last executing test programs: 7.4981578s ago: executing program 1 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_hcd.0', 0xb) 6.713108556s ago: executing program 1 (id=928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xffffff16}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) 6.291798432s ago: executing program 1 (id=933): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffd26, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x3) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000007cc0)) 4.71452964s ago: executing program 1 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff1, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.556778309s ago: executing program 1 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_TIMERSLACK(0x1d, 0xe8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", '\x00', "4c5293d719408a98"}, 0x28) read$FUSE(r5, &(0x7f0000000b80)={0x2020}, 0x2020) 3.335537789s ago: executing program 4 (id=948): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 2.794636953s ago: executing program 0 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000440)="000a180000edffffffea55000000000100aa45da88e815b208000000000000004d6d3ef4", 0x24, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 2.71891302s ago: executing program 4 (id=951): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) 2.521617785s ago: executing program 4 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f00000001c0)=""/64, 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2.52118782s ago: executing program 0 (id=955): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r4, 0xffffffffffffffff, 0x0) 2.445121017s ago: executing program 2 (id=957): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 2.329602536s ago: executing program 3 (id=958): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r8]) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r9, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r9, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2.310916176s ago: executing program 2 (id=959): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x7ffffffd, 0xb, 0x1fd, 0x1}) 1.900821634s ago: executing program 4 (id=960): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setresuid(0xee00, 0xee00, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) close(0xffffffffffffffff) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 1.851188524s ago: executing program 2 (id=961): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={0x0, 0x6d, 0x29}, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000400)="bf9e9014b97efb7cdd465f6584f32f0c9749b395fa8f398903e4494d4008efb413ee053491d49a1e4994a7b7e5fa1a6c682a67edb69f97504e665b4aad510f22ea919e7aa6a7f1a90b495cc03dfe7ccee07e7c9100d0f37c4901706af2f137c0e6ff64111049e652ad357ed978", &(0x7f0000000480)=""/41) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) gettid() r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 1.752059296s ago: executing program 4 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 1.574503315s ago: executing program 4 (id=963): request_key(&(0x7f0000000c40)='encrypted\x00', &(0x7f0000000c80)={'syz', 0x0}, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000001, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x40043d14, &(0x7f0000000040)) io_setup(0x3, &(0x7f0000000600)) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) keyctl$negate(0xd, 0x0, 0x8000000000000000, 0x0) 1.115425479s ago: executing program 0 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) 1.114848287s ago: executing program 3 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000030000000400"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000000001000b00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.03442385s ago: executing program 0 (id=966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 935.823876ms ago: executing program 3 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000440)="000a180000edffffffea55000000000100aa45da88e815b208000000000000004d6d3ef4", 0x24, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 482.417306ms ago: executing program 0 (id=968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff1, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 481.716666ms ago: executing program 2 (id=969): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 480.107417ms ago: executing program 3 (id=970): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000477d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 368.343227ms ago: executing program 3 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f00000001c0)=""/64, 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 363.894713ms ago: executing program 2 (id=972): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x7ffffffd, 0xb, 0x1fd, 0x1}) 192.383499ms ago: executing program 1 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 149.447558ms ago: executing program 0 (id=974): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030426bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a43800ffff0000021400350076657468305f766972745f776966690008000a00398b6f42e1af090d5f0e1fab47c9c0cee5a2a9d20696410be8250ecb9ac526c0"], 0x3c}}, 0x8000) 57.082291ms ago: executing program 2 (id=975): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=976): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(0x0, &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 52.428965][ T29] audit: type=1400 audit(1784932788.730:111): avc: denied { write } for pid=5459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.482402][ T29] audit: type=1400 audit(1784932788.780:112): avc: denied { write } for pid=5470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.050743][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 54.050758][ T29] audit: type=1400 audit(1784932790.350:125): avc: denied { write } for pid=5557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.096774][ T29] audit: type=1400 audit(1784932790.390:126): avc: denied { write } for pid=5568 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.653484][ T29] audit: type=1400 audit(1784932790.950:127): avc: denied { write } for pid=5571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.695100][ T29] audit: type=1400 audit(1784932790.990:128): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 59.330717][ T29] audit: type=1400 audit(1784932795.630:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.354271][ T29] audit: type=1400 audit(1784932795.650:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.357239][ T5594] cgroup: Unknown subsys name 'net' [ 59.383386][ T29] audit: type=1400 audit(1784932795.680:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.491605][ T5594] cgroup: Unknown subsys name 'cpuset' [ 59.499269][ T5594] cgroup: Unknown subsys name 'rlimit' [ 59.638992][ T29] audit: type=1400 audit(1784932795.940:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.662819][ T29] audit: type=1400 audit(1784932795.940:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.696190][ T29] audit: type=1400 audit(1784932795.940:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.721001][ T29] audit: type=1400 audit(1784932795.940:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.741593][ T29] audit: type=1400 audit(1784932795.940:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.747159][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.767393][ T29] audit: type=1400 audit(1784932795.940:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.798998][ T29] audit: type=1400 audit(1784932796.080:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.737157][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.821893][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.831269][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.844085][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.854339][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.860093][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.862427][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.871963][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.876605][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.888399][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.890804][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.898111][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.905306][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.912380][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.920218][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.924656][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.940889][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.946060][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.950397][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.955759][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.969355][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.970613][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.984772][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.994775][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.996877][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.013465][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.172608][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.180359][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.187774][ T5613] bridge_slave_0: entered allmulticast mode [ 64.194709][ T5613] bridge_slave_0: entered promiscuous mode [ 64.206152][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.213359][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.220664][ T5613] bridge_slave_1: entered allmulticast mode [ 64.227954][ T5613] bridge_slave_1: entered promiscuous mode [ 64.311216][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.320618][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.327753][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.335352][ T5606] bridge_slave_0: entered allmulticast mode [ 64.342100][ T5606] bridge_slave_0: entered promiscuous mode [ 64.367210][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.382810][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.390053][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.397220][ T5606] bridge_slave_1: entered allmulticast mode [ 64.404211][ T5606] bridge_slave_1: entered promiscuous mode [ 64.418266][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.425419][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.432723][ T5622] bridge_slave_0: entered allmulticast mode [ 64.439382][ T5622] bridge_slave_0: entered promiscuous mode [ 64.467054][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.474205][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.481437][ T5622] bridge_slave_1: entered allmulticast mode [ 64.488094][ T5622] bridge_slave_1: entered promiscuous mode [ 64.496001][ T5613] team0: Port device team_slave_0 added [ 64.532392][ T5613] team0: Port device team_slave_1 added [ 64.539913][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.575698][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.584905][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.592270][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.600129][ T5614] bridge_slave_0: entered allmulticast mode [ 64.606810][ T5614] bridge_slave_0: entered promiscuous mode [ 64.614044][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.621329][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.628436][ T5607] bridge_slave_0: entered allmulticast mode [ 64.635307][ T5607] bridge_slave_0: entered promiscuous mode [ 64.643972][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.667154][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.674328][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.681669][ T5614] bridge_slave_1: entered allmulticast mode [ 64.688314][ T5614] bridge_slave_1: entered promiscuous mode [ 64.695792][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.703067][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.710219][ T5607] bridge_slave_1: entered allmulticast mode [ 64.716820][ T5607] bridge_slave_1: entered promiscuous mode [ 64.725175][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.735452][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.742550][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.768598][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.788062][ T5606] team0: Port device team_slave_0 added [ 64.812692][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.819799][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.845726][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.858009][ T5606] team0: Port device team_slave_1 added [ 64.902343][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.913327][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.924161][ T5622] team0: Port device team_slave_0 added [ 64.932187][ T5622] team0: Port device team_slave_1 added [ 64.938185][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.945454][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.971958][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.984365][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.995455][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.009468][ T50] Bluetooth: hci0: command tx timeout [ 65.009628][ T4927] Bluetooth: hci3: command tx timeout [ 65.021446][ T5620] Bluetooth: hci1: command tx timeout [ 65.033694][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.040668][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.066601][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.089185][ T4927] Bluetooth: hci4: command tx timeout [ 65.091251][ T5620] Bluetooth: hci2: command tx timeout [ 65.131374][ T5607] team0: Port device team_slave_0 added [ 65.138861][ T5607] team0: Port device team_slave_1 added [ 65.144897][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.151876][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.177927][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.190786][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.197721][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.223649][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.240397][ T5614] team0: Port device team_slave_0 added [ 65.250181][ T5613] hsr_slave_0: entered promiscuous mode [ 65.256436][ T5613] hsr_slave_1: entered promiscuous mode [ 65.283885][ T5614] team0: Port device team_slave_1 added [ 65.309743][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.316700][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.342632][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.357313][ T5606] hsr_slave_0: entered promiscuous mode [ 65.363470][ T5606] hsr_slave_1: entered promiscuous mode [ 65.369523][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 65.375276][ T5606] Cannot create hsr debugfs directory [ 65.381995][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.389170][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.415142][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.427352][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.434348][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.460254][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.477775][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.484789][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.510787][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.576531][ T5622] hsr_slave_0: entered promiscuous mode [ 65.582625][ T5622] hsr_slave_1: entered promiscuous mode [ 65.588461][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 65.594571][ T5622] Cannot create hsr debugfs directory [ 65.666122][ T5607] hsr_slave_0: entered promiscuous mode [ 65.672230][ T5607] hsr_slave_1: entered promiscuous mode [ 65.678055][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 65.683877][ T5607] Cannot create hsr debugfs directory [ 65.698427][ T5614] hsr_slave_0: entered promiscuous mode [ 65.704545][ T5614] hsr_slave_1: entered promiscuous mode [ 65.710469][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 65.716169][ T5614] Cannot create hsr debugfs directory [ 65.820811][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.829389][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.005188][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.016375][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.024982][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.034824][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.043227][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.052670][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.060385][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.069229][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.121710][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.134919][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.147991][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.156940][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.165463][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.174869][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.183276][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.191932][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.264971][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.274907][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.283694][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.293057][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.301650][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.310918][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.320966][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.329744][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.417513][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.427141][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.435946][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.444127][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.452780][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.461059][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.470723][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.478294][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.487294][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.530993][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.562418][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.587536][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.598193][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.605723][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.636444][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.645744][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.654060][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.661156][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.669982][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.677041][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.691404][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.698494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.709696][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.718209][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.727212][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.736419][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.744339][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.752871][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.791668][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.844421][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.874855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.881943][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.912883][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.920041][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.937049][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.015181][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.037460][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.044641][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.076753][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.083906][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.095010][ T5620] Bluetooth: hci3: command tx timeout [ 67.106880][ T5620] Bluetooth: hci1: command tx timeout [ 67.111300][ T4927] Bluetooth: hci0: command tx timeout [ 67.153118][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.169554][ T4927] Bluetooth: hci2: command tx timeout [ 67.170629][ T50] Bluetooth: hci4: command tx timeout [ 67.214854][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.249105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.256245][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.296728][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.304090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.686463][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.724802][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.846847][ T5613] veth0_vlan: entered promiscuous mode [ 67.872090][ T5613] veth1_vlan: entered promiscuous mode [ 67.895855][ T5606] veth0_vlan: entered promiscuous mode [ 67.927912][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.954657][ T5606] veth1_vlan: entered promiscuous mode [ 68.000292][ T5613] veth0_macvtap: entered promiscuous mode [ 68.021586][ T5613] veth1_macvtap: entered promiscuous mode [ 68.045945][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.094521][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.117056][ T5606] veth0_macvtap: entered promiscuous mode [ 68.140103][ T5606] veth1_macvtap: entered promiscuous mode [ 68.148508][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.157603][ T5622] veth0_vlan: entered promiscuous mode [ 68.177884][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.187269][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.203849][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.212421][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.222344][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.240826][ T5622] veth1_vlan: entered promiscuous mode [ 68.277532][ T5614] veth0_vlan: entered promiscuous mode [ 68.293179][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.316956][ T5614] veth1_vlan: entered promiscuous mode [ 68.355849][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.408353][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.420150][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.430210][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.442804][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.457434][ T5622] veth0_macvtap: entered promiscuous mode [ 68.466852][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.470475][ T5622] veth1_macvtap: entered promiscuous mode [ 68.482607][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.531749][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.543933][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.546651][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.565020][ T5614] veth0_macvtap: entered promiscuous mode [ 68.580407][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.592657][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 68.592683][ T29] audit: type=1400 audit(1784932804.890:152): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.XaqFCq/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.612599][ T5614] veth1_macvtap: entered promiscuous mode [ 68.624496][ T29] audit: type=1400 