audit(1778033601.301:2195): avc: denied { write } for pid=7507 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.687042][ T7514] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.620'. [ 146.687626][ T7264] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.865249][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 146.903332][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.910570][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.963367][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.970589][ T7078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.947163][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 147.981688][ T30] audit: type=1400 audit(1778033602.691:2196): avc: denied { write } for pid=7532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.014512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.060855][ T7569] 8021q: adding VLAN 0 to HW filter on device team1 [ 148.218644][ T30] audit: type=1400 audit(1778033602.931:2197): avc: denied { write } for pid=7575 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.473488][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 148.527954][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.053048][ T7613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.289955][ T7264] veth0_vlan: entered promiscuous mode [ 149.330409][ T7264] veth1_vlan: entered promiscuous mode [ 149.445233][ T7264] veth0_macvtap: entered promiscuous mode [ 149.473594][ T7264] veth1_macvtap: entered promiscuous mode [ 149.539840][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.590356][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.635672][ T7080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.670502][ T7080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.703982][ T7080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.727377][ T7080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.942526][ T7080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.968626][ T7080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.074386][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.090758][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.154332][ T30] audit: type=1400 audit(1778033604.871:2198): avc: denied { mounton } for pid=7264 comm="syz-executor" path="/root/syzkaller.zp43sj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 150.222546][ T7626] lo: Caught tx_queue_len zero misconfig [ 150.228625][ T7626] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 150.587717][ T7264] overlayfs: failed lookup in lower (newroot/0, name='bus', err=-40): overlapping layers [ 150.615309][ T7264] overlayfs: failed lookup in lower (newroot/0, name='bus', err=-40): overlapping layers [ 151.087626][ T1111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.292496][ T1111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.641920][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.653732][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.669281][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.679937][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.691166][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.709419][ T1111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.831492][ T1111] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.867419][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 151.884795][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 152.305068][ T1111] bridge_slave_1: left allmulticast mode [ 152.317738][ T1111] bridge_slave_1: left promiscuous mode [ 152.338801][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.376753][ T1111] bridge_slave_0: left allmulticast mode [ 152.393772][ T1111] bridge_slave_0: left promiscuous mode [ 152.399651][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.692366][ T7687] xt_hashlimit: size too large, truncated to 1048576 [ 152.848278][ T7690] xt_hashlimit: size too large, truncated to 1048576 [ 152.855301][ T7690] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 152.996481][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.039620][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.077497][ T1111] bond0 (unregistering): Released all slaves [ 153.080842][ T30] audit: type=1400 audit(1778033607.791:2199): avc: denied { write } for pid=7678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.416185][ T30] audit: type=1400 audit(1778033608.131:2200): avc: denied { write } for pid=7706 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.522253][ T7710] overlayfs: failed to resolve './cgroup': -2 [ 153.583734][ T30] audit: type=1400 audit(1778033608.291:2201): avc: denied { connect } for pid=7709 comm="syz.4.671" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.650130][ T30] audit: type=1400 audit(1778033608.291:2202): avc: denied { write } for pid=7709 comm="syz.4.671" laddr=fe80::13 lport=60 faddr=fe80::5 fport=20006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.733375][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 153.786839][ T5620] Bluetooth: hci3: command tx timeout [ 153.806562][ T1111] hsr_slave_0: left promiscuous mode [ 153.813501][ T30] audit: type=1400 audit(1778033608.521:2203): avc: denied { create } for pid=7718 comm="syz.4.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.837589][ T30] audit: type=1400 audit(1778033608.521:2204): avc: denied { bind } for pid=7718 comm="syz.4.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.854457][ T1111] hsr_slave_1: left promiscuous mode [ 153.857942][ T30] audit: type=1400 audit(1778033608.521:2205): avc: denied { name_bind } for pid=7718 comm="syz.4.674" src=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 153.862862][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.884822][ T30] audit: type=1400 audit(1778033608.521:2206): avc: denied { node_bind } for pid=7718 comm="syz.4.674" src=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 153.912658][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 153.927812][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.947646][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.955586][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.976832][ T7724] overlayfs: failed to clone upperpath [ 153.988965][ T7722] process 'syz.4.675' launched './file0' with NULL argv: empty string added [ 154.005541][ T1111] veth1_macvtap: left promiscuous mode [ 154.015410][ T30] audit: type=1400 audit(1778033608.721:2207): avc: denied { execute_no_trans } for pid=7721 comm="syz.4.675" path="/149/file0/file0" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.041802][ T1111] veth0_macvtap: left promiscuous mode [ 154.047623][ T1111] veth1_vlan: left promiscuous mode [ 154.053038][ T1111] veth0_vlan: left promiscuous mode [ 154.093128][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.106697][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 154.124041][ T10] usb 3-1: can't read configurations, error -71 [ 154.341852][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 154.370964][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 154.946303][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.680'. [ 155.421923][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.429309][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.436664][ T7661] bridge_slave_0: entered allmulticast mode [ 155.444411][ T7661] bridge_slave_0: entered promiscuous mode [ 155.452877][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.460840][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.468393][ T7661] bridge_slave_1: entered allmulticast mode [ 155.476036][ T7661] bridge_slave_1: entered promiscuous mode [ 155.538125][ T7661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.565718][ T7661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.581244][ T30] audit: type=1400 audit(1778033610.291:2208): avc: denied { write } for pid=7740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.645270][ T804] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.666016][ T7661] team0: Port device team_slave_0 added [ 155.693158][ T7661] team0: Port device team_slave_1 added [ 155.773588][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.790456][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.851753][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.864054][ T5620] Bluetooth: hci3: command tx timeout [ 155.864638][ T7661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.884831][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.914626][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.939851][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.958635][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.984787][ T804] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 156.008751][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.034180][ T804] usb 3-1: config 0 descriptor?? [ 156.049010][ T7661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.075034][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 156.219729][ T7661] hsr_slave_0: entered promiscuous mode [ 156.234822][ T7661] hsr_slave_1: entered promiscuous mode [ 156.262086][ T7661] debugfs: 'hsr0' already exists in 'hsr' [ 156.268091][ T7661] Cannot create hsr debugfs directory [ 156.477178][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.507886][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.528527][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.560535][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.592148][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.622131][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.655702][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.698949][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.729115][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.753319][ T804] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 156.820392][ T804] logitech 0003:046D:C29C.0003: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 156.858473][ T804] logitech 0003:046D:C29C.0003: no inputs found [ 156.925024][ T804] usb 3-1: USB disconnect, device number 8 [ 157.055724][ T7801] fido_id[7801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 157.232252][ T7661] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.254520][ T7661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.269124][ T7661] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.305608][ T7661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.323748][ T7661] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.346245][ T7661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.365792][ T7661] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.383065][ T7661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.618100][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.628260][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 157.628470][ T7822] mmap: syz.4.695 (7822) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.666518][ T7661] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.679756][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.687039][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.713722][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.735100][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.743071][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.878051][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 157.910360][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.924945][ T10] usb 3-1: config 0 has no interface number 0 [ 157.933808][ T5620] Bluetooth: hci3: command tx timeout [ 157.942679][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.981075][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.025797][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 158.068807][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.114626][ T10] usb 3-1: config 0 descriptor?? [ 158.560744][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 158.560760][ T30] audit: type=1400 audit(1778033613.271:2215): avc: denied { write } for pid=7825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.611032][ T7847] trusted_key: syz.4.698 sent an empty control message without MSG_MORE. [ 158.808031][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0004/input/input6 [ 158.832646][ T30] audit: type=1400 audit(1778033613.541:2216): avc: denied { write } for pid=7853 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.017914][ T7661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.033292][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0004/input/input7 [ 159.051178][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 159.112621][ T10] uclogic 0003:28BD:0071.0004: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 159.178973][ T10] usb 3-1: USB disconnect, device number 9 [ 159.329089][ T7864] fido_id[7864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 159.682071][ T7880] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 159.763445][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 159.900531][ T7880] : entered promiscuous mode [ 159.921907][ T7890] overlayfs: failed to clone upperpath [ 159.936203][ T30] audit: type=1400 audit(1778033614.651:2217): avc: denied { read } for pid=7891 comm="syz.0.710" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.942796][ T7661] veth0_vlan: entered promiscuous mode [ 159.970298][ T30] audit: type=1400 audit(1778033614.651:2218): avc: denied { open } for pid=7891 comm="syz.0.710" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.997350][ T30] audit: type=1400 audit(1778033614.691:2219): avc: denied { ioctl } for pid=7891 comm="syz.0.710" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.021832][ T5620] Bluetooth: hci3: command tx timeout [ 160.037300][ T7661] veth1_vlan: entered promiscuous mode [ 160.092542][ T7661] veth0_macvtap: entered promiscuous mode [ 160.114872][ T7661] veth1_macvtap: entered promiscuous mode [ 160.158071][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.176689][ T7898] overlayfs: failed to clone upperpath [ 160.185896][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.237076][ T7079] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.262171][ T7079] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.306688][ T7079] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.328784][ T7079] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.572504][ T7905] serio: Serial port ptm0 [ 160.598906][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.618144][ T30] audit: type=1326 audit(1778033615.331:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.1.717" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74fa79cdd9 code=0x0 [ 160.619884][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.823783][ T7076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.867352][ T7076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.904651][ T30] audit: type=1400 audit(1778033615.621:2221): avc: denied { mounton } for pid=7661 comm="syz-executor" path="/root/syzkaller.64a17z/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 160.963575][ T30] audit: type=1400 audit(1778033615.671:2222): avc: denied { mounton } for pid=7661 comm="syz-executor" path="/root/syzkaller.64a17z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 161.039397][ T30] audit: type=1400 audit(1778033615.751:2223): avc: denied { mounton } for pid=7661 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 161.145344][ T804] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.329889][ T804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.380956][ T804] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.400718][ T7932] bond0: (slave bridge0): Releasing backup interface [ 161.425495][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 161.435856][ T804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.452722][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.470597][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.478466][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.507512][ T7921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.564675][ T804] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.630605][ T7932] bridge_slave_0: left allmulticast mode [ 161.675451][ T7932] bridge_slave_0: left promiscuous mode [ 161.711006][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.749972][ T7932] bridge_slave_1: left allmulticast mode [ 161.759806][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.791506][ T7950] overlayfs: failed to clone upperpath [ 161.839086][ T7932] bond0: (slave bond_slave_0): Releasing backup interface [ 161.864875][ T30] audit: type=1400 audit(1778033616.571:2224): avc: denied { write } for pid=7927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.958916][ T7932] bond0: (slave bond_slave_1): Releasing backup interface [ 162.031160][ T7932] team0: Port device team_slave_0 removed [ 162.091703][ T7932] team0: Port device team_slave_1 removed [ 162.133295][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.172533][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.182328][ T804] usb 3-1: USB disconnect, device number 10 [ 162.239346][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.263718][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 162.289095][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.359651][ T7932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.409568][ T7936] : entered promiscuous mode [ 162.454134][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 162.477308][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.525311][ T29] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 162.568325][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.609136][ T29] usb 7-1: config 0 descriptor?? [ 162.643257][ T29] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 162.976218][ T29] usb 7-1: USB disconnect, device number 2 [ 163.230211][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 163.306825][ T152] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.306931][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 163.332583][ T152] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.350831][ T152] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.382243][ T152] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.660790][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 163.880163][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 163.880181][ T30] audit: type=1400 audit(1778033618.591:2230): avc: denied { write } for pid=8026 comm="syz.0.747" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.949913][ T8036] netlink: 'syz.2.749': attribute type 25 has an invalid length. [ 163.975704][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 163.997464][ T30] audit: type=1400 audit(1778033618.701:2231): avc: denied { create } for pid=8031 comm="syz.6.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.022039][ T8032] iwpm_parse_nlmsg: Invalid attribute (msg type Remote Mapping info ret = -34) [ 164.059506][ T8036] netlink: 'syz.2.749': attribute type 25 has an invalid length. [ 164.071705][ T30] audit: type=1400 audit(1778033618.701:2232): avc: denied { write } for pid=8031 comm="syz.6.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.103785][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 164.213952][ T8047] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 164.263007][ T30] audit: type=1400 audit(1778033618.971:2233): avc: denied { write } for pid=8016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.326171][ T8047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.432815][ T30] audit: type=1400 audit(1778033619.141:2234): avc: denied { write } for pid=8053 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.455718][ T8052] bond1: (slave gretap1): making interface the new active one [ 164.487958][ T8052] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 164.906232][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 164.951616][ T8068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.028832][ T30] audit: type=1400 audit(1778033619.731:2235): avc: denied { create } for pid=8076 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.195644][ T8070] : entered promiscuous mode [ 165.270901][ T8086] all: renamed from bridge_slave_1 (while UP) [ 165.634463][ T30] audit: type=1400 audit(1778033620.341:2236): avc: denied { getopt } for pid=8094 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.710835][ T30] audit: type=1400 audit(1778033620.351:2237): avc: denied { write } for pid=8063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.932868][ T30] audit: type=1400 audit(1778033620.641:2238): avc: denied { write } for pid=8109 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.011009][ T30] audit: type=1400 audit(1778033620.721:2239): avc: denied { create } for pid=8115 comm="syz.6.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 166.660638][ T8140] binder: 8139:8140 ioctl c0306201 0 returned -14 [ 167.040753][ T8150] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 167.554475][ T5713] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 167.710818][ T8171] fuse: fd is not a fuse device [ 167.733711][ T5713] usb 7-1: Using ep0 maxpacket: 8 [ 167.756367][ T5713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.790111][ T5713] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.814853][ T5713] usb 7-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 167.831774][ T5713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.857310][ T5713] usb 7-1: config 0 descriptor?? [ 168.326197][ T5713] nintendo 0003:057E:201E.0005: ignoring exceeding usage max [ 168.366917][ T5713] hid_parser_main: 227 callbacks suppressed [ 168.366939][ T5713] nintendo 0003:057E:201E.0005: unknown main item tag 0x0 [ 168.413428][ T5713] nintendo 0003:057E:201E.0005: unknown main item tag 0x0 [ 168.450679][ T5713] nintendo 0003:057E:201E.0005: unknown main item tag 0x0 [ 168.497507][ T5713] nintendo 0003:057E:201E.0005: unknown main item tag 0x0 [ 168.529672][ T5713] nintendo 0003:057E:201E.0005: unknown main item tag 0x0 [ 168.562716][ T5713] nintendo 0003:057E:201E.0005: unknown main item tag 0x0 [ 168.597061][ T5713] nintendo 0003:057E:201E.0005: unknown main item tag 0x0 [ 168.618522][ T5713] nintendo 0003:057E:201E.0005: unknown main item tag 0x0 [ 168.642274][ T5713] nintendo 0003:057E:201E.0005: hidraw0: USB HID v80.04 Device [HID 057e:201e] on usb-dummy_hcd.6-1/input0 [ 168.748560][ T5713] nintendo 0003:057E:201E.0005: Failed to get joycon info; ret=-38 [ 168.796789][ T5713] nintendo 0003:057E:201E.0005: Failed to retrieve controller info; ret=-38 [ 168.830172][ T5713] nintendo 0003:057E:201E.0005: Failed to initialize controller; ret=-38 [ 168.884239][ T5713] nintendo 0003:057E:201E.0005: probe - fail = -38 [ 168.916580][ T5713] nintendo 0003:057E:201E.0005: probe with driver nintendo failed with error -38 [ 168.959193][ T5713] usb 7-1: USB disconnect, device number 3 [ 169.299049][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 169.308616][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 169.613000][ T8212] serio: Serial port ptm0 [ 169.647960][ T8220] binder: 8219:8220 ioctl c0306201 200000000480 returned -14 [ 171.755885][ T8248] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.849694][ T8248] team0: No ports can be present during mode change [ 172.070216][ T8260] ip6tnl0: Caught tx_queue_len zero misconfig [ 172.217942][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.225594][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.279929][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 172.279948][ T30] audit: type=1400 audit(1778033626.991:2253): avc: denied { write } for pid=8238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.398976][ T30] audit: type=1400 audit(1778033627.111:2254): avc: denied { write } for pid=8269 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.550647][ T8260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.599131][ T8260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.028499][ T8284] overlayfs: failed to clone upperpath [ 173.267090][ T57] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.295744][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.296972][ T8288] fuse: fd is not a fuse device [ 