audit(1784932804.890:153): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.652733][ T29] audit: type=1400 audit(1784932804.890:154): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.XaqFCq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.656772][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.695243][ T29] audit: type=1400 audit(1784932804.890:155): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.719652][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.725667][ T29] audit: type=1400 audit(1784932804.890:156): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.XaqFCq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.755256][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.755295][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.774666][ T29] audit: type=1400 audit(1784932804.900:157): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.XaqFCq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.782718][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.808696][ T29] audit: type=1400 audit(1784932804.900:158): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.830109][ T29] audit: type=1400 audit(1784932804.930:159): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.855401][ T29] audit: type=1400 audit(1784932804.930:160): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="gadgetfs" ino=7033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.881508][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.894971][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.905573][ T5607] veth0_vlan: entered promiscuous mode [ 68.918786][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.921436][ T29] audit: type=1400 audit(1784932804.930:161): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.004553][ T5607] veth1_vlan: entered promiscuous mode [ 69.015065][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.040331][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.049237][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.074632][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.117820][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.168570][ T5607] veth0_macvtap: entered promiscuous mode [ 69.174384][ T50] Bluetooth: hci0: command tx timeout [ 69.180385][ T50] Bluetooth: hci1: command tx timeout [ 69.181885][ T4927] Bluetooth: hci3: command tx timeout [ 69.219984][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.229326][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.245073][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.256931][ T4927] Bluetooth: hci2: command tx timeout [ 69.258943][ T50] Bluetooth: hci4: command tx timeout [ 69.267524][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.211061][ T5607] veth1_macvtap: entered promiscuous mode [ 70.228709][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.427121][ T5800] infiniband syz2: set down [ 70.432184][ T5800] infiniband syz2: added ipvlan0 [ 70.440962][ T5800] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 70.443319][ T5800] infiniband syz2: Couldn't open port 1 [ 70.460017][ T5800] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.475100][ T5800] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.493054][ T5800] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.527298][ T5800] RDS/IB: syz2: added [ 70.531709][ T5800] smc: adding ib device syz2 with port count 1 [ 70.537926][ T5800] smc: ib device syz2 port 1 has no pnetid [ 70.815068][ T5810] kernel kvm profiling enabled (shift: 10) [ 70.865673][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.908186][ T347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.930185][ T347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.001776][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.097338][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.112145][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.126222][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.135368][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.159774][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.248646][ T50] Bluetooth: hci3: command tx timeout [ 71.259013][ T50] Bluetooth: hci1: command tx timeout [ 71.265044][ T50] Bluetooth: hci0: command tx timeout [ 71.328659][ T4927] Bluetooth: hci2: command tx timeout [ 71.339039][ T4927] Bluetooth: hci4: command tx timeout [ 71.457405][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.490328][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.715714][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.739217][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.827873][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.013969][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.781832][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 73.781846][ T29] audit: type=1400 audit(1784932810.080:191): avc: denied { read write } for pid=5847 comm="syz.2.14" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 74.037823][ T29] audit: type=1400 audit(1784932810.110:192): avc: denied { open } for pid=5847 comm="syz.2.14" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 78.707687][ T5866] tmpfs: Cannot change global quota limit on remount [ 79.307062][ T29] audit: type=1400 audit(1784932813.090:193): avc: denied { mount } for pid=5854 comm="syz.3.15" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 79.553945][ T29] audit: type=1400 audit(1784932814.140:194): avc: denied { read } for pid=5854 comm="syz.3.15" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.595844][ T29] audit: type=1400 audit(1784932814.140:195): avc: denied { open } for pid=5854 comm="syz.3.15" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.601012][ T5861] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 79.685800][ T29] audit: type=1400 audit(1784932814.310:196): avc: denied { ioctl } for pid=5854 comm="syz.3.15" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.868595][ T29] audit: type=1400 audit(1784932815.000:197): avc: denied { remount } for pid=5863 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.960929][ T29] audit: type=1400 audit(1784932815.660:198): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.174056][ T29] audit: type=1400 audit(1784932816.110:199): avc: denied { read write } for pid=5869 comm="syz.2.18" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.231427][ T29] audit: type=1400 audit(1784932816.110:200): avc: denied { open } for pid=5869 comm="syz.2.18" path="/dev/video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.638138][ T29] audit: type=1400 audit(1784932816.230:201): avc: denied { create } for pid=5875 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.721628][ T29] audit: type=1400 audit(1784932816.280:202): avc: denied { write } for pid=5875 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.145186][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.272819][ T1222] cfg80211: failed to load regulatory.db [ 81.421574][ T5907] Bluetooth: MGMT ver 1.23 [ 81.448748][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 81.688475][ T5914] file system registered [ 81.771665][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.786180][ T5613] ffs_data_put(): freeing [ 81.829475][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 81.864315][ T24] usb 1-1: can't read configurations, error -71 [ 82.045796][ T5927] fuse: Unknown parameter '0x0000000000000003' [ 82.709385][ T5939] fuse: Bad value for 'fd' [ 82.846373][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 82.852485][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 82.859956][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 82.866854][ T5941] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 82.882329][ T5941] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 82.899272][ T5941] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 82.911223][ T5941] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.925032][ T5941] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.011004][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 83.024648][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 83.035518][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 83.047980][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 83.059546][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 83.431756][ T5942] smc: removing ib device syz2 [ 83.452558][ T5942] smbdirect: ib_dev[syz2] removed [ 83.797650][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 84.390047][ T5961] No source specified [ 84.538008][ T5967] fuse: Unknown parameter '0x0000000000000003' [ 84.788309][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 84.788326][ T29] audit: type=1400 audit(1784932821.010:253): avc: denied { write } for pid=5977 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.816801][ T29] audit: type=1400 audit(1784932821.010:254): avc: denied { read } for pid=5977 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.049358][ T29] audit: type=1400 audit(1784932821.270:255): avc: denied { ioctl } for pid=5974 comm="syz.3.57" path="/dev/video7" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 85.206140][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 85.473143][ T29] audit: type=1400 audit(1784932821.770:256): avc: denied { read } for pid=5992 comm="syz.1.63" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.597112][ T29] audit: type=1400 audit(1784932821.770:257): avc: denied { open } for pid=5992 comm="syz.1.63" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.696153][ T29] audit: type=1400 audit(1784932821.770:258): avc: denied { ioctl } for pid=5992 comm="syz.1.63" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.721631][ T29] audit: type=1400 audit(1784932821.770:259): avc: denied { set_context_mgr } for pid=5992 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.835453][ T29] audit: type=1400 audit(1784932821.880:260): avc: denied { map } for pid=5992 comm="syz.1.63" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.936798][ T29] audit: type=1400 audit(1784932821.930:261): avc: denied { call } for pid=5992 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.024355][ T29] audit: type=1400 audit(1784932821.930:262): avc: denied { transfer } for pid=5992 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.353294][ T6012] wlan0 speed is unknown, defaulting to 1000 [ 87.700084][ T6027] siw: device registration error -23 [ 90.678437][ T6082] siw: device registration error -23 [ 91.014064][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 91.014079][ T29] audit: type=1400 audit(1784932827.310:272): avc: denied { append } for pid=6085 comm="syz.1.96" name="comedi0" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.436088][ T29] audit: type=1400 audit(1784932828.300:273): avc: denied { name_bind } for pid=6094 comm="syz.2.100" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.464177][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 92.473004][ T6097] bridge_slave_1: left allmulticast mode [ 92.478658][ T6097] bridge_slave_1: left promiscuous mode [ 92.484948][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.514166][ T6097] bridge_slave_0: left allmulticast mode [ 92.520441][ T6097] bridge_slave_0: left promiscuous mode [ 92.526171][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.578831][ T29] audit: type=1400 audit(1784932828.300:274): avc: denied { name_connect } for pid=6094 comm="syz.2.100" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.733807][ T6110] siw: device registration error -23 [ 93.244109][ T29] audit: type=1400 audit(1784932828.760:275): avc: denied { create } for pid=6094 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.264407][ T29] audit: type=1400 audit(1784932828.820:276): avc: denied { connect } for pid=6098 