173.310958][ T57] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.330821][ T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.355785][ T8290] Bluetooth: hci0: unsupported parameter 255 [ 173.376753][ T8290] Bluetooth: hci0: unsupported parameter 255 [ 173.405562][ T57] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.438435][ T57] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.473817][ T57] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.508655][ T57] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.746085][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'. [ 173.756631][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 173.762836][ T8305] bridge_slave_0: left allmulticast mode [ 173.792392][ T8305] bridge_slave_0: left promiscuous mode [ 173.802072][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.833'. [ 173.815453][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.842391][ T8305] bridge_slave_1: left allmulticast mode [ 173.848462][ T8305] bridge_slave_1: left promiscuous mode [ 173.856295][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.871614][ T8305] bond0: (slave bond_slave_0): Releasing backup interface [ 173.882582][ T8305] bond0: (slave bond_slave_1): Releasing backup interface [ 173.903125][ T8305] team0: Port device team_slave_0 removed [ 173.917257][ T8305] team0: Port device team_slave_1 removed [ 173.925417][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.932894][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.941587][ T30] audit: type=1400 audit(1778033628.651:2255): avc: denied { write } for pid=8291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.971048][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.979128][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.988552][ T8305] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.035915][ T30] audit: type=1400 audit(1778033628.751:2256): avc: denied { write } for pid=8321 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.079430][ T8306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.140638][ T8311] bond2: (slave hsr0): The slave device specified does not support setting the MAC address [ 174.151919][ T8311] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 174.166335][ T8311] bond2: (slave hsr0): Error -22 calling dev_set_mtu [ 174.183567][ T8312] : entered promiscuous mode [ 174.414453][ T30] audit: type=1400 audit(1778033629.131:2257): avc: denied { read append } for pid=8331 comm="syz.2.837" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.482258][ T30] audit: type=1400 audit(1778033629.151:2258): avc: denied { open } for pid=8331 comm="syz.2.837" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.536571][ T30] audit: type=1400 audit(1778033629.191:2259): avc: denied { read } for pid=8337 comm="syz.4.840" lport=38541 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.779286][ T30] audit: type=1400 audit(1778033629.491:2260): avc: denied { bind } for pid=8347 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.865939][ T30] audit: type=1400 audit(1778033629.581:2261): avc: denied { write } for pid=8347 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.890749][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 174.928697][ T30] audit: type=1400 audit(1778033629.601:2262): avc: denied { nlmsg_write } for pid=8347 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.785507][ T8383] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.853'. [ 177.779521][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 177.779552][ T30] audit: type=1400 audit(1778033632.491:2272): avc: denied { create } for pid=8467 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.842403][ T30] audit: type=1400 audit(1778033632.541:2273): avc: denied { listen } for pid=8467 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.084583][ T30] audit: type=1400 audit(1778033632.801:2274): avc: denied { read } for pid=8476 comm="syz.2.880" path="socket:[18723]" dev="sockfs" ino=18723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.461790][ T8490] fuse: fd is not a fuse device [ 178.749475][ T30] audit: type=1400 audit(1778033633.461:2275): avc: denied { create } for pid=8494 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 179.511313][ T8521] binder: 8520:8521 unknown command 0 [ 179.529867][ T8521] binder: 8520:8521 ioctl c0306201 2000000001c0 returned -22 [ 179.877457][ T30] audit: type=1400 audit(1778033634.591:2276): avc: denied { checkpoint_restore } for pid=8527 comm="syz.4.898" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.179600][ T8533] fuse: fd is not a fuse device [ 181.286105][ T30] audit: type=1400 audit(1778033636.001:2277): avc: denied { name_connect } for pid=8572 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 181.424706][ T8580] overlayfs: failed to clone upperpath [ 181.723646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 182.722688][ T30] audit: type=1400 audit(1778033637.431:2278): avc: denied { ioctl } for pid=8593 comm="syz.0.923" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 183.924754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 184.718226][ T30] audit: type=1400 audit(1778033639.421:2279): avc: denied { setopt } for pid=8614 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 184.761937][ T30] audit: type=1400 audit(1778033639.471:2280): avc: denied { connect } for pid=8614 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 186.847809][ T8573] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 186.980831][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'. [ 187.334276][ T30] audit: type=1400 audit(1778033642.041:2281): avc: denied { listen } for pid=8644 comm="syz.4.938" lport=43465 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.386427][ T8648] sctp: [Deprecated]: syz.4.938 (pid 8648) Use of int in maxseg socket option. [ 187.386427][ T8648] Use struct sctp_assoc_value instead [ 187.445601][ T30] audit: type=1400 audit(1778033642.041:2282): avc: denied { accept } for pid=8644 comm="syz.4.938" lport=43465 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.589930][ T30] audit: type=1400 audit(1778033642.041:2283): avc: denied { read } for pid=8644 comm="syz.4.938" lport=43465 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 187.712808][ T8657] overlayfs: failed to clone upperpath [ 187.726339][ T30] audit: type=1400 audit(1778033642.091:2284): avc: denied { setopt } for pid=8644 comm="syz.4.938" lport=43465 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 187.792899][ T8660] netlink: 'syz.4.944': attribute type 29 has an invalid length. [ 187.826201][ T8660] netlink: 'syz.4.944': attribute type 29 has an invalid length. [ 187.870193][ T8660] netlink: 'syz.4.944': attribute type 32 has an invalid length. [ 187.886970][ T8660] netlink: 500 bytes leftover after parsing attributes in process `syz.4.944'. [ 188.913797][ T804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 189.029243][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 189.068871][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 189.084686][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 189.111444][ T804] usb 3-1: config 0 has no interfaces? [ 189.119829][ T804] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 189.142864][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.174894][ T804] usb 3-1: config 0 descriptor?? [ 189.368087][ T8701] fuse: Bad value for 'fd' [ 189.690910][ T30] audit: type=1400 audit(1778033644.401:2285): avc: denied { bind } for pid=8706 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 189.750205][ T8708] kvm: Disabled LAPIC found during irq injection [ 189.766812][ T30] audit: type=1400 audit(1778033644.461:2286): avc: denied { listen } for pid=8706 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 189.805798][ T30] audit: type=1400 audit(1778033644.471:2287): avc: denied { accept } for pid=8706 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.428791][ T8718] evm: overlay not supported [ 191.138304][ T8742] lo: Caught tx_queue_len zero misconfig [ 191.448911][ T8748] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 191.472975][ T8748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.539220][ T8748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.549916][ T8748] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.575718][ T29] usb 3-1: USB disconnect, device number 11 [ 191.576732][ T8748] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 191.676201][ T8752] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 191.706588][ T8752] bond5: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 191.865863][ T30] audit: type=1400 audit(1778033646.571:2288): avc: denied { mount } for pid=8755 comm="syz.2.980" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 192.081626][ T30] audit: type=1400 audit(1778033646.791:2289): avc: denied { bind } for pid=8760 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.177944][ T30] audit: type=1400 audit(1778033646.791:2290): avc: denied { listen } for pid=8760 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.251987][ T30] audit: type=1400 audit(1778033646.841:2291): avc: denied { connect } for pid=8760 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.323189][ T30] audit: type=1400 audit(1778033646.851:2292): avc: denied { write } for pid=8764 comm="syz.2.982" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.417218][ T30] audit: type=1400 audit(1778033646.881:2293): avc: denied { setopt } for pid=8760 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.506448][ T30] audit: type=1400 audit(1778033646.881:2294): avc: denied { write } for pid=8760 comm="syz.4.983" path="socket:[19183]" dev="sockfs" ino=19183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.368108][ T8789] IPv6: Can't replace route, no match found [ 193.419996][ T30] audit: type=1400 audit(1778033648.131:2295): avc: denied { ioctl } for pid=8788 comm="syz.4.992" path="socket:[18423]" dev="sockfs" ino=18423 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.794063][ T8801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'. [ 193.952453][ T8807] fuse: fd is not a fuse device [ 194.097651][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.107402][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.307245][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1009'. [ 194.920809][ T8848] fuse: fd is not a fuse device [ 194.980845][ T804] libceph: connect (1)[c::]:6789 error -101 [ 194.990721][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 195.071032][ T8852] ceph: No mds server is up or the cluster is laggy [ 195.102694][ T8859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1022'. [ 196.072075][ T8883] ªªªªªª: renamed from vlan0 [ 196.173751][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 196.173780][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 196.187085][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 196.190949][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 196.226036][ T5596] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 196.405744][ T5596] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 196.428312][ T5596] usb 7-1: config 0 interface 0 has no altsetting 0 [ 196.447746][ T5596] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.461503][ T5596] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 196.473783][ T5596] usb 7-1: Product: syz [ 196.478058][ T5596] usb 7-1: Manufacturer: syz [ 196.488753][ T5596] usb 7-1: SerialNumber: syz [ 196.511758][ T5596] usb 7-1: config 0 descriptor?? [ 196.539405][ T5596] usb 7-1: selecting invalid altsetting 0 [ 196.785517][ T29] usb 7-1: USB disconnect, device number 4 [ 196.947627][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.436768][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 197.436784][ T30] audit: type=1400 audit(1778033652.151:2299): avc: denied { name_bind } for pid=8892 comm="syz.6.1035" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 197.588763][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 197.699079][ T8901] bond6: (slave macvlan1): Enslaving as an active interface with an up link [ 197.836612][ T8897] bond6 (unregistering): (slave macvlan1): Releasing backup interface [ 197.892018][ T8897] bond6 (unregistering): Released all slaves [ 198.036318][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1039'. [ 198.518349][ T30] audit: type=1400 audit(1778033653.231:2300): avc: denied { write } for pid=8925 comm="syz.0.1047" lport=48990 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 198.982401][ T8944] tipc: Started in network mode [ 198.995332][ T8944] tipc: Node identity 84e, cluster identity 4711 [ 199.014979][ T8944] tipc: Node number set to 2126 [ 199.240419][ T30] audit: type=1400 audit(1778033653.951:2301): avc: denied { read write } for pid=8953 comm="syz.6.1057" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.264247][ T30] audit: type=1400 audit(1778033653.951:2302): avc: denied { open } for pid=8953 comm="syz.6.1057" path="/67/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.291224][ T30] audit: type=1400 audit(1778033654.001:2303): avc: denied { ioctl } for pid=8953 comm="syz.6.1057" path="/67/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.323798][ T804] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 199.375022][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1058'. [ 199.388953][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1058'. [ 199.497618][ T804] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.507957][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.522175][ T804] usb 3-1: Product: syz [ 199.635087][ T804] usb 3-1: Manufacturer: syz [ 199.640321][ T804] usb 3-1: SerialNumber: syz [ 199.878477][ T804] usb 3-1: config 0 descriptor?? [ 199.955280][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1060'. [ 200.097615][ T804] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 200.142783][ T30] audit: type=1400 audit(1778033654.851:2304): avc: denied { bind } for pid=8969 comm="syz.4.1063" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.201013][ T30] audit: type=1400 audit(1778033654.851:2305): avc: denied { node_bind } for pid=8969 comm="syz.4.1063" saddr=ffff:ffff:6465:7244:3132:3800:20:0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 200.248622][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1064'. [ 200.416779][ T30] audit: type=1400 audit(1778033655.131:2306): avc: denied { read } for pid=8976 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 200.976215][ T8987] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1068'. [ 201.020265][ T8987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1068'. [ 201.105877][ T804] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 201.143696][ T804] usb 3-1: USB disconnect, device number 12 [ 201.509528][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1070'. [ 202.013739][ T5713] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 202.176668][ T5713] usb 7-1: config 0 has no interfaces? [ 202.196660][ T5713] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 202.209536][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.218786][ T5713] usb 7-1: Product: syz [ 202.223163][ T5713] usb 7-1: Manufacturer: syz [ 202.228085][ T5713] usb 7-1: SerialNumber: syz [ 202.248995][ T5713] usb 7-1: config 0 descriptor?? [ 202.384439][ T5727] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 202.562772][ T5727] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 202.581213][ T5727] usb 1-1: config 0 has no interface number 0 [ 202.593868][ T5727] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.658765][ T9016] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1077'. [ 202.659468][ T8996] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.691352][ T5727] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 202.704701][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.725423][ T5727] usb 1-1: Product: syz [ 202.733994][ T5727] usb 1-1: Manufacturer: syz [ 202.750096][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.757336][ T5727] usb 1-1: SerialNumber: syz [ 202.764986][ T5727] usb 1-1: config 0 descriptor?? [ 202.795957][ T5713] usb 