comm="syz.3.102" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.285098][ T29] audit: type=1400 audit(1784932828.830:277): avc: denied { setopt } for pid=6098 comm="syz.3.102" laddr=fe80::8cbe:ffff:fe9e:8c8c lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.424856][ T29] audit: type=1400 audit(1784932828.830:278): avc: denied { write } for pid=6098 comm="syz.3.102" laddr=fe80::8cbe:ffff:fe9e:8c8c lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.048830][ T29] audit: type=1400 audit(1784932830.340:279): avc: denied { read write } for pid=6117 comm="syz.0.108" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.251392][ T29] audit: type=1400 audit(1784932830.370:280): avc: denied { open } for pid=6117 comm="syz.0.108" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.320004][ T29] audit: type=1400 audit(1784932830.370:281): avc: denied { ioctl } for pid=6117 comm="syz.0.108" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.298078][ T6136] netlink: 'syz.2.111': attribute type 5 has an invalid length. [ 96.848204][ T29] audit: type=1400 audit(1784932833.140:282): avc: denied { name_bind } for pid=6134 comm="syz.1.114" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 97.600921][ T29] audit: type=1400 audit(1784932833.890:283): avc: denied { write } for pid=6161 comm="syz.2.122" name="functions" dev="configfs" ino=9319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.671848][ T6162] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 97.689908][ T29] audit: type=1400 audit(1784932833.930:284): avc: denied { write } for pid=6161 comm="syz.2.122" name="core" dev="configfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.765358][ T29] audit: type=1400 audit(1784932833.940:285): avc: denied { write } for pid=6161 comm="syz.2.122" name="rd_mcp_0" dev="configfs" ino=10649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.859530][ T29] audit: type=1400 audit(1784932833.950:286): avc: denied { write } for pid=6161 comm="syz.2.122" name="control" dev="configfs" ino=10661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 97.933996][ T29] audit: type=1400 audit(1784932833.950:287): avc: denied { open } for pid=6161 comm="syz.2.122" path="/26/config/target/core/rd_mcp_0/ramdisk_0/control" dev="configfs" ino=10661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 98.041534][ T29] audit: type=1400 audit(1784932834.020:288): avc: denied { write } for pid=6161 comm="syz.2.122" name="target" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.175475][ T29] audit: type=1400 audit(1784932834.020:289): avc: denied { write } for pid=6161 comm="syz.2.122" name="usb_gadget" dev="configfs" ino=10663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.228088][ T29] audit: type=1400 audit(1784932834.020:290): avc: denied { write } for pid=6161 comm="syz.2.122" name="naa.1234567890123456" dev="configfs" ino=10665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.334391][ T29] audit: type=1400 audit(1784932834.030:291): avc: denied { write } for pid=6161 comm="syz.2.122" name="lun" dev="configfs" ino=10669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.867074][ T6178] 9pnet_fd: Insufficient options for proto=fd [ 98.903952][ T6178] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 98.958255][ T1222] IPVS: starting estimator thread 0... [ 99.091969][ T6179] IPVS: using max 57 ests per chain, 136800 per kthread [ 100.422632][ T6189] bond0: (slave bond_slave_0): Releasing backup interface [ 100.432838][ T6195] syz.0.132 uses obsolete (PF_INET,SOCK_PACKET) [ 100.440635][ T6194] netlink: 'syz.2.130': attribute type 10 has an invalid length. [ 100.467361][ T6189] bond0: (slave bond_slave_1): Releasing backup interface [ 100.516717][ T6189] team0: Port device team_slave_0 removed [ 100.544853][ T6189] team0: Port device team_slave_1 removed [ 100.561528][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.604294][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.656183][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.686572][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.836617][ T6189] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.889711][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.899629][ T6194] team0: Port device netdevsim1 added [ 100.994079][ T6204] bridge_slave_0: left allmulticast mode [ 101.001345][ T6204] bridge_slave_0: left promiscuous mode [ 101.007246][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.024308][ T6204] bridge_slave_1: left allmulticast mode [ 101.072212][ T6204] bridge_slave_1: left promiscuous mode [ 101.108428][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.279642][ T6204] bond0: (slave bond_slave_0): Releasing backup interface [ 101.429892][ T6204] bond0: (slave bond_slave_1): Releasing backup interface [ 101.602968][ T6204] team0: Port device team_slave_0 removed [ 101.654826][ T6204] team0: Port device team_slave_1 removed [ 101.686754][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.705912][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.716206][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.728985][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.738374][ T6204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.796446][ T6214] bond1: (slave ip6gretap1): making interface the new active one [ 101.805847][ T6214] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 103.113935][ T6255] 9pnet_fd: Insufficient options for proto=fd [ 103.120556][ T6255] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 103.137502][ T5724] IPVS: starting estimator thread 0... [ 103.284891][ T6256] IPVS: using max 37 ests per chain, 88800 per kthread [ 103.590949][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 103.590973][ T29] audit: type=1400 audit(1784932839.880:298): avc: denied { create } for pid=6249 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.858262][ T29] audit: type=1400 audit(1784932840.150:299): avc: denied { create } for pid=6279 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.914486][ T29] audit: type=1400 audit(1784932840.180:300): avc: denied { setopt } for pid=6279 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.972222][ T29] audit: type=1400 audit(1784932840.180:301): avc: denied { write } for pid=6279 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.023406][ T6287] se_dev->se_dev_ptr already set for storage object [ 104.037843][ T29] audit: type=1400 audit(1784932840.300:302): avc: denied { write } for pid=6284 comm="syz.3.161" name="functions" dev="configfs" ino=9319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.111338][ T29] audit: type=1400 audit(1784932840.310:303): avc: denied { write } for pid=6284 comm="syz.3.161" name="header" dev="configfs" ino=11406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.155244][ T29] audit: type=1400 audit(1784932840.310:304): avc: denied { write } for pid=6284 comm="syz.3.161" name="header" dev="configfs" ino=11421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.178966][ T29] audit: type=1400 audit(1784932840.310:305): avc: denied { write } for pid=6284 comm="syz.3.161" name="ss" dev="configfs" ino=11418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.237185][ T29] audit: type=1400 audit(1784932840.320:306): avc: denied { create } for pid=6284 comm="syz.3.161" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 104.291949][ T29] audit: type=1400 audit(1784932840.320:307): avc: denied { write } for pid=6284 comm="syz.3.161" name="ss" dev="configfs" ino=11418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.313662][ T6318] se_dev->se_dev_ptr already set for storage object [ 106.881128][ T6339] se_dev->se_dev_ptr already set for storage object [ 107.715069][ T6368] se_dev->se_dev_ptr already set for storage object [ 108.753985][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 108.754001][ T29] audit: type=1400 audit(1784932845.050:344): avc: denied { write } for pid=6386 comm="syz.3.199" name="configs" dev="configfs" ino=9320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.125605][ T29] audit: type=1400 audit(1784932845.250:345): avc: denied { write } for pid=6386 comm="syz.3.199" name="c.1" dev="configfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.387394][ T29] audit: type=1400 audit(1784932845.250:346): avc: denied { write } for pid=6386 comm="syz.3.199" name="c.1" dev="configfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.427874][ T29] audit: type=1400 audit(1784932845.720:347): avc: denied { ioctl } for pid=6396 comm="syz.2.203" path="socket:[11126]" dev="sockfs" ino=11126 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.355034][ T6420] 9pnet_fd: Insufficient options for proto=fd [ 110.361657][ T6420] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 110.372764][ T29] audit: type=1400 audit(1784932846.650:348): avc: denied { read } for pid=6396 comm="syz.2.203" dev="sockfs" ino=11126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.479175][ T5724] IPVS: starting estimator thread 0... [ 110.609168][ T6421] IPVS: using max 38 ests per chain, 91200 per kthread [ 110.813646][ T29] audit: type=1400 audit(1784932847.100:349): avc: denied { create } for pid=6423 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.631000][ T6439] Zero length message leads to an empty skb [ 112.965040][ T6447] wlan0 speed is unknown, defaulting to 1000 [ 113.333855][ T29] audit: type=1400 audit(1784932849.610:350): avc: denied { associate } for pid=6452 comm="syz.3.218" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.411544][ T29] audit: type=1400 audit(1784932849.610:351): avc: denied { mounton } for pid=6450 comm="syz.3.218" path="/proc/151/task" dev="proc" ino=11769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.918072][ T6461] binder: 6460:6461 ioctl c0306201 0 returned -14 [ 114.327952][ T6475] 9pnet_fd: Insufficient options for proto=fd [ 114.410818][ T6475] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 114.484940][ T6477] syzkaller0: entered promiscuous mode [ 114.498646][ T6477] syzkaller0: entered allmulticast mode [ 114.785876][ T6484] wlan0 speed is unknown, defaulting to 1000 [ 114.834706][ T6487] trusted_key: syz.1.232 sent an empty control message without MSG_MORE. [ 114.865290][ T29] audit: type=1400 audit(1784932851.120:352): avc: denied { bind } for pid=6485 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.968325][ T29] audit: type=1400 audit(1784932851.130:353): avc: denied { setopt } for pid=6485 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.067177][ T29] audit: type=1400 audit(1784932851.130:354): avc: denied { accept } for pid=6485 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.153626][ T29] audit: type=1400 audit(1784932851.130:355): avc: denied { write } for pid=6485 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.246003][ T29] audit: type=1400 audit(1784932851.210:356): avc: denied { read } for pid=6485 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.575291][ T29] audit: type=1400 audit(1784932851.860:357): avc: denied { watch } for pid=6495 comm="syz.1.235" path="/41/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.925112][ T29] audit: type=1400 audit(1784932851.860:358): avc: denied { watch_sb watch_reads } for pid=6495 comm="syz.1.235" path="/41/file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.036518][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 116.071664][ T29] audit: type=1400 audit(1784932852.360:359): avc: denied { shutdown } for pid=6505 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.176555][ T29] audit: type=1400 audit(1784932852.360:360): avc: denied { name_connect } for pid=6505 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 116.366224][ T6434] Set syz1 is full, maxelem 65536 reached [ 116.433304][ T6519] syzkaller0: entered promiscuous mode [ 116.450268][ T6519] syzkaller0: entered allmulticast mode [ 116.884371][ T6536] se_dev->se_dev_ptr already set for storage object [ 117.044660][ T6529] wlan0 speed is unknown, defaulting to 1000 [ 117.373536][ T5724] IPVS: starting estimator thread 0... [ 117.391585][ T6547] 9pnet_fd: Insufficient options for proto=fd [ 117.425131][ T6547] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 117.478688][ T6548] IPVS: using max 37 ests per chain, 88800 per kthread [ 118.467188][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 118.942959][ T29] audit: type=1400 audit(1784932855.240:361): avc: denied { write } for pid=6593 comm="syz.0.273" name="mcfilter" dev="proc" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.029926][ T6602] 9pnet_fd: Insufficient options for proto=fd [ 119.080763][ T6602] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 120.128117][ T6632] netlink: 'syz.1.281': attribute type 10 has an invalid length. [ 121.458259][ T6688] siw: device registration error -23 [ 121.978989][ T6711] syzkaller0: entered promiscuous mode [ 121.999323][ T6713] se_dev->se_dev_ptr already set for storage object [ 122.020930][ T6711] syzkaller0: entered allmulticast mode [ 122.255039][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 122.290978][ T6718] syzkaller0: entered promiscuous mode [ 122.310139][ T6718] syzkaller0: entered allmulticast mode [ 122.386653][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 122.386668][ T29] audit: type=1400 audit(1784932858.680:363): avc: denied { sqpoll } for pid=6728 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.450610][ T6734] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 2, id = 0 [ 122.460418][ T29] audit: type=1400 audit(1784932858.740:364): avc: denied { create } for pid=6732 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.510236][ T29] audit: type=1400 audit(1784932858.750:365): avc: denied { write } for pid=6732 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.532023][ T29] audit: type=1400 audit(1784932858.830:366): avc: denied { read } for pid=6732 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.882007][ T6776] se_dev->se_dev_ptr already set for storage object [ 122.907683][ T29] audit: type=1400 audit(1784932859.200:367): avc: denied { write } for pid=6775 comm="syz.3.324" name="lun_0" dev="configfs" ino=10675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.964649][ T6782] se_dev->se_dev_ptr already set for storage object [ 122.986051][ T29] audit: type=1400 audit(1784932859.200:368): avc: denied { write } for pid=6775 comm="syz.3.324" name="lun_0" dev="configfs" ino=10675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.151385][ T29] audit: type=1400 audit(1784932859.450:369): avc: denied { write } for pid=6794 comm="syz.0.327" name="strings" dev="configfs" ino=9321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.187779][ T6796] Mass Storage Function, version: 2009/09/11 [ 123.188088][ T6795] syzkaller0: entered promiscuous mode [ 123.204451][ T29] audit: type=1400 audit(1784932859.470:370): avc: denied { write } for pid=6794 comm="syz.0.327" name="0x409" dev="configfs" ino=12819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.219486][ T6796] LUN: removable file: (no medium) [ 123.241985][ T6795] syzkaller0: entered allmulticast mode [ 123.285974][ T6801] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 123.296219][ T29] audit: type=1400 audit(1784932859.480:371): avc: denied { write } for pid=6794 comm="syz.0.327" name="functions" dev="configfs" ino=9319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.312421][ T6801] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 123.330951][ T6802] syzkaller0: entered promiscuous mode [ 123.336606][ T6802] syzkaller0: entered allmulticast mode [ 123.352659][ T6795] tipc: Started in network mode [ 123.358923][ T29] audit: type=1400 audit(1784932859.560:372): avc: denied { write } for pid=6794 comm="syz.0.327" name="c.1" dev="configfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.359083][ T6801] udc dummy_udc.0: failed to start g1: -22 [ 123.390662][ T6795] tipc: Node identity 4e1a2375f82b, cluster identity 4711 [ 123.391827][ T6801] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 123.411538][ T6795] tipc: Enabled bearer , priority 0 [ 123.443110][ T6801] UDC core: g1: couldn't find an available UDC or it's busy [ 123.465399][ T6795] tipc: Resetting bearer [ 123.495349][ T6793] tipc: Resetting bearer [ 123.577950][ T6793] tipc: Disabling bearer [ 123.652545][ T6815] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 123.691299][ T6815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.695256][ T6818] se_dev->se_dev_ptr already set for storage object [ 123.775125][ T6819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 123.805942][ T6823] se_dev->se_dev_ptr already set for storage object [ 123.900668][ T6828] siw: device registration error -23 [ 124.265356][ T6838] wlan0 speed is unknown, defaulting to 1000 [ 125.612533][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 125.653754][ T6868] netlink: 48 bytes leftover after parsing attributes in process `syz.0.353'. [ 126.244175][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.253316][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.262348][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.271349][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.280379][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.290125][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.305026][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.922525][ T6895] wlan0 speed is unknown, defaulting to 1000 [ 126.930086][ T6899] siw: device registration error -23 [ 127.260621][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.268950][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.297514][ T6909] __nla_validate_parse: 46 callbacks suppressed [ 127.297534][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 128.742787][ T6947] siw: device registration error -23 [ 128.749793][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 129.156316][ T6954] wlan0 speed is unknown, defaulting to 1000 [ 129.406815][ T5622] ffs_data_put(): freeing [ 129.464838][ T6977] siw: device registration error -23 [ 129.673382][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 129.673397][ T29] audit: type=1400 audit(1784932865.970:378): avc: denied { connect } for pid=6982 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.032545][ T6989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 130.288145][ T7007] wlan0 speed is unknown, defaulting to 1000 [ 130.694789][ T7015] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.406'. [ 131.295347][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 132.045173][ T7032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 132.868430][ T5622] ffs_data_put(): freeing [ 132.989623][ T7058] wlan0 speed is unknown, defaulting to 1000 [ 133.215712][ T7069] ffs_data_put(): freeing [ 134.127856][ T7092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 134.299672][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 135.623325][ T29] audit: type=1400 audit(1784932871.740:379): avc: denied { getopt } for pid=7100 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.883158][ T7126] se_dev->se_dev_ptr already set for storage object [ 137.097552][ T29] audit: type=1400 audit(1784932873.390:380): avc: denied { listen } for pid=7132 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 137.181608][ T29] audit: type=1400 audit(1784932873.410:381): avc: denied { ioctl } for pid=7132 comm="syz.0.441" path="socket:[14437]" dev="sockfs" ino=14437 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 137.338119][ T29] audit: type=1400 audit(1784932873.620:382): avc: denied { bind } for pid=7138 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.428295][ T29] audit: type=1400 audit(1784932873.630:383): avc: denied { setopt } for pid=7138 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.530894][ T7142] wlan0 speed is unknown, defaulting to 1000 [ 138.554480][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 138.823696][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 138.832592][ T7154] bridge_slave_1: left allmulticast mode [ 138.838228][ T7154] bridge_slave_1: left promiscuous mode [ 138.843984][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.199347][ T7155] siw: device registration error -23 [ 139.301934][ T7154] bridge_slave_0: left allmulticast mode [ 139.307638][ T7154] bridge_slave_0: left promiscuous mode [ 139.313616][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.615774][ T29] audit: type=1400 audit(1784932875.910:384): avc: denied { ioctl } for pid=7157 comm="syz.3.448" path="socket:[13849]" dev="sockfs" ino=13849 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.662654][ T7166] se_dev->se_dev_ptr already set for storage object [ 139.934882][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.455'. [ 140.013286][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.456'. [ 141.486389][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 141.834698][ T7196] se_dev->se_dev_ptr already set for storage object [ 141.863909][ T7198] se_dev->se_dev_ptr already set for storage object [ 142.093055][ T29] audit: type=1400 audit(1784932878.380:385): avc: denied { setopt } for pid=7199 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.347421][ T7207] netlink: 'syz.2.468': attribute type 5 has an invalid length. [ 142.897570][ T7227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 142.968787][ T7226] syzkaller1: entered promiscuous mode [ 142.983904][ T7226] syzkaller1: entered allmulticast mode [ 143.075670][ T5724] IPVS: starting estimator thread 0... [ 143.183373][ T29] audit: type=1326 audit(1784932879.480:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.1.476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f269239de99 code=0x0 [ 143.298658][ T7233] IPVS: using max 41 ests per chain, 98400 per kthread [ 143.570461][ T7240] read descriptors [ 143.654400][ T5614] ffs_data_put(): freeing [ 143.738135][ T7246] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 143.745876][ T7246] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 144.321055][ T7270] se_dev->se_dev_ptr already set for storage object [ 144.991129][ T7276] syzkaller0: entered promiscuous mode [ 145.001125][ T7276] syzkaller0: entered allmulticast mode [ 145.098601][ T29] audit: type=1400 audit(1784932881.390:387): avc: denied { read } for pid=7279 comm="syz.3.495" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 145.151600][ T29] audit: type=1400 audit(1784932881.390:388): avc: denied { open } for pid=7279 comm="syz.3.495" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 145.214743][ T29] audit: type=1400 audit(1784932881.420:389): avc: denied { ioctl } for pid=7279 comm="syz.3.495" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 145.267232][ T29] audit: type=1400 audit(1784932881.440:390): avc: denied { bind } for pid=7254 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.707387][ T29] audit: type=1400 audit(1784932882.000:391): avc: denied { write } for pid=7293 comm="syz.2.502" name="c.1" dev="configfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.796933][ T29] audit: type=1400 audit(1784932882.000:392): avc: denied { write } for pid=7293 comm="syz.2.502" name="c.1" dev="configfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.801364][ T7298] se_dev->se_dev_ptr already set for storage object [ 146.500273][ T7308] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 146.614569][ T4927] Bluetooth: hci0: unexpected cc 0x206e length: 9 > 3 [ 146.748179][ T7312] syzkaller0: entered promiscuous mode [ 146.764872][ T7312] syzkaller0: entered allmulticast mode [ 147.239607][ T7324] se_dev->se_dev_ptr already set for storage object [ 147.388190][ T5614] ffs_data_put(): freeing [ 147.534570][ T7333] se_dev->se_dev_ptr already set for storage object [ 147.568571][ T5724] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.648144][ T7335] syzkaller0: entered promiscuous mode [ 147.655258][ T7335] syzkaller0: entered allmulticast mode [ 147.661058][ T7337] mmap: syz.2.520 (7337): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 147.750021][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 147.758382][ T5724] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 147.782167][ T5724] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.800546][ T29] audit: type=1400 audit(1784932884.100:393): avc: denied { ioctl } for pid=7338 comm="syz.2.522" path="socket:[14768]" dev="sockfs" ino=14768 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.809335][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.839700][ T5724] usb 2-1: Product: syz [ 147.843929][ T5724] usb 2-1: Manufacturer: syz [ 147.848907][ T5724] usb 2-1: SerialNumber: syz [ 147.864493][ T5724] usb 2-1: config 0 descriptor?? [ 147.876069][ T7326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.911070][ T5724] hub 2-1:0.0: bad descriptor, ignoring hub [ 147.934676][ T5724] hub 2-1:0.0: probe with driver hub failed with error -5 [ 148.096460][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 148.501879][ T7354] se_dev->se_dev_ptr already set for storage object [ 148.646503][ T7362] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 148.660379][ T7362] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 148.724397][ T7362] udc dummy_udc.0: failed to start g1: -22 [ 148.730384][ T7362] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 148.741039][ T7362] UDC core: g1: couldn't find an available UDC or it's busy [ 149.148296][ T7378] syzkaller0: entered promiscuous mode [ 149.168362][ T7378] syzkaller0: entered allmulticast mode [ 149.676461][ T7388] netlink: 'syz.4.539': attribute type 1 has an invalid length. [ 149.780167][ T7388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.856974][ T7393] bond1: (slave veth3): Enslaving as an active interface with a down link [ 149.881791][ T7394] veth0_virt_wifi: entered promiscuous mode [ 149.921888][ T5724] usb 2-1: USB disconnect, device number 2 [ 149.938189][ T7394] bond1: (slave veth0_virt_wifi): making interface the new active one [ 149.982084][ T7394] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 150.395182][ T5607] ffs_data_put(): freeing [ 151.737820][ T7424] se_dev->se_dev_ptr already set for storage object [ 152.181111][ T5607] ffs_data_put(): freeing [ 152.708260][ T7459] se_dev->se_dev_ptr already set for storage object [ 152.921162][ T5622] ffs_data_put(): freeing [ 154.252968][ T29] audit: type=1400 audit(1784932890.530:394): avc: denied { create } for pid=7484 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.337464][ T29] audit: type=1400 audit(1784932890.530:395): avc: denied { setopt } for pid=7484 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.380381][ T29] audit: type=1400 audit(1784932890.540:396): avc: denied { bind } for pid=7484 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.439942][ T29] audit: type=1400 audit(1784932890.540:397): avc: denied { write } for pid=7484 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.466660][ T7492] se_dev->se_dev_ptr already set for storage object [ 156.210615][ T7470] bridge_slave_0: left allmulticast mode [ 156.216307][ T7470] bridge_slave_0: left promiscuous mode [ 156.223489][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.233616][ T7470] bridge_slave_1: left allmulticast mode [ 156.239892][ T7470] bridge_slave_1: left promiscuous mode [ 156.245554][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.257128][ T7470] bond0: (slave bond_slave_0): Releasing backup interface [ 156.269777][ T7470] bond0: (slave bond_slave_1): Releasing backup interface [ 156.282690][ T7470] team0: Port device team_slave_0 removed [ 156.292956][ T7470] team0: Port device team_slave_1 removed [ 156.299780][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.307253][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.321531][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.337925][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.359686][ T7470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.426222][ T29] audit: type=1400 audit(1784932892.720:398): avc: denied { setopt } for pid=7510 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.145030][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.154896][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.163743][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.172805][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.181652][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.190463][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.199262][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.208038][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.218391][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.227223][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.689711][ T7525] se_dev->se_dev_ptr already set for storage object [ 158.101995][ T7532] 9pnet_fd: Insufficient options for proto=fd [ 158.108760][ T7532] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 159.091408][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 159.236787][ T29] audit: type=1400 audit(1784932895.530:399): avc: denied { create } for pid=7554 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.045748][ T7581] netlink: 'syz.4.608': attribute type 10 has an invalid length. [ 160.060474][ T7581] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 162.778736][ T7640] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 162.828795][ T7640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.871470][ T7642] bond1: (slave veth3): Enslaving as an active interface with a down link [ 162.875616][ T29] audit: type=1400 audit(1784932899.170:400): avc: denied { create } for pid=7643 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.900099][ T29] audit: type=1400 audit(1784932899.180:401): avc: denied { setopt } for pid=7643 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.920588][ T29] audit: type=1400 audit(1784932899.190:402): avc: denied { listen } for pid=7643 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 164.209313][ T29] audit: type=1400 audit(1784932900.500:403): avc: denied { mount } for pid=7665 comm="syz.1.638" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 164.431227][ T7680] 9pnet_fd: Insufficient options for proto=fd [ 164.443686][ T7680] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 164.448599][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 165.038969][ T29] audit: type=1400 audit(1784932901.340:404): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 165.335791][ T7689] batadv_slave_1: entered promiscuous mode [ 165.681036][ T7699] __nla_validate_parse: 148 callbacks suppressed [ 165.681068][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.696549][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.705579][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.715300][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.724887][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.739198][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.748209][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.757272][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.766306][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.775490][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 165.904201][ T7707] read descriptors [ 165.927056][ T5607] ffs_data_put(): freeing [ 165.977215][ T7687] batadv_slave_1: left promiscuous mode [ 167.209561][ T29] audit: type=1400 audit(1784932903.510:405): avc: denied { search } for pid=7727 comm="syz.1.660" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.267225][ T7731] se_dev->se_dev_ptr already set for storage object [ 167.299212][ T7735] ffs_data_put(): freeing [ 167.310147][ T29] audit: type=1400 audit(1784932903.510:406): avc: denied { search } for pid=7727 comm="syz.1.660" name="usb_gadget" dev="configfs" ino=3573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.333649][ T29] audit: type=1400 audit(1784932903.530:407): avc: denied { search } for pid=7727 comm="syz.1.660" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.363319][ T29] audit: type=1400 audit(1784932903.530:408): avc: denied { search } for pid=7727 comm="syz.1.660" name="usb_gadget" dev="configfs" ino=3573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.389755][ T29] audit: type=1400 audit(1784932903.530:409): avc: denied { search } for pid=7727 comm="syz.1.660" name="g1" dev="configfs" ino=9318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.707015][ T7749] dummy_hcd dummy_hcd.0: remove, state 1 [ 167.728467][ T7749] usb usb1: USB disconnect, device number 1 [ 167.835397][ T7758] binder: BINDER_SET_CONTEXT_MGR already set [ 167.855738][ T7758] binder: 7757:7758 ioctl 4018620d 200000004a80 returned -16 [ 168.252854][ T7749] dummy_hcd dummy_hcd.0: stopped [ 168.292651][ T7749] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 168.965633][ T7769] se_dev->se_dev_ptr already set for storage object [ 169.040578][ T7774] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 169.049370][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 169.049387][ T29] audit: type=1400 audit(1784932905.320:443): avc: denied { write } for pid=7773 comm="syz.0.675" name="functions" dev="configfs" ino=9319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.162928][ T29] audit: type=1400 audit(1784932905.320:444): avc: denied { add_name } for pid=7773 comm="syz.0.675" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.220576][ T29] audit: type=1400 audit(1784932905.330:445): avc: denied { write } for pid=7773 comm="syz.0.675" name="c.1" dev="configfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.319668][ T29] audit: type=1400 audit(1784932905.330:446): avc: denied { write } for pid=7773 comm="syz.0.675" name="c.1" dev="configfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.669710][ T7777] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 169.720116][ T7802] syzkaller0: entered promiscuous mode [ 169.737375][ T7802] syzkaller0: entered allmulticast mode [ 169.937799][ T7809] se_dev->se_dev_ptr already set for storage object [ 170.393797][ T7815] netlink: 'syz.3.689': attribute type 10 has an invalid length. [ 171.127399][ T7848] syzkaller0: entered promiscuous mode [ 171.145487][ T7848] syzkaller0: entered allmulticast mode [ 171.784199][ T7854] wlan0 speed is unknown, defaulting to 1000 [ 171.847576][ T7863] read descriptors [ 171.871486][ T5614] ffs_data_put(): freeing [ 172.638654][ T29] audit: type=1400 audit(1784932908.850:447): avc: denied { getopt } for pid=7879 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.498586][ T50] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 173.874690][ T7902] __nla_validate_parse: 96 callbacks suppressed [ 173.874707][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'. [ 173.968037][ T7903] syzkaller0: entered promiscuous mode [ 174.009398][ T7903] syzkaller0: entered allmulticast mode [ 174.153525][ T7906] syzkaller0: entered promiscuous mode [ 174.168143][ T7906] syzkaller0: entered allmulticast mode [ 175.035940][ T7933] se_dev->se_dev_ptr already set for storage object [ 175.325456][ T7946] fuse: Bad value for 'fd' [ 175.534227][ T7954] netlink: 'syz.0.734': attribute type 5 has an invalid length. [ 175.768388][ T7961] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 175.775785][ T7961] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 175.865299][ T7967] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 175.878877][ T7967] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 177.727382][ T7985] fuse: Bad value for 'fd' [ 178.089426][ T7998] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 178.174507][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.752'. [ 179.466900][ T8021] fuse: Bad value for 'fd' [ 179.602068][ T8028] se_dev->se_dev_ptr already set for storage object [ 179.733407][ T29] audit: type=1400 audit(1784932916.030:448): avc: denied { write } for pid=8036 comm="syz.4.765" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.749323][ T8037] binder: 8036:8037 ioctl c0306201 200000000040 returned -11 [ 179.767206][ T8037] binder: 8036:8037 ioctl c0306201 2000000001c0 returned -14 [ 179.805610][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'. [ 179.862736][ T8043] se_dev->se_dev_ptr already set for storage object [ 180.154414][ T50] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 180.190372][ T8060] ffs_data_put(): freeing [ 180.214131][ T8062] se_dev->se_dev_ptr already set for storage object [ 180.719525][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.728369][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.738868][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.747674][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.757419][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.767014][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.775871][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.784708][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.793551][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 181.054383][ T8098] ffs_data_put(): freeing [ 181.073369][ T8100] se_dev->se_dev_ptr already set for storage object [ 181.750623][ T8113] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 181.763465][ T8113] dummy_hcd dummy_hcd.0: Dummy host controller [ 181.782758][ T8113] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 181.811991][ T8113] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 181.822508][ T8113] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 181.831554][ T8113] usb usb1: Product: Dummy host controller [ 181.838471][ T8113] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 181.845413][ T8113] usb usb1: SerialNumber: dummy_hcd.0 [ 181.882855][ T8113] hub 1-0:1.0: USB hub found [ 181.889382][ T8113] hub 1-0:1.0: 1 port detected [ 182.585487][ T8132] ffs_data_put(): freeing [ 182.842377][ T8145] syzkaller0: entered promiscuous mode [ 182.864300][ T8145] syzkaller0: entered allmulticast mode [ 183.002486][ T4927] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 183.029306][ T8158] se_dev->se_dev_ptr already set for storage object [ 183.127474][ T8166] ffs_data_put(): freeing [ 183.972697][ T8184] se_dev->se_dev_ptr already set for storage object [ 184.031735][ T8186] syzkaller0: entered promiscuous mode [ 184.037627][ T8186] syzkaller0: entered allmulticast mode [ 184.138653][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 185.648623][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 186.121219][ T4927] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 187.586512][ T8265] ffs_data_put(): freeing [ 188.222129][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 188.306555][ T8290] se_dev->se_dev_ptr already set for storage object [ 188.704513][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.710935][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.353647][ T8321] 9pnet_fd: Insufficient options for proto=fd [ 189.361173][ T8321] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 189.736739][ T8326] syzkaller0: entered promiscuous mode [ 189.742496][ T8326] syzkaller0: entered allmulticast mode [ 189.982016][ T29] audit: type=1400 audit(1784932926.280:449): avc: denied { bind } for pid=8327 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.398880][ T8334] se_dev->se_dev_ptr already set for storage object [ 191.239270][ T8363] __nla_validate_parse: 43 callbacks suppressed [ 191.239301][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 192.295765][ T8377] se_dev->se_dev_ptr already set for storage object [ 192.341359][ T8378] 9pnet_fd: Insufficient options for proto=fd [ 192.354535][ T8378] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 192.909438][ T8396] syzkaller0: entered promiscuous mode [ 192.915055][ T8396] syzkaller0: entered allmulticast mode [ 193.413486][ T8408] syzkaller0: entered promiscuous mode [ 193.419056][ T8408] syzkaller0: entered allmulticast mode [ 193.699896][ T8414] se_dev->se_dev_ptr already set for storage object [ 194.157339][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 194.995172][ T4927] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 196.066517][ T8440] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 196.234703][ T8442] 9pnet_fd: Insufficient options for proto=fd [ 196.241396][ T8442] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 196.393414][ T8450] se_dev->se_dev_ptr already set for storage object [ 196.486342][ T29] audit: type=1400 audit(1784932932.770:450): avc: denied { create } for pid=8445 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.028290][ T8421] bridge_slave_1: left allmulticast mode [ 197.034239][ T8421] bridge_slave_1: left promiscuous mode [ 197.040696][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.195793][ T8421] bridge_slave_0: left allmulticast mode [ 197.202662][ T8421] bridge_slave_0: left promiscuous mode [ 197.208448][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.345729][ T4927] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 198.149054][ T8480] se_dev->se_dev_ptr already set for storage object [ 198.308119][ T8481] 9pnet_fd: Insufficient options for proto=fd [ 198.314869][ T8481] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 198.762811][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 198.952352][ T4927] Bluetooth: hci4: unknown advertising packet type: 0xe3 [ 198.959884][ T4927] Bluetooth: hci4: unknown advertising packet type: 0x38 [ 198.968229][ T4927] Bluetooth: hci4: unknown advertising packet type: 0x38 [ 198.975459][ T4927] Bluetooth: hci4: unknown advertising packet type: 0x95 [ 198.982870][ T4927] Bluetooth: hci4: unknown advertising packet type: 0x30 [ 198.990077][ T4927] Bluetooth: hci4: unknown advertising packet type: 0x2f [ 199.537515][ T8505] netlink: 'syz.0.923': attribute type 10 has an invalid length. [ 199.569621][ T8504] dummy_hcd dummy_hcd.0: remove, state 4 [ 199.575502][ T8504] usb usb1: USB disconnect, device number 1 [ 199.610411][ T8504] dummy_hcd dummy_hcd.0: stopped [ 199.615441][ T8504] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 199.627620][ T8512] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 199.636027][ T8512] dummy_hcd dummy_hcd.0: Dummy host controller [ 199.644346][ T8512] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 199.656590][ T8512] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 199.658602][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 199.675173][ T8512] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 199.686315][ T8512] usb usb1: Product: Dummy host controller [ 199.692794][ T8512] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 199.700474][ T8512] usb usb1: SerialNumber: dummy_hcd.0 [ 199.730069][ T8512] hub 1-0:1.0: USB hub found [ 199.735157][ T8512] hub 1-0:1.0: 1 port detected [ 199.770982][ T29] audit: type=1400 audit(1784932936.070:451): avc: denied { mount } for pid=8517 comm="syz.2.927" name="/" dev="functionfs" ino=18750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 199.830041][ T29] audit: type=1400 audit(1784932936.130:452): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 199.851322][ T5614] ffs_data_put(): freeing [ 200.028880][ T8524] netlink: 52 bytes leftover after parsing attributes in process `syz.4.931'. [ 200.195692][ T8527] 9pnet_fd: Insufficient options for proto=fd [ 200.204398][ T8527] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 200.413859][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 200.792023][ T50] Bluetooth: hci4: unknown advertising packet type: 0xe3 [ 200.792083][ T50] Bluetooth: hci4: unknown advertising packet type: 0x38 [ 200.800483][ T50] Bluetooth: hci4: unknown advertising packet type: 0x38 [ 200.807854][ T50] Bluetooth: hci4: unknown advertising packet type: 0x95 [ 201.230881][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 201.252371][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 201.252400][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 201.252414][ T50] Workqueue: hci2 hci_rx_work [ 201.252439][ T50] Call Trace: [ 201.252446][ T50] [ 201.252454][ T50] dump_stack_lvl+0x100/0x190 [ 201.252481][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 201.252512][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 201.252546][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 201.252576][ T50] ? find_held_lock+0x2b/0x80 [ 201.252604][ T50] ? kobject_add_internal+0x25f/0x930 [ 201.252630][ T50] ? kobject_add_internal+0x25f/0x930 [ 201.252659][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 201.252687][ T50] kobject_add_internal+0x2c8/0x930 [ 201.252716][ T50] kobject_add+0x16a/0x1e0 [ 201.252742][ T50] ? __pfx_kobject_add+0x10/0x10 [ 201.252766][ T50] ? class_to_subsys+0x10f/0x150 [ 201.252798][ T50] ? kobject_put+0xb9/0x640 [ 201.252821][ T50] ? _raw_spin_unlock+0x28/0x50 [ 201.252856][ T50] device_add+0x294/0x1970 [ 201.252883][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 201.252912][ T50] ? __pfx_device_add+0x10/0x10 [ 201.252938][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 201.252968][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 201.252992][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 201.253019][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 201.253036][ T50] ? hci_event_packet+0x186/0xcd0 [ 201.253053][ T50] ? hci_event_packet+0x186/0xcd0 [ 201.253077][ T50] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 201.253098][ T50] ? skb_pull_data+0x15f/0x1e0 [ 201.253131][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 201.253152][ T50] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 201.253176][ T50] hci_event_packet+0x51c/0xcd0 [ 201.253196][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 201.253222][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 201.253244][ T50] ? kcov_remote_start+0x384/0x670 [ 201.253265][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 201.253291][ T50] hci_rx_work+0x451/0xfc0 [ 201.253316][ T50] process_one_work+0xa23/0x1940 [ 201.253349][ T50] ? __pfx_process_one_work+0x10/0x10 [ 201.253379][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 201.253400][ T50] worker_thread+0x5ef/0xe50 [ 201.253430][ T50] ? kthread+0x13a/0x450 [ 201.253446][ T50] ? __pfx_worker_thread+0x10/0x10 [ 201.253465][ T50] kthread+0x370/0x450 [ 201.253481][ T50] ? __pfx_kthread+0x10/0x10 [ 201.253500][ T50] ret_from_fork+0x72b/0xd50 [ 201.253528][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 201.253555][ T50] ? __switch_to+0x800/0x10f0 [ 201.253575][ T50] ? __pfx_kthread+0x10/0x10 [ 201.253594][ T50] ret_from_fork_asm+0x1a/0x30 [ 201.253634][ T50] [ 201.254238][ T50] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 201.545741][ T50] Bluetooth: hci2: failed to register connection device [ 201.728746][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 201.735788][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 202.637620][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 202.646484][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 202.655299][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 