7-1: USB disconnect, device number 5 [ 202.804035][ T5727] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 203.101602][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 203.111612][ T5727] usb 1-1: USB disconnect, device number 3 [ 203.166532][ T5727] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 203.727492][ T30] audit: type=1400 audit(1778033658.441:2307): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 203.810344][ T30] audit: type=1400 audit(1778033658.521:2308): avc: denied { write } for pid=9045 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.814374][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 204.009386][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 204.120580][ T30] audit: type=1400 audit(1778033658.831:2309): avc: denied { create } for pid=9056 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.191444][ T30] audit: type=1400 audit(1778033658.841:2310): avc: denied { listen } for pid=9056 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.231046][ T30] audit: type=1400 audit(1778033658.841:2311): avc: denied { accept } for pid=9056 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.728436][ T30] audit: type=1400 audit(1778033659.441:2312): avc: denied { write } for pid=9049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.998127][ T30] audit: type=1400 audit(1778033659.711:2313): avc: denied { write } for pid=9072 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.208365][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.321694][ T30] audit: type=1400 audit(1778033660.031:2314): avc: denied { getopt } for pid=9077 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.540939][ T9090] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1103'. [ 205.598545][ T9090] netlink: 'syz.4.1103': attribute type 13 has an invalid length. [ 205.607635][ T9090] netlink: 'syz.4.1103': attribute type 17 has an invalid length. [ 205.631864][ T9090] gretap0: refused to change device tx_queue_len [ 205.645269][ T9090] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 205.646186][ T5727] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 205.816723][ T50] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 205.847423][ T5727] usb 3-1: config 0 has no interfaces? [ 205.860729][ T5727] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 205.871351][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.903370][ T5727] usb 3-1: config 0 descriptor?? [ 205.972064][ T9105] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 206.051826][ T9105] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.062999][ T9105] bond6: (slave bond7): making interface the new active one [ 206.080069][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1108'. [ 206.102293][ T9105] bond6: (slave bond7): Enslaving as an active interface with an up link [ 206.150876][ T9109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.170819][ T30] audit: type=1400 audit(1778033660.881:2315): avc: denied { read } for pid=9081 comm="syz.2.1099" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.207789][ T9082] [ 206.210164][ T9082] ===================================================== [ 206.217093][ T9082] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 206.224552][ T9082] syzkaller #0 Tainted: G L [ 206.230522][ T9082] ----------------------------------------------------- [ 206.237431][ T9082] syz.2.1099/9082 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 206.245055][ T9082] ffff88807bcc8168 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x138/0x510 [ 206.253765][ T9082] [ 206.253765][ T9082] and this task is already holding: [ 206.261114][ T9082] ffff88807dcd1028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x19c/0x910 [ 206.270955][ T9082] which would create a new lock dependency: [ 206.276823][ T9082] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 206.284909][ T9082] [ 206.284909][ T9082] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 206.294342][ T9082] (&dev->event_lock#2){..-.}-{3:3} [ 206.294375][ T9082] [ 206.294375][ T9082] ... which became SOFTIRQ-irq-safe at: [ 206.307236][ T9082] lock_acquire+0x1b1/0x370 [ 206.311826][ T9082] _raw_spin_lock_irqsave+0x3a/0x60 [ 206.317098][ T9082] input_event+0x70/0xb0 [ 206.321432][ T9082] atp_complete_geyser_3_4+0xaca/0x14a0 [ 206.327051][ T9082] __usb_hcd_giveback_urb+0x38d/0x610 [ 206.332502][ T9082] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 206.337780][ T9082] dummy_timer+0xda1/0x36c0 [ 206.342356][ T9082] __hrtimer_run_queues+0x470/0xa00 [ 206.347659][ T9082] hrtimer_run_softirq+0x17d/0x2c0 [ 206.352854][ T9082] handle_softirqs+0x1ea/0xa00 [ 206.357693][ T9082] __irq_exit_rcu+0x162/0x210 [ 206.362443][ T9082] irq_exit_rcu+0x9/0x30 [ 206.366763][ T9082] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 206.372468][ T9082] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.378519][ T9082] _raw_spin_unlock_irqrestore+0x31/0x80 [ 206.384226][ T9082] dummy_urb_enqueue+0x56c/0x880 [ 206.389233][ T9082] usb_hcd_submit_urb+0x26c/0x2150 [ 206.394415][ T9082] usb_submit_urb+0x8aa/0x1910 [ 206.399264][ T9082] atp_open+0x5b/0x90 [ 206.403316][ T9082] input_open_device+0x24c/0x3d0 [ 206.408327][ T9082] mousedev_open_device+0xe2/0x140 [ 206.413514][ T9082] mousedev_open+0x2fd/0x580 [ 206.418181][ T9082] chrdev_open+0x234/0x6a0 [ 206.422677][ T9082] do_dentry_open+0x6d8/0x1660 [ 206.427516][ T9082] vfs_open+0x82/0x3f0 [ 206.431662][ T9082] path_openat+0x208c/0x31a0 [ 206.436327][ T9082] do_file_open+0x20e/0x430 [ 206.440902][ T9082] do_sys_openat2+0x10d/0x1e0 [ 206.445659][ T9082] __x64_sys_openat+0x12d/0x210 [ 206.450588][ T9082] do_syscall_64+0x10b/0xf80 [ 206.455253][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.461214][ T9082] [ 206.461214][ T9082] to a SOFTIRQ-irq-unsafe lock: [ 206.468207][ T9082] (tasklist_lock){.+.+}-{3:3} [ 206.468232][ T9082] [ 206.468232][ T9082] ... which became SOFTIRQ-irq-unsafe at: [ 206.480820][ T9082] ... [ 206.480826][ T9082] lock_acquire+0x1b1/0x370 [ 206.487962][ T9082] _raw_read_lock+0x5f/0x70 [ 206.492535][ T9082] __do_wait+0x13b/0x8b0 [ 206.496848][ T9082] do_wait+0x1ec/0x580 [ 206.500987][ T9082] kernel_wait+0xa1/0x160 [ 206.505384][ T9082] call_usermodehelper_exec_work+0xf6/0x180 [ 206.511363][ T9082] process_one_work+0xa0e/0x1980 [ 206.516394][ T9082] worker_thread+0x5ef/0xe50 [ 206.521077][ T9082] kthread+0x370/0x450 [ 206.525223][ T9082] ret_from_fork+0x72b/0xd50 [ 206.529900][ T9082] ret_from_fork_asm+0x1a/0x30 [ 206.534749][ T9082] [ 206.534749][ T9082] other info that might help us debug this: [ 206.534749][ T9082] [ 206.545049][ T9082] Chain exists of: [ 206.545049][ T9082] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 206.545049][ T9082] [ 206.558604][ T9082] Possible interrupt unsafe locking scenario: [ 206.558604][ T9082] [ 206.566902][ T9082] CPU0 CPU1 [ 206.572243][ T9082] ---- ---- [ 206.577584][ T9082] lock(tasklist_lock); [ 206.581808][ T9082] local_irq_disable(); [ 206.588537][ T9082] lock(&dev->event_lock#2); [ 206.595718][ T9082] lock(&client->buffer_lock); [ 206.603065][ T9082] [ 206.606492][ T9082] lock(&dev->event_lock#2); [ 206.611326][ T9082] [ 206.611326][ T9082] *** DEADLOCK *** [ 206.611326][ T9082] [ 206.619470][ T9082] 7 locks held by syz.2.1099/9082: [ 206.624568][ T9082] #0: ffff88802d22a110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x200/0x610 [ 206.633720][ T9082] #1: ffff8880203c6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x390 [ 206.643977][ T9082] #2: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x390 [ 206.653655][ T9082] #3: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 206.663223][ T9082] #4: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 206.672355][ T9082] #5: ffff88807dcd1028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x19c/0x910 [ 206.682616][ T9082] #6: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 206.691658][ T9082] [ 206.691658][ T9082] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 206.702039][ T9082] -> (&dev->event_lock#2){..-.