202.664200][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 202.673014][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 202.682899][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 202.691752][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 202.700724][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 202.717950][ T8568] 9pnet_fd: Insufficient options for proto=fd [ 202.724636][ T8568] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 203.808999][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 204.000960][ T4927] Bluetooth: Frame is too long (len 24, expected len 4) [ 204.153864][ T29] audit: type=1400 audit(1784932940.450:453): avc: denied { connect } for pid=8610 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.555526][ T8618] 9pnet_fd: Insufficient options for proto=fd [ 204.562233][ T8618] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 205.929139][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 206.474404][ T8659] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 206.483011][ T8658] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 206.512288][ T8658] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 206.567875][ T8658] ================================================================== [ 206.575972][ T8658] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 206.583708][ T8658] Read of size 8 at addr ffff88802b5cbcf0 by task syz.1.973/8658 [ 206.591450][ T8658] [ 206.593774][ T8658] CPU: 1 UID: 0 PID: 8658 Comm: syz.1.973 Not tainted syzkaller #0 PREEMPT(full) [ 206.593797][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.593807][ T8658] Call Trace: [ 206.593814][ T8658] [ 206.593822][ T8658] dump_stack_lvl+0x100/0x190 [ 206.593848][ T8658] print_report+0x13d/0x4b0 [ 206.593875][ T8658] ? __virt_addr_valid+0x239/0x430 [ 206.593902][ T8658] ? dummy_free_request+0x8a/0x90 [ 206.593926][ T8658] kasan_report+0xdf/0x1c0 [ 206.593950][ T8658] ? dummy_free_request+0x8a/0x90 [ 206.593978][ T8658] dummy_free_request+0x8a/0x90 [ 206.594003][ T8658] uvc_function_bind+0x181a/0x1939 [ 206.594028][ T8658] ? __pfx_uvc_function_bind+0x10/0x10 [ 206.594049][ T8658] usb_add_function+0x219/0x890 [ 206.594073][ T8658] configfs_composite_bind+0xd83/0x1960 [ 206.594101][ T8658] gadget_bind_driver+0x28c/0xbf0 [ 206.594127][ T8658] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 206.594153][ T8658] ? __pfx_gadget_bind_driver+0x10/0x10 [ 206.594181][ T8658] really_probe+0x241/0xa60 [ 206.594204][ T8658] __driver_probe_device+0x20e/0x450 [ 206.594227][ T8658] driver_probe_device+0x4a/0x140 [ 206.594250][ T8658] __driver_attach+0x21f/0x5b0 [ 206.594271][ T8658] ? __pfx___driver_attach+0x10/0x10 [ 206.594293][ T8658] bus_for_each_dev+0x13e/0x1d0 [ 206.594322][ T8658] ? __pfx_bus_for_each_dev+0x10/0x10 [ 206.594349][ T8658] ? bus_add_driver+0x2b5/0x5b0 [ 206.594366][ T8658] bus_add_driver+0x305/0x5b0 [ 206.594383][ T8658] driver_register+0x1e2/0x360 [ 206.594407][ T8658] usb_gadget_register_driver_owner+0x132/0x210 [ 206.594438][ T8658] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 206.594461][ T8658] configfs_write_iter+0x302/0x4e0 [ 206.594484][ T8658] vfs_write+0x6ac/0x1050 [ 206.594511][ T8658] ? __pfx_configfs_write_iter+0x10/0x10 [ 206.594532][ T8658] ? __pfx_vfs_write+0x10/0x10 [ 206.594566][ T8658] ksys_write+0x12a/0x250 [ 206.594593][ T8658] ? __pfx_ksys_write+0x10/0x10 [ 206.594630][ T8658] do_syscall_64+0x115/0x870 [ 206.594650][ T8658] ? clear_bhb_loop+0x40/0x90 [ 206.594672][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.594691][ T8658] RIP: 0033:0x7f269239de99 [ 206.594707][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.594726][ T8658] RSP: 002b:00007f26932c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.594745][ T8658] RAX: ffffffffffffffda RBX: 00007f2692625fa0 RCX: 00007f269239de99 [ 206.594757][ T8658] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000003 [ 206.594768][ T8658] RBP: 00007f2692433eaf R08: 0000000000000000 R09: 0000000000000000 [ 206.594779][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.594791][ T8658] R13: 00007f2692626038 R14: 00007f2692625fa0 R15: 00007ffe75de00d8 [ 206.594810][ T8658] [ 206.594817][ T8658] [ 206.606906][ T8659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.614040][ T8658] Allocated by task 6055: [ 206.614057][ T8658] kasan_save_stack+0x30/0x50 [ 206.614081][ T8658] kasan_save_track+0x14/0x30 [ 206.614097][ T8658] __kasan_kmalloc+0xaa/0xb0 [ 206.614112][ T8658] __kmalloc_noprof+0x322/0x820 [ 206.614128][ T8658] hash_netportnet6_resize+0xdb2/0x1e20 [ 206.907890][ T8658] call_ad.isra.0+0x36d/0x940 [ 206.912568][ T8658] ip_set_ad.isra.0+0x3eb/0x8a0 [ 206.917404][ T8658] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 206.922410][ T8658] netlink_rcv_skb+0x159/0x420 [ 206.927156][ T8658] nfnetlink_rcv+0x1b3/0x440 [ 206.931738][ T8658] netlink_unicast+0x585/0x850 [ 206.936493][ T8658] netlink_sendmsg+0x8b0/0xda0 [ 206.941233][ T8658] ____sys_sendmsg+0xa4d/0xbe0 [ 206.945984][ T8658] ___sys_sendmsg+0x190/0x1e0 [ 206.950654][ T8658] __sys_sendmsg+0x160/0x210 [ 206.955244][ T8658] do_syscall_64+0x115/0x870 [ 206.959832][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.965721][ T8658] [ 206.968027][ T8658] The buggy address belongs to the object at ffff88802b5cbc00 [ 206.968027][ T8658] which belongs to the cache kmalloc-128 of size 128 [ 206.982059][ T8658] The buggy address is located 128 bytes to the right of [ 206.982059][ T8658] allocated 112-byte region [ffff88802b5cbc00, ffff88802b5cbc70) [ 206.996702][ T8658] [ 206.999006][ T8658] The buggy address belongs to the physical page: [ 207.005394][ T8658] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b5cb100 pfn:0x2b5cb [ 207.015432][ T8658] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 207.023472][ T8658] page_type: f5(slab) [ 207.027434][ T8658] raw: 00fff00000000200 ffff88813fe22a00 ffffea00009aba50 ffffea0001dc5390 [ 207.035996][ T8658] raw: ffff88802b5cb100 000000080010000a 00000000f5000000 0000000000000000 [ 207.044551][ T8658] page dumped because: kasan: bad access detected [ 207.050943][ T8658] page_owner tracks the page as allocated [ 207.056630][ T8658] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6055, tgid 6054 (syz.4.86), ts 90761770338, free_ts 81591648191 [ 207.077011][ T8658] post_alloc_hook+0xfd/0x120 [ 207.081683][ T8658] get_page_from_freelist+0xf48/0x3530 [ 207.087129][ T8658] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 207.093003][ T8658] new_slab+0xa2/0x650 [ 207.097053][ T8658] refill_objects+0xe3/0x410 [ 207.101634][ T8658] __pcs_replace_empty_main+0x376/0x680 [ 207.107165][ T8658] __kmalloc_noprof+0x66d/0x820 [ 207.111995][ T8658] hash_netportnet6_resize+0xdb2/0x1e20 [ 207.117520][ T8658] call_ad.isra.0+0x36d/0x940 [ 207.122190][ T8658] ip_set_ad.isra.0+0x3eb/0x8a0 [ 207.127023][ T8658] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 207.132044][ T8658] netlink_rcv_skb+0x159/0x420 [ 207.136787][ T8658] nfnetlink_rcv+0x1b3/0x440 [ 207.141358][ T8658] netlink_unicast+0x585/0x850 [ 207.146098][ T8658] netlink_sendmsg+0x8b0/0xda0 [ 207.150840][ T8658] ____sys_sendmsg+0xa4d/0xbe0 [ 207.155590][ T8658] page last free pid 1110 tgid 1110 stack trace: [ 207.161889][ T8658] __free_frozen_pages+0x79f/0x1090 [ 207.167073][ T8658] __folio_put+0x3b4/0x5f0 [ 207.171474][ T8658] gup_put_folio+0x1cb/0x270 [ 207.176049][ T8658] io_release_ubuf+0xce/0x140 [ 207.180702][ T8658] io_free_rsrc_node+0x718/0xbc0 [ 207.185617][ T8658] io_rsrc_data_free+0x1e7/0x25d [ 207.190542][ T8658] io_sqe_buffers_unregister.cold+0x12/0x17 [ 207.196443][ T8658] io_ring_exit_work+0x73c/0xd7a [ 207.201366][ T8658] process_one_work+0xa23/0x1940 [ 207.206295][ T8658] worker_thread+0x5ef/0xe50 [ 207.210895][ T8658] kthread+0x370/0x450 [ 207.214942][ T8658] ret_from_fork+0x72b/0xd50 [ 207.219522][ T8658] ret_from_fork_asm+0x1a/0x30 [ 207.224270][ T8658] [ 207.226573][ T8658] Memory state around the buggy address: [ 207.232178][ T8658] ffff88802b5cbb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.240215][ T8658] ffff88802b5cbc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 207.248262][ T8658] >ffff88802b5cbc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.256298][ T8658] ^ [ 207.264072][ T8658] ffff88802b5cbd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.272123][ T8658] ffff88802b5cbd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.280157][ T8658] ================================================================== [ 207.296105][ T8658] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 207.303331][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.1.973 Not tainted syzkaller #0 PREEMPT(full) [ 207.312529][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 207.322571][ T8658] Call Trace: [ 207.325834][ T8658] [ 207.328749][ T8658] dump_stack_lvl+0x100/0x190 [ 207.333415][ T8658] vpanic+0x552/0x970 [ 207.337376][ T8658] ? __pfx_vpanic+0x10/0x10 [ 207.341857][ T8658] ? mark_held_locks+0x40/0x70 [ 207.346622][ T8658] ? dummy_free_request+0x8a/0x90 [ 207.351631][ T8658] panic+0xd1/0xe0 [ 207.355340][ T8658] ? __pfx_panic+0x10/0x10 [ 207.359735][ T8658] ? dummy_free_request+0x8a/0x90 [ 207.364748][ T8658] ? preempt_schedule_common+0x42/0xc0 [ 207.370189][ T8658] check_panic_on_warn.cold+0x19/0x34 [ 207.375541][ T8658] end_report.part.0+0x3a/0x90 [ 207.380290][ T8658] kasan_report.cold+0xe/0x18 [ 207.384953][ T8658] ? dummy_free_request+0x8a/0x90 [ 207.389963][ T8658] dummy_free_request+0x8a/0x90 [ 207.394812][ T8658] uvc_function_bind+0x181a/0x1939 [ 207.399908][ T8658] ? __pfx_uvc_function_bind+0x10/0x10 [ 207.405359][ T8658] usb_add_function+0x219/0x890 [ 207.410193][ T8658] configfs_composite_bind+0xd83/0x1960 [ 207.415728][ T8658] gadget_bind_driver+0x28c/0xbf0 [ 207.420753][ T8658] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 207.426373][ T8658] ? __pfx_gadget_bind_driver+0x10/0x10 [ 207.431904][ T8658] really_probe+0x241/0xa60 [ 207.436389][ T8658] __driver_probe_device+0x20e/0x450 [ 207.441654][ T8658] driver_probe_device+0x4a/0x140 [ 207.446661][ T8658] __driver_attach+0x21f/0x5b0 [ 207.451404][ T8658] ? __pfx___driver_attach+0x10/0x10 [ 207.456673][ T8658] bus_for_each_dev+0x13e/0x1d0 [ 207.461543][ T8658] ? __pfx_bus_for_each_dev+0x10/0x10 [ 207.466924][ T8658] ? bus_add_driver+0x2b5/0x5b0 [ 207.471774][ T8658] bus_add_driver+0x305/0x5b0 [ 207.476439][ T8658] driver_register+0x1e2/0x360 [ 207.481187][ T8658] usb_gadget_register_driver_owner+0x132/0x210 [ 207.487426][ T8658] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 207.493042][ T8658] configfs_write_iter+0x302/0x4e0 [ 207.498140][ T8658] vfs_write+0x6ac/0x1050 [ 207.502458][ T8658] ? __pfx_configfs_write_iter+0x10/0x10 [ 207.508072][ T8658] ? __pfx_vfs_write+0x10/0x10 [ 207.512826][ T8658] ksys_write+0x12a/0x250 [ 207.517142][ T8658] ? __pfx_ksys_write+0x10/0x10 [ 207.521979][ T8658] do_syscall_64+0x115/0x870 [ 207.526549][ T8658] ? clear_bhb_loop+0x40/0x90 [ 207.531206][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.537076][ T8658] RIP: 0033:0x7f269239de99 [ 207.541472][ T8658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.561061][ T8658] RSP: 002b:00007f26932c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.569454][ T8658] RAX: ffffffffffffffda RBX: 00007f2692625fa0 RCX: 00007f269239de99 [ 207.577405][ T8658] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000003 [ 207.585368][ T8658] RBP: 00007f2692433eaf R08: 0000000000000000 R09: 0000000000000000 [ 207.593325][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.601297][ T8658] R13: 00007f2692626038 R14: 00007f2692625fa0 R15: 00007ffe75de00d8 [ 207.609263][ T8658] [ 207.612360][ T8658] Kernel Offset: disabled [ 207.616662][ T8658] Rebooting in 86400 seconds..