}-{3:3} { [ 206.707675][ T9082] IN-SOFTIRQ-W at: [ 206.711720][ T9082] lock_acquire+0x1b1/0x370 [ 206.718039][ T9082] _raw_spin_lock_irqsave+0x3a/0x60 [ 206.725045][ T9082] input_event+0x70/0xb0 [ 206.731105][ T9082] atp_complete_geyser_3_4+0xaca/0x14a0 [ 206.738460][ T9082] __usb_hcd_giveback_urb+0x38d/0x610 [ 206.745650][ T9082] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 206.752676][ T9082] dummy_timer+0xda1/0x36c0 [ 206.759002][ T9082] __hrtimer_run_queues+0x470/0xa00 [ 206.766023][ T9082] hrtimer_run_softirq+0x17d/0x2c0 [ 206.772964][ T9082] handle_softirqs+0x1ea/0xa00 [ 206.779550][ T9082] __irq_exit_rcu+0x162/0x210 [ 206.786044][ T9082] irq_exit_rcu+0x9/0x30 [ 206.792102][ T9082] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 206.799541][ T9082] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.807332][ T9082] _raw_spin_unlock_irqrestore+0x31/0x80 [ 206.814776][ T9082] dummy_urb_enqueue+0x56c/0x880 [ 206.821519][ T9082] usb_hcd_submit_urb+0x26c/0x2150 [ 206.828442][ T9082] usb_submit_urb+0x8aa/0x1910 [ 206.835033][ T9082] atp_open+0x5b/0x90 [ 206.840827][ T9082] input_open_device+0x24c/0x3d0 [ 206.847581][ T9082] mousedev_open_device+0xe2/0x140 [ 206.854502][ T9082] mousedev_open+0x2fd/0x580 [ 206.860905][ T9082] chrdev_open+0x234/0x6a0 [ 206.867140][ T9082] do_dentry_open+0x6d8/0x1660 [ 206.873712][ T9082] vfs_open+0x82/0x3f0 [ 206.879592][ T9082] path_openat+0x208c/0x31a0 [ 206.885992][ T9082] do_file_open+0x20e/0x430 [ 206.892304][ T9082] do_sys_openat2+0x10d/0x1e0 [ 206.898791][ T9082] __x64_sys_openat+0x12d/0x210 [ 206.905457][ T9082] do_syscall_64+0x10b/0xf80 [ 206.911856][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.919559][ T9082] INITIAL USE at: [ 206.923521][ T9082] lock_acquire+0x1b1/0x370 [ 206.929750][ T9082] _raw_spin_lock_irqsave+0x3a/0x60 [ 206.936673][ T9082] input_inject_event+0x9f/0x390 [ 206.943343][ T9082] led_set_brightness+0x221/0x2a0 [ 206.950088][ T9082] kbd_led_trigger_activate+0xcb/0x110 [ 206.957272][ T9082] led_trigger_set+0x66b/0xbe0 [ 206.963758][ T9082] led_trigger_set_default+0x1e2/0x2f0 [ 206.970938][ T9082] led_classdev_register_ext+0x72b/0x990 [ 206.978293][ T9082] input_leds_connect+0x5af/0x8b0 [ 206.985044][ T9082] input_attach_handler.isra.0+0x177/0x1e0 [ 206.992574][ T9082] input_register_device.cold+0x139/0x375 [ 207.000021][ T9082] atkbd_connect+0x665/0x9e0 [ 207.006333][ T9082] serio_driver_probe+0x77/0xb0 [ 207.012910][ T9082] really_probe+0x241/0xa60 [ 207.019146][ T9082] __driver_probe_device+0x22e/0x480 [ 207.026155][ T9082] driver_probe_device+0x4c/0x1b0 [ 207.032912][ T9082] __driver_attach+0x21f/0x5d0 [ 207.039406][ T9082] bus_for_each_dev+0x13e/0x1d0 [ 207.045983][ T9082] serio_handle_event+0x247/0x8f0 [ 207.052733][ T9082] process_one_work+0xa0e/0x1980 [ 207.059400][ T9082] worker_thread+0x5ef/0xe50 [ 207.065716][ T9082] kthread+0x370/0x450 [ 207.071507][ T9082] ret_from_fork+0x72b/0xd50 [ 207.077819][ T9082] ret_from_fork_asm+0x1a/0x30 [ 207.084308][ T9082] } [ 207.086871][ T9082] ... key at: [] __key.7+0x0/0x40 [ 207.094235][ T9082] -> (&client->buffer_lock){....}-{3:3} { [ 207.099954][ T9082] INITIAL USE at: [ 207.103827][ T9082] lock_acquire+0x1b1/0x370 [ 207.109881][ T9082] _raw_spin_lock+0x2e/0x40 [ 207.115929][ T9082] evdev_pass_values+0x19c/0x910 [ 207.122419][ T9082] evdev_events+0x1bb/0x390 [ 207.128484][ T9082] input_pass_values+0x753/0x880 [ 207.134978][ T9082] input_handle_event+0x7e4/0x1500 [ 207.141646][ T9082] input_inject_event+0x1ce/0x390 [ 207.148222][ T9082] evdev_write+0x3ef/0x610 [ 207.154192][ T9082] vfs_write+0x2aa/0x1070 [ 207.160071][ T9082] ksys_write+0x1f8/0x250 [ 207.165944][ T9082] do_syscall_64+0x10b/0xf80 [ 207.172079][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.179516][ T9082] } [ 207.181991][ T9082] ... key at: [] __key.87+0x0/0x40 [ 207.189179][ T9082] ... acquired at: [ 207.192965][ T9082] _raw_spin_lock+0x2e/0x40 [ 207.197621][ T9082] evdev_pass_values+0x19c/0x910 [ 207.202730][ T9082] evdev_events+0x1bb/0x390 [ 207.207393][ T9082] input_pass_values+0x753/0x880 [ 207.212496][ T9082] input_handle_event+0x7e4/0x1500 [ 207.217771][ T9082] input_inject_event+0x1ce/0x390 [ 207.222962][ T9082] evdev_write+0x3ef/0x610 [ 207.227540][ T9082] vfs_write+0x2aa/0x1070 [ 207.232026][ T9082] ksys_write+0x1f8/0x250 [ 207.236518][ T9082] do_syscall_64+0x10b/0xf80 [ 207.241270][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.247317][ T9082] [ 207.249622][ T9082] [ 207.249622][ T9082] the dependencies between the lock to be acquired [ 207.249631][ T9082] and SOFTIRQ-irq-unsafe lock: [ 207.263100][ T9082] -> (tasklist_lock){.+.+}-{3:3} { [ 207.268380][ T9082] HARDIRQ-ON-R at: [ 207.272514][ T9082] lock_acquire+0x1b1/0x370 [ 207.279006][ T9082] _raw_read_lock+0x5f/0x70 [ 207.285489][ T9082] __do_wait+0x13b/0x8b0 [ 207.291710][ T9082] do_wait+0x1ec/0x580 [ 207.297758][ T9082] kernel_wait+0xa1/0x160 [ 207.304067][ T9082] call_usermodehelper_exec_work+0xf6/0x180 [ 207.311945][ T9082] process_one_work+0xa0e/0x1980 [ 207.318866][ T9082] worker_thread+0x5ef/0xe50 [ 207.325445][ T9082] kthread+0x370/0x450 [ 207.331497][ T9082] ret_from_fork+0x72b/0xd50 [ 207.338074][ T9082] ret_from_fork_asm+0x1a/0x30 [ 207.344839][ T9082] SOFTIRQ-ON-R at: [ 207.348986][ T9082] lock_acquire+0x1b1/0x370 [ 207.355476][ T9082] _raw_read_lock+0x5f/0x70 [ 207.361958][ T9082] __do_wait+0x13b/0x8b0 [ 207.368179][ T9082] do_wait+0x1ec/0x580 [ 207.374240][ T9082] kernel_wait+0xa1/0x160 [ 207.380573][ T9082] call_usermodehelper_exec_work+0xf6/0x180 [ 207.388479][ T9082] process_one_work+0xa0e/0x1980 [ 207.395409][ T9082] worker_thread+0x5ef/0xe50 [ 207.401995][ T9082] kthread+0x370/0x450 [ 207.408058][ T9082] ret_from_fork+0x72b/0xd50 [ 207.414637][ T9082] ret_from_fork_asm+0x1a/0x30 [ 207.421392][ T9082] INITIAL USE at: [ 207.425443][ T9082] lock_acquire+0x1b1/0x370 [ 207.431846][ T9082] _raw_write_lock_irq+0x36/0x50 [ 207.438687][ T9082] copy_process+0x4abe/0x7e00 [ 207.445269][ T9082] kernel_clone+0x12e/0x9c0 [ 207.451674][ T9082] user_mode_thread+0xcc/0x110 [ 207.458335][ T9082] rest_init+0x21/0x260 [ 207.464394][ T9082] start_kernel+0x484/0x490 [ 207.470793][ T9082] x86_64_start_reservations+0x24/0x30 [ 207.478150][ T9082] x86_64_start_kernel+0x12b/0x130 [ 207.485155][ T9082] common_startup_64+0x13e/0x148 [ 207.491991][ T9082] INITIAL READ USE at: [ 207.496473][ T9082] lock_acquire+0x1b1/0x370 [ 207.503308][ T9082] _raw_read_lock+0x5f/0x70 [ 207.510138][ T9082] __do_wait+0x13b/0x8b0 [ 207.516728][ T9082] do_wait+0x1ec/0x580 [ 207.523122][ T9082] kernel_wait+0xa1/0x160 [ 207.529780][ T9082] call_usermodehelper_exec_work+0xf6/0x180 [ 207.538015][ T9082] process_one_work+0xa0e/0x1980 [ 207.545293][ T9082] worker_thread+0x5ef/0xe50 [ 207.552219][ T9082] kthread+0x370/0x450 [ 207.558620][ T9082] ret_from_fork+0x72b/0xd50 [ 207.565542][ T9082] ret_from_fork_asm+0x1a/0x30 [ 207.572645][ T9082] } [ 207.575297][ T9082] ... key at: [] tasklist_lock+0x18/0x40 [ 207.583184][ T9082] ... acquired at: [ 207.587143][ T9082] _raw_read_lock+0x5f/0x70 [ 207.591805][ T9082] send_sigurg+0xed/0xc80 [ 207.596295][ T9082] sk_send_sigurg+0x76/0x370 [ 207.601049][ T9082] unix_stream_sendmsg+0xbbf/0x1310 [ 207.606409][ T9082] ____sys_sendmsg+0x9e1/0xb70 [ 207.611331][ T9082] ___sys_sendmsg+0x190/0x1e0 [ 207.616169][ T9082] __sys_sendmmsg+0x205/0x430 [ 207.621012][ T9082] __x64_sys_sendmmsg+0x9c/0x100 [ 207.626116][ T9082] do_syscall_64+0x10b/0xf80 [ 207.630868][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.636924][ T9082] [ 207.639225][ T9082] -> (&f_owner->lock){....}-{3:3} { [ 207.644520][ T9082] INITIAL USE at: [ 207.648496][ T9082] lock_acquire+0x1b1/0x370 [ 207.654737][ T9082] _raw_write_lock_irq+0x36/0x50 [ 207.661402][ T9082] __f_setown+0x65/0x390 [ 207.667377][ T9082] tty_fasync+0x232/0x350 [ 207.673437][ T9082] do_vfs_ioctl+0xfb2/0x13e0 [ 207.679756][ T9082] __x64_sys_ioctl+0x114/0x210 [ 207.686240][ T9082] do_syscall_64+0x10b/0xf80 [ 207.692553][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.700168][ T9082] INITIAL READ USE at: [ 207.704569][ T9082] lock_acquire+0x1b1/0x370 [ 207.711270][ T9082] _raw_read_lock_irqsave+0x74/0x90 [ 207.718627][ T9082] send_sigurg+0x5f/0xc80 [ 207.725108][ T9082] sk_send_sigurg+0x76/0x370 [ 207.731858][ T9082] unix_stream_sendmsg+0xbbf/0x1310 [ 207.739216][ T9082] ____sys_sendmsg+0x9e1/0xb70 [ 207.746135][ T9082] ___sys_sendmsg+0x190/0x1e0 [ 207.752976][ T9082] __sys_sendmmsg+0x205/0x430 [ 207.759822][ T9082] __x64_sys_sendmmsg+0x9c/0x100 [ 207.766924][ T9082] do_syscall_64+0x10b/0xf80 [ 207.773672][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.781718][ T9082] } [ 207.784279][ T9082] ... key at: [] __key.1+0x0/0x40 [ 207.791462][ T9082] ... acquired at: [ 207.795329][ T9082] _raw_read_lock_irqsave+0x74/0x90 [ 207.800685][ T9082] send_sigio+0x31/0x3e0 [ 207.805081][ T9082] kill_fasync+0x214/0x510 [ 207.809648][ T9082] sock_wake_async+0x132/0x160 [ 207.814566][ T9082] sock_def_readable+0x525/0x610 [ 207.819665][ T9082] unix_stream_sendmsg+0xbf7/0x1310 [ 207.825021][ T9082] ____sys_sendmsg+0x9e1/0xb70 [ 207.829941][ T9082] ___sys_sendmsg+0x190/0x1e0 [ 207.834777][ T9082] __sys_sendmmsg+0x205/0x430 [ 207.839620][ T9082] __x64_sys_sendmmsg+0x9c/0x100 [ 207.844719][ T9082] do_syscall_64+0x10b/0xf80 [ 207.849468][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.855524][ T9082] [ 207.857850][ T9082] -> (&new->fa_lock){...-}-{3:3} { [ 207.862982][ T9082] IN-SOFTIRQ-R at: [ 207.866950][ T9082] lock_acquire+0x1b1/0x370 [ 207.873100][ T9082] _raw_read_lock_irqsave+0x46/0x90 [ 207.879942][ T9082] kill_fasync+0x138/0x510 [ 207.885994][ T9082] sock_wake_async+0x132/0x160 [ 207.892392][ T9082] sock_def_readable+0x525/0x610 [ 207.898971][ T9082] tcp_child_process+0x66b/0xa80 [ 207.905553][ T9082] tcp_v6_rcv+0x1a91/0x4280 [ 207.911688][ T9082] ip6_protocol_deliver_rcu+0x188/0x1500 [ 207.918959][ T9082] ip6_input_finish+0x1e4/0x4a0 [ 207.925447][ T9082] ip6_input+0x105/0x2f0 [ 207.931326][ T9082] ipv6_rcv+0x263/0x3d0 [ 207.937121][ T9082] __netif_receive_skb_one_core+0x12d/0x1e0 [ 207.944655][ T9082] __netif_receive_skb+0x1f/0x120 [ 207.951318][ T9082] process_backlog+0x37a/0x1580 [ 207.957807][ T9082] __napi_poll.constprop.0+0xaf/0x450 [ 207.964826][ T9082] net_rx_action+0xa40/0xf20 [ 207.971059][ T9082] handle_softirqs+0x1ea/0xa00 [ 207.977461][ T9082] do_softirq+0xac/0xe0 [ 207.983253][ T9082] __local_bh_enable_ip+0xf8/0x120 [ 207.990002][ T9082] __dev_queue_xmit+0xa04/0x4950 [ 207.996573][ T9082] ip6_finish_output2+0xfd4/0x1ce0 [ 208.003319][ T9082] __ip6_finish_output+0x357/0xdf0 [ 208.010064][ T9082] ip6_output+0x2aa/0xa60 [ 208.016028][ T9082] ip6_xmit+0x1006/0x24a0 [ 208.021994][ T9082] inet6_csk_xmit+0x387/0x760 [ 208.028319][ T9082] __tcp_transmit_skb+0x1fab/0x4f10 [ 208.035179][ T9082] tcp_write_xmit+0x112d/0x83d0 [ 208.041683][ T9082] __tcp_push_pending_frames+0xaf/0x3b0 [ 208.048870][ T9082] tcp_send_fin+0x116/0x10c0 [ 208.055101][ T9082] __tcp_close+0xa0d/0x1110 [ 208.061253][ T9082] tcp_close+0x28/0x110 [ 208.067058][ T9082] inet_release+0xed/0x200 [ 208.073117][ T9082] inet6_release+0x4f/0x70 [ 208.079186][ T9082] __sock_release+0xb3/0x260 [ 208.085445][ T9082] sock_close+0x1c/0x30 [ 208.091246][ T9082] __fput+0x3ff/0xb50 [ 208.096875][ T9082] task_work_run+0x150/0x240 [ 208.103113][ T9082] exit_to_user_mode_loop+0x100/0x4a0 [ 208.110121][ T9082] do_syscall_64+0x706/0xf80 [ 208.116346][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.123879][ T9082] INITIAL USE at: [ 208.127749][ T9082] lock_acquire+0x1b1/0x370 [ 208.133800][ T9082] _raw_write_lock_irq+0x36/0x50 [ 208.140285][ T9082] fasync_remove_entry+0xb2/0x1e0 [ 208.146857][ T9082] fasync_helper+0xaf/0xd0 [ 208.152816][ T9082] tty_fasync+0x279/0x350 [ 208.158694][ T9082] __fput+0x95a/0xb50 [ 208.164229][ T9082] task_work_run+0x150/0x240 [ 208.170371][ T9082] exit_to_user_mode_loop+0x100/0x4a0 [ 208.177298][ T9082] do_syscall_64+0x706/0xf80 [ 208.183443][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.190881][ T9082] INITIAL READ USE at: [ 208.195190][ T9082] lock_acquire+0x1b1/0x370 [ 208.201675][ T9082] _raw_read_lock_irqsave+0x74/0x90 [ 208.208857][ T9082] kill_fasync+0x138/0x510 [ 208.215265][ T9082] pipe_release+0x19e/0x2c0 [ 208.221752][ T9082] __fput+0x3ff/0xb50 [ 208.227721][ T9082] task_work_run+0x150/0x240 [ 208.234302][ T9082] exit_to_user_mode_loop+0x100/0x4a0 [ 208.241657][ T9082] do_syscall_64+0x706/0xf80 [ 208.248230][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.256104][ T9082] } [ 208.258594][ T9082] ... key at: [] __key.0+0x0/0x40 [ 208.265694][ T9082] ... acquired at: [ 208.269476][ T9082] lock_acquire+0x1b1/0x370 [ 208.274145][ T9082] _raw_read_lock_irqsave+0x74/0x90 [ 208.279502][ T9082] kill_fasync+0x138/0x510 [ 208.284071][ T9082] evdev_pass_values+0x5da/0x910 [ 208.289172][ T9082] evdev_events+0x1bb/0x390 [ 208.293835][ T9082] input_pass_values+0x753/0x880 [ 208.298932][ T9082] input_handle_event+0x7e4/0x1500 [ 208.304204][ T9082] input_inject_event+0x1ce/0x390 [ 208.309391][ T9082] evdev_write+0x3ef/0x610 [ 208.313971][ T9082] vfs_write+0x2aa/0x1070 [ 208.318468][ T9082] ksys_write+0x1f8/0x250 [ 208.322954][ T9082] do_syscall_64+0x10b/0xf80 [ 208.327701][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.333747][ T9082] [ 208.336051][ T9082] [ 208.336051][ T9082] stack backtrace: [ 208.341940][ T9082] CPU: 0 UID: 0 PID: 9082 Comm: syz.2.1099 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.341967][ T9082] Tainted: [L]=SOFTLOCKUP [ 208.341973][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.341987][ T9082] Call Trace: [ 208.341994][ T9082] [ 208.342002][ T9082] dump_stack_lvl+0x100/0x190 [ 208.342025][ T9082] check_irq_usage+0x7aa/0x810 [ 208.342052][ T9082] ? check_noncircular+0x97/0x160 [ 208.342075][ T9082] ? __lock_acquire+0x14cf/0x2630 [ 208.342096][ T9082] __lock_acquire+0x14cf/0x2630 [ 208.342123][ T9082] lock_acquire+0x1b1/0x370 [ 208.342143][ T9082] ? kill_fasync+0x138/0x510 [ 208.342163][ T9082] _raw_read_lock_irqsave+0x74/0x90 [ 208.342183][ T9082] ? kill_fasync+0x138/0x510 [ 208.342198][ T9082] kill_fasync+0x138/0x510 [ 208.342214][ T9082] evdev_pass_values+0x5da/0x910 [ 208.342243][ T9082] ? __pfx_evdev_pass_values+0x10/0x10 [ 208.342271][ T9082] evdev_events+0x1bb/0x390 [ 208.342297][ T9082] input_pass_values+0x753/0x880 [ 208.342324][ T9082] input_handle_event+0x7e4/0x1500 [ 208.342349][ T9082] ? _raw_spin_lock_irqsave+0x52/0x60 [ 208.342369][ T9082] input_inject_event+0x1ce/0x390 [ 208.342396][ T9082] evdev_write+0x3ef/0x610 [ 208.342425][ T9082] ? __pfx_evdev_write+0x10/0x10 [ 208.342451][ T9082] ? bpf_lsm_file_permission+0x9/0x10 [ 208.342478][ T9082] ? security_file_permission+0x76/0x210 [ 208.342507][ T9082] ? rw_verify_area+0xce/0x6d0 [ 208.342525][ T9082] vfs_write+0x2aa/0x1070 [ 208.342543][ T9082] ? __pfx_evdev_write+0x10/0x10 [ 208.342569][ T9082] ? __pfx_vfs_write+0x10/0x10 [ 208.342586][ T9082] ? find_held_lock+0x2b/0x80 [ 208.342602][ T9082] ? __fget_files+0x215/0x3d0 [ 208.342624][ T9082] ? __fget_files+0x215/0x3d0 [ 208.342647][ T9082] ? __fget_files+0x21f/0x3d0 [ 208.342671][ T9082] ksys_write+0x1f8/0x250 [ 208.342689][ T9082] ? __pfx_ksys_write+0x10/0x10 [ 208.342708][ T9082] ? rcu_is_watching+0x12/0xc0 [ 208.342737][ T9082] do_syscall_64+0x10b/0xf80 [ 208.342757][ T9082] ? clear_bhb_loop+0x40/0x90 [ 208.342778][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.342796][ T9082] RIP: 0033:0x7fd66bb9cdd9 [ 208.342814][ T9082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.342831][ T9082] RSP: 002b:00007fd66ca6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.342851][ T9082] RAX: ffffffffffffffda RBX: 00007fd66be15fa0 RCX: 00007fd66bb9cdd9 [ 208.342864][ T9082] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000005 [ 208.342875][ T9082] RBP: 00007fd66bc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 208.342886][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.342896][ T9082] R13: 00007fd66be16038 R14: 00007fd66be15fa0 R15: 00007ffd12f3b738 [ 208.342915][ T9082] [ 208.627897][ T30] audit: type=1400 audit(1778033660.881:2316): avc: denied { open } for pid=9081 comm="syz.2.1099" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.706069][ T5596] usb 3-1: USB disconnect, device number 13